last executing test programs: 9m49.100117352s ago: executing program 32 (id=426): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x4, 0x8}, 0x8) 9m43.31282978s ago: executing program 33 (id=211): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 9m37.681091274s ago: executing program 34 (id=694): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)='B', 0x1}], 0x1}}], 0x1, 0x448c1) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000700)=""/235, 0xeb}], 0x2}, 0xfffffff9}], 0x1, 0x10143, 0x0) 9m34.530007042s ago: executing program 35 (id=753): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') r1 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(r2, 0xee00, r2) fchown(r0, r2, 0x0) 9m21.442798841s ago: executing program 36 (id=1053): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60b5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r1, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) 9m5.777388558s ago: executing program 37 (id=1469): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507faff15300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 8m55.629728166s ago: executing program 38 (id=1700): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 8m54.313350551s ago: executing program 39 (id=1727): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r0, 0x0, 0x4, 0xdfd6) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x175, 0x0, 0xa) 8m53.450727941s ago: executing program 40 (id=1752): mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r0, 0xc) 8m53.421527882s ago: executing program 41 (id=1754): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 8m51.895317824s ago: executing program 42 (id=1762): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'wg2\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) sendfile(r0, r1, 0x0, 0x6) 8m45.6190748s ago: executing program 43 (id=1855): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x4000043, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 8m6.163066443s ago: executing program 44 (id=2822): ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000001200)={@desc={0x1, 0x0, @desc1}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 7m10.247035651s ago: executing program 45 (id=4377): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r2, 0x0, 0x100}, &(0x7f0000000040)=0x8) 6m9.517450095s ago: executing program 46 (id=6062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x5, 0xec, 0x0, 0xc, 0x30, 0x7, 0x1, 0xfa, 0x1, 0xfe, 0x6, 0xb1, 0xff}, 0xe) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf03, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 5m27.274368594s ago: executing program 47 (id=6722): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x197b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x8, 0x399}) 5m25.514271964s ago: executing program 48 (id=6773): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = openat(r0, &(0x7f0000001480)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0xf2) 5m13.10728055s ago: executing program 49 (id=7275): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, 0x0, 0x250}}], 0x1, 0x4004804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m6.809702356s ago: executing program 50 (id=7416): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m1.544586286s ago: executing program 51 (id=7496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4c21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'netdevsim0\x00'}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x2, 0xffff, 0x8, 0x80000001}, 0x14) 4m43.119272208s ago: executing program 52 (id=7921): r0 = socket$inet6(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/169, 0xa9}], 0x1) 4m25.499457333s ago: executing program 53 (id=8155): r0 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000008c0)) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4m13.738274566s ago: executing program 7 (id=8292): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[], 0xe) 4m13.468422896s ago: executing program 7 (id=8295): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 4m13.385809018s ago: executing program 7 (id=8296): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="97010000002ebbbbbbbbbbbb81003900080045000030000006"], 0x0) 4m13.358620379s ago: executing program 7 (id=8297): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000100)='./control\x00') 4m13.03144298s ago: executing program 54 (id=8300): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/4096, 0x1000}], 0x1) ioctl$XFS_IOC_START_COMMIT(r0, 0x8919, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 4m13.02542137s ago: executing program 7 (id=8302): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) ioctl$int_in(r0, 0x5452, &(0x7f0000000380)=0x2003) accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m12.323468655s ago: executing program 7 (id=8312): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x80000) 4m12.296840706s ago: executing program 55 (id=8312): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x80000) 3m58.002973566s ago: executing program 1 (id=8504): getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000040), &(0x7f0000000100)=0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3m56.42826084s ago: executing program 1 (id=8532): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x73, 0xffffffffffffffff}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3m56.378216772s ago: executing program 1 (id=8535): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x205, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) 3m56.335345454s ago: executing program 1 (id=8537): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700"], 0x50) io_uring_enter(r0, 0x221c, 0x134d, 0x16, 0x0, 0x0) 3m56.312474274s ago: executing program 1 (id=8538): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1801) 3m55.993249535s ago: executing program 1 (id=8541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 3m55.858696159s ago: executing program 56 (id=8541): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 3m55.245601871s ago: executing program 9 (id=8547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008881}, 0x80a4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) 3m55.046864467s ago: executing program 9 (id=8552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m54.724628879s ago: executing program 9 (id=8557): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x34, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) 3m54.641184871s ago: executing program 9 (id=8561): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0) 3m54.607442852s ago: executing program 9 (id=8562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 