last executing test programs: 15.72799738s ago: executing program 1 (id=1067): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0xd, 0x1}, {0xf, 0x1}]}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x7fffffff}, {0x7}, {0x8, 0x540}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x61]}}, 0x0, 0x8f, 0x0, 0x0, 0x8000000, 0x10000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) syz_usb_connect(0x5, 0x84, 0x0, 0x0) unshare(0x60000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) r5 = syz_open_pts(r4, 0x8182) r6 = dup3(r5, r4, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) 11.56329077s ago: executing program 1 (id=1087): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x8000003c, 0x4, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000800)="b5", 0x1}, {0x0}], 0x2, 0x7fffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) sendmsg$can_raw(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r10, 0x20b, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x15}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2d}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x10}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r11 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000700)=@base={0x5, 0x4, 0x70be, 0x5d, 0x0, 0xffffffffffffffff, 0xffff7fff, '\x00', r12, r11, 0x0, 0x5}, 0x50) 9.839246241s ago: executing program 4 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf38779041ee735f7, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r1, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48080) syz_usb_connect(0x0, 0x1b, &(0x7f0000002000)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5509, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xd1a, 0x5, 0x3, 0xfffffffffffffffb, 0x7ff, 0x9]}, &(0x7f0000000080)=0x78) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x2, 0x73) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ec5000/0x4000)=nil, 0x4000, 0x400000e, 0x109132, 0xffffffffffffffff, 0x9a29b000) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000006) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f95000000000050000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x341200, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) 9.643405431s ago: executing program 1 (id=1098): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0xd, 0x1}, {0xf, 0x1}]}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x7fffffff}, {0x7}, {0x8, 0x540}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/69, 0x8f, 0x45, 0x0, 0x8000000, 0x10000}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) syz_usb_connect(0x5, 0x84, 0x0, 0x0) unshare(0x60000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xff2e) r4 = syz_open_pts(r3, 0x8182) r5 = dup3(r4, r3, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) 7.998525768s ago: executing program 3 (id=1104): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 7.96825549s ago: executing program 2 (id=1105): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getpeername$unix(r0, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x18002, &(0x7f0000000180)={[{@nombcache}, {@errors_remount}, {@inlinecrypt}, {@norecovery}, {@nodioread_nolock}, {@debug}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r4 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_FONT(r4, 0x4b61, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000033000b0fd25a", 0xa}], 0x1}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_getevents(r5, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r5, 0x0, &(0x7f0000000140)) r6 = socket(0x1a, 0x4, 0xcd0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000240)={0x80}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0xf8}, @IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0xdc}]}}}]}, 0x44}}, 0x2004054) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x62e8c, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}]}, 0x5c}}, 0x24000800) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000000c0)=0x0) fcntl$lock(r3, 0x25, &(0x7f0000000300)={0x1, 0x1, 0x2, 0x9, r8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) 7.678960055s ago: executing program 4 (id=1106): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8b5d, 0x2}, 0x50) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r2, 0x5450) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 6.932445425s ago: executing program 4 (id=1107): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYBLOB, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x8, 0x0, 0x3, 0x2, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, 0x0, 0x404c0e0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, 0x0) mount(0x0, 0x0, 0x0, 0x1000040, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) 6.324987187s ago: executing program 1 (id=1109): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x28058051}, 0x20044080) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x10, 0x2, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507b7e, 0x1, @perf_bp={&(0x7f0000000280)}, 0x204, 0x0, 0x0, 0x8, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x200b}, r4, 0x3fffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000001800), &(0x7f0000000540)=0x60) close(r6) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7ffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x1c, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.311727668s ago: executing program 3 (id=1110): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 6.270370399s ago: executing program 2 (id=1111): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8f, 0x40000) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 5.719368189s ago: executing program 0 (id=1112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x211a, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0x58, &(0x7f00000005c0)}, 0x6) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000004060108000000000000000003001c060500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f00000000c0)=0xb40, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}]}}}]}, 0x38}}, 0x0) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r8, 0x20d, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0xe403, r7, 0x0, 0x2}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000040), 0x2) 5.246114764s ago: executing program 0 (id=1113): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8f, 0x40000) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) syz_open_pts(0xffffffffffffffff, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 4.904392581s ago: executing program 1 (id=1114): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0xd, 0x1}, {0xf, 0x1}]}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x4}, {0x3, 0x7fffffff}, {0x7}, {0x8, 0x540}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/69, 0x97, 0x45, 0x0, 0x8000000, 0x10000}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) syz_usb_connect(0x5, 0x84, 0x0, 0x0) unshare(0x60000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) r5 = syz_open_pts(r4, 0x8182) r6 = dup3(r5, r4, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) 4.903065182s ago: executing program 2 (id=1115): mknod(&(0x7f0000000080)='./file0\x00', 0x200, 0xe491) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x1, 0x1f5, &(0x7f0000000600)="$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") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xe}, 0x102260, 0x10004, 0x0, 0x1, 0x5, 0xfffffffb, 0x1, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @remote}}}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[], 0x0) syz_open_procfs(0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES64=r2, @ANYRES8=r2, @ANYRES64=r1, @ANYRESDEC=r1], 0xff, 0x5a6, &(0x7f0000000440)="$eJzs3c9v2+Ydx/EPXbt2NSwbtiEIAid9mmyAM7gqJTcOtJ446pHMViIFkm7jUxE0cmFE7op4AxZfhlyyDdj+iF5333XYfdf9G8V6GnbTQFKy5ehXfjiRU7xfQvJQD798fsiCvqAtPhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJDj11234qgVhLt3zXR+PY7a49ValoqNgVtnihn9Sk72T2trulJUXfnZ6e7L2X83tF48W9daVqzp+AeXf/zRT5eXhsfPGPBrcfTo+MG9Xq/78Blif7jw0Z6/pg2DJAraXtOaIIlM7R1JO43ENIKWTfaS1LaNH1svjWKz4d8ylVpty9jyXrQbNuteyw4r77xfdd1t83G5Y704icIPPi4n/k7QagVhM4/Jdmcxd7I34idBalLrtY3ZP+h1t+YNMguqPEtQdV5Q1a1WK5VqtbJ9u3b7jusuj1W4pxy5rquxiMW/abFY5/wJDry4pUH+V0vB8rDSTHj4qitWpPbEvWP5/xcf2Jn9jub/PMv3tX7ldPdV5fn/evHs+kj+X9VI/p8ylhmPlWnze67H28M2jvRIx3qge+qpp64ensZsnktPF/zRlFWoQIkiBWrLy2vMoMaopm1ty9Xn2lFDiYwaCtSSVaI9JUpl83eUr1ir8pQqUiyjDfm6JaOK+qs1bcnIqqw9RdpVqKbq8vJW9nWQv+5bM8aYBa1mQZUZQZ8N33nVGUHPlf9zo4f8i/wP8j8ukv4w/z/trUWMBgAAAAAAvApO/tv37Px/RdekFUeNoGXdRQ8LAAAAAACco/wv/+tZkX8z7poczv8BAAAAAPi+cfJr7BxJJb1bbA2vqRr8EqD/o0WPEQAAAAAAvJz87//Xs6KUbb0r5+nzfwAAAAAA8Kb707Q19v8p9QfLAq46//iP4njFedy5+3Pn0MvqvMPBAoFj6wSmjavOpUEjebG9PHjm23VnsPrlySKY3w6K/Xlr/TvnMAD9Re8VMe/dL8r7wz1FL6VG0LJlP2p9VJHnXVpK7d30d18d/F759P8cti853+0f9LrlL37Tu5+P5XHWyuPDwSs1to7ijLH8VteKmGuTZ7ySX4gx6LfkKOvXHZ3/UnH40tQ+paf7fKIbRcyNUlGWzs5/LeuzUp42+2IUq5JeauZPdLOIublxsygmjKI6ZxTd6ujrP/e1eMFRbM0axepBr7v1kqMAgEXZn52Fcm+dzbsv8Cn3erL7E20UMRtX8w/W5asTPtHdeXnFnZDX1066Xx6Oov+HKaP429g9kKbl2Kzfv570W8n7/SY74JupWTVpVR2tff3ffv/wa10+enT8/sHhvS+7X3a/qla3tt0PXfd2VSv5NAYFuQcAMMHEe+ycucfe3Ajnwzln1T85+UpBWV9I/+v372szv9og/8bBxFZL+THf5V9D2Jxz1lo6ab+izTlndaex1eeI3XoNPwkAAF6fG1Pz8Nqc/O8M7+LnbM457y6NfKVwc/Ts+G2NnR2P5nIAAPBq2Phbp5T+0YnjoPN5pVareOmONXHkf2LioN60JghTG/s7Xti0phNHaeRHrWzj06BuE5PsdjpRnJpGFJtOlAR38zu/m8Gt3xPb9sI08JNOy3qJNX4Upp6fmnqQ+Kaz++tWkOzYOD846Vg/aAS+lwZRaJJoN/Zt2ZjE2pHAoG7DNGgE2WZoOnHQ9uI982nU2m1bU7eJHwedNCoaHPYVhI0obufNlhf9YgMAcEEcPTp+cK/X6z480pLU63Wd5ZOa89pY9BwBAMBZZGkAAAAAAAAAAAAAAAAAAAAAAC6+c7vI73u1sfoqWv5ML9fOL381adc7kmYf/u+SNFrT7z9rp0sX4WdxZmO46PSMmL9P2HW6gvOFmMUbsTHp02JsPWoAb7D/BwAA///ijE1Z") socket$nl_netfilter(0x10, 0x3, 0xc) 4.378488679s ago: executing program 4 (id=1116): syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x17) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x25f56157, 0xffffffff, 0x0, 'queue0\x00', 0x200000}) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x80000001, 0x1}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 3.99350471s ago: executing program 0 (id=1117): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = socket$kcm(0x2, 0xa, 0x0) io_setup(0x200, &(0x7f0000001440)=0x0) prctl$PR_GET_IO_FLUSHER(0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x2, {0x2, 0x18, 0x80, 0x0, 0xfe, 0x0, 0xfd, 0x1, 0x400}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x2, 0x80805, 0x0) io_getevents(r3, 0x10, 0x0, 0x0, 0x0) r4 = syz_clone(0x210111, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000000)=r1, 0x4) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r5, 0x0, 0xc8) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0301"], 0xc8) sendmsg$NFT_BATCH(r1, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffffffffc083}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0xa4, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x101}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x60}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x60}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x12}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0xe, 0x0, 0x5}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x22}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x230}, 0x1, 0x0, 0x0, 0x40000000}, 0x40440c4) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x44, 0x3b, 0x6, 0x8, 0x0, 0x4, 0x42408, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000480), 0x3}, 0x2100, 0x0, 0x2, 0x1, 0x80000001, 0x9, 0x9, 0x0, 0x101, 0x0, 0x6}, r4, 0xe, r6, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004054}, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000640), &(0x7f0000000440)=@tcp=r6, 0x2}, 0x20) 3.329018465s ago: executing program 3 (id=1118): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8b5d, 0x2}, 0x50) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIONCLEX(r2, 0x5450) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 3.326774125s ago: executing program 4 (id=1119): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x7, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0xd, 0x1}, {0xf, 0x1}]}, @enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x7fffffff}, {0x7}, {0x8, 0x540}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/69, 0x8f, 0x45, 0x0, 0x8000000, 0x10000}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) syz_usb_connect(0x5, 0x84, 0x0, 0x0) unshare(0x60000600) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xff2e) r4 = syz_open_pts(r3, 0x8182) r5 = dup3(r4, r3, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) 2.990494333s ago: executing program 2 (id=1120): r0 = syz_io_uring_complete(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x14080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0xa}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r0, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@sysvgroups}]}, 0x3, 0x466, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000ac0)={0x0, 0x1, 0x2, 0xfff}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0xcd47}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r4, &(0x7f0000000000)="01", 0x1, 0xc000, 0x0, 0x0) syz_emit_ethernet(0x74, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x824, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_REAPURB(r6, 0x4008550c, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) 2.86451228s ago: executing program 0 (id=1121): getdents(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = epoll_create1(0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = epoll_create1(0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000001c0)={0x2007}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0xfffffffffffffd3e}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xfc4f9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0xfffffeff, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) 2.798192033s ago: executing program 3 (id=1122): perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x33fa}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, &(0x7f0000000040)=[{}, {}], 0x10, 0x0, 0x0, 0x0, 0x0, 0x72, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x298c, 0x2, 0x0, 0x401}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x13, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000100), 0x48) r8 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x10, 0x5, 0x8, 0x1, 0x0, 0xfffffffffffffffe, 0xb545b5febd8f5b5, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2d8, 0x3, @perf_bp={&(0x7f0000000200), 0xd}, 0x1, 0x2, 0x0, 0x2, 0x10, 0x2, 0xff, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x6, 0xffffffffffffffff, 0x9) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x6, 0x48, 0x11, 0x8c, 0x0, 0x2, 0xc100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd7, 0x7, @perf_bp={&(0x7f0000000080), 0x1}, 0x10289a, 0x1000, 0x9, 0x8, 0x974d, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x9, r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000800004e2d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) 2.132681648s ago: executing program 0 (id=1123): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) r3 = socket$can_raw(0x1d, 0x3, 