last executing test programs: 7m47.63747721s ago: executing program 32 (id=235): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0x8001}], 0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1}, 0xf}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x12000, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000c00)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140c5}, 0x0) 7m28.553517324s ago: executing program 33 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m2.299682671s ago: executing program 34 (id=978): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 6m26.911710058s ago: executing program 35 (id=1868): socket$inet6(0xa, 0x802, 0x0) eventfd2(0x0, 0x800) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r0, 0x8a7, 0x77ae, 0x0, 0x0, 0x0) 6m26.30282072s ago: executing program 36 (id=1882): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000180)={0x0}) 6m12.79250669s ago: executing program 37 (id=2359): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') 5m56.678130279s ago: executing program 38 (id=2739): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x0, 0xfffffff9], 0x5}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 5m50.116913721s ago: executing program 39 (id=2855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c3248040000db", 0x26}, {&(0x7f0000000080)="b02560e8ae471263", 0x8}, {&(0x7f0000000180)="dbcaa81aa9dd539fbdeb08b0", 0xc}], 0x3) 5m42.87115165s ago: executing program 40 (id=3012): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 5m42.109239813s ago: executing program 41 (id=3035): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000b00), 0x1, 0x4ca, &(0x7f0000000540)="$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") r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m3.881693749s ago: executing program 42 (id=3865): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000100)={{0x77359400}, {0x77359400}}, 0x0) 5m0.084726285s ago: executing program 43 (id=3951): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x80980, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m52.417646043s ago: executing program 44 (id=4133): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_names\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m46.106303326s ago: executing program 45 (id=4239): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0xa, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 4m15.571943518s ago: executing program 46 (id=4887): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)='\t', 0x1, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @local}, 0x14) 4m8.043472907s ago: executing program 47 (id=5045): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0) 3m46.204405479s ago: executing program 48 (id=5187): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) 3m28.881976384s ago: executing program 49 (id=5669): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nogrpid}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@nobh}, {@data_err_abort}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") getresuid(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x40000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x0) 3m9.26592109s ago: executing program 50 (id=6006): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="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", 0x68d}], 0x1, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.542314302s ago: executing program 51 (id=6128): bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x5460, 0x20000000) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 2m55.102297814s ago: executing program 4 (id=6201): socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m54.978410193s ago: executing program 4 (id=6205): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0xffffffffffffffa1, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x32600) 2m54.918634137s ago: executing program 4 (id=6207): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000000)=[r1]) setgroups(0x3, &(0x7f0000000040)=[r2, r1, r1]) setregid(0xffffffffffffffff, r1) socket$inet(0x2, 0x2, 0x1) 2m54.853977842s ago: executing program 4 (id=6208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000380)={[{@dioread_nolock}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") 2m54.73242272s ago: executing program 4 (id=6210): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 2m50.864472712s ago: executing program 4 (id=6233): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x16b981, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 2m50.796364386s ago: executing program 52 (id=6233): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x16b981, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000003c00000060ec97000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 2m32.300407794s ago: executing program 7 (id=6471): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000040), 0x101, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54b2ac04}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) 2m32.262602726s ago: executing program 7 (id=6472): socket(0x10, 0x3, 0x0) syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m32.096611098s ago: executing program 7 (id=6475): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x6, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 2m30.984239116s ago: executing program 7 (id=6494): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) 2m30.408701287s ago: executing program 7 (id=6501): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003100)=[{{&(0x7f0000000200)={0x2, 0x4e1e, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000f00)="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", 0x5c1}], 0x1}}], 0x2, 0xc044) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_MTU={0x8, 0x4, 0x100}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) write$binfmt_misc(r0, 0x0, 0x0) 2m29.965344068s ago: executing program 7 (id=6506): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c00000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x5, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 2m29.93432642s ago: executing program 53 (id=6506): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c00000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x5, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 2m24.65977073s ago: executing program 0 (id=6573): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffeee, 0x10, &(0x7f00000000c0), 0xfffffd67}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x61, 0x2e]}}, 0x0, 0x1c, 0x0, 0x1, 0x8, 0x10000}, 0x28) 2m23.693455648s ago: executing program 0 (id=6586): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0xe4ff, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) 2m23.641051672s ago: executing program 0 (id=6587): perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 2m23.604151684s ago: executing program 0 (id=6588): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) 2m22.852470617s ago: executing program 0 (id=6592): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044185) r0 = io_uring_setup(0x1096, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m21.280579617s ago: executing program 0 (id=6615): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x44001, 0x0, 0x0) 2m21.207526542s ago: executing program 54 (id=6615): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0xfffffffc}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x44001, 0x0, 0x0) 1m33.270969736s ago: executing program 8 (id=7544): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdir(&(0x7f0000000840)='./file0\x00', 0x188) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1m33.131491145s ago: executing program 8 (id=7548): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x100003, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff3}, {0x2, 0xfff1}, {0xf, 0xfff1}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) 1m33.089535048s ago: executing program 8 (id=7550): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r0, 0x2000) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1m33.015400943s ago: executing program 8 (id=7552): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 1m32.619134791s ago: executing program 8 (id=7553): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) truncate(&(0x7f0000000100)='./file1\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) fallocate(r0, 0x8, 0x4000, 0x10000) 1m31.757709942s ago: executing program 8 (id=7564): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003"], 0x78}}, 0x0) 1m31.735075624s ago: executing program 55 (id=7564): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003"], 0x78}}, 0x0) 12.001342417s ago: executing program 2 (id=8712): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() perf_event_open(0x0, r2, 0x4, 0xffffffffffffffff, 0x8) perf_event_open(0x0, r2, 0xa, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.888332236s ago: executing program 2 (id=8717): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x218002, &(0x7f0000000080)={[{@data_err_ignore}, {@errors_remount}, {@sysvgroups}, {@nolazytime}, {@nodioread_nolock}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nobh}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4027e, 0xe7) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 10.39980255s ago: executing program 2 (id=8738): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000a26000/0x5000)=nil, 0x5000, 0x1000, 0x3, &(0x7f0000067000/0x1000)=nil) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) 10.344196584s ago: executing program 2 (id=8750): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4af07ec3ad71e14dc00000000c2ab00c60e0000000000000800000901000038fabe8279c2f1d600", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) open(&(0x7f0000000000)='.\x00', 0x181000, 0x0) 9.013783267s ago: executing program 2 (id=8747): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x100000, &(0x7f0000000000)={[], [{@flag='lazytime'}, {@seclabel}]}, 0x1, 0x4c4, &(0x7f0000000180)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 8.909808935s ago: executing program 2 (id=8751): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x8, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r1, &(0x7f0000000480)=""/82, 0x52) 8.909667585s ago: executing program 56 (id=8751): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x0, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x8, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r1, &(0x7f0000000480)=""/82, 0x52) 2.375238903s ago: executing program 1 (id=8839): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x219e40, 0x81, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 2.141860159s ago: executing program 1 (id=8840): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.12668188s ago: executing program 1 (id=8842): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x8, {}, {}, {0x0, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "d501ff9222645f49"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1.524285013s ago: executing program 1 (id=8851): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) read(r0, &(0x7f0000000840)=""/40, 0x28) 1.405729861s ago: executing program 6 (id=8854): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r3}}, 0x30) close(0x4) 1.351866005s ago: executing program 6 (id=8855): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xc}, 0x95b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000380)={0xffffffffffffffff}, 0x84000) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) 1.045651116s ago: executing program 3 (id=8860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c0001800600010000d28d1ff5fa40c57e0000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.006365039s ago: executing program 3 (id=8862): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@grpid}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@abort}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1a1841, 0x80) write$UHID_INPUT(r0, &(0x7f0000000bc0)={0x8, {"133cad2b41e25c31b17e3534903cc5205385b715b1be4a51b6c85b0eafd4865704ec743aaaa7d1d2f80e2b14e5c440d80e68d4a6785b1e42526a298995295b1a70157a9745df0345e18d4cd2c18f14a21a237ae7fcd97a0e73b61fe9ca148a05bf23effb0b15c193854261de9d1a753fdb0187e30ad3e467af7b3453b72745b4f8198d6c454662e6289dc67c15a86742e1e1a2a2c9784bf6520a4e421d2c8d5103f9f8272c5b7458742a5edc9c146cf69a14befe2afd0065f82cbb2a5ca552d0c080d97ebacfdf232a26964a55677186b627a355d4a99f870cae6336025ef63ef4e4dc6aa484ebcdecdd1b68567b4d0912623735dc3c32a899a06cf08b0743d8ef8028b338e4d5a21006205ae90701fc5766bbd285f05f6e9dd928350bf306e066e7fd60fcb3058ea0cb3d46380b33af32aa984581512835ca93d1ee95147f563ce302fcee9c80bb7a4608e2d4b9e37af227d94080517643f18695d2e9527cb5323f12a62ed5a13d14f52c30510c17f4f22b99182b6844abc8486ac109a16f7cf9c472078b95229b2ef1ee32041ef4e69f8bd08b4c8c7750e9b1b963dc160ec7a63b4795e341bdda260f40487a1dc12956b567a622058543ee675db4f26431995ad2c095e16e6274c15ebda2be0119249f3fee6ffe63ff189bca4b2cd0fbb1d347401fb58faac69aa74f67f2df3397c05ffaa7bf61740e3632ae0c5e4bdc634861c7a109a2e092ac2e02f6449444f9c73605ebca5af39bb3f5b70d3db3bb7d519631cfceb1a42ae8e5acacbdf443c9aaa6acd5996e57223cc8b69df00967164554c4945f7a460c55d327b38a91551a24bd6e5f20b50248bc5e2a2dbdc16f8ef6b79f531b22dd8227c127ba260faf73cf3be955c365782658066f03db04d7631be1676543bffd3a3db9f35d4f85497a7de5ce6beb63aad87505577b835b5f3965fb1a23156a50d258de36847af2f1b828ea2122436e5e50309146f90b5c0522814d46b072bbe4990a855045facf68a30c9be2b5cb69c6d511eff6b275c904b5113d2dac34b6614a27b6624660d5383e93b5e9e2e92edba118a4f691841e6d849bba5722d41bd5cc8361908aa873b8d3fe5c20c6cb06a3458bd9ea2d52eae615ba470f83a59a3916c5d98c0262a4254233783986a477512c369649e3ae1ceb81be8e82167a1d5a250f1ae41ef36b567129a88bfa719badefa6f63f183e92d52d0aa4e62197058ba458c37f8416c5c36be65d7272d90b814b1f00ea5dc51a158fd9b6384951776a07c72344b63ce7378695c679ace694e73305d18be2f364059fb661e7ca5a88e36552bb0d3a4f3c3fda2b8cd55aa366e093c4de74096ecd6ea7ea68fcc75018109c6425bd774a1773f915ace75edcdb008f6153f0114e9b3ee49dd10ee941608c610303dd28b794bdeb559d0eb8f8c02db234d96fc52377e4ffe4cefc7fc62aecb6c828e53e0ca1e097db5021fe44d9a019bbeabe457d0ca4522dd11cb6a83a691707ea978cec54040ab5fa367f82099952b28f25b9d35d56f8897398ef164e3eecd385fd3bc2e2b3abe0b9364278ee2c9057bd26426ad0cf9fd3f049949d522e591ea9ec84ac838b9c630f8fb07c8ba03f9a10d0bc37d2421401172c40237e356930ccaca75209e4c036858cd2b8a999a6cf7dc134bfa4fd7dda5a5bd8262da13d062c841673487f295d25c007805cd0a0c37ce9cafcbecb3592cae0f07c81e80755eb999b191d403de2d4bebf2cc93f69a2d429997c217b8fda7c122a1eda153e4955b040969815bcc96b3cf94ceb3901665b7e618417cd22e76fc12422489286916b5de9b714300ce905f040ee247b1d470f21f09b12c461e4210194ba2972ab9f0b30b814e5b0b1ee1086e8206e0f7b07fe9d0c55f0091648e2a66a36e453c00814d6858e0b9ce9ad7256821ef1f05791ca17825a2f664f6538db0a5d4dbbb0f1e748ceb622a4cefbf3b7159b4098ba3308d63f6f929945e47393344bb6a26619261332605c14768d3b9dd0b875aa6c0079af5bc43d8ba24eb89c06f012cea9c0b49cb5a0161526256655cc74d41c48334644c2a8487589cd4347580c0c0029634301008fbf29b292043cb9fbfecc08083f495eb52ead19f41b1d0f3796d0068de68a6680b3a811555428f8bf060d1a0fd537a3a59c38cc1db03696822f508bbd7395cd9ec3f1f8afbcc9658a03dc56650575ccb726bc1a75e6cd4158fec0e04305866b080e0cd90ecb80de6fbbb9d4fe8f1d7f5452ca4e82fcf9c748acd0127ee52754a112db5fb4569b9e2a6397879978d9f9fd720b80b8aaf21dad0aa7b87f760824233bc6419f873620e4fe67779ab02cc5db5b75d29f18aa604f05589fa4ca94c293749d4e3f1af3153ee40954f63ee0e690b6559ee9262ab31ff6617ef1feb5713d77e96b5b84fb14f51da32566e7f7068670b6e8176ffbf21fa22d3bf11fcaf04633e5d9995df4c4e3ad4b9b3933ff39d3d2d32bc9bf455f383068fdd4b4e79b6899efe39f81edd5b9d03da0844e1b4a0a7e31836cb12c4f266143144793ecabec24c595f2deb8b7f352cf1408a73e918c69f984c28fac46e6730b3142fea08ee9f7649eef33a6f90a976763b46d9e028d839ee75620f69eb885f9032aaecfb4176a0e94b9bff546b281ae366efd46ab6b6e35c3ce757abee7bde928f3f762910e2d7ff586a9eae0412828efc7a067a336e89caa63a11cf14956a90683ca6941ab8c0c63e22600cace5e80609e41d6eab39d8ae531e58429fa91a51268ccc36ef22ca0021040a849a50f4df24809800fa1a4c64fa4378f5862b0cd950dafb5ad292a3eb2dccf859733b75c6043c85e3a83df79c94d2c913f7a851364c24c656095e8486166678ffdd5e29c69768310abd8f33c3d9c3c87dee88779fe552004bb611fa457eac17ea02343a9765a8b5694f461ae93d93936c4c3f47c325709a7ce51b61b8c88ff49a745b27c13708b5d55bd971158b90c43dd90db9ef5493fd31fb63595f43b7e19b5a5c6a008d86152745050362c45f0567875030d6baa03cbe46f5d66e47f98da05c1c3134f2d68c319b7ca48f4db53ea43df02086bf44e0c6fb242c2ab76e37f8bac022ba795a049bd9475da8f5fdced49769e71ff45c59677fd8ffc3f3ccc84af8d91193f8a42c6c1e1fead58ac035d55544dc7cc69502da44a67e666d6db577357c92867453a7591089ffcdecb862fd49d8b57012ad88af2ae202eb9e44042cf2484da0aa2a233f616ea863287911baef336608e672cf54d22c25f98c297517cfb8bade0e54c278a2c1708bbc7e5b49d43