3m54.248486635s ago: executing program 9 (id=8571): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800", @ANYRES16=r0], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4048405}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3m54.207200877s ago: executing program 57 (id=8571): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800", @ANYRES16=r0], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4048405}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3m20.060026018s ago: executing program 8 (id=9188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a8000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c000980080001400000001c080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m19.927720652s ago: executing program 8 (id=9191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 3m19.841473555s ago: executing program 8 (id=9193): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) unshare(0x28000600) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='TIPCv2\x00', &(0x7f0000000040)="a7", 0x1) 3m19.766365368s ago: executing program 8 (id=9194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) 3m19.738003339s ago: executing program 8 (id=9196): syz_io_uring_setup(0x1ac4, &(0x7f0000000100)={0x0, 0xff16, 0x400, 0x1, 0x20b}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 3m18.959552125s ago: executing program 8 (id=9208): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000240)={0x0, 0x4c, 0xb, 0x6, 0x74a, 0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) 3m18.959276225s ago: executing program 58 (id=9208): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000240)={0x0, 0x4c, 0xb, 0x6, 0x74a, 0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r2, 0x0, 0x0, 0x8800000) 1m58.816414515s ago: executing program 5 (id=10354): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 1m58.564851223s ago: executing program 5 (id=10360): socket(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r0, 0x5602, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x82}, 0x100b28, 0x5, 0x0, 0x8, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 1m58.511960345s ago: executing program 5 (id=10363): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x158, 0x0, 0x11004, 0x0, 0x82, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 1m58.214374716s ago: executing program 5 (id=10381): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1m58.182256507s ago: executing program 5 (id=10374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(0x0, 0x0, 0x3ff) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) 1m58.08526343s ago: executing program 5 (id=10378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4804) 1m58.043100021s ago: executing program 59 (id=10378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4804) 4.580930693s ago: executing program 3 (id=12034): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.039134446s ago: executing program 2 (id=12047): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8040200, &(0x7f0000000200)="fd1d31abfb1a1317f0d06dbdc772c7497ab4f4b68d7eacbdfae1e72c5acc089491705e51f454dae2d2ac3497340ca929", 0x30, &(0x7f0000000280), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x61}, 0x28) sendmsg(r1, &(0x7f0000000700)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000000640)=[{&(0x7f0000000100)="0f0e871c728458fc38f16cea62dc1a48708f1429125d823fe887e30e332c379dad290be876bc9c6f00877049582b84d1a8846743ee0c0fc11b05669c0ffd2d97867b065dd8bdd2fb2fba3b270598afa3da990aa175150e68e21806613b2e8b62e0a252c61ed07fe981b169c7538d9b72769f0fecde50556611e794cd6559e919c503ca2a0c6ddf43caa270868fa9d1939ed99bd101c9270b3ed5bb9d29347101092d4190ea6abb16cbbf275076d9db", 0xaf}, {&(0x7f00000002c0)="edf8d2b96362fbce28b68d478cb09a3eeea2a2c4c364e83d8d6a49245ea1d2467e3367ce260d0883f93c32f74e780787015f3e15c3f5dcadd071253e76e7b88e80072c7b1af8d432dd56370672b4eca4b8c2153ba35d622f78e896871f45cc5497e18a4ec84ae68df6e1f2b78da0512eac85f7f1ce173360f4cc6987c4c6ad565fa3428f0a312553a26efd90d04250d5404e62c1ce4388997be3541545bb8db4a15f5414df9f62d22a20971fb2af313323e5e15b1ed46453e9cca19b1b800c22ca1ad4a8cc3f4402614e6132cc889bb5", 0xd0}, {&(0x7f00000003c0)='z', 0x1}, {&(0x7f0000000400)="5cfecbd393b750f8731f0d4c8d253d5ef3b1fbdf9aaf6eaf579d994d0da4235de01fd48267ab18b07bc5d769559dd2af60d88a8ff2dae6f48e8f8d6cd86656c0da4613c9e758fb294967a3167becac886cf24dfea9ad5e436c0a075f12b3d3a8739dff97", 0x64}, {&(0x7f0000000480)="e5088830b5cfd97856bb7d19284bc87d6d14c43f961b0383bee5762e3d", 0x1d}, {&(0x7f00000004c0)='E', 0x1}, {&(0x7f0000000500)="a9fd22e5b1b315b6f99060750e4604891c0583d94958d7a02b012a6101fd07310c649c4efacaf38424f8c074da1ff236fd0b9d4e392a0ba95fad047aa9ef7055b8c9f4a4fceb4e8055a0c454ca14d013e4ac111791cebd8dfcb167223f455c3543639a065b48621cf9d938c9aa180b41d77117ccc6b54bb97ae603740c02f8f1ae113cc48ccaf9", 0x87}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="2a655085047a6dddc23e773e55a7ac6db3011dfef47474", 0x17}], 0x9, &(0x7f0000000980)=[{0x50, 0x1, 0x80, "0cd0871df2a86310c73309e6cf4a2799729a71e5a4377e0cf3f2048e5a4d5a0c97f8fa7efe51e69b0375ca05373f3427ba786d610b223e1e5edb583232bb"}, {0x48, 0x111, 0x4, "e8035c4647cf5979fbcb3c18c39adf79025b261fb118047180168142afd162f01e61b286915b2656d374d4e50775e691a961"}, {0x68, 0x112, 0x898, "b951ebca5427117bce675014cca4bea0e52009bb4ed1e1a33c1f6924494a4a2854494c515bb27d55c55d07ad4d230ebcb8f26c5f250caabeeb2723b9b2d6453e6fbd2b9fda6ece30dada2530e4f61e8dd6"}, {0xa0, 0x109, 0x401, "5ee4b2000689a67ce88648a2d43d207b402403fa901e01c10236331daa00f4d21ca73eeca3d5788b1974aa7bd3c837922edf21974a10fe02c83843940410089be6ccea83e8dde8786f5f513fd898fa65ebcdc52f81a7d73d366419e978148b1d0889b6759fc693d97e0b16bafffa422cef5d97603a713312152048af3479e464638b174d8dc79abd3b"}, {0x70, 0x10a, 0xffff4a05, "83b440d70ae82bcd7567eaf4d7adeb1160e48640507c27dbb16fea53b6581dd7b8c45f76985ad438c465327a041240b95a6e2fdc672b1284f74ec5d244baa20925a62151b0ab8803eee86286cdc37f43d21ec250bae4b0b5643e687d"}, {0x50, 0x10d, 0x3, "4229bd2ee837eebac7f488a341ef396d9fe26f6258be02ff7a558d254ad56dce4ae97c6b62cef96117cce08b8b2bb7c6b788605b3146a69ce928e78f"}, {0xf8, 0x10b, 0x1, "eaa8dc1b1b6ef73924543b598723769f77b24e70788ecd9ecaee71467658f71769d50c10f919592dcf1a61b6a3811a138a79ad15b69a03784b23f92edf334d8351abccb5fc858c1be77be324b71e1e6614c568d83cb32a2b3179c4cd69ecd90b17d18756a3f055566d77f385d5ac06c790c99036dc53a35376cd429112cdf109f98c86a358e6884ecc05bab3d928f1e2ce3778a1464f8fdc1d3a6c142a984e6a2d70dec512761dec8cdb448b25b484efc172d32639d623ebf26bfc6fe96da66d2038a738a7050e2901b31b4853c3e8a62308ddf15206f762c851b9d3d47ec6760b66"}], 0x358}, 0x5) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 3.021981387s