0x1) fstat(r3, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000100", @ANYRES32=0xee00, @ANYBLOB='\b\x00', @ANYBLOB="08000600", @ANYRES32, @ANYBLOB="080001", @ANYRES32, @ANYBLOB, @ANYRES32], 0x54, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x68241) ioctl$SG_IO(r4, 0x2285, &(0x7f0000001a80)={0x53, 0xfffffffffffffffd, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001900)="a10800000044", 0x0, 0x80000001, 0x1, 0x1, 0x0}) 1.879150922s ago: executing program 3 (id=1124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffdffffff, r1, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8000}, 0x0, 0xffffffffffffffff, r1, 0x0) close(0x4) r2 = socket$kcm(0x10, 0x2, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) sendfile(0xffffffffffffffff, r3, 0x0, 0xefbc) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}], 0x1}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000005140)={r4, r4, 0x5, 0x0, 0x0, 0x5, 0xff, 0x7ff, 0x200, 0x7f, 0x2, 0x5, 'syz1\x00'}) llistxattr(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2a9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000000100)={r7, @in6={{0xa, 0x4e22, 0x8000, @mcast1, 0x200}}}, 0x84) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100677470000c00028008000100", @ANYRES32=r8, @ANYBLOB='\b\x00', @ANYRES32], 0x40}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x7}}, './file0\x00'}) 1.107327452s ago: executing program 2 (id=1125): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYBLOB, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) socket$l2tp(0x2, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) mount(0x0, 0x0, 0x0, 0x1000040, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) 1.063430094s ago: executing program 0 (id=1126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf38779041ee735f7, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) prlimit64(r1, 0x7, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48080) syz_usb_connect(0x0, 0x1b, &(0x7f0000002000)=ANY=[], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x5509, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xd1a, 0x5, 0x3, 0xfffffffffffffffb, 0x7ff, 0x9]}, &(0x7f0000000080)=0x78) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x2, 0x73) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ec5000/0x4000)=nil, 0x4000, 0x400000e, 0x109132, 0xffffffffffffffff, 0x9a29b000) mprotect(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000006) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f95000000000050000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x341200, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) 1.003940378s ago: executing program 1 (id=1127): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet6(0xa, 0x1, 0xe16) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000003, 0xc071, 0xffffffffffffffff, 0x4d392000) madvise(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x3) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$loop(&(0x7f0000000440), 0xf, 0x183043) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x8f, 0x40000) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r4, 0x212, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) syz_open_pts(0xffffffffffffffff, 0x2) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 678.728175ms ago: executing program 4 (id=1128): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb1, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7, 0xd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x45d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8, 0x22, 0x1efc4134bfad7adb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCMGET(r4, 0x5415, 0x0) 140.297433ms ago: executing program 3 (id=1129): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xfffffffe, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x12902, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff0100000000000000000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 0s ago: executing program 2 (id=1130): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x2, 0x1, 0x84) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x84, 0x25, 0x0, 0x0) close(0x3) r5 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, &(0x7f0000000240)) kernel console output (not intermixed with test programs): d1: (slave macvlan4): failed to get link speed/duplex [ 237.827294][ T8138] loop1: detected capacity change from 0 to 2048 [ 237.848736][ T3852] bond1: (slave macvlan4): failed to get link speed/duplex [ 237.873570][ T8138] loop1: p2 p3 p7 [ 237.899657][ T8150] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 237.919260][ T8142] lo speed is unknown, defaulting to 1000 [ 237.926102][ T8150] bond1: option mode: unable to set because the bond device has slaves [ 237.966983][ T8150] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 237.982363][ T8157] loop3: detected capacity change from 0 to 128 [ 238.023235][ T8157] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.358009][ T3472] bond1: (slave macvlan4): failed to get link speed/duplex [ 238.390830][ T8164] 9p: Bad value for 'rfdno' [ 238.568719][ T3865] bond1: (slave macvlan4): failed to get link speed/duplex [ 238.590167][ T8164] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 238.659820][ T8148] loop0: detected capacity change from 0 to 512 [ 238.708650][ T3865] bond1: (slave macvlan4): failed to get link speed/duplex [ 238.716516][ T8148] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.886921][ T3863] bond1: (slave macvlan4): failed to get link speed/duplex [ 238.917359][ T8148] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 238.940422][ T8183] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.975530][ T8148] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.612: bg 0: block 248: padding at end of block bitmap is not set [ 238.976524][ T8189] netlink: 14 bytes leftover after parsing attributes in process `syz.4.615'. [ 239.000513][ T8148] loop0: lost filesystem error report for type 5 error -117 [ 239.004342][ T8148] Quota error (device loop0): write_blk: dquota write failed [ 239.010407][ T30] bond1: (slave macvlan4): failed to get link speed/duplex [ 239.012241][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 239.033751][ C0] EXT4-fs (loop0): last error at time 1777338615: ext4_validate_block_bitmap:441 [ 239.286776][ T3852] bond1: (slave macvlan4): failed to get link speed/duplex [ 239.332305][ T8148] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 239.354779][ T8148] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.612: Failed to acquire dquot type 1 [ 239.383587][ T8189] syz_tun: left promiscuous mode [ 239.396132][ T8148] loop0: lost filesystem error report for type 5 error -28 [ 239.465943][ T8148] EXT4-fs (loop0): 1 truncate cleaned up [ 239.526563][ T8189] bond1: (slave macvlan2): Removing an active aggregator [ 239.549559][ T8183] loop4: detected capacity change from 0 to 512 [ 239.558132][ T8148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 239.585152][ T8189] bond1: (slave macvlan2): Releasing backup interface [ 239.600731][ T8189] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 239.650142][ T8189] bond0 (unregistering): Released all slaves [ 239.670302][ T8148] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 239.681140][ T8148] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 239.692976][ T8148] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.612: Failed to acquire dquot type 1 [ 239.736070][ T8148] tmpfs: Unknown parameter 'sizÿ' [ 239.775238][ T49] bond1: (slave macvlan4): failed to get link speed/duplex [ 239.828374][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 239.887677][ T49] bond1: (slave macvlan4): failed to get link speed/duplex [ 240.117622][ T8183] EXT4-fs (loop4): 1 orphan inode deleted [ 240.360489][ T8183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.395786][ T8209] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 240.429983][ T8216] netlink: 14 bytes leftover after parsing attributes in process `syz.0.617'. [ 240.515327][ T8222] loop0: detected capacity change from 0 to 512 [ 240.523055][ T8222] EXT4-fs: quotafile must be on filesystem root [ 240.572564][ T8216] bond1: (slave macvlan4): Removing an active aggregator [ 240.582845][ T8216] bond1: (slave macvlan4): Releasing backup interface [ 240.634930][ T8216] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 240.646095][ T8216] bond0 (unregistering): Released all slaves [ 241.929474][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.017473][ T8267] loop4: detected capacity change from 0 to 512 [ 242.024934][ T8267] EXT4-fs: Ignoring removed bh option [ 242.034820][ T8267] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.068925][ T8267] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 242.085837][ T28] audit: type=1400 audit(1777338618.148:780): avc: denied { append } for pid=8270 comm="syz.3.624" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 242.103908][ T8273] loop1: detected capacity change from 0 to 2048 [ 242.123083][ T8267] EXT4-fs error (device loop4): __ext4_fill_super:5596: inode #2: comm syz.4.621: iget: bogus i_mode (110000) [ 242.135562][ T8267] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 242.135764][ T8267] EXT4-fs (loop4): get root inode failed [ 242.144844][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 242.144860][ C1] EXT4-fs (loop4): last error at time 1777338618: __ext4_fill_super:5596: inode 2 [ 242.166697][ T8267] EXT4-fs (loop4): mount failed [ 242.184110][ T8273] loop1: p2 p3 p7 [ 242.187528][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'. [ 242.197085][ T8267] loop4: detected capacity change from 0 to 512 [ 242.198981][ T8267] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 242.258580][ T2980] loop1: p2 p3 p7 [ 242.262829][ T8267] EXT4-fs (loop4): 1 truncate cleaned up [ 242.273306][ T8267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.303502][ T8273] netlink: 'syz.1.623': attribute type 10 has an invalid length. [ 242.337390][ T8273] bond1: option mode: unable to set because the bond device has slaves [ 242.363549][ T28] audit: type=1400 audit(1777338618.418:781): avc: denied { lock } for pid=8279 comm="syz.2.625" path="socket:[13902]" dev="sockfs" ino=13902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 242.423078][ T8273] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 242.437365][ T8267] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.530570][ T8280] loop2: detected capacity change from 0 to 4096 [ 242.540809][ T8282] lo speed is unknown, defaulting to 1000 [ 242.568266][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 242.641661][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 242.659077][ T8290] loop4: detected capacity change from 0 to 2048 [ 242.880805][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 242.892303][ T8290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.905184][ T8280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.957899][ T8288] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 242.999103][ T8288] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 243.029036][ T8288] EXT4-fs (loop4): This should not happen!! Data will be lost [ 243.029036][ T8288] [ 243.044732][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 243.064050][ T8288] EXT4-fs (loop4): Total free blocks count 0 [ 243.080626][ T8288] EXT4-fs (loop4): Free/Dirty block details [ 243.095425][ T8288] EXT4-fs (loop4): free_blocks=66060288 [ 243.113540][ T8288] EXT4-fs (loop4): dirty_blocks=48 [ 243.127523][ T8288] EXT4-fs (loop4): Block reservation details [ 243.159709][ T28] audit: type=1400 audit(1777338619.218:782): avc: denied { ioctl } for pid=8286 comm="syz.4.626" path="/116/file0/file1" dev="loop4" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 243.190450][ T8288] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 243.219463][ T8300] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 243.246960][ T8282] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 243.292602][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.427618][ T8302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.636'. [ 243.712525][ T8305] siw: device registration error -23 [ 243.931061][ T8308] loop1: detected capacity change from 0 to 2048 [ 243.983787][ T8308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.171392][ T8308] tmpfs: Unknown parameter 'inoile1' [ 244.190986][ T8288] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz.4.626: data will be lost [ 244.199159][ T8316] loop0: detected capacity change from 0 to 128 [ 244.279007][ T8316] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.448131][ T8314] lo speed is unknown, defaulting to 1000 [ 244.478399][ T8330] 9p: Bad value for 'rfdno' [ 244.483690][ T8322] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 244.509184][ T3869] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 244.560641][ T3869] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 232 with error 28 [ 244.585268][ T8324] netlink: 14 bytes leftover after parsing attributes in process `syz.3.632'. [ 244.598234][ T3869] EXT4-fs (loop1): This should not happen!! Data will be lost [ 244.598234][ T3869] [ 244.622489][ T3869] EXT4-fs (loop1): Total free blocks count 0 [ 244.667658][ T3869] EXT4-fs (loop1): Free/Dirty block details [ 244.684217][ T3869] EXT4-fs (loop1): free_blocks=4096 [ 244.693004][ T3869] EXT4-fs (loop1): dirty_blocks=272 [ 244.698336][ T3869] EXT4-fs (loop1): Block reservation details [ 244.704377][ T3869] EXT4-fs (loop1): i_reserved_data_blocks=17 [ 244.743800][ T8332] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 58 with error 28 [ 244.787151][ T8330] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 244.833439][ T8345] loop3: detected capacity change from 0 to 512 [ 244.955544][ T8345] EXT4-fs (loop3): 1 orphan inode deleted [ 245.006773][ T8345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.238911][ T8324] bond1: (slave macvlan9): Removing an active aggregator [ 246.252013][ T8324] bond1: (slave macvlan9): Releasing backup interface [ 246.324299][ T8324] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 246.342371][ T8324] bond0 (unregistering): Released all slaves [ 246.373360][ T8333] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 246.424810][ T8452] netlink: 'syz.4.637': attribute type 10 has an invalid length. [ 246.528915][ T8452] bond1: option mode: unable to set because the bond device is up [ 246.569942][ T8458] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.570589][ T8468] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 246.692256][ T8468] bond1: option mode: unable to set because the bond device is up [ 247.827803][ T8486] loop0: detected capacity change from 0 to 512 [ 247.919882][ T8486] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 247.932881][ T8486] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 247.944906][ T8486] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.653: Corrupt directory, running e2fsck is recommended [ 247.968085][ T8486] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 247.980586][ T8486] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.653: corrupted in-inode xattr: e_name out of bounds [ 247.995792][ T8486] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.997602][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 248.014384][ C1] EXT4-fs (loop0): initial error at time 1777338624: ext4_iget_extra_inode:5128: inode 15 [ 248.026093][ C1] EXT4-fs (loop0): last error at time 1777338624: ext4_iget_extra_inode:5128: inode 15 [ 248.038080][ T8486] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.653: couldn't read orphan inode 15 (err -117) [ 248.050851][ T8486] loop0: lost filesystem error report for type 5 error -117 [ 248.072180][ T8486] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.221500][ T8484] loop1: detected capacity change from 0 to 512 [ 249.247069][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.485084][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.494288][ T8484] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 250.296152][ T8503] netlink: 'syz.3.645': attribute type 49 has an invalid length. [ 250.837108][ T8484] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 250.863717][ T8484] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.642: bg 0: block 248: padding at end of block bitmap is not set [ 251.058908][ T8484] loop1: lost filesystem error report for type 5 error -117 [ 251.067592][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 251.081472][ C0] EXT4-fs (loop1): last error at time 1777338627: ext4_validate_block_bitmap:441 [ 251.345195][ T8484] Quota error (device loop1): write_blk: dquota write failed [ 251.372966][ T8484] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 251.375813][ T8508] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 251.391074][ T8484] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.642: Failed to acquire dquot type 1 [ 251.465627][ T8508] bond1: option mode: unable to set because the bond device is up [ 251.487162][ T8484] loop1: lost filesystem error report for type 5 error -28 [ 251.648026][ T8484] EXT4-fs (loop1): 1 truncate cleaned up [ 252.121555][ T8484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 252.287706][ T8484] syz.1.642 (8484) used greatest stack depth: 7616 bytes left [ 252.516120][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 252.542806][ T8521] loop0: detected capacity change from 0 to 512 [ 252.656816][ T8521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 253.338737][ T8521] EXT4-fs warning (device loop0): dx_probe:837: inode #2: comm syz.0.650: Unimplemented hash flags: 0x0001 [ 253.415072][ T8521] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.650: Corrupt directory, running e2fsck is recommended [ 253.446180][ T28] audit: type=1326 audit(1777338629.498:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.569294][ T28] audit: type=1326 audit(1777338629.498:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.602329][ T28] audit: type=1326 audit(1777338629.498:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.627573][ T8533] netlink: 'syz.0.650': attribute type 4 has an invalid length. [ 253.692335][ T28] audit: type=1326 audit(1777338629.498:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.717373][ T28] audit: type=1326 audit(1777338629.498:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.747642][ T28] audit: type=1326 audit(1777338629.498:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.779241][ T28] audit: type=1326 audit(1777338629.498:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.813799][ T28] audit: type=1326 audit(1777338629.498:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8519 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 253.904149][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.950532][ T8540] loop0: detected capacity change from 0 to 2048 [ 253.963902][ T8540] loop0: p2 p3 p7 [ 253.974954][ T8540] netlink: 'syz.0.656': attribute type 10 has an invalid length. [ 254.934957][ T8544] bond1: option mode: unable to set because the bond device is up [ 256.294859][ T8543] loop1: detected capacity change from 0 to 512 [ 256.406950][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.659'. [ 256.466889][ T8543] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.534666][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 256.535293][ T8543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.657'. [ 256.934499][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.079970][ T8559] loop1: detected capacity change from 0 to 2048 [ 257.170221][ T8559] loop1: p2 p3 p7 [ 257.214759][ T8559] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 257.219687][ T8559] bond1: option mode: unable to set because the bond device has slaves [ 257.225474][ T8559] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 257.310436][ T8562] loop2: detected capacity change from 0 to 2048 [ 257.486802][ T8562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.486934][ T8562] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.495999][ T8562] EXT4-fs (loop2): shut down requested (0) [ 257.562093][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 257.562122][ T28] audit: type=1400 audit(1777338633.588:866): avc: denied { create } for pid=8557 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 258.723797][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 258.726346][ T3272] udevd[3272]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 258.730124][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 260.186237][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.197225][ T8571] bridge_slave_1: left allmulticast mode [ 260.197406][ T8571] bridge_slave_1: left promiscuous mode [ 260.393673][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.404591][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.048330][ T8582] loop2: detected capacity change from 0 to 512 [ 261.053405][ T8582] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 261.067310][ T8582] EXT4-fs (loop2): 1 truncate cleaned up [ 261.067874][ T8582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.109465][ T8584] netlink: 'syz.4.666': attribute type 4 has an invalid length. [ 261.182569][ T9] lo speed is unknown, defaulting to 1000 [ 261.182590][ T9] syz0: Port: 1 Link DOWN [ 261.218123][ T8588] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 261.227356][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.598752][ T8605] loop2: detected capacity change from 0 to 512 [ 261.682126][ T8605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.774461][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 261.821833][ T8605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.671'. [ 261.997094][ T8610] loop1: detected capacity change from 0 to 2048 [ 262.129406][ T8610] loop1: p2 p3 p7 [ 262.160171][ T8614] netlink: 'syz.4.673': attribute type 10 has an invalid length. [ 262.169458][ T8610] netlink: 'syz.1.672': attribute type 10 has an invalid length. [ 262.178004][ T8610] bond1: option mode: unable to set because the bond device has slaves [ 262.210675][ T8610] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 262.244802][ T8622] bond1: option mode: unable to set because the bond device is up [ 262.292612][ T8624] loop0: detected capacity change from 0 to 512 [ 262.302401][ T8624] EXT4-fs: Ignoring removed nobh option [ 262.332936][ T8624] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.674: corrupted inode contents [ 262.345398][ T8624] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 262.347585][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 262.357796][ T8624] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #3: comm syz.0.674: mark_inode_dirty error [ 262.363104][ C0] EXT4-fs (loop0): initial error at time 1777338638: ext4_do_update_inode:5690: inode 3 [ 262.374501][ T8624] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 262.383994][ C0] EXT4-fs (loop0): last error at time 1777338638: ext4_do_update_inode:5690: inode 3 [ 262.409919][ T8624] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #3: comm syz.0.674: corrupted inode contents [ 262.421924][ T8624] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 262.422121][ T8624] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #3: comm syz.0.674: mark_inode_dirty error [ 262.444149][ T8624] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 262.447610][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.462930][ T28] audit: type=1400 audit(1777338638.508:867): avc: denied { bind } for pid=8627 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 262.478793][ T8624] Quota error (device loop0): write_blk: dquota write failed [ 262.489034][ T28] audit: type=1400 audit(1777338638.528:868): avc: denied { node_bind } for pid=8627 comm="syz.1.675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 262.511964][ T8624] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 262.511997][ T8624] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.674: Failed to acquire dquot type 0 [ 262.512022][ T8624] loop0: lost filesystem error report for type 5 error -117 [ 262.512541][ T8624] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.674: corrupted inode contents [ 262.512626][ T8624] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.512766][ T8624] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.674: mark_inode_dirty error [ 262.512811][ T8624] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.512968][ T8624] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.674: corrupted inode contents [ 262.526484][ T28] audit: type=1400 audit(1777338638.528:869): avc: denied { watch watch_reads } for pid=8627 comm="syz.1.675" path="/135" dev="tmpfs" ino=773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.535479][ T8624] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.617753][ T8624] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.674: mark_inode_dirty error [ 262.638212][ T8624] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.639883][ T8624] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.674: corrupted inode contents [ 262.663638][ T8624] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 262.986630][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 263.089544][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.687'. [ 263.135849][ T8624] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 263.145141][ T8624] loop0: lost filesystem error report for type 5 error -117 [ 263.145517][ T8624] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.674: corrupted inode contents [ 263.188267][ T8624] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 263.193869][ T8624] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.674: mark_inode_dirty error [ 263.218566][ T8624] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 263.228544][ T8624] loop0: lost filesystem error report for type 5 error -117 [ 263.246917][ T8624] EXT4-fs (loop0): 1 truncate cleaned up [ 263.284658][ T8647] hub 8-0:1.0: USB hub found [ 263.289695][ T8647] hub 8-0:1.0: 8 ports detected [ 263.310574][ T8647] netlink: 'syz.1.686': attribute type 36 has an invalid length. [ 263.325598][ T8647] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 263.335548][ T8647] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 263.356930][ T8647] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 263.364785][ T8647] ipvlan0: entered allmulticast mode [ 263.374010][ T8647] team0: Device ipvlan0 failed to register rx_handler [ 263.416282][ T8624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.451617][ T8624] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.730403][ T8620] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #3: comm syz.0.674: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 263.730403][ T8620] [ 263.778086][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 264.048793][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.116974][ T8653] loop2: detected capacity change from 0 to 1024 [ 264.140133][ T8653] EXT4-fs: test_dummy_encryption option not supported [ 264.216348][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 264.551655][ T8658] loop2: detected capacity change from 0 to 1024 [ 264.562322][ T8658] ext4: Unknown parameter 'nouser_xattr' [ 264.647003][ T8656] netlink: 'syz.0.677': attribute type 13 has an invalid length. [ 264.654916][ T8656] netlink: 'syz.0.677': attribute type 17 has an invalid length. [ 264.676878][ T8660] loop3: detected capacity change from 0 to 512 [ 264.715625][ T8660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 264.756111][ T8660] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.680: Unimplemented hash flags: 0x0001 [ 264.771114][ T8660] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.680: Corrupt directory, running e2fsck is recommended [ 264.802503][ T8656] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.824450][ T8656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.966621][ T28] audit: type=1326 audit(1777338641.018:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.006250][ T8660] netlink: 'syz.3.680': attribute type 4 has an invalid length. [ 265.019789][ T28] audit: type=1326 audit(1777338641.058:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.072526][ T28] audit: type=1326 audit(1777338641.058:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.104319][ T28] audit: type=1326 audit(1777338641.058:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.142513][ T28] audit: type=1326 audit(1777338641.058:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.202754][ T28] audit: type=1326 audit(1777338641.058:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.255005][ T28] audit: type=1326 audit(1777338641.058:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.255132][ T28] audit: type=1326 audit(1777338641.058:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.255213][ T28] audit: type=1326 audit(1777338641.058:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.255237][ T28] audit: type=1326 audit(1777338641.058:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8664 comm="syz.1.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbbac3cdd9 code=0x7ffc0000 [ 265.482915][ T8656] ipvlan0: left allmulticast mode [ 265.483186][ T8656] veth0_vlan: left allmulticast mode [ 266.029736][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.097775][ T8687] netlink: 32 bytes leftover after parsing attributes in process `syz.3.690'. [ 267.963325][ T8714] netlink: 'syz.0.698': attribute type 29 has an invalid length. [ 267.971434][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 268.974522][ T8729] SET target dimension over the limit! [ 269.265851][ T8735] loop2: detected capacity change from 0 to 128 [ 269.303320][ T8735] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.472946][ T8737] xt_ipcomp: unknown flags 1D [ 270.040181][ T8758] lo speed is unknown, defaulting to 1000 [ 271.033361][ T8853] loop0: detected capacity change from 0 to 2048 [ 271.154984][ T8853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.230475][ T8853] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 271.285886][ T8853] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 271.313114][ T8853] EXT4-fs (loop0): This should not happen!! Data will be lost [ 271.313114][ T8853] [ 271.332027][ T8853] EXT4-fs (loop0): Total free blocks count 0 [ 271.368912][ T8853] EXT4-fs (loop0): Free/Dirty block details [ 271.374063][ T28] kauditd_printk_skb: 321 callbacks suppressed [ 271.374079][ T28] audit: type=1400 audit(1777338647.428:1201): avc: denied { getopt } for pid=8842 comm="syz.2.