517e9a96257c9cc8d93b47f0cdfd1a720e8fb56656427aa025e1e54bce5f81d8adaf51c85726c5efac7ab1d9a7e2fcaece7c22446489dd9de7b901a567cd3f17e8dae79bc50d3f9916e6280afda849ca45171612e995574e68e129742bdec079cdf5564dcef6ad111c693728814df5db4765bdd9935199f2502918cb6c823811a506555665546127a309944e5522a0cb25d5dffc8c7101e63252cab4b78a6c6c77ba0c36edd3d5ee60f3330197e39f7d7c3d8f6dd0f4648ce7124908f3cca1ca00d0ab32ae7b201d1502df04cb50fd331debf54301c33e8f3906609f696a3c61c99642d766102622b7ed967230dac1bd4129a997e73c96f2e91103cf51f0b32dc820ba8f9bf950b46ac9e58b4c7de7549fb1c262f45fff7c42a38873820c789f85725102ccb6d862e986484ddacb3464751626d5d802ffb82be917ed6186ca8428cdd1424820ebfd413fa3c32308f182c05f3473f15a01a047a9bf6241c26b3e46786e20bab7e60e6af46a28bdd32473f5e065e2aa24b344227423446c5fded0793caefcacb207cf88456496e42227feb2addfb7a9daa4b15ecf4f84a4cd98a4d9907fe3c771e05f4d17d1628fbd4c3080c6e774fa078ba03655cf87ebdac2a186e832de7a3fa6a74f92882d877e79a4f5a8664c7b6b0f96f7a462bbf215c79ca51c31bbd979c0cd8b79432c2418f7ce7b0920849d27f124cf0f9a9ad0852f0e850e92fac58b86fed850e8df26c4487d553065f5052c02f0b148946bba211a73aca1dc9aede70e20aafc88c9b55230fc7a9015f336c2cdc3e81b0ed96888bf6ac4037e53ca2625c117c4abaf3ede81553208b21d69d24c0306fd068878c04b42015bf55aef8e22dbdc8f9a8d605b347acdfcdfc56335580bef503f38873fabd22247a9bd096f135fbed44eca26680dad4d9b8013868a50ef8889eacc6424390fd99949a4c4e874bb9887da4c2cee98debbefa368791fc04841768bfd414f361925d613b66ba718a7096e7e50d5e1b5090643c1c52f1332f7d1675ef4afc0901eaa4affcba0dc93b2a08bf2b7dd93e1ec728519bd2cdb5ff31f562dfab790856e8887400e58731652180311317d6f03ab4b157b62ee29186e102258dbabc78e494d01621370264a17f2914d60bcb855375ea1e4de5e2b7648260a9bf133f2b4fa92bc677b045de485b07f8e3eb4294601936e9b658f61180fd21b93fda0f20b4a75ec984e17ba87b7cceb8852066015ebf3c3beeabaef0a657e64021d99d8fbbaed1effab7c3b974192379d1a04bba321e9491c81c008283f49d6c1af51f1ed357a1edec8347187922e2b4c0ed455a6f96f0e0d3bfec589bb6558e91b0e982cdf562a0f5d205f2d2a3dac9f49d066c32cfa8bb9beda1feb3b1b2cb2eab0b3b12e46b5406d7836e2ba3c35fe4316d6be42cc8901a9a6458ef182ef1097857637ba7df169e12f0c3bac0af1b9bdb704c1053470fc3a15e3134ca8e78bfd0b401189947ef3f5a295d16701994fdf5a246c84f1b34dde7f80bc42bc554c3f768354fb548f5cbe581ef901c16a37bf0a2bc12f03b34105a2f682b4944b195ec3e338cc0f256861f1165ff15fbbfabac2e86f617adbe19d7b1aaa39006157437420d3c18cd05eabd1c80fb561062eb86fcad5754a0212356d49ff805da01105a3c4266825679ce6a8e6ca4003f585008dd2471f3e2c3c489b81748d8f35b4c5cf1f97a8546468fdc921a0654affe549774312fadc36ef7393786b1c7a7de526887c38e673a348c22ded7eaa0f6af7d852bd60ffcac6c9c7f8c8266b44270263674fe698dc162dc5911a0027795d3c3d861e54f3aa205ae200ef557c2396effb0dee1de7dc482667e12d8a1dbb263860dec04a18cd55432209d48da2cf608effa0ea4316cef17feebb13335dcdaf0d2ad25770c7806e4d8899b7121957ef65ef508f9a49b644c29978b8489ab8a57c97cec78f84e18b88568b0a847013b796a6825131bd62ddef52c4c5329dca4dc213fbc958316370afbcd7471136c0fcf861ab23c56832b17d169352ceb000ebdfc62fe9c6b9d6c0cd2c48c0f59c5b97f225f3991dbc0cd67b5302233841781888ba25e40a8b6b124f22ecd4861fca4d1d7e2272fd0019dbe16bae2abafd541897eae22c9e212f8f2509ca562dc880d11949ca3ff2db1da88ffd387f5b55969135d7b80e4955a6e9512c8b1bd6667f62784ad5b3fdab1dba7e7b422d1a9228c2dfc061d01b187295060186cd69a64a6d10e81490ef90cd0ec3bc59ec8fc9d8cda3a4d65f2d109fcf9a26334905b64ddd4692a00a12edb8e94f7d95d4641c0a11ac1df31295cebab37ed77d8c05f08143a288d8e0502402d4812aec5c71860a6397f0cbeed52371b0bb6fd38007eef2168d399750c4adc1c02e07dbd049d3a0f7bc038d6c52c91c74b6200d150763fb1a4aa3a968b6d5df3f22bf42a7b254585651b50e63fa9898ee74f66ead5c39a3cf5bfc", 0x1000}}, 0x1006) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) sendto$packet(r1, &(0x7f0000000100)='?', 0x48, 0x40000c4, &(0x7f0000000540)={0xc9, 0xd, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0xee01, &(0x7f0000000040)={0x8, 0x6, 0x1, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) 885.712178ms ago: executing program 3 (id=8864): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) 885.449517ms ago: executing program 5 (id=8865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 856.56167ms ago: executing program 5 (id=8866): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setuid(0xee00) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r0 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) 822.543452ms ago: executing program 3 (id=8867): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020010000900010073797a30000000000900020073797a30000000006c000000160a01040000000000000000020000040900020073797a30000000000900010073797a300000000040000380080001400000000008000240510599282c0003801400010076657468315f746f5f6272696467650014000100726f736530000000000000000000000014000000110001000000000000"], 0xc0}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x9, 0x6, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, @local, 0x7, 0x1, 0xa, 0x9}}) 741.139368ms ago: executing program 3 (id=8868): bpf$PROG_LOAD(0x5, 0x0, 0xfffffec4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) mount$bpf(0x0, 0x0, 0x0, 0x580a8, 0x0) io_setup(0x1, &(0x7f0000000180)) eventfd(0x9) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xffff, 0x0) 598.654808ms ago: executing program 1 (id=8869): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x8}, 0x108842, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0xf7fffff8, 0xf21f96a9, 0x7, 0x5, 0x2, "ff7d1b00000000000000646a5da08b12734500", 0xeeb0, 0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xd) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) 598.329708ms ago: executing program 5 (id=8870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0000"], 0x24}], 0x1}, 0x0) 529.675433ms ago: executing program 1 (id=8871): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/204, 0xcc}, 0x7f}, {{&(0x7f00000007c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003a80), 0x0, &(0x7f0000003b00)=""/24, 0x18}, 0xffff}], 0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 529.521963ms ago: executing program 3 (id=8872): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20040001, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) 468.008047ms ago: executing program 6 (id=8873): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a0, 0xffffffff, 0x2b0, 0x0, 0x210, 0xffffffff, 0xffffffff, 0x380, 0x380, 0x380, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x11, 0x0, 0x4}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x6aa}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a40)=ANY=[], 0x17) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) write$binfmt_script(r1, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x360, 0x108, 0x288, 0xffffffff, 0x288, 0x1e0, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x22e}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x7f, 0xe, [0x2f, 0x4, 0x3, 0x4, 0x31, 0x2, 0x1, 0x15, 0x21, 0x2c, 0x3e, 0xe, 0x29, 0x3a, 0x0, 0xa], 0x2, 0xd577, 0x300000000000}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @gre_key=0x7, @icmp_id=0x65}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @multicast1, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 431.177089ms ago: executing program 6 (id=8874): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd6b, 0xfa00, {0x8003, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 389.691652ms ago: executing program 5 (id=8875): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 372.867643ms ago: executing program 6 (id=8876): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x9}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) read$hidraw(r3, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 292.008409ms ago: executing program 5 (id=8877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {}, {0xffe0, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 237.171463ms ago: executing program 9 (id=8878): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}, &(0x7f0000000440)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400)={r3}, 0x8) 177.818227ms ago: executing program 9 (id=8879): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @mcast1, 0x4}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474804000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56da4dc46dc2767bbe00"}, 0x6c) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 177.465937ms ago: executing program 5 (id=8880): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000040)='./file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], &(0x7f0000000080)=""/159, 0x32, 0x9f, 0x1}, 0x28) 166.699128ms ago: executing program 9 (id=8881): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=""/110, 0x6e}, 0x200}], 0x1, 0x820b, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000001, 0x39071, 0xffffffffffffffff, 0xa807000) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 94.356173ms ago: executing program 9 (id=8882): r0 = io_uring_setup(0x2faa, &(0x7f0000000500)={0x0, 0x9d1d, 0x0, 0x1007, 0x176}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 29.721758ms ago: executing program 9 (id=8883): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r0, &(0x7f0000000680)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x2, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x36}}, {0x4e24, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x81, 0xdb, "e8d7ec6b"}}}}, 0x3e) 3.68313ms ago: executing program 6 (id=8884): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x46, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 9 (id=8885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) kernel console output (not intermixed with test programs): 2.779224][T29379] EXT4-fs (loop5): 1 truncate cleaned up [ 442.785377][T29379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.794061][T29394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.894333][T29400] EXT4-fs (loop5): shut down requested (0) [ 442.919514][T29394] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.7919: corrupted inode contents [ 442.942596][T29394] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.943608][T29394] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 442.953547][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 442.953635][ C1] EXT4-fs (loop2): initial error at time 1776128735: ext4_do_update_inode:5602: inode 15 [ 442.953665][ C1] EXT4-fs (loop2): last error at time 1776128735: ext4_do_update_inode:5602: inode 15 [ 443.077190][T29394] loop2: lost filesystem error report for type 5 error -117 [ 443.088966][T29394] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #15: comm syz.2.7919: corrupted inode contents [ 443.117745][T29394] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.135789][T29394] EXT4-fs error (device loop2): ext4_evict_inode:313: inode #15: comm syz.2.7919: mark_inode_dirty error [ 443.167974][T29394] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.169524][T29394] EXT4-fs (loop2): 1 orphan inode deleted [ 443.205156][T29394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.259044][T28061] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.481230][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.573379][T29424] loop5: detected capacity change from 0 to 8192 [ 443.703500][T22157] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 443.713043][T22157] FAT-fs (loop5): Filesystem has been set read-only [ 443.729956][T29430] loop2: detected capacity change from 0 to 512 [ 443.769340][T29430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.791338][T29430] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 444.030290][T29442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7937'. [ 444.057624][T28061] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.220911][T29450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7950'. [ 444.419799][T29452] loop2: detected capacity change from 0 to 512 [ 444.436081][T29469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7948'. [ 444.436735][T29452] EXT4-fs: Ignoring removed nobh option [ 444.472649][T29452] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 444.512810][T29452] EXT4-fs (loop2): 1 truncate cleaned up [ 444.538127][T29452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.641717][T29476] EXT4-fs (loop2): shut down requested (0) [ 444.678025][ T35] net_ratelimit: 33026 callbacks suppressed [ 444.678042][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.853725][T29482] loop5: detected capacity change from 0 to 512 [ 444.863995][T29482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.888846][T29482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.901880][T29482] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.967210][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.064539][T29488] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7954'. [ 445.208558][T29492] lo speed is unknown, defaulting to 1000 [ 445.235577][T28061] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.285408][T29497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7958'. [ 445.298622][T29497] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7958'. [ 445.363800][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 445.370459][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 445.383573][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.394035][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 445.400759][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.421307][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.443556][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 445.450113][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.466988][ T5374] Bluetooth: hci0: command 0x1003 tx timeout [ 445.473270][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 445.479620][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.508379][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 445.514941][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.548178][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.565508][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 445.572541][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 445.584173][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.600534][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 445.607426][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.623336][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.635021][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 445.641692][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 445.644300][T29538] loop5: detected capacity change from 0 to 512 [ 445.649991][ T1032] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 445.677019][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.700984][T29509] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 445.707732][T29509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.719580][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.736488][T29509] vhci_hcd vhci_hcd.0: Device attached [ 445.747558][T29536] vhci_hcd: connection closed [ 445.747893][T16920] vhci_hcd vhci_hcd.1: stop threads [ 445.758327][T29510] vhci_hcd: connection reset by peer [ 445.758464][T29541] vhci_hcd: connection closed [ 445.764221][T29522] vhci_hcd: connection closed [ 445.774478][T29512] vhci_hcd: connection closed [ 445.774904][T29527] vhci_hcd: connection closed [ 445.783914][T16920] vhci_hcd vhci_hcd.1: release socket [ 445.786708][T29517] vhci_hcd: connection closed [ 445.789235][T29531] vhci_hcd: connection closed [ 445.820680][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 445.835499][T16920] vhci_hcd vhci_hcd.1: stop threads [ 445.846220][T16920] vhci_hcd vhci_hcd.1: release socket [ 445.858539][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 445.872999][T16920] vhci_hcd vhci_hcd.1: stop threads [ 445.910651][T16920] vhci_hcd vhci_hcd.1: release socket [ 445.924993][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 445.940150][T16920] vhci_hcd vhci_hcd.1: stop threads [ 445.960587][T16920] vhci_hcd vhci_hcd.1: release socket [ 445.987626][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 446.003353][T16920] vhci_hcd vhci_hcd.1: stop threads [ 446.020795][T16920] vhci_hcd vhci_hcd.1: release socket [ 446.044380][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 446.058611][T16920] vhci_hcd vhci_hcd.1: stop threads [ 446.070803][T16920] vhci_hcd vhci_hcd.1: release socket [ 446.076421][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 446.083046][T16920] vhci_hcd vhci_hcd.1: stop threads [ 446.089619][T16920] vhci_hcd vhci_hcd.1: release socket [ 446.095818][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 446.102812][T16920] vhci_hcd vhci_hcd.1: stop threads [ 446.109150][T16920] vhci_hcd vhci_hcd.1: release socket [ 446.115086][T16920] vhci_hcd vhci_hcd.1: disconnect