ago: executing program 0 (id=12048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="000000000000000000002000009b923b3aee1b95", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.95392164s ago: executing program 2 (id=12049): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.872363012s ago: executing program 6 (id=12050): socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.771309875s ago: executing program 3 (id=12051): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 2.525881464s ago: executing program 0 (id=12053): r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x800) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000540)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.481888526s ago: executing program 4 (id=12055): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) listen(r1, 0xa) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c) 2.457168146s ago: executing program 4 (id=12056): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) memfd_create(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xff7e, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 2.34542555s ago: executing program 6 (id=12057): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.962428833s ago: executing program 2 (id=12058): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read$hidraw(r2, &(0x7f0000002380)=""/93, 0xfdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.962261743s ago: executing program 6 (id=12059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x32}, 0x50) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) futex(&(0x7f000000cffc)=0x3, 0x5, 0x2, 0x0, &(0x7f0000000000)=0x3, 0x5000000) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0xc, 0xe}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), &(0x7f0000000340)=@tcp=r1, 0x1}, 0x20) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000008ca15010140000102038d09022000010106500c090400000101"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 1.899381245s ago: executing program 3 (id=12060): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000012c0)=""/4095, 0xfff, 0x102, 0x0, 0x0) sendto(r0, &(0x7f00000007c0)="5bea", 0x2, 0x8001, 0x0, 0x0) 1.870503136s ago: executing program 3 (id=12061): r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x202, &(0x7f0000000300)={&(0x7f0000000780)="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", 0x19e}) remap_file_pages(&(0x7f00005fb000/0x3000)=nil, 0x3000, 0x0, 0x5, 0x10000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000480)={0x0}) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) madvise(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.808884839s ago: executing program 3 (id=12062): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 1.597912866s ago: executing program 4 (id=12063): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 1.501414359s ago: executing program 4 (id=12064): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x62000000) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'filter\x00', 0x0, [0x9, 0x1, 0x2, 0xff, 0xc1]}, &(0x7f0000000080)=0x54) 1.327504745s ago: executing program 4 (id=12065): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 1.18129007s ago: executing program 6 (id=12066): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008008) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=@newae={0x50, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfc, {{@in=@remote, 0x4d3, 0xa, 0x3c}, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x2, 0x3501}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x7}, @tfcpad={0x8, 0x16, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000805}, 0x804) 1.047441115s ago: executing program 2 (id=12067): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.001299146s ago: executing program 6 (id=12068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r2, @ANYBLOB="4606090000000000240012800900"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 922.245569ms ago: executing program 3 (id=12069): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(0x3) 888.89548ms ago: executing program 2 (id=12070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 636.037639ms ago: executing program 6 (id=12071): socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000004d00)=ANY=[], 0xa) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 435.580666ms ago: executing program 4 (id=12072): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setpriority(0x0, 0x1, 0xa7a8) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x5c4a19f17da70bee) r1 = gettid() openat$dir(0xffffffffffffff9c, 0x0, 0x60000, 0x3) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 406.979707ms ago: executing program 0 (id=12073): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 202.679464ms ago: executing program 0 (id=12074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 171.233815ms ago: executing program 0 (id=12075): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) socket(0x28, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000340)="4977b38d1501", &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 434.83µs ago: executing program 2 (id=12076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) listen(r0, 0xb5d6) 0s ago: executing program 0 (id=12077): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ): avc: denied { bind } for pid=4692 comm="syz.2.10288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 514.025037][ T4669] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.035733][ T4669] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.170826][ T50] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.183130][ T50] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.196064][ T50] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.205960][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.227996][ T50] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.237188][ T50] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.309511][ T50] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.327077][ T50] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.728985][ T4740] loop6: detected capacity change from 0 to 512 [ 514.746810][ T4740] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 514.805903][ T4740] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.10306: invalid indirect mapped block 1023410176 (level 0) [ 515.027062][ T4740] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 515.027429][ T4740] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, [ 515.036592][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 515.036611][ C0] EXT4-fs (loop6): initial