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.381581][ T8853] EXT4-fs (loop0): free_blocks=66060288 [ 271.457857][ T8853] EXT4-fs (loop0): dirty_blocks=48 [ 271.463049][ T8853] EXT4-fs (loop0): Block reservation details [ 271.469593][ T8853] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 271.561783][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 271.593379][ T8885] netlink: 'syz.1.710': attribute type 13 has an invalid length. [ 271.613623][ T8885] netlink: 'syz.1.710': attribute type 17 has an invalid length. [ 271.707820][ T8848] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 271.756043][ T8885] syz_tun: entered promiscuous mode [ 271.885587][ T8848] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz.0.708: data will be lost [ 272.082630][ T8885] ipvlan0: left allmulticast mode [ 272.106279][ T8885] veth0_vlan: left allmulticast mode [ 272.221082][ T8885] 8021q: adding VLAN 0 to HW filter on device eth0 [ 272.270907][ T8885] 8021q: adding VLAN 0 to HW filter on device eth1 [ 272.323555][ T8885] 8021q: adding VLAN 0 to HW filter on device eth2 [ 272.351297][ T8885] 8021q: adding VLAN 0 to HW filter on device eth3 [ 272.380479][ T8885] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 272.421327][ T8885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.442844][ T8885] bond1: (slave macvlan3): unknown ethtool speed (30000) for port 1 (set it to 0) [ 272.452285][ T8885] bond1: (slave macvlan3): speed changed to 0 on port 1 [ 272.506227][ T8895] netlink: 'syz.0.713': attribute type 10 has an invalid length. [ 272.567048][ T8900] bond1: option mode: unable to set because the bond device is up [ 272.604459][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.4.716'. [ 272.612309][ T8906] pimreg: entered allmulticast mode [ 272.621980][ T8906] pimreg: left allmulticast mode [ 272.706992][ T8903] loop1: detected capacity change from 0 to 8192 [ 272.840544][ T8911] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 272.857327][ T8911] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 273.487424][ T28] audit: type=1326 audit(1777338649.538:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8925 comm="syz.3.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x0 [ 273.626007][ T8929] loop3: detected capacity change from 0 to 1024 [ 273.644740][ T8929] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 274.348434][ T8933] loop2: detected capacity change from 0 to 1024 [ 274.402536][ T8933] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 274.422212][ T8933] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 274.435584][ T8933] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.721: inode #1: comm syz.2.721: iget: illegal inode # [ 274.462774][ T8933] loop2: lost filesystem error report for type 5 error -117 [ 274.469476][ T8933] EXT4-fs (loop2): no journal found [ 274.478015][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 274.478098][ C0] EXT4-fs (loop2): initial error at time 1777338650: ext4_get_journal_inode:5896 [ 274.478327][ C0] EXT4-fs (loop2): last error at time 1777338650: ext4_get_journal_inode:5896 [ 274.538744][ T8933] EXT4-fs (loop2): can't get journal size [ 274.606920][ T8933] EXT4-fs (loop2): failed to initialize system zone (-22) [ 274.645203][ T8933] EXT4-fs (loop2): mount failed [ 277.053619][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 277.063307][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 277.115117][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 277.125481][ T8954] netlink: 'syz.3.726': attribute type 13 has an invalid length. [ 277.133498][ T8954] netlink: 'syz.3.726': attribute type 17 has an invalid length. [ 278.005348][ T8954] syz_tun: left promiscuous mode [ 279.278439][ T28] audit: type=1400 audit(1777338655.278:1203): avc: denied { read } for pid=8951 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 279.334302][ T8954] ipvlan0: left allmulticast mode [ 279.334416][ T8954] veth0_vlan: left allmulticast mode [ 279.623846][ T8967] netlink: 14 bytes leftover after parsing attributes in process `syz.0.728'. [ 279.780908][ T28] audit: type=1400 audit(1777338655.838:1204): avc: denied { ioctl } for pid=8974 comm="syz.1.731" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 279.878348][ T8977] loop1: detected capacity change from 0 to 512 [ 279.965649][ T8977] journal_path: Non-blockdev passed as './file2' [ 280.151370][ T8977] EXT4-fs: error: could not find journal device path [ 280.298643][ T8956] net_ratelimit: 3 callbacks suppressed [ 280.298661][ T8956] Set syz1 is full, maxelem 65536 reached [ 280.357518][ T8987] loop3: detected capacity change from 0 to 256 [ 280.400891][ T28] audit: type=1400 audit(1777338656.458:1205): avc: denied { ioctl } for pid=8982 comm="syz.4.733" path="socket:[15728]" dev="sockfs" ino=15728 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.499851][ T28] audit: type=1400 audit(1777338656.548:1206): avc: denied { write } for pid=8984 comm="syz.1.734" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.532916][ T8985] random: crng reseeded on system resumption [ 280.547720][ T28] audit: type=1400 audit(1777338656.578:1207): avc: denied { open } for pid=8984 comm="syz.1.734" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 283.198124][ T28] audit: type=1400 audit(1777338659.258:1208): avc: denied { bind } for pid=9007 comm="syz.3.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 283.798298][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 284.630650][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.745'. [ 284.720753][ T9004] loop1: detected capacity change from 0 to 512 [ 284.756749][ T9004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 284.836055][ T9004] EXT4-fs (loop1): 1 truncate cleaned up [ 285.025262][ T9041] lo speed is unknown, defaulting to 1000 [ 285.078376][ T9004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.606220][ T28] audit: type=1400 audit(1777338661.628:1209): avc: denied { search } for pid=9052 comm="syz.2.748" name="/" dev="configfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 285.628794][ T28] audit: type=1400 audit(1777338661.628:1210): avc: denied { search } for pid=9052 comm="syz.2.748" name="/" dev="configfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 285.725494][ T28] audit: type=1400 audit(1777338661.628:1211): avc: denied { read open } for pid=9052 comm="syz.2.748" path="/" dev="configfs" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 286.050447][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.377708][ T9093] netlink: 'syz.1.751': attribute type 28 has an invalid length. [ 286.396258][ T9093] netlink: 'syz.1.751': attribute type 3 has an invalid length. [ 286.414072][ T9093] netlink: 132 bytes leftover after parsing attributes in process `syz.1.751'. [ 286.871039][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 286.883324][ T9093] tipc: Started in network mode [ 286.898236][ T9093] tipc: Node identity ac14140f, cluster identity 4711 [ 286.929233][ T9093] tipc: New replicast peer: 255.255.255.255 [ 286.969119][ T9093] tipc: Enabled bearer , priority 10 [ 287.195362][ T28] audit: type=1400 audit(1777338663.038:1212): avc: denied { nlmsg_read } for pid=9083 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 287.445750][ T3956] lo speed is unknown, defaulting to 1000 [ 287.455402][ T3956] syz0: Port: 1 Link ACTIVE [ 287.960621][ T28] audit: type=1326 audit(1777338664.018:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 287.998130][ T28] audit: type=1326 audit(1777338664.048:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 288.004855][ T9185] lo speed is unknown, defaulting to 1000 [ 288.047697][ T9166] random: crng reseeded on system resumption [ 288.079623][ T28] audit: type=1326 audit(1777338664.048:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 288.091663][ T9185] lo speed is unknown, defaulting to 1000 [ 288.103175][ T3956] tipc: Node number set to 2886997007 [ 288.117190][ T28] audit: type=1326 audit(1777338664.048:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 288.142708][ T28] audit: type=1326 audit(1777338664.048:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 288.166477][ T28] audit: type=1326 audit(1777338664.048:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9169 comm="syz.4.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 288.231280][ T9185] lo speed is unknown, defaulting to 1000 [ 288.244196][ T9185] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 288.274015][ T9185] lo speed is unknown, defaulting to 1000 [ 288.289838][ T9185] lo speed is unknown, defaulting to 1000 [ 288.306039][ T9185] lo speed is unknown, defaulting to 1000 [ 288.324786][ T9185] lo speed is unknown, defaulting to 1000 [ 288.341446][ T9185] lo speed is unknown, defaulting to 1000 [ 288.356376][ T9185] lo speed is unknown, defaulting to 1000 [ 288.872328][ T9205] lo speed is unknown, defaulting to 1000 [ 288.890750][ T9207] loop3: detected capacity change from 0 to 512 [ 288.988847][ T9207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.050340][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 289.061490][ T9207] netlink: 40 bytes leftover after parsing attributes in process `syz.3.754'. [ 289.282249][ T9211] lo speed is unknown, defaulting to 1000 [ 289.495811][ T9205] lo speed is unknown, defaulting to 1000 [ 289.584378][ T9211] lo speed is unknown, defaulting to 1000 [ 289.661556][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.852440][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.759'. [ 290.945544][ T9339] loop1: detected capacity change from 0 to 128 [ 292.408905][ T9364] random: crng reseeded on system resumption [ 292.438539][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 292.438557][ T28] audit: type=1400 audit(1777338668.428:1297): avc: denied { unlink } for pid=3298 comm="syz-executor" name="file0" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 292.486161][ T9363] lo speed is unknown, defaulting to 1000 [ 292.621355][ T28] audit: type=1326 audit(1777338668.678:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9367 comm="syz.4.773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x0 [ 292.680557][ T9363] lo speed is unknown, defaulting to 1000 [ 292.848535][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 292.875767][ T9391] loop2: detected capacity change from 0 to 512 [ 292.904916][ T9391] EXT4-fs: Ignoring removed bh option [ 292.921242][ T9391] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 292.961814][ T9391] EXT4-fs (loop2): 1 truncate cleaned up [ 292.989493][ T9391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.082500][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.393267][ T9418] loop2: detected capacity change from 0 to 512 [ 293.776324][ T9418] EXT4-fs (loop2): 1 orphan inode deleted [ 293.794454][ T9418] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.834277][ T9418] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.420636][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.780'. [ 294.471497][ T9509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.778'. [ 295.024281][ T9518] netlink: 14 bytes leftover after parsing attributes in process `syz.1.777'. [ 295.340054][ T9520] loop1: detected capacity change from 0 to 512 [ 296.430573][ T9520] EXT4-fs (loop1): 1 orphan inode deleted [ 296.488945][ T9520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.543037][ T9507] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 296.579922][ T9518] bond_slave_0: left promiscuous mode [ 296.598776][ T9536] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 296.615113][ T9518] bond_slave_1: left promiscuous mode [ 296.622463][ T9537] loop3: detected capacity change from 0 to 2048 [ 296.657881][ T9518] syz_tun: left promiscuous mode [ 296.695815][ T9537] loop3: p2 p3 p7 [ 296.713152][ T9518] bond1: (slave macvlan3): Removing an active aggregator [ 296.746872][ T9518] bond1: (slave macvlan3): Releasing backup interface [ 296.754717][ T9537] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 296.802053][ T9518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.831014][ T9518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.850107][ T9518] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 296.868864][ T9518] bond0 (unregistering): Released all slaves [ 296.885529][ T9543] bond1: option mode: unable to set because the bond device is up [ 296.989097][ T9557] bond1: option mode: unable to set because the bond device is up [ 297.017606][ T3399] syz1: Port: 1 Link DOWN [ 297.029746][ T9570] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 297.072319][ T9531] lo speed is unknown, defaulting to 1000 [ 297.113486][ T9579] bond1: option mode: unable to set because the bond device is up [ 297.210527][ T9587] loop3: detected capacity change from 0 to 512 [ 297.251358][ T9531] lo speed is unknown, defaulting to 1000 [ 297.289545][ T9587] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.787: iget: bad i_size value: 38620345925642 [ 297.313407][ T9587] fserror_report: 1 callbacks suppressed [ 297.313425][ T9587] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 297.337551][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 297.353251][ C0] EXT4-fs (loop3): initial error at time 1777338673: ext4_orphan_get:1397: inode 15 [ 297.362743][ C0] EXT4-fs (loop3): last error at time 1777338673: ext4_orphan_get:1397: inode 15 [ 297.377698][ T9587] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.787: couldn't read orphan inode 15 (err -117) [ 297.443872][ T9587] loop3: lost filesystem error report for type 5 error -117 [ 297.445391][ T9587] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.750647][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 297.986931][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.027322][ T9679] loop1: detected capacity change from 0 to 256 [ 298.118991][ T9682] loop3: detected capacity change from 0 to 512 [ 298.148799][ T9682] EXT4-fs: test_dummy_encryption option not supported [ 298.628140][ T9676] gtp0: entered promiscuous mode [ 298.639012][ T9676] team0: Refused to change device type [ 298.981864][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.0.792'. [ 299.035849][ T9701] lo speed is unknown, defaulting to 1000 [ 299.246326][ T9701] lo speed is unknown, defaulting to 1000 [ 299.842502][ T9743] loop3: detected capacity change from 0 to 4096 [ 299.873435][ T9740] lo speed is unknown, defaulting to 1000 [ 299.878761][ T9748] netlink: 'syz.0.797': attribute type 10 has an invalid length. [ 299.907822][ T9743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.959160][ T9748] bond1: option mode: unable to set because the bond device is up [ 300.051652][ T9758] netlink: 'syz.4.798': attribute type 10 has an invalid length. [ 300.089781][ T9740] lo speed is unknown, defaulting to 1000 [ 300.139477][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 300.149331][ T9758] bond1: option mode: unable to set because the bond device is up [ 300.267799][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.320222][ T28] audit: type=1326 audit(1777338676.338:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.345266][ T28] audit: type=1326 audit(1777338676.338:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.371489][ T28] audit: type=1326 audit(1777338676.338:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.396674][ T28] audit: type=1326 audit(1777338676.338:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.420654][ T28] audit: type=1326 audit(1777338676.338:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.550730][ T28] audit: type=1326 audit(1777338676.338:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.847920][ T28] audit: type=1326 audit(1777338676.348:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.872287][ T28] audit: type=1326 audit(1777338676.348:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.930078][ T28] audit: type=1326 audit(1777338676.348:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 300.957968][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 301.409850][ T28] audit: type=1326 audit(1777338676.348:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9776 comm="syz.0.