device [ 446.535031][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 446.535047][ T28] audit: type=1326 audit(1776128738.863:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 446.688679][T29608] loop2: detected capacity change from 0 to 1024 [ 446.699570][ T28] audit: type=1326 audit(1776128738.863:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 446.747561][ T8821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.759389][T29608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.782195][ T28] audit: type=1326 audit(1776128738.863:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 446.807065][ T28] audit: type=1326 audit(1776128738.863:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 446.834227][ T28] audit: type=1326 audit(1776128738.863:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 446.862336][ T28] audit: type=1326 audit(1776128738.903:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 446.901109][ T28] audit: type=1326 audit(1776128738.903:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 447.002630][ T28] audit: type=1326 audit(1776128738.903:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 447.057660][ T28] audit: type=1326 audit(1776128738.933:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 447.084120][ T28] audit: type=1326 audit(1776128738.933:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29595 comm="syz.2.7985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 447.147527][ T3398] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.357803][T29634] lo speed is unknown, defaulting to 1000 [ 447.652126][T28061] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.715268][T29680] tipc: Failed to remove unknown binding: 66,1,1/0:1382623931/1382623933 [ 447.756252][T29680] tipc: Failed to remove unknown binding: 66,1,1/0:1382623931/1382623933 [ 447.787132][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.647127][T29706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8011'. [ 448.759698][T29711] netlink: 'syz.5.8014': attribute type 8 has an invalid length. [ 448.827103][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.867584][T29718] netlink: 'syz.5.8017': attribute type 13 has an invalid length. [ 449.005914][T29722] syzkaller1: entered promiscuous mode [ 449.026509][T29722] syzkaller1: entered allmulticast mode [ 449.047797][T29732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8021'. [ 449.067907][T29725] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 449.078675][T29726] geneve1: entered promiscuous mode [ 449.084146][T29726] macsec1: entered promiscuous mode [ 449.089866][T29726] macsec1: entered allmulticast mode [ 449.095572][T29726] geneve1: entered allmulticast mode [ 449.103900][T29732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8021'. [ 449.136347][T29734] loop6: detected capacity change from 0 to 256 [ 449.174755][T29734] FAT-fs (loop6): Directory bread(block 64) failed [ 449.183294][T29734] FAT-fs (loop6): Directory bread(block 65) failed [ 449.198558][T29739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8024'. [ 449.208794][T29734] FAT-fs (loop6): Directory bread(block 66) failed [ 449.226172][T29734] FAT-fs (loop6): Directory bread(block 67) failed [ 449.243002][T29734] FAT-fs (loop6): Directory bread(block 68) failed [ 449.250341][T29734] FAT-fs (loop6): Directory bread(block 69) failed [ 449.255916][T29743] loop2: detected capacity change from 0 to 256 [ 449.257409][T29745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8028'. [ 449.274587][T29734] FAT-fs (loop6): Directory bread(block 70) failed [ 449.286004][T29734] FAT-fs (loop6): Directory bread(block 71) failed [ 449.296528][T29734] FAT-fs (loop6): Directory bread(block 72) failed [ 449.303964][T29734] FAT-fs (loop6): Directory bread(block 73) failed [ 449.323948][T29743] FAT-fs (loop2): codepage cp1250 not found [ 449.390120][T29753] bond_slave_0: Caught tx_queue_len zero misconfig [ 449.486551][T29767] bond0: entered promiscuous mode [ 449.492639][T29767] bond_slave_0: entered promiscuous mode [ 449.498881][T29767] bond_slave_1: entered promiscuous mode [ 449.507653][T29767] bridge3: entered promiscuous mode [ 449.520568][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.520568][T11629] loop6: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 449.545522][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.545522][T11629] loop6: rw=1, sector=1288, nr_sectors = 32 limit=256 [ 449.560863][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.560863][T11629] loop6: rw=1, sector=1352, nr_sectors = 32 limit=256 [ 449.576037][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.576037][T11629] loop6: rw=1, sector=1416, nr_sectors = 32 limit=256 [ 449.590870][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.590870][T11629] loop6: rw=1, sector=1480, nr_sectors = 32 limit=256 [ 449.605451][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.605451][T11629] loop6: rw=1, sector=1544, nr_sectors = 32 limit=256 [ 449.629866][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.629866][T11629] loop6: rw=1, sector=1608, nr_sectors = 32 limit=256 [ 449.643994][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.643994][T11629] loop6: rw=1, sector=1672, nr_sectors = 32 limit=256 [ 449.667840][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.667840][T11629] loop6: rw=1, sector=1736, nr_sectors = 32 limit=256 [ 449.725866][T11629] kworker/u8:13: attempt to access beyond end of device [ 449.725866][T11629] loop6: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 449.867066][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.013230][T29794] netlink: 'syz.3.8047': attribute type 11 has an invalid length. [ 450.187126][ T3417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.817041][ T1032] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 450.917303][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.946032][T29819] IPv6: Can't replace route, no match found [ 451.015805][T29821] loop6: detected capacity change from 0 to 1024 [ 451.024945][T29821] EXT4-fs: Ignoring removed bh option [ 451.050298][T29821] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.153928][T29828] loop5: detected capacity change from 0 to 1024 [ 451.169804][T29828] EXT4-fs: Ignoring removed bh option [ 451.237768][T29828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.680723][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.779628][T29841] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8064'. [ 451.987224][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.007863][T28024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.361732][ T3417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.480261][T29867] netlink: 'syz.2.8075': attribute type 4 has an invalid length. [ 452.513178][T29867] netlink: 'syz.2.8075': attribute type 4 has an invalid length. [ 452.591848][T29867] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.599086][T29867] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.671454][T29867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.684530][T29867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.758474][T11629] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.767853][T11629] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.787219][T11629] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.809034][T11629] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.820115][T29888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8083'. [ 452.908755][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 452.908785][ T28] audit: type=1400 audit(1776128745.243:4684): avc: denied { recv } for pid=29884 comm="syz.6.8080" saddr=10.128.0.163 src=30036 daddr=10.128.1.92 dest=59248 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 452.954004][ T28] audit: type=1400 audit(1776128745.243:4685): avc: denied { read write } for pid=22157 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 452.978852][ T28] audit: type=1400 audit(1776128745.243:4686): avc: denied { open } for pid=22157 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.005260][ T28] audit: type=1400 audit(1776128745.243:4687): avc: denied { ioctl } for pid=22157 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 453.035462][ T28] audit: type=1400 audit(1776128745.283:4688): avc: denied { accept } for pid=29877 comm="syz.6.8080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.077066][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.165522][ T28] audit: type=1400 audit(1776128745.493:4689): avc: denied { open } for pid=29900 comm="syz.1.8088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.186774][ T28] audit: type=1400 audit(1776128745.493:4690): avc: denied { perfmon } for pid=29900 comm="syz.1.8088" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.212744][ T28] audit: type=1400 audit(1776128745.493:4691): avc: denied { kernel } for pid=29900 comm="syz.1.8088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 453.227116][ T1032] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.234450][ T28] audit: type=1400 audit(1776128745.543:4692): avc: denied { prog_load } for pid=29900 comm="syz.1.8088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 453.260965][ T28] audit: type=1400 audit(1776128745.543:4693): avc: denied { bpf } for pid=29900 comm="syz.1.8088" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 453.402809][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8090'. [ 453.450547][T29915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8093'. [ 453.510148][T29923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8097'. [ 453.555436][T29929] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8100'. [ 453.626802][T29936] netlink: 'syz.1.8103': attribute type 5 has an invalid length. [ 453.825352][T29956] loop2: detected capacity change from 0 to 1024 [ 453.853273][T29956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.915912][T28061] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.107064][ T3353] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.278199][T16941] bridge_slave_1: left allmulticast mode [ 454.284010][T16941] bridge_slave_1: left promiscuous mode [ 454.300171][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.314435][T16941] bridge_slave_0: left allmulticast mode [ 454.320628][T16941] bridge_slave_0: left promiscuous mode [ 454.326633][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.344163][T16941] bridge_slave_1: left allmulticast mode [ 454.352384][T16941] bridge_slave_1: left promiscuous mode [ 454.359270][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.377494][T16941] bridge_slave_0: left allmulticast mode [ 454.386508][T16941] bridge_slave_0: left promiscuous mode [ 454.398044][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.581159][T29993] netlink: 'syz.6.8122': attribute type 1 has an invalid length. [ 454.641796][ T1032] kernel read not supported for file /940/pagemap (pid: 1032 comm: kworker/0:2) [ 454.652162][T16941] bond1 (unregistering): (slave geneve2): Releasing active interface [ 454.667559][T29997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8122'. [ 454.679591][T29997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8122'. [ 454.720318][T16941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.731557][T16941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.742046][T16941] bond0 (unregistering): Released all slaves [ 454.754953][T16941] bond1 (unregistering): Released all slaves [ 454.792197][T16941] dvmrp0 (unregistering): left allmulticast mode [ 454.849117][T16941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.859014][T16941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.868836][T16941] bond0 (unregistering): Released all slaves [ 454.884855][T29993] bond1: entered promiscuous mode [ 454.890521][T29993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 454.911159][T30005] bond1: (slave bridge1): making interface the new active one [ 454.918677][T30005] bridge1: entered promiscuous mode [ 454.925474][T30005] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 454.945760][T16941] tipc: Disabling bearer [ 454.951846][T16941] tipc: Left network mode [ 454.961296][T16941] tipc: Disabling bearer [ 454.968856][T16941] tipc: Left network mode [ 454.992516][T16941] IPVS: stopping master sync thread 4033 ... [ 455.039379][T16941] hsr_slave_0: left promiscuous mode [ 455.058522][T16941] hsr_slave_1: left promiscuous mode [ 455.070565][T16941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.109947][T16941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.141485][T16941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.160697][T16941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.192405][T16941] hsr_slave_0: left promiscuous mode [ 455.206732][T16941] hsr_slave_1: left promiscuous mode [ 455.224364][T16941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.247308][T16941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.264080][T16941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.280131][T16941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.309922][T16941] veth1_macvtap: left promiscuous mode [ 455.319750][T16941] veth0_macvtap: left promiscuous mode [ 455.332925][T16941] veth1_vlan: left promiscuous mode [ 455.343834][T16941] veth0_vlan: left promiscuous mode [ 455.356410][T16941] veth1_macvtap: left promiscuous mode [ 455.368050][T16941] veth0_macvtap: left promiscuous mode [ 455.377445][T16941] veth1_vlan: left promiscuous mode [ 455.383215][T16941] veth0_vlan: left promiscuous mode [ 455.646217][T16941] team0 (unregistering): Port device team_slave_1 removed [ 455.846254][T16941] team0 (unregistering): Port device team_slave_1 removed [ 455.905984][T30036] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.8135'. [ 455.955758][T30052] batadv_slave_1: entered promiscuous mode [ 456.012726][T30052] batadv_slave_1: left promiscuous mode [ 456.300988][T30061] loop5: detected capacity change from 0 to 256 [ 456.332138][T16941] IPVS: stop unused estimator thread 0... [ 456.338618][T16941] IPVS: stop unused estimator thread 0... [ 456.350560][T30061] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 456.501146][T16914] Bluetooth: hci0: Frame reassembly failed (-84) [ 458.084495][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 458.084510][ T28] audit: type=1400 audit(1776128750.413:4815): avc: denied { execute } for pid=30124 comm="syz.3.8171" path="/1216/file1" dev="tmpfs" ino=6300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 458.279824][T30118] loop6: detected capacity change from 0 to 512 [ 458.385987][T30129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8172'. [ 458.429788][T30131] loop6: detected capacity change from 0 to 512 [ 458.440559][T30131] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 458.453762][T30131] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee01c, mo2=0002] [ 458.462476][T30131] System zones: 1-12 [ 458.466689][T30131] EXT4-fs (loop6): orphan cleanup on readonly fs [ 458.474659][T30131] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.8173: invalid indirect mapped block 2 (level 2) [ 458.488114][T30131] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 458.488698][T30131] EXT4-fs (loop6): 1 truncate cleaned up [ 458.497894][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 458.497917][ C0] EXT4-fs (loop6): initial error at time 1776128750: ext4_free_branches:1023: inode 11 [ 458.497948][ C0] EXT4-fs (loop6): last error at time 1776128750: ext4_free_branches:1023: inode 11 [ 458.526979][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 458.535907][ T5374] Bluetooth: hci0: command 0x1003 tx timeout [ 458.545162][T30131] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 458.603211][ T28] audit: type=1400 audit(1776128750.933:4816): avc: denied { remount } for pid=30130 comm="syz.6.8173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 458.682241][T30131] EXT4-fs (loop6): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 458.713026][T28024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 458.765156][T30144] netlink: 'syz.5.8179': attribute type 27 has an invalid length. [ 458.911762][T30144] geneve2: left promiscuous mode [ 458.948796][T30144] geneve2: left allmulticast mode [ 458.954675][T30152] loop6: detected capacity change from 0 to 512 [ 458.990231][T30144] bond0: left promiscuous mode [ 458.995696][T30144] vcan1: left promiscuous mode [ 459.017761][T30152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.042105][T30147] erspan0: left promiscuous mode [ 459.053409][T30147] ip6gretap0: left promiscuous mode [ 459.061759][T30162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8183'. [ 