error at time 2000000342: ext4_free_branches:1023: inode 11 [ 515.036640][ C0] EXT4-fs (loop6): last error at time 2000000342: ext4_free_branches:1023: inode 11 [ 515.071727][ T4740] inode 11: block 237:freeing already freed block (bit 236); block bitmap corrupt. [ 515.170455][ T4740] EXT4-fs (loop6): 1 truncate cleaned up [ 515.176737][ T4740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.501937][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.583316][ T4755] loop5: detected capacity change from 0 to 512 [ 515.632088][ T4755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.657241][ T4758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10314'. [ 515.756892][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10314'. [ 516.032199][ T4773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10320'. [ 516.060612][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10320'. [ 516.101384][ T1413] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.110830][ T4773] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10320'. [ 516.173880][ T4782] netlink: 'syz.5.10322': attribute type 1 has an invalid length. [ 516.216428][ T4782] bond1: entered promiscuous mode [ 516.230581][ T4782] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.281366][ T4782] bond1: (slave bridge4): making interface the new active one [ 516.324933][ T4782] bridge4: entered promiscuous mode [ 516.337550][ T4782] bridge4: left promiscuous mode [ 516.373277][ T4799] loop6: detected capacity change from 0 to 512 [ 516.474849][ T4799] ------------[ cut here ]------------ [ 516.481080][ T4799] EA inode 11 i_nlink=2 [ 516.481109][ T4799] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.6.10324/4799 [ 516.496854][ T4799] Modules linked in: [ 516.501544][ T4799] CPU: 1 UID: 0 PID: 4799 Comm: syz.6.10324 Not tainted syzkaller #0 PREEMPT(full) [ 516.511618][ T4799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.522410][ T4799] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 516.529087][ T4799] Code: b4 47 99 ff 4c 8d 2d ad b2 5d 05 49 8d 7e 40 e8 34 df b5 ff 49 8b 6e 40 4c 89 e7 e8 68 da b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 3f b6 dd 03 66 66 66 66 66 66 2e [ 516.550862][ T4799] RSP: 0018:ffffc90004017778 EFLAGS: 00010246 [ 516.556944][ T4799] RAX: ffff888101c3cdc8 RBX: ffff888160e231c8 RCX: ffffffff81c01958 [ 516.564972][ T4799] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcbf0 [ 516.573651][ T4799] RBP: 000000000000000b R08: 0001888160e2317b R09: 0000000000000000 [ 516.582938][ T4799] R10: 0001ea000595ff00 R11: 0001c900040176a8 R12: ffff888160e23178 [ 516.590997][ T4799] R13: ffffffff871dcbf0 R14: ffff888160e23130 R15: 0000000000000001 [ 516.599056][ T4799] FS: 00007f1fa22466c0(0000) GS:ffff8882ae9d8000(0000) knlGS:0000000000000000 [ 516.608498][ T4799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.616458][ T4799] CR2: 00007f7d11348e9c CR3: 0000000161188000 CR4: 00000000003506f0 [ 516.624570][ T4799] DR0: 0000200000000440 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.633263][ T4799] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 516.642624][ T4799] Call Trace: [ 516.645980][ T4799] [ 516.648919][ T4799] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 516.654930][ T4799] ? errseq_check+0x2c/0x50 [ 516.660343][ T4799] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 516.665883][ T4799] ? ext4_truncate+0x92b/0xb00 [ 516.672070][ T4799] ext4_evict_inode+0xa1f/0xd60 [ 516.677013][ T4799] ? __pfx_ext4_evict_inode+0x10/0x10 [ 516.682619][ T4799] evict+0x2af/0x510 [ 516.686556][ T4799] ? __dquot_initialize+0x146/0x7c0 [ 516.692506][ T4799] iput+0x41a/0x580 [ 516.696357][ T4799] ext4_process_orphan+0x1a9/0x1c0 [ 516.702922][ T4799] ext4_orphan_cleanup+0x6a8/0xa00 [ 516.708150][ T4799] ext4_fill_super+0x3408/0x37c0 [ 516.713134][ T4799] ? set_blocksize+0x14c/0x270 [ 516.717909][ T4799] ? setup_bdev_super+0x30e/0x370 [ 516.723594][ T4799] ? __pfx_ext4_fill_super+0x10/0x10 [ 516.728887][ T4799] get_tree_bdev_flags+0x291/0x300 [ 516.735242][ T4799] ? __pfx_ext4_fill_super+0x10/0x10 [ 516.740596][ T4799] get_tree_bdev+0x1f/0x30 [ 516.745038][ T4799] ext4_get_tree+0x1c/0x30 [ 516.749470][ T4799] vfs_get_tree+0x57/0x1d0 [ 516.754573][ T4799] do_new_mount+0x288/0x8d0 [ 516.759085][ T4799] path_mount+0x4d0/0xbc0 [ 516.764764][ T4799] __se_sys_mount+0x28c/0x2e0 [ 516.769507][ T4799] __x64_sys_mount+0x67/0x80 [ 516.774158][ T4799] x64_sys_call+0x2d61/0x3020 [ 516.778861][ T4799] do_syscall_64+0x12c/0x370 [ 516.784119][ T4799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.791354][ T4799] RIP: 0033:0x7f1fa380da8a [ 516.795826][ T4799] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.816080][ T4799] RSP: 002b:00007f1fa2245e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 516.825698][ T4799] RAX: ffffffffffffffda RBX: 00007f1fa2245ee0 RCX: 00007f1fa380da8a [ 516.833747][ T4799] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f1fa2245ea0 [ 516.842334][ T4799] RBP: 00002000000009c0 R08: 00007f1fa2245ee0 R09: 0000000000800718 [ 516.851649][ T4799] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 516.859675][ T4799] R13: 00007f1fa2245ea0 R14: 000000000000048d R15: 0000200000000200 [ 516.867708][ T4799] [ 516.871461][ T4799] ---[ end trace 0000000000000000 ]--- [ 516.881354][ T4799] EXT4-fs (loop6): 1 orphan inode deleted [ 516.887672][ T4799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.131524][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.177193][ T4871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.988337][ T4893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10338'. [ 518.065755][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10338'. [ 518.467510][ T4910] netlink: 'syz.3.10346': attribute type 4 has an invalid length. [ 518.485268][ T4910] netlink: 'syz.3.10346': attribute type 4 has an invalid length. [ 518.592742][ T28] audit: type=1326 audit(2000000346.351:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.628654][ T28] audit: type=1326 audit(2000000346.351:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.656651][ T28] audit: type=1326 audit(2000000346.371:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.683362][ T4898] loop6: detected capacity change from 0 to 1024 [ 518.693288][ T28] audit: type=1326 audit(2000000346.371:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.718477][ T28] audit: type=1326 audit(2000000346.371:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.720092][ T4930] io-wq is not configured for unbound workers [ 518.747146][ T28] audit: type=1326 audit(2000000346.371:6752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.784979][ T28] audit: type=1326 audit(2000000346.371:6753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.812471][ T28] audit: type=1326 audit(2000000346.381:6754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.832539][ T4898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.836739][ T28] audit: type=1326 audit(2000000346.381:6755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.892580][ T28] audit: type=1326 audit(2000000346.381:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4926 comm="syz.5.10352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a495c819 code=0x7ffc0000 [ 518.979937][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.047950][ T4943] xt_hashlimit: size too large, truncated to 1048576 [ 519.391118][ T4981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10373'. [ 519.409665][ T4981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10373'. [ 519.566786][ T4996] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10382'. [ 519.655711][ T5007] netlink: 'syz.6.10387': attribute type 10 has an invalid length. [ 519.672454][ T5007] hsr0: entered promiscuous mode [ 519.678425][ T5007] bridge0: port 3(hsr0) entered blocking state [ 519.689249][ T5007] bridge0: port 3(hsr0) entered disabled state [ 519.705116][ T5017] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 519.707091][ T5007] hsr0: entered allmulticast mode [ 519.732012][ T5007] hsr_slave_0: entered allmulticast mode [ 519.750180][ T5007] hsr_slave_1: entered allmulticast mode [ 519.780248][ T5007] bridge0: port 3(hsr0) entered blocking state [ 519.786892][ T5007] bridge0: port 3(hsr0) entered forwarding state [ 519.888428][ T4848] bridge_slave_1: left allmulticast mode [ 519.912367][ T4848] bridge_slave_1: left promiscuous mode [ 519.918418][ T4848] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.943520][ T4848] bridge_slave_0: left allmulticast mode [ 519.949247][ T4848] bridge_slave_0: left promiscuous mode [ 519.960281][ T4848] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.001551][ T7489] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 520.005665][ T4848] dvmrp1 (unregistering): left allmulticast mode [ 520.019917][ T5040] netlink: 'syz.6.10398': attribute type 3 has an invalid length. [ 520.027996][ T5040] netlink: 'syz.6.10398': attribute type 7 has an invalid length. [ 520.255511][ T5054] loop6: detected capacity change from 0 to 128 [ 521.267176][ T4848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.310654][ T4848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.370736][ T4848] bond0 (unregistering): Released all slaves [ 521.388611][ T4848] bond1 (unregistering): Released all slaves [ 521.524700][ T4848] hsr_slave_0: left promiscuous mode [ 521.537080][ T5084] __nla_validate_parse: 3 callbacks suppressed [ 521.537097][ T5084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10415'. [ 521.579393][ T4848] hsr_slave_1: left promiscuous mode [ 521.587465][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.603848][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.730371][ T4848] team0 (unregistering): Port device team_slave_1 removed [ 521.780463][ T4848] team0 (unregistering): Port device team_slave_0 removed [ 522.006047][ T5112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10420'. [ 522.047610][ T5010] chnl_net:caif_netlink_parms(): no params data found [ 522.266525][ T5010] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.289215][ T5010] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.318406][ T5010] bridge_slave_0: entered allmulticast mode [ 522.379084][ T5010] bridge_slave_0: entered promiscuous mode [ 522.407876][ T5010] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.422602][ T5010] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.441216][ T5010] bridge_slave_1: entered allmulticast mode [ 522.447847][ T5010] bridge_slave_1: entered promiscuous mode [ 522.494642][ T5010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.558612][ T5010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.655366][ T5010] team0: Port device team_slave_0 added [ 522.676461][ T5153] netlink: 'syz.0.10428': attribute type 27 has an invalid length. [ 522.686067][ T5010] team0: Port device team_slave_1 added [ 522.731462][ T5153] sit3: left allmulticast mode [ 522.742479][ T5153] bond2: left promiscuous mode [ 522.747381][ T5153] bond3: left promiscuous mode [ 522.770538][ T5153] ip6gre1: left promiscuous mode [ 522.782428][ T5153] bond8: left allmulticast mode [ 522.794964][ T5153] gre3: left promiscuous mode [ 522.803816][ T5153] bridge0: left promiscuous mode [ 522.808890][ T5153] bridge0: left allmulticast mode [ 522.810604][ T5164] netlink: 'syz.2.10430': attribute type 27 has an invalid length. [ 522.828107][ T5153] bond11: left promiscuous mode [ 522.835958][ T5153] ip6gre2: left promiscuous mode [ 522.890319][ T5153] geneve3: left promiscuous mode [ 522.926325][ T5178] loop2: detected capacity change from 0 to 128 [ 522.944251][ T5178] FAT-fs (loop2): bogus logical sector size 2134 [ 522.956114][ T5157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.971831][ T5178] FAT-fs (loop2): Can't find a valid FAT filesystem [ 522.993532][ T5157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 523.066407][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.074740][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.102942][ T5010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.115472][ T5173] tipc: Failed to obtain node identity [ 523.150353][ T5173] tipc: Enabling of bearer rejected, failed to enable media [ 523.182835][ T5606] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.196204][ T5606] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 53405 - 0 [ 523.207201][ T5606] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.224857][ T5606] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 53405 - 0 [ 523.245742][ T5606] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.261324][ T5606] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 53405 - 0 [ 523.273292][ T5010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.289132][ T5010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.317054][ T5010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.330324][ T5606] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 523.339277][ T5606] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 53405 - 0 [ 523.407028][ T5010] hsr_slave_0: entered promiscuous mode [ 523.413518][ T5010] hsr_slave_1: entered promiscuous mode [ 523.422923][ T5010] debugfs: 'hsr0' already exists in 'hsr' [ 523.428835][ T5010] Cannot create hsr debugfs