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccdeadcdd9 code=0x7ffc0000 [ 302.435388][ T9813] netlink: 'syz.2.805': attribute type 1 has an invalid length. [ 302.609838][ T9822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.804'. [ 302.998784][ T9825] lo speed is unknown, defaulting to 1000 [ 303.309597][ T9825] lo speed is unknown, defaulting to 1000 [ 303.372949][ T9837] loop3: detected capacity change from 0 to 512 [ 303.408863][ T9837] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 303.437619][ T9837] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 303.447433][ T9837] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.807: bad orphan inode 4 [ 303.463496][ T9837] loop3: lost filesystem error report for type 5 error -117 [ 303.467691][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 303.481561][ C0] EXT4-fs (loop3): initial error at time 1777338679: ext4_orphan_get:1423 [ 303.490122][ C0] EXT4-fs (loop3): last error at time 1777338679: ext4_orphan_get:1423 [ 304.096139][ T9843] loop1: detected capacity change from 0 to 512 [ 304.449704][ T9837] EXT4-fs (loop3): 1 orphan inode deleted [ 304.455931][ T9837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.420591][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.807'. [ 305.639241][ T9843] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 305.657127][ T9843] EXT4-fs (loop1): mount failed [ 306.847213][ T9860] netlink: 'syz.0.813': attribute type 10 has an invalid length. [ 306.890388][ T9856] lo speed is unknown, defaulting to 1000 [ 306.941711][ T9860] bond1: option mode: unable to set because the bond device is up [ 306.978203][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.981027][ T9856] lo speed is unknown, defaulting to 1000 [ 307.177232][ T9879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 309.389765][ T9929] loop3: detected capacity change from 0 to 128 [ 309.514416][ T9929] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 310.078816][ T9959] netlink: 48 bytes leftover after parsing attributes in process `syz.2.819'. [ 310.677758][ T9963] lo speed is unknown, defaulting to 1000 [ 310.835638][ T9963] lo speed is unknown, defaulting to 1000 [ 310.933258][ T9976] batadv_slave_1: entered promiscuous mode [ 311.078698][ T9975] batadv_slave_1: left promiscuous mode [ 311.389897][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 311.389953][ T28] audit: type=1400 audit(1777338687.448:1323): avc: denied { read } for pid=9991 comm="syz.1.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 314.206861][T10074] lo speed is unknown, defaulting to 1000 [ 314.213163][T10080] lo speed is unknown, defaulting to 1000 [ 314.462108][T10074] lo speed is unknown, defaulting to 1000 [ 314.479283][T10080] lo speed is unknown, defaulting to 1000 [ 316.208567][T10217] loop3: detected capacity change from 0 to 512 [ 316.240998][T10217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 316.283488][T10217] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.304126][T10219] loop2: detected capacity change from 0 to 512 [ 316.422639][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.1.831'. [ 316.489742][T10219] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.832: iget: bad i_size value: 38620345925642 [ 316.495138][T10227] lo speed is unknown, defaulting to 1000 [ 316.631003][T10227] lo speed is unknown, defaulting to 1000 [ 316.829454][T10219] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 316.837566][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 316.853287][ C1] EXT4-fs (loop2): initial error at time 1777338692: ext4_orphan_get:1397: inode 15 [ 316.862698][ C1] EXT4-fs (loop2): last error at time 1777338692: ext4_orphan_get:1397: inode 15 [ 316.929644][T10219] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.832: couldn't read orphan inode 15 (err -117) [ 316.960464][ T28] audit: type=1400 audit(1777338692.968:1324): avc: denied { rmdir } for pid=10213 comm="syz.3.833" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 317.001803][T10219] loop2: lost filesystem error report for type 5 error -117 [ 317.028250][T10219] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.186801][T10233] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.841'. [ 317.225782][ T28] audit: type=1400 audit(1777338693.268:1325): avc: denied { write } for pid=10240 comm="syz.4.837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 317.261278][T10233] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.841'. [ 317.461085][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 317.841029][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 317.957761][T10224] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 318.025832][ T28] audit: type=1400 audit(1777338694.078:1326): avc: denied { open } for pid=10258 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 318.072336][ T28] audit: type=1400 audit(1777338694.078:1327): avc: denied { kernel } for pid=10258 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 318.119670][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 318.166064][T10269] random: crng reseeded on system resumption [ 318.179888][T10270] lo speed is unknown, defaulting to 1000 [ 318.192044][T10259] lo speed is unknown, defaulting to 1000 [ 318.237357][T10276] netlink: 9 bytes leftover after parsing attributes in process `syz.4.844'. [ 318.296638][T10276] netlink: 9 bytes leftover after parsing attributes in process `syz.4.844'. [ 318.400032][T10281] xt_hashlimit: size too large, truncated to 1048576 [ 318.432445][T10270] lo speed is unknown, defaulting to 1000 [ 318.570849][T10259] lo speed is unknown, defaulting to 1000 [ 318.948898][ T28] audit: type=1400 audit(1777338695.008:1328): avc: denied { write } for pid=10313 comm="syz.2.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 319.732340][T10404] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 319.765569][T10408] bridge_slave_0: default FDB implementation only supports local addresses [ 319.843181][ T28] audit: type=1400 audit(1777338695.898:1329): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 319.881397][T10412] loop2: detected capacity change from 0 to 1024 [ 319.888819][T10412] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 319.888819][T10412] [ 320.043016][ T28] audit: type=1400 audit(1777338696.098:1330): avc: denied { setcheckreqprot } for pid=10411 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 320.494926][T10412] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 322.083924][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 323.837701][T10433] loop1: detected capacity change from 0 to 1024 [ 323.952754][T10433] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 323.965814][T10433] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 323.989725][T10433] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.853: inode #1: comm syz.1.853: iget: illegal inode # [ 324.018063][T10433] loop1: lost filesystem error report for type 5 error -117 [ 324.027564][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 324.041458][ C0] EXT4-fs (loop1): initial error at time 1777338700: ext4_get_journal_inode:5896 [ 324.050632][ C0] EXT4-fs (loop1): last error at time 1777338700: ext4_get_journal_inode:5896 [ 324.063200][T10433] EXT4-fs (loop1): no journal found [ 324.070909][T10433] EXT4-fs (loop1): can't get journal size [ 324.122661][T10433] EXT4-fs (loop1): failed to initialize system zone (-22) [ 324.131937][T10433] EXT4-fs (loop1): mount failed [ 326.098282][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 327.088633][T10454] loop1: detected capacity change from 0 to 512 [ 327.150984][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.859'. [ 328.507028][T10454] EXT4-fs (loop1): 1 orphan inode deleted [ 328.527840][T10454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.575358][T10454] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.996724][T10446] lo speed is unknown, defaulting to 1000 [ 329.132194][T10484] loop1: detected capacity change from 0 to 2048 [ 329.215032][T10446] lo speed is unknown, defaulting to 1000 [ 329.223439][T10484] loop1: p2 p3 p7 [ 329.232705][T10484] netlink: 'syz.1.863': attribute type 10 has an invalid length. [ 329.310941][T10484] bond1: option mode: unable to set because the bond device is up [ 329.375922][ T28] audit: type=1400 audit(1777338705.428:1331): avc: denied { unmount } for pid=10487 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.483489][T10499] 9p: Bad value for 'rfdno' [ 329.576982][T10499] netlink: 28 bytes leftover after parsing attributes in process `syz.0.869'. [ 330.386461][ T28] audit: type=1326 audit(1777338706.438:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.410966][ T28] audit: type=1326 audit(1777338706.438:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.436536][ T28] audit: type=1326 audit(1777338706.438:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.448342][T10503] GPL: port 1(team0) entered blocking state [ 330.466728][T10503] GPL: port 1(team0) entered disabled state [ 330.470039][ T28] audit: type=1326 audit(1777338706.438:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.473112][T10503] team0: entered allmulticast mode [ 330.497340][ T28] audit: type=1326 audit(1777338706.438:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.502103][T10503] team_slave_0: entered allmulticast mode [ 330.526178][ T28] audit: type=1326 audit(1777338706.438:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.530962][T10503] team_slave_1: entered allmulticast mode [ 330.561405][T10503] team0: entered promiscuous mode [ 330.566503][T10503] team_slave_0: entered promiscuous mode [ 330.572396][T10503] team_slave_1: entered promiscuous mode [ 330.578973][ T28] audit: type=1326 audit(1777338706.438:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.602599][ T28] audit: type=1326 audit(1777338706.438:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.626213][ T28] audit: type=1326 audit(1777338706.438:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.4.870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7fc00000 [ 330.700897][T10519] loop1: detected capacity change from 0 to 512 [ 330.725216][T10516] loop3: detected capacity change from 0 to 128 [ 330.732927][T10516] vfat: Unknown parameter '‰' [ 330.884503][T10519] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.872: iget: bad i_size value: 38620345925642 [ 330.919984][T10519] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 330.920395][T10519] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.872: couldn't read orphan inode 15 (err -117) [ 330.929599][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 330.929623][ C0] EXT4-fs (loop1): initial error at time 1777338706: ext4_orphan_get:1397: inode 15 [ 330.929655][ C0] EXT4-fs (loop1): last error at time 1777338706: ext4_orphan_get:1397: inode 15 [ 331.305350][T10528] loop2: detected capacity change from 0 to 512 [ 331.899104][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.876'. [ 331.910877][T10519] loop1: lost filesystem error report for type 5 error -117 [ 331.920258][T10532] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 331.936247][T10519] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.625500][T10535] loop3: detected capacity change from 0 to 2048 [ 332.884844][T10539] netlink: 'syz.3.877': attribute type 10 has an invalid length. [ 332.894759][T10539] bond1: option mode: unable to set because the bond device is up [ 332.909590][T10539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 332.936570][T10539] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 333.111398][T10528] EXT4-fs (loop2): 1 orphan inode deleted [ 333.195559][T10528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.649376][ T240] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 333.662225][ T240] loop2: lost filesystem error report for type 5 error -117 [ 333.699948][T10528] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.981135][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.028498][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 334.195368][T10552] loop2: detected capacity change from 0 to 2048 [ 335.025189][T10562] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 335.171882][T10564] bond1: option mode: unable to set because the bond device is up [ 335.361903][T10552] loop2: p2 p3 p7 [ 335.377826][T10563] loop1: detected capacity change from 0 to 512 [ 335.395700][T10563] EXT4-fs: Ignoring removed oldalloc option [ 335.405964][T10563] EXT4-fs: dax option not supported [ 335.922443][T10563] loop1: detected capacity change from 0 to 1024 [ 335.934777][T10563] EXT4-fs: inline encryption not supported [ 335.943854][T10563] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 335.978002][T10563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.059524][T10579] lo speed is unknown, defaulting to 1000 [ 337.038652][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 337.050074][ T3272] udevd[3272]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 337.162847][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 338.002635][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 338.290206][T10579] lo speed is unknown, defaulting to 1000 [ 338.305940][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.759647][T10606] loop2: detected capacity change from 0 to 2048 [ 339.896987][T10604] syzkaller0: entered promiscuous mode [ 339.902660][T10604] syzkaller0: entered allmulticast mode [ 339.935199][T10610] netlink: 'syz.2.892': attribute type 10 has an invalid length. [ 340.306953][T10606] loop2: p2 p3 p7 [ 341.271265][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.894'. [ 341.354891][T10614] bond1: option mode: unable to set because the bond device is up [ 341.623756][T10596] loop1: detected capacity change from 0 to 512 [ 341.658683][T10596] EXT4-fs: Ignoring removed bh option [ 341.735959][T10596] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 342.615818][T10637] veth0_vlan: entered allmulticast mode [ 342.628569][T10596] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 342.629764][T10596] EXT4-fs: failed to create workqueue [ 342.661338][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.895'. [ 342.671150][T10596] EXT4-fs (loop1): mount failed [ 342.807287][T10630] veth0_vlan (unregistering): left allmulticast mode [ 343.127251][T10642] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 343.152396][T10642] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 344.302178][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 344.302196][ T28] audit: type=1400 audit(1777338720.318:1405): avc: denied { read } for pid=10639 comm="syz.2.