459.062566][T30147] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.077093][T30152] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.088542][T30147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.105479][T16914] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.115279][T16914] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.124378][ T28] audit: type=1400 audit(1776128751.453:4817): avc: denied { read append open } for pid=30151 comm="syz.6.8177" path="/112/file0/memory.events.local" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 459.124548][T16914] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.161113][T16914] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.170601][T16914] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.180901][T16914] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.216999][T16914] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.220207][ T28] audit: type=1400 audit(1776128751.513:4818): avc: denied { map } for pid=30151 comm="syz.6.8177" path="/112/file0/memory.events.local" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 459.227659][T16914] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.251166][ T28] audit: type=1400 audit(1776128751.513:4819): avc: denied { write } for pid=30151 comm="syz.6.8177" path="/112/file0/memory.events.local" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 459.288779][T28024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.313023][T16914] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.330426][T30166] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8184'. [ 459.336371][T16914] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.361211][ T28] audit: type=1400 audit(1776128751.693:4820): avc: denied { map } for pid=30167 comm="syz.5.8185" path="socket:[88354]" dev="sockfs" ino=88354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 459.387748][T16914] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.401686][T16914] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 459.428809][T16925] bridge_slave_1: left allmulticast mode [ 459.435025][T16925] bridge_slave_1: left promiscuous mode [ 459.454124][T16925] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.473789][T16925] bridge_slave_0: left allmulticast mode [ 459.480971][T16925] bridge_slave_0: left promiscuous mode [ 459.486687][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.564946][ T28] audit: type=1400 audit(1776128751.893:4821): avc: denied { create } for pid=30180 comm="syz.1.8190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.588162][T30181] l2tp_ppp: sess 2/0: no socket in recv [ 459.619431][T30183] netlink: 'syz.1.8191': attribute type 2 has an invalid length. [ 459.621319][ T28] audit: type=1400 audit(1776128751.913:4822): avc: denied { connect } for pid=30180 comm="syz.1.8190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 459.675090][ T28] audit: type=1400 audit(1776128751.923:4823): avc: denied { name_bind } for pid=30180 comm="syz.1.8190" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 459.719280][ T28] audit: type=1400 audit(1776128751.943:4824): avc: denied { cpu } for pid=30182 comm="syz.1.8191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 459.724377][T30185] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8192'. [ 459.870276][T16925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.882402][T16925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.894494][T16925] bond0 (unregistering): Released all slaves [ 459.905600][T16925] bond1 (unregistering): Released all slaves [ 459.915233][T16925] bond2 (unregistering): (slave lo): Releasing backup interface [ 459.924544][T16925] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 459.939237][T16925] bond2 (unregistering): Released all slaves [ 460.024839][T16925] hsr_slave_0: left promiscuous mode [ 460.032867][T16925] hsr_slave_1: left promiscuous mode [ 460.035510][T30198] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8198'. [ 460.039384][T16925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.057753][T16925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.069886][T16925] veth1_macvtap: left promiscuous mode [ 460.075639][T16925] veth0_macvtap: left promiscuous mode [ 460.082286][T16925] veth1_vlan: left promiscuous mode [ 460.088301][T16925] veth0_vlan: left promiscuous mode [ 460.154156][T16925] team0 (unregistering): Port device team_slave_1 removed [ 460.198981][T30205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8200'. [ 460.204740][T30203] lo speed is unknown, defaulting to 1000 [ 460.345436][T30212] lo speed is unknown, defaulting to 1000 [ 460.423491][T16925] IPVS: stop unused estimator thread 0... [ 460.903387][ T121] Bluetooth: hci0: Frame reassembly failed (-84) [ 462.162999][T30251] lo speed is unknown, defaulting to 1000 [ 462.705198][T30255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8219'. [ 462.918467][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 463.480808][T30266] tipc: Failed to remove unknown binding: 66,1,1/2886997039:4054594979/4054594981 [ 463.500535][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 463.500552][ T28] audit: type=1400 audit(1776128755.803:4843): avc: denied { create } for pid=30265 comm="syz.1.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.571224][ T28] audit: type=1400 audit(1776128755.813:4844): avc: denied { bind } for pid=30265 comm="syz.1.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.621916][ T28] audit: type=1400 audit(1776128755.813:4845): avc: denied { setopt } for pid=30265 comm="syz.1.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.642514][ T28] audit: type=1400 audit(1776128755.963:4846): avc: denied { write } for pid=30265 comm="syz.1.8223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 463.695206][T30270] netlink: 'syz.1.8225': attribute type 10 has an invalid length. [ 463.733149][T30270] veth1_macvtap: left promiscuous mode [ 463.900153][T30228] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 463.936294][T30276] batadv_slave_1: Caught tx_queue_len zero misconfig [ 463.991356][ T28] audit: type=1400 audit(1776128756.313:4847): avc: denied { bind } for pid=30283 comm="syz.6.8232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 463.994418][T30286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8233'. [ 464.031109][T30287] loop5: detected capacity change from 0 to 2048 [ 464.048798][ T28] audit: type=1400 audit(1776128756.343:4848): avc: denied { setopt } for pid=30283 comm="syz.6.8232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 464.123134][T30284] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.196440][T30287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.221439][T30284] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.273607][T30292] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 464.294217][T30292] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 464.307939][T30292] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 464.317747][T30292] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 464.323655][T30296] netlink: 'syz.2.8236': attribute type 1 has an invalid length. [ 464.327450][T30292] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 464.343419][T30292] ip_tunnel_core: Dead loop on virtual device gre1, fix it urgently! [ 464.364358][T30284] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.401087][T30302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8238'. [ 464.415953][T30305] netlink: 'syz.2.8236': attribute type 1 has an invalid length. [ 464.425551][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.442364][T30296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.451368][T30304] tunl0: Caught tx_queue_len zero misconfig [ 464.490595][T30305] vxlan0: entered promiscuous mode [ 464.499081][T30305] bond1: (slave vxlan0): making interface the new active one [ 464.520011][T30309] loop5: detected capacity change from 0 to 8192 [ 464.524174][T30305] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 464.547606][T30309] bio_check_eod: 19 callbacks suppressed [ 464.547670][T30309] syz.5.8240: attempt to access beyond end of device [ 464.547670][T30309] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 464.576279][T30284] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.590097][T16914] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.611826][T16914] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.635800][T16914] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.648921][T30314] netlink: 'syz.1.8242': attribute type 1 has an invalid length. [ 464.649048][T16914] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.665741][T30309] Buffer I/O error on dev loop5, logical block 57847, async page read [ 464.681385][T30314] bond2: entered promiscuous mode [ 464.706687][T30314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.758308][ T28] audit: type=1326 audit(1776128757.083:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30319 comm="syz.2.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 464.782317][ T28] audit: type=1326 audit(1776128757.083:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30319 comm="syz.2.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 464.807237][ T28] audit: type=1326 audit(1776128757.123:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30319 comm="syz.2.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 464.831689][ T28] audit: type=1326 audit(1776128757.123:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30319 comm="syz.2.8245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb52f31c819 code=0x7ffc0000 [ 464.877236][T16936] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.885523][T16936] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.916284][T30314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.927125][T30314] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 464.937590][T30314] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 464.950354][T30314] bond2: (slave vti0): making interface the new active one [ 464.957880][T30314] vti0: entered promiscuous mode [ 464.965696][T30314] bond2: (slave vti0): Enslaving as an active interface with an up link [ 464.979315][T16925] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.005599][T16914] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.025981][T30329] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8247'. [ 465.094445][T30335] lo speed is unknown, defaulting to 1000 [ 465.101555][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8251'. [ 465.116692][T30342] loop2: detected capacity change from 0 to 256 [ 465.142802][T30339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8251'. [ 465.143436][T30343] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8249'. [ 465.173867][T30345] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 465.364542][T30361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.389436][T30361] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.425450][T30361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.489266][T30381] lo speed is unknown, defaulting to 1000 [ 465.808148][T30377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.824004][T30377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 55683 - 0 [ 465.953999][T30377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.128371][T30377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 55683 - 0 [ 466.218475][T30377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.319636][T30377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 55683 - 0 [ 466.381036][T30416] lo speed is unknown, defaulting to 1000 [ 466.434603][T30377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.455418][T30377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 55683 - 0 [ 466.534790][T16925] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 55683 - 0 [ 466.536515][T30416] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8269'. [ 466.546894][T16925] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.603046][T16925] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 55683 - 0 [ 466.630560][T16925] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.659981][T16925] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 55683 - 0 [ 466.681996][T16925] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.697083][T16925] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 55683 - 0 [ 466.780776][T16925] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 466.793749][T30424] hsr0: entered promiscuous mode [ 466.797656][T30425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8270'. [ 466.842308][T30425] hsr_slave_0: left promiscuous mode [ 466.851424][T30425] hsr_slave_1: left promiscuous mode [ 466.964018][T30427] loop2: detected capacity change from 0 to 128 [ 466.970883][T30427] EXT4-fs: Ignoring removed i_version option [ 467.013079][T30427] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.050489][T30427] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.131159][T28061] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.348710][T30440] lo speed is unknown, defaulting to 1000 [ 467.448405][T30445] erspan0: entered promiscuous mode [ 467.461412][T30445] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8278'. [ 467.692281][T30448] lo speed is unknown, defaulting to 1000 [ 467.834585][T30456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8282'. [ 467.849793][T30456] bond5: entered promiscuous mode [ 467.857735][T30456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 468.044625][T30459] bond5: left promiscuous mode [ 468.055370][T30459] bond5: entered allmulticast mode [ 468.325572][T30474] lo speed is unknown, defaulting to 1000 [ 468.510555][T30482] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 468.517295][T30482] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.538836][T30482] vhci_hcd vhci_hcd.0: Device attached [ 468.627117][T30482] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 468.633713][T30482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.656974][T30488] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 468.663557][T30488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.673224][T30482] vhci_hcd vhci_hcd.0: Device attached [ 468.681644][T30488] vhci_hcd vhci_hcd.0: Device attached [ 468.702151][T30492] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(11) [ 468.708810][T30492] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.719692][T30492] vhci_hcd vhci_hcd.0: Device attached [ 468.734415][T30482] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(7) [ 468.740997][T30482] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 468.749878][T30482] vhci_hcd vhci_hcd.0: Device attached [ 468.759873][T30482] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(10) [ 468.766528][T30482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.777157][ T3398] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 468.785943][T30482] vhci_hcd vhci_hcd.0: Device attached [ 468.802276][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 468.802304][ T28] audit: type=1400 audit(1776128761.133:4905): avc: denied { bind } for pid=30503 comm="syz.6.8296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 468.804415][T30482] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 468.836289][T30482] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 468.854392][T30482] vhci_hcd vhci_hcd.0: Device attached [ 468.861724][T30488] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(18) [ 468.868430][T30488] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.881631][T30488] vhci_hcd vhci_hcd.0: Device attached [ 468.895349][T30505] vhci_hcd: connection closed [ 468.897663][T30501] vhci_hcd: connection closed [ 468.902550][T30495] vhci_hcd: connection closed [ 468.907586][T30493] vhci_hcd: connection closed [ 468.912623][T30489] vhci_hcd: connection closed [ 468.917707][T30485] vhci_hcd: connection closed [ 468.962108][T30483] vhci_hcd: connection reset by peer [ 469.088296][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.094012][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.099700][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.117888][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.123287][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.135900][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.166838][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.178819][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.205976][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.228701][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.246634][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.261432][T30507] vhci_hcd: connection closed [ 469.261817][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.327845][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.334513][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.344576][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.364208][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.383558][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.402702][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.412102][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.417872][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.423460][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.429470][ T121] vhci_hcd vhci_hcd.2: stop threads [ 469.434817][ T121] vhci_hcd vhci_hcd.2: release socket [ 469.440547][ T121] vhci_hcd vhci_hcd.2: disconnect device [ 469.458937][T30517] lo speed is unknown, defaulting to 1000 [ 469.607094][ T28] audit: type=1400 audit(1776128761.933:4906): avc: denied { create } for pid=30523 comm="syz.6.8303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 469.645471][ T28] audit: type=1400 audit(1776128761.973:4907): avc: denied { connect } for pid=30523 comm="syz.6.8303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 469.726443][ T28] audit: type=1326 audit(1776128762.053:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.3.