directory [ 523.435270][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10436'. [ 523.511374][ T5197] loop2: detected capacity change from 0 to 128 [ 523.799196][ T5222] bio_check_eod: 102 callbacks suppressed [ 523.799217][ T5222] syz.2.10437: attempt to access beyond end of device [ 523.799217][ T5222] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 523.855663][ T5010] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 523.889040][ T5010] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 523.911246][ T5197] syz.2.10437: attempt to access beyond end of device [ 523.911246][ T5197] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 523.928219][ T5010] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 523.999498][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 523.999512][ T28] audit: type=1400 audit(2000000351.751:6780): avc: denied { accept } for pid=5234 comm="syz.0.10443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 524.062055][ T5010] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 524.213104][ T5010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.234999][ T5010] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.267784][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.274963][ T5606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.326532][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.333725][ T5606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.522061][ T5010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.671668][ T5331] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10459'. [ 524.769739][ T5981] kernel read not supported for file bpf-prog (pid: 5981 comm: kworker/0:5) [ 524.838213][ T5010] veth0_vlan: entered promiscuous mode [ 524.852565][ T5010] veth1_vlan: entered promiscuous mode [ 524.921912][ T5010] veth0_macvtap: entered promiscuous mode [ 524.937023][ T5010] veth1_macvtap: entered promiscuous mode [ 524.975012][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.054945][ T5010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.089487][ T5369] 6: renamed from wg2 [ 525.103343][ T5600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.113004][ T5600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.151664][ T5600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.164211][ T5600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.398525][ T5396] netlink: 'syz.6.10472': attribute type 27 has an invalid length. [ 525.432271][ T5396] ip_vti0: left promiscuous mode [ 525.453934][ T5396] bridge0: port 3(hsr0) entered disabled state [ 525.460197][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.674393][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.694605][ T5396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.833602][ T5396] bond1: left promiscuous mode [ 525.839043][ T5396] vcan1: left promiscuous mode [ 525.891073][ T5401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.899264][ T5401] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.909894][ T5401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.933083][ T307] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.941868][ T307] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.960632][ T307] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.000314][ T307] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.044715][ T307] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.064463][ T307] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.143992][ T307] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.171667][ T307] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.209107][ T5427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10482'. [ 526.451213][ T28] audit: type=1400 audit(2000000354.201:6781): avc: denied { mounton } for pid=5432 comm="syz.4.10483" path="/file0" dev="autofs" ino=128536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 526.538097][ T5445] loop2: detected capacity change from 0 to 128 [ 527.048559][ T5486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10496'. [ 527.234117][ T5497] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.10499'. [ 527.862820][ T5548] -1: renamed from syzkaller0 [ 528.076969][ T5572] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.10512'. [ 528.093624][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10512'. [ 528.183488][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10514'. [ 528.219249][ T5582] ref_ctr going negative. vaddr: 0x200000000002, curr val: -7112, delta: 1 [ 528.227987][ T5582] ref_ctr increment failed for inode: 0x63 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888109bab600 [ 528.295466][ T5585] netlink: 'syz.4.10516': attribute type 1 has an invalid length. [ 528.354001][ T5587] sctp: [Deprecated]: syz.2.10517 (pid 5587) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.354001][ T5587] Use struct sctp_sack_info instead [ 528.777765][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10532'. [ 528.813825][ T5636] loop4: detected capacity change from 0 to 128 [ 528.828956][ T5638] netlink: 'syz.0.10534': attribute type 5 has an invalid length. [ 528.853008][ T5638] netlink: 1132 bytes leftover after parsing attributes in process `syz.0.10534'. [ 528.880411][ T5638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10534'. [ 529.018693][ T5656] syz.4.10536: attempt to access beyond end of device [ 529.018693][ T5656] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 529.091785][ T5636] syz.4.10536: attempt to access beyond end of device [ 529.091785][ T5636] loop4: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 529.295026][ T5668] netlink: 'syz.4.10548': attribute type 11 has an invalid length. [ 529.655645][ T5697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10560'. [ 530.901472][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10570'. [ 531.018394][ T28] audit: type=1400 audit(2000000358.771:6782): avc: denied { listen } for pid=5732 comm="syz.6.10575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 531.088504][ T5739] loop4: detected capacity change from 0 to 256 [ 531.127738][ T5739] FAT-fs (loop4): codepage cp863 not found [ 531.429160][ T5771] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 532.895646][ T5825] lo speed is unknown, defaulting to 1000 [ 532.931869][ T5825] lo speed is unknown, defaulting to 1000 [ 532.942347][ T5825] lo speed is unknown, defaulting to 1000 [ 532.948315][ T5827] __nla_validate_parse: 4 callbacks suppressed [ 532.948328][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10616'. [ 533.118321][ T5825] infiniband syz2: set active [ 533.124391][ T5981] lo speed is