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 345.169436][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 345.468168][T10664] lo speed is unknown, defaulting to 1000 [ 345.793398][T10683] netlink: 'syz.4.907': attribute type 10 has an invalid length. [ 345.865107][T10664] lo speed is unknown, defaulting to 1000 [ 345.997853][T10687] bond1: option mode: unable to set because the bond device is up [ 346.942937][ T28] audit: type=1400 audit(1777338722.998:1406): avc: denied { read append } for pid=10697 comm="syz.3.910" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 347.112697][ T28] audit: type=1400 audit(1777338723.028:1407): avc: denied { open } for pid=10697 comm="syz.3.910" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 347.663470][ T28] audit: type=1400 audit(1777338723.198:1408): avc: denied { ioctl } for pid=10697 comm="syz.3.910" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 347.753763][T10714] loop1: detected capacity change from 0 to 128 [ 347.984222][T10714] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 348.025630][T10713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.101751][T10715] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10715 comm=syz.0.912 [ 348.118550][T10711] 9p: Bad value for 'rfdno' [ 348.128948][ T28] audit: type=1400 audit(1777338724.178:1409): avc: denied { read } for pid=10707 comm="syz.1.911" dev="sockfs" ino=17103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 348.189160][T10711] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 348.246256][ T28] audit: type=1400 audit(1777338724.178:1410): avc: denied { mounton } for pid=10707 comm="syz.1.911" path="/174/file0" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 348.428320][T10713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.813466][T10713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.935809][T10713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.031798][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.063097][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.133638][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.145709][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.155701][ T28] audit: type=1326 audit(1777338725.188:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.4.914" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x0 [ 349.259161][ T28] audit: type=1400 audit(1777338725.298:1412): avc: denied { cmd } for pid=10754 comm="syz.2.915" path="socket:[18392]" dev="sockfs" ino=18392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 349.384132][T10770] lo speed is unknown, defaulting to 1000 [ 349.435283][T10783] netlink: 'syz.2.920': attribute type 10 has an invalid length. [ 349.461069][T10770] lo speed is unknown, defaulting to 1000 [ 349.476328][T10782] lo speed is unknown, defaulting to 1000 [ 349.502898][T10783] bond1: option mode: unable to set because the bond device is up [ 349.614251][T10782] lo speed is unknown, defaulting to 1000 [ 350.971583][T10819] loop2: detected capacity change from 0 to 128 [ 351.002386][T10819] msdos: Unknown parameter '00000000000000000001332ÿÿÿÿ' [ 351.401656][T10842] lo speed is unknown, defaulting to 1000 [ 351.678977][T10842] lo speed is unknown, defaulting to 1000 [ 351.944276][T10854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10854 comm=syz.4.926 [ 351.987937][T10881] loop2: detected capacity change from 0 to 128 [ 351.996721][T10881] vfat: Unknown parameter '™œÀ<[£Ð{ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔÇN' [ 352.272574][ T28] audit: type=1400 audit(1777338728.328:1413): avc: denied { bind } for pid=10922 comm="syz.2.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 352.281362][T10923] loop2: detected capacity change from 0 to 512 [ 352.323766][T10923] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 352.323766][T10923] program syz.2.929 not setting count and/or reply_len properly [ 352.663439][T10928] netlink: 'syz.4.931': attribute type 10 has an invalid length. [ 352.691777][T10928] bond1: option mode: unable to set because the bond device is up [ 352.718562][T10932] bridge_slave_0: default FDB implementation only supports local addresses [ 354.040830][ T3875] kworker/u8:21: attempt to access beyond end of device [ 354.040830][ T3875] loop2: rw=1, sector=1320, nr_sectors = 2056 limit=512 [ 354.219238][T10950] netlink: 'syz.3.938': attribute type 10 has an invalid length. [ 354.234016][T10952] loop1: detected capacity change from 0 to 512 [ 354.241265][ T3875] kworker/u8:21: attempt to access beyond end of device [ 354.241265][ T3875] loop2: rw=1, sector=3376, nr_sectors = 2048 limit=512 [ 354.280956][T10950] bond1: option mode: unable to set because the bond device has slaves [ 354.897193][ T3875] kworker/u8:21: attempt to access beyond end of device [ 354.897193][ T3875] loop2: rw=1, sector=5424, nr_sectors = 1992 limit=512 [ 355.024971][T10952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 355.087383][T10957] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 355.212694][T10952] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.293434][T10973] netlink: 'syz.3.943': attribute type 10 has an invalid length. [ 356.316380][T10973] bond1: option mode: unable to set because the bond device has slaves [ 356.671048][T10973] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 356.987414][ T3291] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 357.008429][T10982] bridge_slave_0: default FDB implementation only supports local addresses [ 357.115931][T10987] bridge_slave_0: default FDB implementation only supports local addresses [ 357.255902][T10999] lo speed is unknown, defaulting to 1000 [ 357.266884][T11001] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11001 comm=syz.0.949 [ 357.302130][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 357.327243][T10997] lo speed is unknown, defaulting to 1000 [ 357.381667][T10999] lo speed is unknown, defaulting to 1000 [ 357.618193][T11014] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 357.651315][T10997] lo speed is unknown, defaulting to 1000 [ 357.744673][T11010] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 357.965178][T11025] loop3: detected capacity change from 0 to 128 [ 359.108042][T11040] loop1: detected capacity change from 0 to 1024 [ 359.194406][T11040] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 359.218658][T11040] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 359.235990][T11048] bridge_slave_0: default FDB implementation only supports local addresses [ 359.300205][T11040] JBD2: no valid journal superblock found [ 359.311057][T11040] EXT4-fs (loop1): Could not load journal inode [ 360.493361][T11083] bridge_slave_0: default FDB implementation only supports local addresses [ 360.530138][T11080] netlink: 'syz.4.959': attribute type 10 has an invalid length. [ 360.542493][T11086] random: crng reseeded on system resumption [ 360.602287][T11089] bond1: option mode: unable to set because the bond device is up [ 360.746904][T11086] xt_hashlimit: size too large, truncated to 1048576 [ 360.827331][T11093] netlink: 'syz.4.963': attribute type 10 has an invalid length. [ 360.904750][T11096] bond1: option mode: unable to set because the bond device is up [ 361.511001][ T28] audit: type=1326 audit(1777338737.558:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 361.558832][ T28] audit: type=1326 audit(1777338737.558:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 361.582931][ T28] audit: type=1326 audit(1777338737.598:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 361.606957][ T28] audit: type=1326 audit(1777338737.598:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 361.663268][ T28] audit: type=1326 audit(1777338737.598:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3fb37d60e code=0x7ffc0000 [ 361.687439][ T28] audit: type=1326 audit(1777338737.598:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3fb37d60e code=0x7ffc0000 [ 361.741637][ T28] audit: type=1326 audit(1777338737.598:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 361.782684][ T28] audit: type=1326 audit(1777338737.608:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 361.842963][ T28] audit: type=1326 audit(1777338737.608:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 361.891418][ T28] audit: type=1326 audit(1777338737.608:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.4.964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fc3fb3bcdd9 code=0x7ffc0000 [ 362.739752][T11128] lo speed is unknown, defaulting to 1000 [ 362.992406][T11142] lo speed is unknown, defaulting to 1000 [ 363.413047][T11128] lo speed is unknown, defaulting to 1000 [ 364.203913][T11142] lo speed is unknown, defaulting to 1000 [ 364.222809][T11155] lo speed is unknown, defaulting to 1000 [ 364.468992][T11155] lo speed is unknown, defaulting to 1000 [ 364.895223][T11190] loop2: detected capacity change from 0 to 2048 [ 365.125649][T11219] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 365.165182][T11190] loop2: p2 p3 p7 [ 365.196146][T11190] bond1: option mode: unable to set because the bond device is up [ 365.306341][ T3272] udevd[3272]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 365.318892][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 365.331181][ T4321] udevd[4321]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 365.365441][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.372001][T11235] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 365.422790][T11235] bond1: option mode: unable to set because the bond device is up [ 365.457736][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.466154][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.475430][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.489578][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.508121][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.518962][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.534923][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.543043][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.558716][ T3399] hid-generic 0000:0000:0004.0001: unknown main item tag 0x0 [ 365.591668][ T3399] hid-generic 0000:0000:0004.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 366.215411][T11260] loop2: detected capacity change from 0 to 1024 [ 366.237731][T11260] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 366.237731][T11260] [ 367.786613][T11279] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 368.049714][T11283] loop2: detected capacity change from 0 to 2048 [ 368.057181][T11285] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 368.529489][T11294] netlink: 'syz.2.988': attribute type 10 has an invalid length. [ 368.543309][T11293] netlink: 'syz.1.989': attribute type 10 has an invalid length. [ 368.605714][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 368.605731][ T28] audit: type=1400 audit(1777338744.658:1484): avc: denied { sys_module } for pid=11274 comm="syz.3.985" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 368.661787][T11283] loop2: p2 p3 p7 [ 368.736592][T11290] bond1: option mode: unable to set because the bond device is up [ 368.794935][T11283] bond1: option mode: unable to set because the bond device is up [ 368.955838][T11306] loop2: detected capacity change from 0 to 512 [ 368.998291][T11306] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 369.007968][T11301] lo speed is unknown, defaulting to 1000 [ 369.030053][T11306] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 369.041290][ T28] audit: type=1400 audit(1777338745.098:1485): avc: denied { create } for pid=11307 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 369.085882][T11306] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.990: bad orphan inode 4 [ 369.141546][T11306] loop2: lost filesystem error report for type 5 error -117 [ 369.141741][T11306] EXT4-fs (loop2): 1 orphan inode deleted [ 369.149183][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 369.149200][ C1] EXT4-fs (loop2): initial error at time 1777338745: ext4_orphan_get:1423 [ 369.149222][ C1] EXT4-fs (loop2): last error at time 1777338745: ext4_orphan_get:1423 [ 369.180877][ T28] audit: type=1400 audit(1777338745.098:1486): avc: denied { write } for pid=11307 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 369.352418][T11306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.399348][ T28] audit: type=1400 audit(1777338745.458:1487): avc: denied { create } for pid=11326 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.422636][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 369.464329][T11315] lo speed is unknown, defaulting to 1000 [ 369.464378][T11301] lo speed is unknown, defaulting to 1000 [ 369.484283][ T28] audit: type=1400 audit(1777338745.478:1488): avc: denied { connect } for pid=11326 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 369.539817][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.990'. [ 369.988197][T11315] lo speed is unknown, defaulting to 1000 [ 370.011103][ T3863] smc: removing ib device !yz2 [ 370.287578][T11349] loop3: detected capacity change from 0 to 512 [ 370.511143][T11349] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 370.749928][T11349] EXT4-fs (loop3): 1 truncate cleaned up [ 370.775392][T11349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.815177][ T28] audit: type=1400 audit(1777338746.868:1489): avc: denied { unlink } for pid=11348 comm="syz.3.993" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 370.871862][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.890090][ T28] audit: type=1400 audit(1777338746.868:1490): avc: denied { rename } for pid=11348 comm="syz.3.993" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 370.913252][T11349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 370.920955][T11349] IPv6: NLM_F_CREATE should be set when creating new route [ 371.039403][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.045603][T11407] lo speed is unknown, defaulting to 1000 [ 371.055264][T11407] lo speed is unknown, defaulting to 1000 [ 371.119686][T11408] lo speed is unknown, defaulting to 1000 [ 371.134976][T11408] lo speed is unknown, defaulting to 1000 [ 371.220158][T11418] bridge_slave_0: default FDB implementation only supports local addresses [ 373.176818][ T28] audit: type=1400 audit(1777338749.208:1491): avc: denied { create } for pid=11442 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.251261][T11450] gtp0: entered promiscuous mode [ 373.262586][ T28] audit: type=1400 audit(1777338749.228:1492): avc: denied { getopt } for pid=11442 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 373.320906][T11452] netlink: 'syz.0.1001': attribute type 10 has an invalid length. [ 373.333769][T11453] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1000'. [ 373.376587][T11450] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 373.388150][T11452] bond1: option mode: unable to set because the bond device is up [ 373.461482][T11457] netlink: 'syz.1.1002': attribute type 10 has an invalid length. [ 373.484803][T11461] netlink: 'syz.0.1003': attribute type 10 has an invalid length. [ 373.519909][T11457] bond1: option mode: unable to set because the bond device is up [ 373.531908][T11461] bond1: option mode: unable to set because the bond device is up [ 373.853161][T11445] syz.3.1000 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 373.866602][T11445] CPU: 1 UID: 0 PID: 11445 Comm: syz.3.1000 Tainted: G W syzkaller #0 PREEMPT(full) [ 373.866644][T11445] Tainted: [W]=WARN [ 373.866652][T11445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 373.866666][T11445] Call Trace: [ 373.866673][T11445] [ 373.866682][T11445] __dump_stack+0x1d/0x30 [ 373.866710][T11445] dump_stack_lvl+0x95/0xd0 [ 373.866791][T11445] dump_stack+0x15/0x1b [ 373.866811][T11445] dump_header+0x80/0x240 [ 373.866835][T11445] oom_kill_process+0x295/0x350 [ 373.866869][T11445] out_of_memory+0x97d/0xb80 [ 373.866982][T11445] try_charge_memcg+0x62f/0xa10 [ 373.867020][T11445] __obj_cgroup_charge+0xc0/0x1f0 [ 373.867048][T11445] __memcg_slab_post_alloc_hook+0x4a0/0x7d0 [ 373.867129][T11445] ? bdev_getblk+0x35a/0x3f0 [ 373.867157][T11445] kmem_cache_alloc_noprof+0x1e2/0x3f0 [ 373.867191][T11445] ? alloc_buffer_head+0x35/0x1f0 [ 373.867217][T11445] alloc_buffer_head+0x35/0x1f0 [ 373.867301][T11445] folio_alloc_buffers+0x11d/0x3d0 [ 373.867328][T11445] create_empty_buffers+0x2c/0x200 [ 373.867354][T11445] __block_write_begin_int+0x1d4/0xf90 [ 373.867453][T11445] ? __ext4_mark_inode_dirty+0x2fc/0x3d0 [ 373.867504][T11445] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 373.867540][T11445] ? __list_add_valid_or_report+0x38/0xe0 [ 373.867565][T11445] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 373.867637][T11445] ? __mark_inode_dirty+0x49d/0x710 [ 373.867666][T11445] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 373.867701][T11445] block_page_mkwrite+0x183/0x300 [ 373.867864][T11445] ext4_page_mkwrite+0x835/0xad0 [ 373.867941][T11445] ? folio_unlock+0xfe/0x150 [ 373.867974][T11445] handle_mm_fault+0x1bc3/0x2e70 [ 373.868005][T11445] ? __pfx_filemap_fault+0x10/0x10 [ 373.868072][T11445] do_user_addr_fault+0x3fd/0x1050 [ 373.868106][T11445] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 373.868197][T11445] exc_page_fault+0x62/0xa0 [ 373.868252][T11445] asm_exc_page_fault+0x26/0x30 [ 373.868275][T11445] RIP: 0033:0x7fcd593f1c72 [ 373.868295][T11445] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 73 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 373.868316][T11445] RSP: 002b:00007ffc4d547680 EFLAGS: 00010212 [ 373.868336][T11445] RAX: 000000000001c010 RBX: 00007fcd5a2c5720 RCX: 0000000000000000 [ 373.868353][T11445] RDX: 0000001b32b07ff8 RSI: 0000000000000008 RDI: 00007fcd5a2c5720 [ 373.868368][T11445] RBP: 0000000000000743 R08: 00007fcd59780000 R09: 00007fcd59796038 [ 373.868443][T11445] R10: 0000000000000001 R11: 0000000000000004 R12: ffffffff8594ab87 [ 373.868458][T11445] R13: 00007fcd59796038 R14: 0000000000000045 R15: fffffffffffe3ff8 [ 373.868475][T11445] ? mtree_range_walk+0x397/0x490 [ 373.868558][T11445] [ 374.176826][T11445] memory: usage 284060kB, limit 307200kB, failcnt 330 [ 374.213441][T11445] memory+swap: usage 299808kB, limit 9007199254740988kB, failcnt 0 [ 374.318384][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1007'. [ 374.331066][T11481] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 374.419130][T11445] kmem: usage 237620kB, limit 9007199254740988kB, failcnt 0 [ 374.440948][T11481] netlink: 'syz.1.1006': attribute type 1 has an invalid length. [ 374.993259][T11445] Memory cgroup stats for /syz3: [ 374.993659][T11445] cache 8192 [ 375.036020][T11445] rss 4096 [ 375.039759][T11445] shmem 0 [ 375.042895][T11445] mapped_file 4096 [ 375.046655][T11445] dirty 0 [ 375.058044][T11445] writeback 0 [ 375.091757][T11445] workingset_refault_anon 1560 [ 375.110666][T11445] workingset_refault_file 272 [ 375.135867][T11445] swap 208896 [ 375.205750][T11445] swapcached 6602752 [ 375.227615][T11445] pgpgin 280456 [ 375.231228][T11445] pgpgout 280453 [ 375.234794][T11445] pgfault 265023 [ 375.239256][T11445] pgmajfault 234 [ 375.242888][T11445] inactive_anon 0 [ 375.246544][T11445] active_anon 4096 [ 375.251237][T11445] inactive_file 0 [ 375.254923][T11445] active_file 8192 [ 375.258908][T11445] unevictable 0 [ 375.262427][T11445] hierarchical_memory_limit 314572800 [ 375.268556][T11445] hierarchical_memsw_limit 9223372036854771712 [ 375.274763][T11445] total_cache 8192 [ 375.279612][T11445] total_rss 4096 [ 375.283212][T11445] total_shmem 0 [ 375.286746][T11445] total_mapped_file 4096 [ 375.291284][T11445] total_dirty 0 [ 375.294779][T11445] total_writeback 0 [ 375.305123][T11445] total_workingset_refault_anon 1560 [ 375.328051][T11445] total_workingset_refault_file 272 [ 375.338104][T11445] total_swap 208896 [ 375.359688][T11445] total_swapcached 6602752 [ 375.377756][T11445] total_pgpgin 280456 [ 375.388387][T11445] total_pgpgout 280453 [ 375.398960][T11445] total_pgfault 265023 [ 375.408956][T11445] total_pgmajfault 234 [ 375.428069][T11445] total_inactive_anon 0 [ 375.432276][T11445] total_active_anon 4096 [ 375.436527][T11445] total_inactive_file 0 [ 375.538063][T11445] total_active_file 8192 [ 375.631115][T11445] total_unevictable 0 [ 375.656499][ T28] audit: type=1400 audit(1777338751.708:1493): avc: denied { setattr } for pid=11497 comm="syz.4.1010" name="KEY" dev="sockfs" ino=19288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 375.687755][T11445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1000,pid=11445,uid=0 [ 375.718359][T11445] Memory cgroup out of memory: Killed process 11445 (syz.3.1000) total-vm:96348kB, anon-rss:1240kB, file-rss:22556kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 376.354065][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 376.874132][T11511] lo speed is unknown, defaulting to 1000 [ 376.910567][T11511] lo speed is unknown, defaulting to 1000 [ 376.916668][T11515] lo speed is unknown, defaulting to 1000 [ 376.922101][T11518] netlink: 'syz.1.1016': attribute type 10 has an invalid length. [ 377.191434][T11523] bond1: option mode: unable to set because the bond device is up [ 377.314809][T11515] lo speed is unknown, defaulting to 1000 [ 380.939568][T11582] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 380.981664][T11582] netlink: 'syz.2.1022': attribute type 1 has an invalid length. [ 382.202594][T11594] loop3: detected capacity change from 0 to 164 [ 382.468110][T11594] iso9660: Bad value for 'check' [ 385.178545][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 385.244837][T11620] netlink: 'syz.4.1030': attribute type 10 has an invalid length. [ 385.413256][T11631] bond1: option mode: unable to set because the bond device is up [ 385.555240][T11616] loop3: detected capacity change from 0 to 512 [ 385.579650][T11627] loop2: detected capacity change from 0 to 512 [ 385.592004][T11616] EXT4-fs: Ignoring removed bh option [ 385.692092][T11616] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 385.716875][T11627] EXT4-fs: Ignoring removed bh option [ 385.809653][T11627] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 386.510423][T11643] lo speed is unknown, defaulting to 1000 [ 386.516745][T11643] lo speed is unknown, defaulting to 1000 [ 387.095563][T11616] EXT4-fs (loop3): 1 truncate cleaned up [ 387.117369][T11627] EXT4-fs (loop2): 1 truncate cleaned up [ 387.614264][T11616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.895290][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.920210][T11655] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 388.053465][T11655] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 388.127790][T11627] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.335246][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.426404][T11710] lo speed is unknown, defaulting to 1000 [ 389.448815][T11710] lo speed is unknown, defaulting to 1000 [ 391.320676][ T28] audit: type=1400 audit(1777338767.378:1494): avc: denied { append } for pid=11737 comm="syz.1.1044" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 392.617918][T11733] loop3: detected capacity change from 0 to 512 [ 392.629761][T11733] EXT4-fs: Ignoring removed orlov option [ 393.548261][T11733] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 394.583222][T11781] netlink: 'syz.0.1050': attribute type 10 has an invalid length. [ 396.428180][T11795] bond1: option mode: unable to set because the bond device is up [ 398.557290][T11796] lo speed is unknown, defaulting to 1000 [ 398.564135][T11796] lo speed is unknown, defaulting to 1000 [ 398.813100][T11853] bridge_slave_0: default FDB implementation only supports local addresses [ 398.911828][ T28] audit: type=1400 audit(1777338774.958:1495): avc: denied { setopt } for pid=11850 comm="syz.2.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 399.289266][ T28] audit: type=1326 audit(1777338775.348:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 399.331213][ T28] audit: type=1326 audit(1777338775.348:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 399.404169][ T28] audit: type=1326 audit(1777338775.368:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 399.470090][ T28] audit: type=1326 audit(1777338775.368:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 399.501884][T11864] lo speed is unknown, defaulting to 1000 [ 399.515765][T11864] lo speed is unknown, defaulting to 1000 [ 399.533075][ T28] audit: type=1326 audit(1777338775.388:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 399.542737][T11866] lo speed is unknown, defaulting to 1000 [ 399.603321][ T28] audit: type=1326 audit(1777338775.418:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 399.649833][T11866] lo speed is unknown, defaulting to 1000 [ 399.668631][ T28] audit: type=1326 audit(1777338775.418:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 399.706083][ T28] audit: type=1326 audit(1777338775.418:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcd5951cb42 code=0x7ffc0000 [ 399.757643][ T28] audit: type=1326 audit(1777338775.418:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.3.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcd5951cbd7 code=0x7ffc0000 [ 399.803414][T11874] netlink: 'syz.2.1058': attribute type 13 has an invalid length. [ 399.819524][T11874] netlink: 'syz.2.1058': attribute type 17 has an invalid length. [ 399.910762][T11874] syz_tun: left promiscuous mode [ 399.986605][T11874] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.009541][T11874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.098313][T11874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.130030][T11874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.186531][T11874] veth1_vlan: left promiscuous mode [ 400.220022][T11874] veth0_vlan: left promiscuous mode [ 400.238242][T11874] veth0_vlan: entered promiscuous mode [ 400.268882][T11874] veth1_vlan: entered promiscuous mode [ 400.296019][T11874] veth1_macvtap: left promiscuous mode [ 400.330252][T11874] veth0_macvtap: left promiscuous mode [ 400.346546][T11874] veth0_macvtap: entered promiscuous mode [ 400.374518][T11874] veth1_macvtap: entered promiscuous mode [ 400.403537][T11874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 400.420890][T11874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.443473][T11874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.460978][T11874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.483153][T11874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.635659][ T3854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.652978][ T3875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.729774][ T49] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 400.737859][ T3875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.746798][ T3875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.882815][T11895] loop3: detected capacity change from 0 to 128 [ 401.086059][T11895] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 401.333438][T11897] loop2: detected capacity change from 0 to 2048 [ 401.384891][T11897] loop2: p2 p3 p7 [ 401.426210][T11897] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 401.482516][ T2980] loop2: p2 p3 p7 [ 401.519230][T11899] bond1: option mode: unable to set because the bond device is up [ 401.738598][T11912] lo speed is unknown, defaulting to 1000 [ 401.794443][T11906] udevd[11906]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 401.806788][T11912] lo speed is unknown, defaulting to 1000 [ 401.819226][T11575] udevd[11575]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 401.833951][T11909] udevd[11909]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 402.172698][T11935] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 402.286226][T11935] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 403.118506][T11964] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1074'. [ 403.410475][T11973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.417757][T11973] IPv6: NLM_F_CREATE should be set when creating new route [ 404.987745][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.186909][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 405.186928][ T28] audit: type=1326 audit(1777338781.238:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.227066][ T28] audit: type=1326 audit(1777338781.258:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.252204][ T28] audit: type=1326 audit(1777338781.258:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.276994][ T28] audit: type=1326 audit(1777338781.258:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.302517][ T28] audit: type=1326 audit(1777338781.258:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.332940][ T28] audit: type=1326 audit(1777338781.268:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.359042][ T28] audit: type=1326 audit(1777338781.268:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.458423][T12056] Illegal XDP return value 4294967274 on prog (id 331) dev N/A, expect packet loss! [ 405.512045][ T28] audit: type=1326 audit(1777338781.268:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.536797][ T28] audit: type=1326 audit(1777338781.268:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.563415][ T28] audit: type=1326 audit(1777338781.268:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12045 comm="syz.3.1085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcd5951cdd9 code=0x7ffc0000 [ 405.919710][T12069] tipc: Enabling of bearer