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 469.757553][ T28] audit: type=1326 audit(1776128762.053:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.3.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 469.783396][ T28] audit: type=1326 audit(1776128762.083:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.3.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 469.809706][ T28] audit: type=1326 audit(1776128762.083:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.3.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 469.837124][ T28] audit: type=1326 audit(1776128762.083:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.3.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 469.863026][ T28] audit: type=1326 audit(1776128762.083:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.3.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 469.890190][ T28] audit: type=1326 audit(1776128762.083:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30527 comm="syz.3.8305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 469.920559][T11629] bridge_slave_1: left allmulticast mode [ 469.926414][T11629] bridge_slave_1: left promiscuous mode [ 469.943092][T11629] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.958207][T11629] bridge_slave_0: left allmulticast mode [ 469.969431][T11629] bridge_slave_0: left promiscuous mode [ 469.979755][T11629] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.089848][T11629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.100455][T11629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.111607][T11629] bond0 (unregistering): (slave team0): Releasing backup interface [ 470.122845][T11629] bond0 (unregistering): Released all slaves [ 470.172466][T11629] hsr_slave_0: left promiscuous mode [ 470.178880][T11629] hsr_slave_1: left promiscuous mode [ 470.184866][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.193711][T11629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.202583][T11629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.211295][T11629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.223197][T11629] veth1_macvtap: left promiscuous mode [ 470.232038][T11629] veth0_macvtap: left promiscuous mode [ 470.239111][T11629] veth1_vlan: left promiscuous mode [ 470.245727][T11629] veth0_vlan: left promiscuous mode [ 470.367896][T11629] team0 (unregistering): Port device team_slave_1 removed [ 470.387225][T11629] team0 (unregistering): Port device team_slave_0 removed [ 470.810949][T30541] lo speed is unknown, defaulting to 1000 [ 470.894714][T30541] chnl_net:caif_netlink_parms(): no params data found [ 470.949737][T30541] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.957395][T30541] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.964560][T30541] bridge_slave_0: entered allmulticast mode [ 470.971206][T30541] bridge_slave_0: entered promiscuous mode [ 470.978945][T30541] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.986553][T30541] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.993998][T30568] loop5: detected capacity change from 0 to 4096 [ 470.994410][T30541] bridge_slave_1: entered allmulticast mode [ 471.007421][T30541] bridge_slave_1: entered promiscuous mode [ 471.024920][T30568] EXT4-fs (loop5): inodes count not valid: 32 vs 27 [ 471.025765][T30541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.042913][T30541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.063027][T30541] team0: Port device team_slave_0 added [ 471.069995][T30541] team0: Port device team_slave_1 added [ 471.086494][T30541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.093780][T30541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.120369][T30541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.131973][T30541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.139398][T30541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.166596][T30541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.192738][T30541] hsr_slave_0: entered promiscuous mode [ 471.199138][T30541] hsr_slave_1: entered promiscuous mode [ 471.205052][T30541] debugfs: 'hsr0' already exists in 'hsr' [ 471.210828][T30541] Cannot create hsr debugfs directory [ 471.234011][T30577] netlink: 'syz.3.8321': attribute type 1 has an invalid length. [ 471.256728][T30577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 471.293428][T30577] bond6: (slave veth13): Enslaving as an active interface with a down link [ 471.322940][T30577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8321'. [ 471.333476][T30541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.348647][T30577] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 471.357904][T30577] bond6: (slave batadv2): making interface the new active one [ 471.367779][T30577] batadv2: entered promiscuous mode [ 471.373228][T30577] bond6: (slave batadv2): Enslaving as an active interface with an up link [ 471.386157][T30541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.439099][T30585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8324'. [ 471.458527][T30541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.518319][T30541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.546990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 471.594155][T30541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 471.603781][T30541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 471.613575][T30541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 471.624155][T30541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.659072][T30541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.670174][T30541] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.690157][T30541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.701206][T30541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.735850][T11629] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.743066][T11629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.772456][T11629] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.779700][T11629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.821351][T30609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8330'. [ 471.867842][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 471.902108][T30541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.069563][T30541] veth0_vlan: entered promiscuous mode [ 472.081419][T30541] veth1_vlan: entered promiscuous mode [ 472.089678][T30625] loop6: detected capacity change from 0 to 1024 [ 472.137440][T30541] veth0_macvtap: entered promiscuous mode [ 472.157795][T30541] veth1_macvtap: entered promiscuous mode [ 472.212424][T30541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.239029][T30541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.283849][T11629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.310419][T11629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.321726][T30625] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 472.333149][T30625] System zones: 0-1, 3-36 [ 472.341110][T11629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.358171][T30625] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.8334: bad orphan inode 134217728 [ 472.377218][T30625] loop6: lost filesystem error report for type 5 error -117 [ 472.377910][T30625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.387344][T11629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.514384][T28024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.568409][T30635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8336'. [ 472.615429][T30635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8336'. [ 472.630331][T30639] netlink: 'syz.2.8338': attribute type 1 has an invalid length. [ 472.643728][T30635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8336'. [ 472.682771][T30639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8338'. [ 472.704487][T30639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8338'. [ 472.916470][T30643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8339'. [ 473.024839][T30659] -1: renamed from syzkaller0 [ 473.068298][T30663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8346'. [ 473.175480][ T8821] kernel read not supported for file /12/pagemap (pid: 8821 comm: kworker/1:5) [ 473.198005][T30666] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 473.321364][T30676] loop2: detected capacity change from 0 to 4096 [ 473.347666][T30676] EXT4-fs (loop2): inodes count not valid: 32 vs 27 [ 473.829307][T30691] -1: renamed from syzkaller0 [ 473.871225][ T3398] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 474.421553][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 474.421632][ T28] audit: type=1400 audit(1776128766.753:4963): avc: denied { accept } for pid=30720 comm="syz.5.8371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 474.605843][T30730] lo speed is unknown, defaulting to 1000 [ 474.637933][T30734] netlink: 'syz.5.8377': attribute type 1 has an invalid length. [ 474.672547][T30734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.019855][T30734] bond1: (slave veth11): Enslaving as an active interface with a down link [ 475.272591][ T28] audit: type=1400 audit(1776128767.603:4964): avc: denied { read write } for pid=30745 comm="syz.1.8380" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 475.400751][ T28] audit: type=1400 audit(1776128767.633:4965): avc: denied { open } for pid=30745 comm="syz.1.8380" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 475.506322][ T28] audit: type=1400 audit(1776128767.803:4966): avc: denied { connect } for pid=30755 comm="syz.5.8385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 475.605568][ T28] audit: type=1400 audit(1776128767.893:4967): avc: denied { mount } for pid=30764 comm="syz.5.8389" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 475.776629][ T28] audit: type=1400 audit(1776128767.893:4968): avc: denied { search } for pid=30764 comm="syz.5.8389" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 475.847074][ T28] audit: type=1400 audit(1776128767.893:4969): avc: denied { search } for pid=30764 comm="syz.5.8389" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 475.895592][ T28] audit: type=1400 audit(1776128767.893:4970): avc: denied { read open } for pid=30764 comm="syz.5.8389" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 475.937729][ T28] audit: type=1400 audit(1776128768.013:4971): avc: denied { read } for pid=30770 comm="syz.6.8401" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 476.112225][ T28] audit: type=1400 audit(1776128768.013:4972): avc: denied { open } for pid=30770 comm="syz.6.8401" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 476.488456][ T35] IPVS: starting estimator thread 0... [ 476.576970][T30794] IPVS: using max 2352 ests per chain, 117600 per kthread [ 476.612239][T30797] lo speed is unknown, defaulting to 1000 [ 476.666184][T30804] lo speed is unknown, defaulting to 1000 [ 477.122272][T30827] __nla_validate_parse: 7 callbacks suppressed [ 477.122287][T30827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8406'. [ 478.017364][T30877] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8409'. [ 478.541096][T30900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8418'. [ 479.370819][T30927] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8429'. [ 479.381816][T30927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8429'. [ 479.778376][T30943] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8436'. [ 479.799659][T30943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8436'. [ 479.873344][T30946] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8437'. [ 479.994531][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 479.994546][ T28] audit: type=1400 audit(1776128772.323:4981): avc: denied { watch_reads } for pid=30952 comm="syz.6.8441" path="/" dev="mqueue" ino=81291 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 480.079464][T30958] netlink: 'syz.1.8443': attribute type 1 has an invalid length. [ 480.088411][T30958] netlink: 'syz.1.8443': attribute type 4 has an invalid length. [ 480.096669][T30958] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8443'. [ 480.655732][T30970] netlink: 'syz.2.8448': attribute type 27 has an invalid length. [ 480.727085][T30970] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.734310][T30970] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.829515][ T28] audit: type=1400 audit(1776128773.163:4982): avc: denied { ioctl } for pid=30976 comm="syz.5.8446" path="socket:[91954]" dev="sockfs" ino=91954 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 480.868780][T30970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.877784][T30982] netlink: 'syz.5.8446': attribute type 4 has an invalid length. [ 480.888635][T30970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.927936][T30985] netlink: 'syz.5.8446': attribute type 4 has an invalid length. [ 480.996180][T30975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.031665][T30975] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.090798][T30975] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.264456][T16914] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.273625][T16914] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.299746][ T28] audit: type=1400 audit(1776128773.623:4983): avc: denied { write } for pid=30994 comm="syz.2.8465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 481.326761][T16914] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.356191][T16914] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.382039][ T28] audit: type=1400 audit(1776128773.653:4984): avc: denied { ioctl } for pid=30992 comm="syz.6.8455" path="socket:[90619]" dev="sockfs" ino=90619 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 481.524445][ T28] audit: type=1400 audit(1776128773.653:4985): avc: denied { bind } for pid=30992 comm="syz.6.8455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 481.658834][ T28] audit: type=1400 audit(1776128773.673:4986): avc: denied { setopt } for pid=30994 comm="syz.2.8465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 481.683830][ T28] audit: type=1400 audit(1776128773.683:4987): avc: denied { map } for pid=30992 comm="syz.6.8455" path="socket:[90617]" dev="sockfs" ino=90617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 481.709666][ T28] audit: type=1400 audit(1776128773.683:4988): avc: denied { read } for pid=30992 comm="syz.6.8455" path="socket:[90617]" dev="sockfs" ino=90617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 481.737941][ T28] audit: type=1400 audit(1776128773.713:4989): avc: denied { create } for pid=31001 comm="syz.6.8457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 481.782945][T31018] netlink: 'syz.3.8466': attribute type 27 has an invalid length. [ 481.795679][T31018] batadv_slave_0: left promiscuous mode [ 481.804569][T31018] bridge1: left promiscuous mode [ 481.809921][T31018] bridge1: left allmulticast mode [ 481.817996][T31018] macvlan2: left promiscuous mode [ 481.825363][T31018] team1: left promiscuous mode [ 481.831811][T31018] team1: left allmulticast mode [ 481.837944][T31018] gtp1: left promiscuous mode [ 481.845127][T31018] gretap1: left promiscuous mode [ 481.851610][T31018] bond2: left promiscuous