unknown, defaulting to 1000 [ 533.177576][ T5825] infiniband syz2: added lo [ 533.220575][ T5825] RDS/IB: syz2: added [ 533.227678][ T5825] smc: adding ib device syz2 with port count 1 [ 533.234481][ T5825] smc: ib device syz2 port 1 has no pnetid [ 533.241966][ T1034] lo speed is unknown, defaulting to 1000 [ 533.247934][ T5825] lo speed is unknown, defaulting to 1000 [ 533.257133][ T5842] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.10620'. [ 533.285489][ T5825] lo speed is unknown, defaulting to 1000 [ 533.285998][ T5842] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10620'. [ 533.335534][ T5825] lo speed is unknown, defaulting to 1000 [ 533.342530][ T5846] loop2: detected capacity change from 0 to 512 [ 533.383586][ T5846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.402809][ T5846] ext4 filesystem being mounted at /401/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.435591][ T5825] lo speed is unknown, defaulting to 1000 [ 533.474111][ T5825] lo speed is unknown, defaulting to 1000 [ 533.512854][ T5825] lo speed is unknown, defaulting to 1000 [ 533.553242][ T5825] lo speed is unknown, defaulting to 1000 [ 533.635728][ T5854] netlink: 'syz.3.10623': attribute type 27 has an invalid length. [ 533.678439][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.687493][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.697815][ T5854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.132217][ T35] IPVS: starting estimator thread 0... [ 534.239293][ T5884] IPVS: using max 2400 ests per chain, 120000 per kthread [ 534.283687][ T5898] xt_hashlimit: size too large, truncated to 1048576 [ 534.416768][ T5910] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10645'. [ 534.790365][ T5939] netlink: 'syz.6.10651': attribute type 4 has an invalid length. [ 534.820971][ T23] lo speed is unknown, defaulting to 1000 [ 534.826842][ T23] syz2: Port: 1 Link DOWN [ 534.831574][ T23] lo speed is unknown, defaulting to 1000 [ 534.847334][ T5939] netlink: 'syz.6.10651': attribute type 4 has an invalid length. [ 534.871552][ T23] lo speed is unknown, defaulting to 1000 [ 534.889053][ T23] syz2: Port: 1 Link ACTIVE [ 534.925290][ T35] lo speed is unknown, defaulting to 1000 [ 534.964249][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10655'. [ 535.335785][ T5961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10661'. [ 535.401624][ T5967] lo speed is unknown, defaulting to 1000 [ 536.355367][ T6011] xt_hashlimit: size too large, truncated to 1048576 [ 536.658608][ T6018] netlink: 116376 bytes leftover after parsing attributes in process `syz.6.10684'. [ 536.749903][ T6018] netlink: zone id is out of range [ 536.812676][ T6018] netlink: zone id is out of range [ 536.837945][ T6030] xt_hashlimit: size too large, truncated to 1048576 [ 536.848018][ T6018] netlink: zone id is out of range [ 536.916192][ T6018] netlink: zone id is out of range [ 537.093783][ T28] audit: type=1400 audit(2000000364.851:6783): avc: denied { write } for pid=6042 comm="syz.6.10694" path="socket:[130427]" dev="sockfs" ino=130427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 537.162216][ T28] audit: type=1400 audit(2000000364.911:6784): avc: denied { read } for pid=6042 comm="syz.6.10694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 537.360321][ T6057] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10698'. [ 538.549429][ T28] audit: type=1400 audit(2000000366.301:6785): avc: denied { read } for pid=6109 comm="syz.2.10709" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 538.757937][ T28] audit: type=1400 audit(2000000366.301:6786): avc: denied { open } for pid=6109 comm="syz.2.10709" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 538.931610][ T28] audit: type=1326 audit(2000000366.691:6788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.4.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 538.955929][ T28] audit: type=1326 audit(2000000366.711:6789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.4.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 538.981200][ T28] audit: type=1326 audit(2000000366.711:6790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.4.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 539.019199][ T28] audit: type=1326 audit(2000000366.681:6787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.4.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 539.053291][ T28] audit: type=1326 audit(2000000366.711:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.4.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 539.078644][ T28] audit: type=1326 audit(2000000366.711:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.4.10714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 539.414539][ T6134] netlink: 212412 bytes leftover after parsing attributes in process `syz.4.10718'. [ 539.420524][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10716'. [ 539.494425][ T6144] loop4: detected capacity change from 0 to 512 [ 539.527522][ T6144] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 539.556976][ T6144] EXT4-fs error (device loop4): __ext4_iget:5378: inode #11: block 2: comm syz.4.10723: invalid block [ 539.597369][ T6144] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 539.597622][ T6144] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10723: couldn't read orphan inode 11 (err -117) [ 539.606822][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 539.606841][ C0] EXT4-fs (loop4): initial error at time 2000000367: __ext4_iget:5378: inode 11: block 2 [ 539.606891][ C0] EXT4-fs (loop4): last error at time 2000000367: __ext4_iget:5378: inode 11: block 2 [ 539.709617][ T6144] loop4: lost filesystem error report for type 5 error -117 [ 539.730875][ T6144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.114132][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.774595][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10755'. [ 540.804447][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10755'. [ 541.014205][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10760'. [ 541.032914][ T6244] bond2: entered promiscuous mode [ 541.057714][ T6249] loop2: detected capacity change from 0 to 512 [ 541.080546][ T6249] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10761'. [ 541.091429][ T6249] tipc: Invalid UDP bearer configuration [ 541.091440][ T6249] tipc: Enabling of bearer rejected, failed to enable media [ 541.106071][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.115012][ T6249] FAT-fs (loop2): Filesystem has been set read-only [ 