rejected, already enabled [ 406.816194][T12075] loop3: detected capacity change from 0 to 128 [ 406.901064][T12080] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 407.060807][T12080] bond1: option mode: unable to set because the bond device is up [ 407.088212][T12083] tipc: Enabled bearer , priority 0 [ 407.640868][T12094] loop3: detected capacity change from 0 to 2048 [ 407.752619][T12094] loop3: p2 p3 p7 [ 407.765700][T12094] netlink: 'syz.3.1097': attribute type 10 has an invalid length. [ 407.832593][T12104] bond1: option mode: unable to set because the bond device has slaves [ 407.873941][T12102] lo speed is unknown, defaulting to 1000 [ 407.907746][T12094] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 407.925797][T12102] lo speed is unknown, defaulting to 1000 [ 408.162824][T12125] loop2: detected capacity change from 0 to 1024 [ 408.222898][T12125] EXT4-fs: test_dummy_encryption option not supported [ 408.376899][T12128] syz.3.1101: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 408.391654][T12128] CPU: 1 UID: 0 PID: 12128 Comm: syz.3.1101 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.391692][T12128] Tainted: [W]=WARN [ 408.391700][T12128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.391788][T12128] Call Trace: [ 408.391796][T12128] [ 408.391804][T12128] __dump_stack+0x1d/0x30 [ 408.391830][T12128] dump_stack_lvl+0x95/0xd0 [ 408.391854][T12128] dump_stack+0x15/0x1b [ 408.391876][T12128] warn_alloc+0x145/0x1c0 [ 408.391951][T12128] ? futex_unqueue+0xc5/0xf0 [ 408.391981][T12128] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 408.392010][T12128] ? __pfx_futex_wake_mark+0x10/0x10 [ 408.392036][T12128] ? __rcu_read_unlock+0x4e/0x70 [ 408.392124][T12128] ? avc_has_perm_noaudit+0xab/0x130 [ 408.392159][T12128] ? should_fail_ex+0x30/0x280 [ 408.392204][T12128] vmalloc_user_noprof+0x7d/0xb0 [ 408.392227][T12128] ? xskq_create+0x80/0xe0 [ 408.392255][T12128] xskq_create+0x80/0xe0 [ 408.392307][T12128] xsk_init_queue+0x70/0xb0 [ 408.392388][T12128] xsk_setsockopt+0x3f5/0x640 [ 408.392484][T12128] ? __pfx_xsk_setsockopt+0x10/0x10 [ 408.392509][T12128] __sys_setsockopt+0x184/0x200 [ 408.392533][T12128] __x64_sys_setsockopt+0x64/0x80 [ 408.392557][T12128] x64_sys_call+0x2327/0x3020 [ 408.392585][T12128] do_syscall_64+0x12c/0x3b0 [ 408.392680][T12128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.392706][T12128] RIP: 0033:0x7fcd5951cdd9 [ 408.392726][T12128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.392745][T12128] RSP: 002b:00007fcd57f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.392836][T12128] RAX: ffffffffffffffda RBX: 00007fcd59796090 RCX: 00007fcd5951cdd9 [ 408.392850][T12128] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 408.392865][T12128] RBP: 00007fcd595b2d69 R08: 0000000000000004 R09: 0000000000000000 [ 408.392880][T12128] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.392975][T12128] R13: 00007fcd59796128 R14: 00007fcd59796090 R15: 00007ffc4d5475d8 [ 408.393076][T12128] [ 408.393084][T12128] Mem-Info: [ 408.490590][T12131] lo speed is unknown, defaulting to 1000 [ 408.490945][T12131] lo speed is unknown, defaulting to 1000 [ 408.495315][T12128] active_anon:9425 inactive_anon:51 isolated_anon:0 [ 408.495315][T12128] active_file:19903 inactive_file:4685 isolated_file:0 [ 408.495315][T12128] unevictable:0 dirty:221 writeback:0 [ 408.495315][T12128] slab_reclaimable:3437 slab_unreclaimable:179954 [ 408.495315][T12128] mapped:33272 shmem:3366 pagetables:4255 [ 408.495315][T12128] sec_pagetables:0 bounce:0 [ 408.495315][T12128] kernel_misc_reclaimable:0 [ 408.495315][T12128] free:1704613 free_pcp:13955 free_cma:0 [ 408.661152][T12128] Node 0 active_anon:37700kB inactive_anon:204kB active_file:79612kB inactive_file:18740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133088kB dirty:884kB writeback:0kB shmem:13464kB kernel_stack:3792kB pagetables:17020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 408.692173][T12128] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.721864][T12128] lowmem_reserve[]: 0 2878 7857 7857 [ 408.727199][T12128] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 408.758405][T12128] lowmem_reserve[]: 0 0 4978 4978 [ 408.763593][T12128] Node 0 Normal free:3858528kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37700kB inactive_anon:204kB active_file:79612kB inactive_file:18740kB unevictable:0kB writepending:884kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:52288kB local_pcp:9984kB free_cma:0kB [ 408.796997][T12128] lowmem_reserve[]: 0 0 0 0 [ 408.801623][T12128] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 408.814528][T12128] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 5*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 408.830765][T12128] Node 0 Normal: 1341*4kB (UME) 1048*8kB (UME) 1663*16kB (UME) 996*32kB (UME) 844*64kB (UME) 532*128kB (UME) 354*256kB (UME) 233*512kB (UME) 150*1024kB (UME) 90*2048kB (UME) 761*4096kB (UM) = 3859236kB [ 408.850761][T12128] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 408.860161][T12128] 27993 total pagecache pages [ 408.864888][T12128] 8 pages in swap cache [ 408.869056][T12128] Free swap = 123768kB [ 408.873248][T12128] Total swap = 124996kB [ 408.877405][T12128] 2097051 pages RAM [ 408.881240][T12128] 0 pages HighMem/MovableOnly [ 408.885920][T12128] 81630 pages reserved [ 409.011736][T12140] loop2: detected capacity change from 0 to 2048 [ 409.193068][T12140] loop2: p2 p3 p7 [ 409.313637][T12165] bond1: option mode: unable to set because the bond device is up [ 409.456427][T11636] udevd[11636]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 409.459549][T11575] udevd[11575]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 409.625405][T12167] loop3: detected capacity change from 0 to 512 [ 409.740767][T12170] loop2: detected capacity change from 0 to 1024 [ 409.757081][T12170] EXT4-fs: inline encryption not supported [ 409.764479][T12170] EXT4-fs: Ignoring removed nobh option [ 409.770725][T12167] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 409.899376][T12170] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 409.923289][T12170] System zones: 0-1, 3-12 [ 409.967250][T12167] EXT4-fs (loop3): 1 truncate cleaned up [ 410.243576][T12170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.260690][T12167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.440852][T12203] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.024592][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.039667][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1109'. [ 411.086403][ T3292] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.135154][T12250] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 411.161927][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 411.161957][ T28] audit: type=1400 audit(1777338787.198:1644): avc: denied { relabelto } for pid=12208 comm="syz.0.1108" name="bus" dev="tmpfs" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 411.539835][T12254] bridge_slave_0: default FDB implementation only supports local addresses [ 411.564225][ T28] audit: type=1400 audit(1777338787.208:1645): avc: denied { associate } for pid=12208 comm="syz.0.1108" name="bus" dev="tmpfs" ino=1330 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 411.599354][ T28] audit: type=1400 audit(1777338787.278:1646): avc: denied { getopt } for pid=12243 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 411.660500][ T28] audit: type=1400 audit(1777338787.618:1647): avc: denied { prog_load } for pid=12243 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 411.701142][ T28] audit: type=1400 audit(1777338787.618:1648): avc: denied { prog_run } for pid=12243 comm="syz.1.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 412.105473][ T28] audit: type=1400 audit(1777338787.688:1649): avc: denied { read write } for pid=12253 comm="syz.2.1111" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.215739][ T28] audit: type=1400 audit(1777338787.688:1650): avc: denied { ioctl open } for pid=12253 comm="syz.2.1111" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.308778][ T28] audit: type=1400 audit(1777338787.698:1651): avc: denied { create } for pid=12255 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.360612][T12249] loop3: detected capacity change from 0 to 512 [ 412.374760][T12262] bridge_slave_0: default FDB implementation only supports local addresses [ 412.381969][ T28] audit: type=1400 audit(1777338787.708:1652): avc: denied { create } for pid=12255 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.460572][ T28] audit: type=1400 audit(1777338787.718:1653): avc: denied { create } for pid=12255 comm="syz.0.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 412.778356][T12249] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 412.851036][T12269] loop2: detected capacity change from 0 to 256 [ 412.981487][T12269] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.039242][T12271] lo speed is unknown, defaulting to 1000 [ 413.062813][T12277] netlink: 'syz.4.1116': attribute type 10 has an invalid length. [ 413.111490][T12275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.151153][T12269] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.213583][T12275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.284474][T12275] loop2: detected capacity change from 0 to 164 [ 413.310593][T12275] iso9660: Unknown parameter '' [ 413.358215][T12282] bond1: option mode: unable to set because the bond device is up [ 413.389140][T12271] lo speed is unknown, defaulting to 1000 [ 413.401738][T12249] EXT4-fs (loop3): 1 truncate cleaned up [ 413.433315][T12269] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.514386][T12269] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.597924][T12249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.656844][ T3869] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.679943][ T3877] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.701963][ T3877] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.733976][ T3877] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.880301][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 413.896971][T12252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.996159][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.119898][T12304] lo speed is unknown, defaulting to 1000 [ 414.134990][T12304] lo speed is unknown, defaulting to 1000 [ 414.566410][T12321] loop2: detected capacity change from 0 to 512 [ 414.598142][T12321] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 414.652695][T12321] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.1120: corrupted in-inode xattr: bad e_name length [ 414.669967][T12321] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 414.671394][T12321] EXT4-fs (loop2): get orphan inode failed [ 414.680665][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 414.680704][ C0] EXT4-fs (loop2): initial error at time 1777338790: ext4_iget_extra_inode:5128: inode 15 [ 414.680780][ C0] EXT4-fs (loop2): last error at time 1777338790: ext4_iget_extra_inode:5128: inode 15 [ 414.716794][T12321] EXT4-fs (loop2): mount failed [ 416.259530][ T28] kauditd_printk_skb: 356 callbacks suppressed [ 416.259550][ T28] audit: type=1400 audit(1777338792.308:2010): avc: denied { read write } for pid=3292 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.333686][ T28] audit: type=1400 audit(1777338792.358:2011): avc: denied { read write open } for pid=3292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.537544][ T28] audit: type=1400 audit(1777338792.358:2012): avc: denied { ioctl } for pid=3292 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 416.575710][T12357] loop3: detected capacity change from 0 to 2048 [ 416.611021][ T28] audit: type=1400 audit(1777338792.428:2013): avc: denied { prog_load } for pid=12375 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 416.689664][ T28] audit: type=1400 audit(1777338792.428:2014): avc: denied { bpf } for pid=12375 comm="syz.2.1125" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 416.769077][T12357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.804795][ T28] audit: type=1400 audit(1777338792.438:2015): avc: denied { create } for pid=12375 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 416.907529][T12388] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 416.951710][ T28] audit: type=1400 audit(1777338792.438:2016): avc: denied { open } for pid=12375 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 417.054906][ T28] audit: type=1400 audit(1777338792.438:2017): avc: denied { perfmon } for pid=12375 comm="syz.2.1125" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 417.142053][ T28] audit: type=1400 audit(1777338792.438:2018): avc: denied { kernel } for pid=12375 comm="syz.2.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 417.227555][ T28] audit: type=1400 audit(1777338792.438:2019): avc: denied { perfmon } for pid=12375 comm="syz.2.1125" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 417.272236][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.510049][T12389] ================================================================== [ 417.518185][T12389] BUG: KCSAN: data-race in hrtimer_interrupt / print_cpu [ 417.525236][T12389] [ 417.527586][T12389] read-write to 0xffff888237d1b8d8 of 4 bytes by interrupt on cpu 1: [ 417.535663][T12389] hrtimer_interrupt+0x5d/0x850 [ 417.540543][T12389] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 417.546468][T12389] sysvec_apic_timer_interrupt+0x6f/0x80 [ 417.552133][T12389] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 417.558135][T12389] __get_user_pages+0x4e8/0x1f10 [ 417.563098][T12389] __mm_populate+0x242/0x390 [ 417.567723][T12389] vm_mmap_pgoff+0x23b/0x2d0 [ 417.572341][T12389] ksys_mmap_pgoff+0xc1/0x310 [ 417.577040][T12389] x64_sys_call+0x14df/0x3020 [ 417.581743][T12389] do_syscall_64+0x12c/0x3b0 [ 417.586350][T12389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.592263][T12389] [ 417.594615][T12389] read to 0xffff888237d1b8d8 of 4 bytes by task 12389 on cpu 0: [ 417.602266][T12389] print_cpu+0x346/0x670 [ 417.606550][T12389] timer_list_show+0x107/0x170 [ 417.611339][T12389] seq_read_iter+0x636/0x940 [ 417.615977][T12389] proc_reg_read_iter+0x110/0x180 [ 417.621035][T12389] copy_splice_read+0x471/0x6c0 [ 417.625911][T12389] splice_direct_to_actor+0x26e/0x670 [ 417.631318][T12389] do_splice_direct+0x119/0x1a0 [ 417.636209][T12389] do_sendfile+0x382/0x650 [ 417.640642][T12389] __x64_sys_sendfile64+0x105/0x150 [ 417.645871][T12389] x64_sys_call+0x2dc4/0x3020 [ 417.650574][T12389] do_syscall_64+0x12c/0x3b0 [ 417.655180][T12389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.661098][T12389] [ 417.663433][T12389] value changed: 0x002288bd -> 0x002288be [ 417.669161][T12389] [ 417.671497][T12389] Reported by Kernel Concurrency Sanitizer on: [ 417.677664][T12389] CPU: 0 UID: 0 PID: 12389 Comm: syz.1.1127 Tainted: G W syzkaller #0 PREEMPT(full) [ 417.688622][T12389] Tainted: [W]=WARN [ 417.692437][T12389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 417.702767][T12389] ==================================================================