mode [ 481.856643][T31018] vcan1: left promiscuous mode [ 481.863903][T31018] ip6gre1: left promiscuous mode [ 481.869115][T31018] ip6gre1: left allmulticast mode [ 481.875434][T31018] bond3: left promiscuous mode [ 481.881594][T31018] bridge2: left promiscuous mode [ 481.888316][T31018] bridge2: left allmulticast mode [ 481.896733][T31018] bond5: left allmulticast mode [ 481.904257][T16936] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.913147][T16936] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.921877][T16936] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.930407][T16936] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.947429][T31022] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.959241][T31022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.995475][T31023] team0 (unregistering): Port device team_slave_0 removed [ 482.016673][T31023] team0 (unregistering): Port device team_slave_1 removed [ 482.026558][T16936] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.037350][T16936] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.046008][T16936] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.055206][T16936] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.372583][ T28] audit: type=1400 audit(1776128774.703:4990): avc: denied { getopt } for pid=31045 comm="syz.5.8474" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 482.418129][T31050] loop5: detected capacity change from 0 to 512 [ 482.479313][T31050] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.8476: corrupted xattr block 95: invalid header [ 482.512023][T31050] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 482.512894][T31050] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.8476: bg 0: block 7: invalid block bitmap [ 482.524050][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 482.524071][ C1] EXT4-fs (loop5): initial error at time 1776128774: ext4_expand_extra_isize_ea:2808: inode 11 [ 482.524098][ C1] EXT4-fs (loop5): last error at time 1776128774: ext4_expand_extra_isize_ea:2808: inode 11 [ 482.565301][T31050] loop5: lost filesystem error report for type 5 error -117 [ 482.566843][T31050] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 482.584113][T31050] loop5: lost filesystem error report for type 5 error -117 [ 482.584260][T31050] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2970: inode #11: comm syz.5.8476: corrupted xattr block 95: invalid header [ 482.606742][T31050] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 482.621887][T31050] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117) [ 482.645389][T31050] EXT4-fs (loop5): 1 orphan inode deleted [ 482.652662][T31050] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.684434][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.691457][T31062] lo speed is unknown, defaulting to 1000 [ 482.743622][T31061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8481'. [ 482.878096][T31073] lo speed is unknown, defaulting to 1000 [ 483.040135][T31081] netlink: 'syz.2.8486': attribute type 27 has an invalid length. [ 483.168209][T31082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.187885][T31082] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.225055][T31082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 483.547304][T31101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8494'. [ 483.588035][T31101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8494'. [ 483.628470][T31105] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.8495'. [ 483.648349][T31105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8495'. [ 483.667085][T31107] netlink: 'syz.1.8496': attribute type 27 has an invalid length. [ 483.949350][T31107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.007983][T31107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.240052][T31107] bond1: left promiscuous mode [ 484.258990][T31107] gre1: left promiscuous mode [ 484.298018][T31107] bridge1: left promiscuous mode [ 484.315613][T31107] bridge1: left allmulticast mode [ 484.331913][T31116] loop6: detected capacity change from 0 to 512 [ 484.361282][T31107] geneve2: left promiscuous mode [ 484.361611][T31116] EXT4-fs: Ignoring removed bh option [ 484.375114][T31107] geneve1: left allmulticast mode [ 484.413044][T31107] macsec1: left promiscuous mode [ 484.420425][T31116] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 484.438700][T31107] macsec1: left allmulticast mode [ 484.601138][T31116] EXT4-fs (loop6): 1 truncate cleaned up [ 484.613304][T31107] bond2: left promiscuous mode [ 484.620665][T31107] vti0: left promiscuous mode [ 484.635432][T31116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.658619][T31129] loop5: detected capacity change from 0 to 512 [ 484.680429][T31110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.690744][T31110] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.712725][T31114] team0: Caught tx_queue_len zero misconfig [ 484.746802][ T121] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 55683 - 0 [ 484.766928][ T121] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.777260][ T121] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 55683 - 0 [ 484.796238][ T121] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.818367][T31129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.818461][T28024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.840287][ T121] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 55683 - 0 [ 484.840495][ T121] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.840530][ T121] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 55683 - 0 [ 484.840559][ T121] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 484.918814][T31138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.926150][T31138] IPv6: NLM_F_CREATE should be set when creating new route [ 485.007703][T31129] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.022831][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 485.022846][ T28] audit: type=1400 audit(1776128777.353:5000): avc: denied { read } for pid=31144 comm="syz.1.8508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 485.076112][T31149] netlink: 'syz.3.8510': attribute type 1 has an invalid length. [ 485.129558][T31149] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 485.163277][ T28] audit: type=1400 audit(1776128777.423:5001): avc: denied { setattr } for pid=31128 comm="syz.5.8501" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 485.223032][T31149] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 485.261703][T31149] bond7: (slave vxcan3): making interface the new active one [ 485.290912][T31149] bond7: (slave vxcan3): Enslaving as an active interface with an up link [ 485.317538][T31129] IPVS: Unknown mcast interface: veth0_to_bridge [ 485.334483][T31154] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 485.338021][ T28] audit: type=1400 audit(1776128777.673:5002): avc: denied { mounton } for pid=31158 comm="syz.1.8512" path="/proc/1150/cgroup" dev="proc" ino=92241 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 485.369385][T31154] bond7: (slave vxcan5): Enslaving as a backup interface with an up link [ 485.498796][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.524380][T31167] syzkaller0: entered promiscuous mode [ 485.537434][T31167] syzkaller0: entered allmulticast mode [ 485.592940][T31173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8515'. [ 485.602480][T31173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8515'. [ 485.650492][T31177] lo speed is unknown, defaulting to 1000 [ 485.883409][T31195] loop5: detected capacity change from 0 to 2048 [ 485.969260][T31202] loop5: detected capacity change from 0 to 512 [ 485.996808][T31202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.017071][T31202] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 486.051373][T31209] lo: Caught tx_queue_len zero misconfig [ 486.065721][ T28] audit: type=1400 audit(1776128778.393:5003): avc: denied { load_policy } for pid=31194 comm="syz.5.8527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 486.065956][T31195] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 486.107724][T31207] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8531'. [ 486.150713][T31195] SELinux: failed to load policy [ 486.215674][ T28] audit: type=1400 audit(1776128778.543:5004): avc: denied { map } for pid=31220 comm="syz.6.8538" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 486.321266][ T28] audit: type=1400 audit(1776128778.543:5005): avc: denied { read write } for pid=31220 comm="syz.6.8538" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=92373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 486.330638][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.347328][ T28] audit: type=1326 audit(1776128778.583:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31222 comm="syz.3.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 486.347415][ T28] audit: type=1326 audit(1776128778.583:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31222 comm="syz.3.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 486.347439][ T28] audit: type=1326 audit(1776128778.623:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31222 comm="syz.3.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 486.347481][ T28] audit: type=1326 audit(1776128778.623:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31222 comm="syz.3.8539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae878c819 code=0x7ffc0000 [ 486.565817][T31239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8546'. [ 486.724517][T31255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8550'. [ 486.741941][T31254] lo speed is unknown, defaulting to 1000 [ 486.855982][T31260] netlink: 'syz.5.8553': attribute type 27 has an invalid length. [ 486.904329][T31260] erspan0: left promiscuous mode [ 486.972042][T31265] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.996001][T31265] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.319819][T31276] IPv6: sit1: Disabled Multicast RS [ 487.641739][T31286] loop2: detected capacity change from 0 to 1024 [ 487.705365][T31286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.005603][T30541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.494311][T31314] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8574'. [ 488.548464][T31314] bond2: entered promiscuous mode [ 488.555604][T31314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.686291][T31316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 488.696073][T31316] bond2: (slave sit2): The slave device specified does not support setting the MAC address [ 488.737935][T31316] bond2: (slave sit2): Error -95 calling set_mac_address [ 488.791539][T31324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8577'. [ 488.801035][T31324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8577'. [ 489.185395][T31308] syz.3.8570 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 489.203638][T31363] syzkaller0: entered promiscuous mode [ 489.209949][T31363] syzkaller0: entered allmulticast mode [ 489.215726][T31308] CPU: 0 UID: 0 PID: 31308 Comm: syz.3.8570 Tainted: G W syzkaller #0 PREEMPT(full) [ 489.215764][T31308] Tainted: [W]=WARN [ 489.215771][T31308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 489.215793][T31308] Call Trace: [ 489.215845][T31308] [ 489.215853][T31308] __dump_stack+0x1d/0x30 [ 489.215880][T31308] dump_stack_lvl+0x95/0xd0 [ 489.215903][T31308] dump_stack+0x15/0x1b [ 489.215977][T31308] dump_header+0x80/0x240 [ 489.216028][T31308] oom_kill_process+0x295/0x350 [ 489.216052][T31308] out_of_memory+0x97d/0xb80 [ 489.216075][T31308] try_charge_memcg+0x62e/0xa10 [ 489.216113][T31308] obj_cgroup_charge_pages+0x23/0xc0 [ 489.216242][T31308] __memcg_kmem_charge_page+0x9e/0x170 [ 489.216282][T31308] __alloc_frozen_pages_noprof+0x18a/0x360 [ 489.216316][T31308] alloc_pages_mpol+0xb3/0x260 [ 489.216399][T31308] alloc_pages_noprof+0x8f/0x140 [ 489.216474][T31308] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 489.216515][T31308] __kvmalloc_node_noprof+0x3d4/0x650 [ 489.216562][T31308] ? futex_hash_allocate+0x190/0x9d0 [ 489.216593][T31308] ? futex_hash_allocate+0x190/0x9d0 [ 489.216661][T31308] futex_hash_allocate+0x190/0x9d0 [ 489.216700][T31308] ? cap_task_prctl+0x13f/0x6e0 [ 489.216733][T31308] futex_hash_prctl+0xd8/0xf0 [ 489.216763][T31308] __se_sys_prctl+0xa3d/0x13f0 [ 489.216790][T31308] __x64_sys_prctl+0x67/0x80 [ 489.216831][T31308] x64_sys_call+0x2533/0x3020 [ 489.216880][T31308] do_syscall_64+0x12c/0x370 [ 489.216912][T31308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.217013][T31308] RIP: 0033:0x7f3ae878c819 [ 489.217097][T31308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.217117][T31308] RSP: 002b:00007f3ae71be028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 489.217179][T31308] RAX: ffffffffffffffda RBX: 00007f3ae8a06090 RCX: 00007f3ae878c819 [ 489.217196][T31308] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 489.217212][T31308] RBP: 00007f3ae8822c91 R08: 0000000000000000 R09: 0000000000000000 [ 489.217228][T31308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.217241][T31308] R13: 00007f3ae8a06128 R14: 00007f3ae8a06090 R15: 00007ffc1302e9b8 [ 489.217262][T31308] [ 489.448397][T31308] memory: usage 307200kB, limit 307200kB, failcnt 455 [ 489.455918][T31308] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 489.472751][T31308] kmem: usage 270056kB, limit 9007199254740988kB, failcnt 0 [ 489.480509][T31308] Memory cgroup stats for /syz3: [ 489.480902][T31308] cache 8646656 [ 489.490006][T31308] rss 29343744 [ 489.493670][T31308] shmem 0 [ 489.496673][T31308] mapped_file 8646656 [ 489.502421][T31308] dirty 0 [ 489.505420][T31308] writeback 0 [ 489.508886][T31308] workingset_refault_anon 6982 [ 489.513724][T31308] workingset_refault_file 4352 [ 489.519100][T31308] swap 405504 [ 489.522782][T31308] swapcached 42549248 [ 489.531376][T31308] pgpgin 576996 [ 489.535104][T31308] pgpgout 567718 [ 489.538903][T31308] pgfault 442622 [ 489.542839][T31308] pgmajfault 943 [ 489.546444][T31308] inactive_anon 0 [ 489.551571][T31308] active_anon 4096 [ 489.555623][T31308] inactive_file 0 [ 489.560926][T31308] active_file 12288 [ 489.565262][T31308] unevictable 37986304 [ 489.570644][T31308] hierarchical_memory_limit 314572800 [ 489.577252][T31308] hierarchical_memsw_limit 9223372036854771712 [ 489.584195][T31308] total_cache 8646656 [ 489.590557][T31308] total_rss 29343744 [ 489.595925][T31308] total_shmem 0 [ 489.600270][T31308] total_mapped_file 8646656 [ 489.605444][T31308] total_dirty 0 [ 489.610890][T31308] total_writeback 0 [ 489.615411][T31308] total_workingset_refault_anon 6982 [ 489.621657][T31308] total_workingset_refault_file 4352 [ 489.645387][T31308] total_swap 405504 [ 489.653608][T31308] total_swapcached 42549248 [ 489.673196][T31308] total_pgpgin 576996 [ 489.678529][T31308] total_pgpgout 567718 [ 489.683553][T31308] total_pgfault 442622 [ 489.688096][T31308] total_pgmajfault 943 [ 489.692369][T31308] total_inactive_anon 0 [ 489.696735][T31308] total_active_anon 4096 [ 489.701757][T31308] total_inactive_file 0 [ 489.706303][T31308] total_active_file 12288 [ 489.717520][T31308] total_unevictable 37986304 [ 489.725750][T31308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.8570,pid=31302,uid=0 [ 489.728680][T31378] IPv6: sit3: Disabled Multicast RS [ 489.742603][T31308] Memory cgroup out of memory: Killed process 31308 (syz.3.8570) total-vm:96212kB, anon-rss:29856kB, file-rss:66284kB, shmem-rss:0kB, UID:0 pgtables:256kB oom_score_adj:0 [ 489.795243][T31386] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 489.883196][T31388] loop2: detected capacity change from 0 to 4096 [ 490.034431][T31388] EXT4-fs: Ignoring removed bh option [ 490.057662][T31388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.152217][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 490.152234][ T28] audit: type=1400 audit(1776128782.463:5057): avc: denied { ioctl } for pid=31387 comm="syz.2.8592" path="/41/file3/blkio.bfq.group_wait_time" dev="loop2" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 490.190276][T30541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.351213][T31400] netlink: 'syz.2.8595': attribute type 1 has an invalid length. [ 490.608144][T31400] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 490.635930][T31400] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 490.662066][T31400] bond1: (slave vxcan3): making interface the new active one [ 490.703747][T31400] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 490.743597][T31406] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 490.761134][T31406] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 490.846061][T31412] serio: Serial port ttyS3 [ 490.863698][T31413] loop2: detected capacity change from 0 to 512 [ 490.924722][T31413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.970612][T31413] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.989635][T31418] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 491.028955][T30541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.061476][T31424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8604'. [ 491.074045][ T28] audit: type=1400 audit(1776128783.403:5058): avc: denied { wake_alarm } for pid=31425 comm="syz.2.8603" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 491.084808][T31424] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8604'. [ 491.544468][T31455] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8617'. [ 491.561383][T31455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.582089][T31455] macsec1: entered promiscuous mode [ 491.588719][T31455] bond2: entered promiscuous mode [ 491.596955][T31455] bond2: left promiscuous mode [ 491.623359][T31452] IPv6: sit5: Disabled Multicast RS [ 491.635954][ T28] audit: type=1326 audit(1776128783.963:5059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31459 comm="syz.1.8618" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a213fc819 code=0x0 [ 491.838628][ T28] audit: type=1400 audit(1776128784.173:5060): avc: denied { accept } for pid=31472 comm="syz.6.8623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 491.932071][ T28] audit: type=1400 audit(1776128784.263:5061): avc: denied { name_bind } for pid=31479 comm="syz.2.8626" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 492.026820][T31490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8630'. [ 492.040548][T31487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8629'. [ 492.053135][T31490] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8630'. [ 492.375941][T31500] IPv6: sit1: Disabled Multicast RS [ 492.463836][T31512] geneve3: entered promiscuous mode [ 492.470602][T16925] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 492.481399][T16925] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 492.491650][T16925] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 492.510124][T16925] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 492.526532][T31514] lo speed is unknown, defaulting to 1000 [ 492.647155][T31526] netlink: 'syz.1.8643': attribute type 1 has an invalid length. [ 492.673045][T31529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8644'. [ 492.696107][T31526] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 492.707256][T31526] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 492.730564][T31526] bond3: (slave vxcan3): making interface the new active one [ 492.744760][T31526] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 492.771487][T31530] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 492.785294][T31530] bond3: (slave vxcan5): Enslaving as a backup interface with an up link [ 495.860770][ T28] audit: type=1400 audit(1776128788.193:5062): avc: denied { read write } for pid=31545 comm="syz.5.8651" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 495.896248][ T28] audit: type=1400 audit(1776128788.193:5063): avc: denied { open } for pid=31545 comm="syz.5.8651" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 495.921331][T16602] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 495.942192][T16602] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 495.963167][T31555] __nla_validate_parse: 2 callbacks suppressed [ 495.963185][T31555] netlink: 83 bytes leftover after parsing attributes in process `syz.3.8661'. [ 495.985453][T31557] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.8660'. [ 496.017570][T31557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8660'. [ 496.079904][T31551] IPv6: sit2: Disabled Multicast RS [ 496.098537][ T28] audit: type=1400 audit(1776128788.433:5064): avc: denied { write } for pid=31545 comm="syz.5.8651" name="hidraw0" dev="devtmpfs" ino=2678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 496.176793][T31560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8654'. [ 496.194004][T31560] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.211354][T31560] macsec1: entered promiscuous mode [ 496.216740][T31560] bond2: entered promiscuous mode [ 496.224517][T31560] bond2: left promiscuous mode [ 496.290847][T31569] loop5: detected capacity change from 0 to 128 [ 496.328081][T31569] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 496.345632][T31569] ext4 filesystem being mounted at /520/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.388192][ T28] audit: type=1400 audit(1776128788.713:5065): avc: denied { getopt } for pid=31572 comm="syz.3.8662" lport=40732 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 496.434988][T22157] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.471232][T31581] netlink: 'syz.5.8658': attribute type 1 has an invalid length. [ 496.500319][T31581] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 496.510949][T31581] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 496.522692][T31581] bond3: (slave vxcan1): making interface the new active one [ 496.531300][T31581] bond3: (slave vxcan1): Enslaving as an active interface with an up link [ 496.550223][T31581] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 496.562222][T31581] bond3: (slave vxcan3): Enslaving as a backup interface with an up link [ 496.598517][T31587] tipc: Started in network mode [ 496.603744][T31587] tipc: Node identity a64671ee0dac, cluster identity 4711 [ 496.611431][T31587] tipc: Enabled bearer , priority 0 [ 496.635798][T31587] syzkaller0: entered promiscuous mode [ 496.641810][T31587] syzkaller0: entered allmulticast mode [ 496.648117][T31587] tipc: Resetting bearer [ 496.780278][T31586] tipc: Resetting bearer [ 496.829604][T31586] tipc: Disabling bearer [ 496.923046][T31591] tipc: Enabling of bearer rejected, failed to enable media [ 497.738720][T31610] loop5: detected capacity change from 0 to 1024 [ 497.780003][T31610] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.885286][T31619] loop6: detected capacity change from 0 to 8192 [ 497.934322][ T3301] loop6: p1 < > p2 p3 < p5 p6 > p4 [ 497.950640][ T3301] loop6: partition table partially beyond EOD, truncated [ 497.987603][ T3301] loop6: p1 start 100663296 is beyond EOD, truncated [ 497.996931][ T3301] loop6: p2 size 134217732 extends beyond EOD, truncated [ 498.016801][ T3301] loop6: p4 size 14876672 extends beyond EOD, truncated [ 498.026369][ T3301] loop6: p5 size 134217732 extends beyond EOD, truncated [ 498.035036][ T3301] loop6: p6 size 14876672 extends beyond EOD, truncated [ 498.046115][T31619] loop6: p1 < > p2 p3 < p5 p6 > p4 [ 498.052415][T31619] loop6: partition table partially beyond EOD, truncated [ 498.072039][T31619] loop6: p1 start 100663296 is beyond EOD, truncated [ 498.088577][T31628] serio: Serial port ttyS3 [ 498.108006][T31619] loop6: p2 size 134217732 extends beyond EOD, truncated [ 498.125705][T31619] loop6: p4 size 14876672 extends beyond EOD, truncated [ 498.141190][T31619] loop6: p5 size 134217732 extends beyond EOD, truncated [ 498.150098][T31619] loop6: p6 size 14876672 extends beyond EOD, truncated [ 498.173216][T31631] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20265 [ 498.217634][T31635] netlink: 'syz.1.8682': attribute type 10 has an invalid length. [ 498.240425][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 498.251956][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 498.263604][ T4098] udevd[4098]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 498.273719][ T28] audit: type=1400 audit(1776128790.573:5066): avc: denied { create } for pid=31636 comm="syz.6.8683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 498.296094][ T3947] udevd[3947]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 498.307925][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 498.311895][T31635] netlink: 'syz.1.8682': attribute type 10 has an invalid length. [ 498.326693][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 498.338385][ T3525] udevd[3525]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 498.350132][ T4098] udevd[4098]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 498.361920][ T3947] udevd[3947]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 498.373989][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 498.383983][ T28] audit: type=1400 audit(1776128790.623:5067): avc: denied { ioctl } for pid=31636 comm="syz.6.8683" path="socket:[93751]" dev="sockfs" ino=93751 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 498.602469][T22157] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.734492][T31655] netlink: 'syz.3.8687': attribute type 1 has an invalid length. [ 498.774166][T31655] 8021q: adding VLAN 0 to HW filter on device bond8 [ 498.800512][T31657] bond8: (slave veth19): Enslaving as an active interface with a down link [ 498.836249][T31655] bond8: (slave dummy0): making interface the new active one [ 498.858817][T31655] dummy0: entered promiscuous mode [ 498.874628][T31655] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 498.899332][T31657] bond8 (unregistering): (slave veth19): Releasing active interface [ 498.912629][T31657] bond8 (unregistering): (slave dummy0): Releasing active interface [ 498.922245][T31657] bond8 (unregistering): Released all slaves [ 499.401235][T31690] bridge3: entered promiscuous mode [ 499.429777][T31690] bridge3: entered allmulticast mode [ 499.439935][T31690] team0: Port device bridge3 added [ 499.453175][ T28] audit: type=1400 audit(1776128791.783:5068): avc: denied { associate } for pid=31691 comm="syz.6.8702" name="cgroup.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 499.482308][T31690] bridge0: port 1(team0) entered blocking state [ 499.492994][T31690] bridge0: port 1(team0) entered disabled state [ 499.499898][T31690] team0: entered allmulticast mode [ 499.505482][T31690] team_slave_0: entered allmulticast mode [ 499.514887][T31694] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 499.522476][ T28] audit: type=1400 audit(1776128791.843:5069): avc: denied { map } for pid=31696 comm="syz.6.8704" path="socket:[93822]" dev="sockfs" ino=93822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 499.557052][T31694] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 499.569648][T31690] team_slave_1: entered allmulticast mode [ 499.576286][ T28] audit: type=1400 audit(1776128791.843:5070): avc: denied { map } for pid=31693 comm="syz.2.8703" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 499.576340][T31690] bridge2: entered allmulticast mode [ 499.632760][T31690] team0: left allmulticast mode [ 499.637476][ T28] audit: type=1326 audit(1776128791.893:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31698 comm="syz.6.8705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15c0f1c819 code=0x0 [ 499.638140][T31690] team_slave_0: left allmulticast mode [ 499.669184][T31690] team_slave_1: left allmulticast mode [ 499.674954][T31690] bridge2: left allmulticast mode [ 500.035636][T31732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8718'. [ 500.075699][T31732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8718'. [ 500.219634][T31735] loop2: detected capacity change from 0 to 1024 [ 500.227894][T31735] EXT4-fs: Ignoring removed orlov option [ 500.267048][T31735] EXT4-fs: Ignoring removed nobh option [ 500.311936][T31735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.312575][T31741] tipc: Enabled bearer , priority 0 [ 500.367779][T31741] syzkaller0: MTU too low for tipc bearer [ 500.373560][T31741] tipc: Disabling bearer [ 500.462592][T31747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8724'. [ 500.487620][T31747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8724'. [ 500.533687][T31751] loop6: detected capacity change from 0 to 2048 [ 500.588462][T31751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.694792][T28024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.865867][T30541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.482507][T31775] netlink: 'syz.6.8736': attribute type 1 has an invalid length. [ 501.521444][T31775] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 501.547032][T31775] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 501.552247][T31785] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8740'. [ 501.564239][T31775] bond3: (slave vxcan3): making interface the new active one [ 501.575079][T31775] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 501.590171][T31787] loop2: detected capacity change from 0 to 512 [ 501.622969][T31787] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.8750: inode has both inline data and extents flags [ 501.660544][T31787] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 501.660768][T31787] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.8750: couldn't read orphan inode 15 (err -117) [ 501.670731][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 501.670751][ C1] EXT4-fs (loop2): initial error at time 1776128793: ext4_orphan_get:1397: inode 15 [ 501.670775][ C1] EXT4-fs (loop2): last error at time 1776128793: ext4_orphan_get:1397: inode 15 [ 501.724678][T31775] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 501.766481][T31787] loop2: lost filesystem error report for type 5 error -117 [ 501.799046][T31775] bond3: (slave vxcan5): Enslaving as a backup interface with an up link [ 501.838805][T31789] geneve3: left promiscuous mode [ 501.844954][T31787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.860794][T31789] bridge3: left promiscuous mode [ 501.865812][T31789] bridge3: left allmulticast mode [ 501.872312][T16905] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 501.897054][T16905] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 501.905748][T16905] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 501.937277][T16905] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 501.963897][T31794] loop6: detected capacity change from 0 to 1024 [ 501.973741][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 501.973754][ T28] audit: type=1400 audit(1776128794.303:5075): avc: denied { mounton } for pid=31786 comm="syz.2.8750" path="/69/bus/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 502.037112][T31795] loop2: detected capacity change from 512 to 64 [ 502.044469][T31787] syz.2.8750: attempt to access beyond end of device [ 502.044469][T31787] loop2: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 502.065891][T31787] Buffer I/O error on dev loop2, logical block 37, lost sync page write [ 502.069217][T31798] syz.2.8750: attempt to access beyond end of device [ 502.069217][T31798] loop2: rw=8402945, sector=72, nr_sectors = 2 limit=64 [ 502.075896][T31794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.088960][T31798] Buffer I/O error on dev loop2, logical block 36, lost sync page write [ 502.145004][ T28] audit: type=1400 audit(1776128794.403:5076): avc: denied { bind } for pid=31799 comm="syz.5.8743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 502.169242][T31798] EXT4-fs error (device loop2): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz.2.8750: IO error syncing itable block [ 502.208059][T31787] EXT4-fs error (device loop2): ext4_splice_branch:472: inode #18: block 37: comm syz.2.8750: IO error syncing itable block [ 502.247064][T31798] EXT4-fs error (device loop2) in add_dirent_to_buf:2155: IO failure [ 502.257670][T31787] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.8750: Error while async write back metadata [ 502.287036][T31787] syz.2.8750: attempt to access beyond end of device [ 502.287036][T31787] loop2: rw=8390659, sector=180, nr_sectors = 2 limit=64 [ 502.310382][T31787] EXT4-fs (loop2): discard request in group:0 block:89 count:1 failed with -5 [ 502.320506][T31787] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: IO failure [ 502.349176][T31787] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 18: block 90:freeing already freed block (bit 89); block bitmap corrupt. [ 502.364613][T31787] EXT4-fs (loop2): pa ffff8881079c0770: logic 32, phys. 69, len 32 [ 502.372772][T31787] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5465: group 0, free 31, pa_free 30 [ 502.394704][T31787] syz.2.8750: attempt to access beyond end of device [ 502.394704][T31787] loop2: rw=8402945, sector=74, nr_sectors = 2 limit=64 [ 502.429813][T31787] Buffer I/O error on dev loop2, logical block 37, lost sync page write [ 502.438838][T31787] EXT4-fs error (device loop2): ext4_free_data:978: inode #18: block 37: comm syz.2.8750: IO error syncing itable block [ 502.452084][T31787] EXT4-fs error (device loop2): ext4_check_bdev_write_error:227: comm syz.2.8750: Error while async write back metadata [ 502.466462][T31787] syz.2.8750: attempt to access beyond end of device [ 502.466462][T31787] loop2: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 502.481909][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 41) [ 502.494703][T31787] Buffer I/O error on device loop2, logical block 41 [ 502.502069][T31787] Buffer I/O error on device loop2, logical block 42 [ 502.509386][T31787] Buffer I/O error on device loop2, logical block 43 [ 502.516613][T31787] Buffer I/O error on device loop2, logical block 44 [ 502.576940][T31787] syz.2.8750: attempt to access beyond end of device [ 502.576940][T31787] loop2: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 502.591973][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 49) [ 502.604723][T31787] Buffer I/O error on device loop2, logical block 49 [ 502.611605][T31787] Buffer I/O error on device loop2, logical block 50 [ 502.618544][T31787] Buffer I/O error on device loop2, logical block 51 [ 502.625235][T31787] Buffer I/O error on device loop2, logical block 52 [ 502.633088][T31787] syz.2.8750: attempt to access beyond end of device [ 502.633088][T31787] loop2: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 502.647302][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 57) [ 502.660043][T31787] Buffer I/O error on device loop2, logical block 57 [ 502.667689][T31787] Buffer I/O error on device loop2, logical block 58 [ 502.675627][T31787] syz.2.8750: attempt to access beyond end of device [ 502.675627][T31787] loop2: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 502.691385][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 65) [ 502.703214][T31787] syz.2.8750: attempt to access beyond end of device [ 502.703214][T31787] loop2: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 502.717223][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 45) [ 502.729785][T31787] syz.2.8750: attempt to access beyond end of device [ 502.729785][T31787] loop2: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 502.743765][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 53) [ 502.755781][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 61) [ 502.768504][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 125) [ 502.780260][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 161) [ 502.791901][T31787] EXT4-fs warning (device loop2): ext4_end_bio:373: I/O error 10 writing to inode 18 starting block 201) [ 502.862060][T28024] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.909617][T30541] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.245634][T16925] bridge_slave_1: left allmulticast mode [ 503.263405][T16925] bridge_slave_1: left promiscuous mode [ 503.269714][T16925] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.368373][T16925] bridge_slave_0: left allmulticast mode [ 503.382020][T16925] bridge_slave_0: left promiscuous mode [ 503.413910][T16925] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.655337][ T28] audit: type=1400 audit(1776128795.983:5077): avc: denied { create } for pid=31828 comm="syz.6.8755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 503.677059][ T28] audit: type=1400 audit(1776128795.983:5078): avc: denied { create } for pid=31828 comm="syz.6.8755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 503.700735][T16925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.727690][T16925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.739963][T16925] bond0 (unregistering): Released all slaves [ 503.756676][T16925] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 503.780414][T16925] bond1 (unregistering): (slave vxcan5): Releasing backup interface [ 503.790551][T16925] bond1 (unregistering): Released all slaves [ 503.807301][T16925] bond2 (unregistering): Released all slaves [ 503.873572][ T28] audit: type=1400 audit(1776128796.203:5079): avc: denied { accept } for pid=31838 comm="syz.3.8759" lport=50756 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 503.875633][T16925] IPVS: stopping backup sync thread 31418 ... [ 503.932327][T16925] hsr_slave_0: left promiscuous mode [ 503.954546][T16925] hsr_slave_1: left promiscuous mode [ 503.963769][T16925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.972495][T16925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.056692][T16925] team0 (unregistering): Port device team_slave_1 removed [ 504.079647][T16925] team0 (unregistering): Port device team_slave_0 removed [ 504.142711][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8763'. [ 504.160635][T31820] lo speed is unknown, defaulting to 1000 [ 504.164899][T31875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8763'. [ 504.216819][T31884] loop5: detected capacity change from 0 to 128 [ 504.235748][T31884] EXT4-fs: test_dummy_encryption option not supported [ 504.267485][T31884] loop5: detected capacity change from 0 to 1024 [ 504.275987][T31884] ext3: Unknown parameter 'smackfsfloor' [ 504.285604][ T28] audit: type=1400 audit(1776128796.603:5080): avc: denied { mounton } for pid=31883 comm="syz.5.8765" path="/syzcgroup/cpu/syz5/cpuset.cpus" dev="cgroup" ino=1081 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 504.357945][T31820] chnl_net:caif_netlink_parms(): no params data found [ 504.473704][T31820] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.481188][T31820] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.489285][T31820] bridge_slave_0: entered allmulticast mode [ 504.496087][T31820] bridge_slave_0: entered promiscuous mode [ 504.503958][T31820] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.516933][T31820] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.524300][T31820] bridge_slave_1: entered allmulticast mode [ 504.532556][T31820] bridge_slave_1: entered promiscuous mode [ 504.553708][T31820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.577512][T31820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.599691][T31820] team0: Port device team_slave_0 added [ 504.606789][T31820] team0: Port device team_slave_1 added [ 504.630750][T31820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.639907][T31820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.676914][T31820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.690215][T31820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.698201][T31820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.726390][T31820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.762937][T31820] hsr_slave_0: entered promiscuous mode [ 504.769777][T31820] hsr_slave_1: entered promiscuous mode [ 504.777131][T31820] debugfs: 'hsr0' already exists in 'hsr' [ 504.782863][T31820] Cannot create hsr debugfs directory [ 505.055182][T31820] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 505.081686][T31820] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 505.091462][T31820] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 505.109338][T31820] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 505.181131][T31820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.194928][T31820] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.205410][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.213320][T16905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.225929][T16936] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.233314][T16936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.252522][T31820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.264081][T31820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.331171][T31820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.449603][T31820] veth0_vlan: entered promiscuous mode [ 505.459563][T31820] veth1_vlan: entered promiscuous mode [ 505.477644][T31820] veth0_macvtap: entered promiscuous mode [ 505.485292][T31820] veth1_macvtap: entered promiscuous mode [ 505.498591][T31820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.510818][T31820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.521816][T16914] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.532146][T16936] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.544555][T16936] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.560695][T16914] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.606246][T32023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8777'. [ 505.645769][T32023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8777'. [ 505.665813][T32029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8752'. [ 505.681424][T32029] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8752'. [ 505.790962][T32042] tipc: Enabling of bearer rejected, already enabled [ 506.370979][T32134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8784'. [ 506.376632][T32136] syzkaller0: entered promiscuous mode [ 506.385780][T32136] syzkaller0: entered allmulticast mode [ 506.395139][T32134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8784'. [ 506.682838][ T28] audit: type=1400 audit(1776128799.013:5081): avc: denied { unmount } for pid=23297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 507.022790][T32194] netlink: 'syz.1.8794': attribute type 1 has an invalid length. [ 507.089528][T32194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.159959][T32200] bond4: (slave veth7): Enslaving as an active interface with a down link [ 507.232375][T32194] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 507.249620][T32194] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 507.281344][ T28] audit: type=1326 audit(1776128799.613:5082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32204 comm="syz.6.8798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15c0f1c819 code=0x0 [ 507.363418][ T28] audit: type=1400 audit(1776128799.693:5083): avc: denied { read open } for pid=32207 comm="syz.6.8799" path="/" dev="configfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 507.475007][T32214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8802'. [ 507.585741][T32217] loop9: detected capacity change from 0 to 512 [ 507.636755][T32217] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.8804: inode has both inline data and extents flags [ 507.670442][T32214] bond5: entered promiscuous mode [ 507.678667][T32217] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.678801][T32217] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.8804: couldn't read orphan inode 15 (err -117) [ 507.687982][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 507.688002][ C1] EXT4-fs (loop9): initial error at time 1776128800: ext4_orphan_get:1397: inode 15 [ 507.688038][ C1] EXT4-fs (loop9): last error at time 1776128800: ext4_orphan_get:1397: inode 15 [ 507.746893][T32217] loop9: lost filesystem error report for type 5 error -117 [ 507.747533][T32217] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.755194][T32230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8808'. [ 507.832037][T32234] EXT4-fs (loop9): shut down requested (1) [ 507.852020][ T28] audit: type=1400 audit(1776128800.183:5084): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 507.893555][T32236] xt_hashlimit: size too large, truncated to 1048576 [ 507.899268][ T28] audit: type=1400 audit(1776128800.183:5085): avc: denied { search } for pid=2980 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.932167][ T28] audit: type=1400 audit(1776128800.183:5086): avc: denied { append } for pid=2980 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 507.980768][ T28] audit: type=1400 audit(1776128800.183:5087): avc: denied { open } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.027545][T31820] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.049169][ T28] audit: type=1400 audit(1776128800.183:5088): avc: denied { getattr } for pid=2980 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 508.206328][ T28] audit: type=1400 audit(1776128800.533:5089): avc: denied { read } for pid=32254 comm="syz.5.8817" lport=42651 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 508.266238][ T28] audit: type=1400 audit(1776128800.593:5090): avc: denied { cmd } for pid=32256 comm="syz.6.8818" path="socket:[95844]" dev="sockfs" ino=95844 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 508.313280][T32261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8820'. [ 508.337004][T32261] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8820'. [ 509.106347][T32283] uprobe: syz.5.8829:32283 failed to unregister, leaking uprobe [ 509.114484][ T28] audit: type=1400 audit(1776128801.443:5091): avc: denied { watch watch_reads } for pid=32279 comm="syz.3.8827" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 509.291690][T32290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8832'. [ 509.331898][T32290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8832'. [ 509.433391][T32295] Invalid argument reading file caps for ./file0 [ 509.508048][T32302] netlink: 'syz.3.8837': attribute type 1 has an invalid length. [ 509.549274][T32302] 8021q: adding VLAN 0 to HW filter on device bond8 [ 509.790600][T32313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.799768][T32313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.314853][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8850'. [ 510.342576][T32334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8850'. [ 510.803974][T32355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8860'. [ 510.826019][T32355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8860'. [ 511.348424][T32379] lo speed is unknown, defaulting to 1000 [ 511.522891][ T10] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 511.540731][ T10] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 511.881396][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.892786][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.906108][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.920707][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.939914][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.949915][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.960677][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.970653][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.980571][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.980713][ T2988] ================================================================== [ 511.990759][T32419] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 511.998816][ T2988] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 512.015614][ T2988] [ 512.017936][ T2988] write to 0xffffffff86c78d08 of 8 bytes by task 32419 on cpu 1: [ 512.026652][ T2988] data_alloc+0x310/0x390 [ 512.031337][ T2988] prb_reserve+0x8d7/0xae0 [ 512.035775][ T2988] vprintk_store+0x54a/0x910 [ 512.040459][ T2988] vprintk_emit+0x1a4/0x600 [ 512.045250][ T2988] vprintk_default+0x26/0x30 [ 512.050110][ T2988] vprintk+0x1d/0x30 [ 512.054468][ T2988] _printk+0x79/0xa0 [ 512.058516][ T2988] batadv_tt_local_add+0x14ba/0x1720 [ 512.063923][ T2988] batadv_interface_tx+0x42b/0xae0 [ 512.069134][ T2988] dev_hard_start_xmit+0x136/0x3f0 [ 512.074691][ T2988] __dev_queue_xmit+0xd9a/0x1f20 [ 512.079646][ T2988] __bpf_redirect+0x862/0x990 [ 512.084502][ T2988] bpf_clone_redirect+0x20c/0x290 [ 512.089729][ T2988] bpf_prog_ba7156dd260b21a3+0x62/0x6b [ 512.095408][ T2988] bpf_test_run+0x29d/0x620 [ 512.100110][ T2988] bpf_prog_test_run_skb+0x9a4/0xef0 [ 512.105412][ T2988] bpf_prog_test_run+0x204/0x340 [ 512.110615][ T2988] __sys_bpf+0x52e/0x7e0 [ 512.114865][ T2988] __x64_sys_bpf+0x41/0x50 [ 512.119281][ T2988] x64_sys_call+0x10cb/0x3020 [ 512.124700][ T2988] do_syscall_64+0x12c/0x370 [ 512.129393][ T2988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.135301][ T2988] [ 512.137632][ T2988] read to 0xffffffff86c78d08 of 16 bytes by task 2988 on cpu 0: [ 512.145265][ T2988] _prb_read_valid+0x1bc/0x950 [ 512.150224][ T2988] prb_read_valid+0x3c/0x60 [ 512.154756][ T2988] syslog_print+0x258/0x560 [ 512.159356][ T2988] do_syslog+0x52b/0x7f0 [ 512.163695][ T2988] __x64_sys_syslog+0x41/0x50 [ 512.168366][ T2988] x64_sys_call+0x2b9e/0x3020 [ 512.173052][ T2988] do_syscall_64+0x12c/0x370 [ 512.177649][ T2988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.183631][ T2988] [ 512.185957][ T2988] Reported by Kernel Concurrency Sanitizer on: [ 512.192120][ T2988] CPU: 0 UID: 0 PID: 2988 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 512.202550][ T2988] Tainted: [W]=WARN [ 512.206350][ T2988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 512.216497][ T2988] ==================================================================