541.125055][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.141469][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.153153][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.162246][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.178122][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.183576][ T4848] bond1 (unregistering): (slave gretap1): Releasing active interface [ 541.189175][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.203557][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.212930][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.221016][ T6249] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 541.248962][ T6256] rdma_rxe: rxe_newlink: failed to add lo [ 541.311558][ T4848] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.321540][ T4848] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.331919][ T4848] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 541.342882][ T4848] bond0 (unregistering): Released all slaves [ 541.350488][ T4848] bond1 (unregistering): Released all slaves [ 541.467920][ T4848] hsr_slave_0: left promiscuous mode [ 541.501657][ T4848] hsr_slave_1: left promiscuous mode [ 541.514635][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.522794][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.531245][ T4848] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.538721][ T4848] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.579676][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10771'. [ 541.597418][ T4848] veth0_virt_wifi: left promiscuous mode [ 541.609689][ T4848] veth1_macvtap: left promiscuous mode [ 541.615277][ T4848] veth0_macvtap: left promiscuous mode [ 541.634887][ T4848] veth1_vlan: left promiscuous mode [ 541.650093][ T4848] veth0_vlan: left promiscuous mode [ 542.133428][ T4848] IPVS: stop unused estimator thread 0... [ 542.326682][ T6319] loop6: detected capacity change from 0 to 8192 [ 542.673391][ T6347] loop4: detected capacity change from 0 to 164 [ 542.723847][ T6347] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 542.926091][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10807'. [ 542.960257][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10807'. [ 543.026702][ T28] kauditd_printk_skb: 476 callbacks suppressed [ 543.026718][ T28] audit: type=1400 audit(2000000370.781:7269): avc: denied { setopt } for pid=6362 comm="syz.4.10808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 543.253460][ T6379] lo speed is unknown, defaulting to 1000 [ 543.290160][ T28] audit: type=1400 audit(2000000371.041:7270): avc: denied { shutdown } for pid=6381 comm="syz.4.10817" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 543.384951][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10814'. [ 543.455533][ T28] audit: type=1400 audit(2000000371.201:7271): avc: denied { watch } for pid=6390 comm="syz.0.10820" path="/" dev="ramfs" ino=131656 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 543.655716][ T6397] lo speed is unknown, defaulting to 1000 [ 544.578145][ T28] audit: type=1326 audit(2000000372.331:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.10843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 544.608826][ T28] audit: type=1326 audit(2000000372.331:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.10843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 544.634433][ T28] audit: type=1326 audit(2000000372.361:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.10843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 544.715162][ T28] audit: type=1326 audit(2000000372.361:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.10843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 544.740760][ T28] audit: type=1326 audit(2000000372.361:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.10843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 544.763063][ T6453] __nla_validate_parse: 1 callbacks suppressed [ 544.763082][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10844'. [ 544.765413][ T28] audit: type=1326 audit(2000000372.421:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.10843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 544.783224][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10844'. [ 544.805008][ T28] audit: type=1326 audit(2000000372.421:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6448 comm="syz.3.10843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f878295c582 code=0x7ffc0000 [ 544.911326][ T6458] netlink: 'syz.4.10846': attribute type 1 has an invalid length. [ 544.996966][ T6466] loop6: detected capacity change from 0 to 164 [ 545.004927][ T6466] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 545.332109][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10856'. [ 545.347266][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10856'. [ 545.363950][ T6483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10856'. [ 545.373096][T29809] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.390860][T29809] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.407929][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10856'. [ 545.448503][T29809] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 545.459440][T29809] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 546.291641][ T6513] netlink: 'syz.3.10870': attribute type 13 has an invalid length. [ 546.777175][ T6551] netlink: 'syz.2.10885': attribute type 13 has an invalid length. [ 547.817001][ T6574] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 548.298522][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10897'. [ 549.238861][ T6627] syz_tun: entered promiscuous mode [ 549.252325][ T6627] macsec1: entered promiscuous mode [ 549.322858][ T6636] lo speed is unknown, defaulting to 1000 [ 549.556265][ T6638] loop6: detected capacity change from 0 to 512 [ 549.618226][ T6638] EXT4-fs: Ignoring removed nobh option [ 549.661217][ T6638] EXT4-fs (loop6): orphan cleanup on readonly fs [ 549.708701][ T6638] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.10927: EA inode hash validation failed [ 549.745329][ T6638] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 549.764043][ T6638] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.10927: corrupted inode contents [ 549.809112][ T6638] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 549.809602][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 549.809964][ T6638] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #15: comm syz.6.10927: mark_inode_dirty error [ 549.818767][ C1] EXT4-fs (loop6): initial error at time 2000000377: ext4_do_update_inode:5569: inode 15 [ 549.818807][ C1] EXT4-fs (loop6): last error at time 2000000377: ext4_do_update_inode:5569: inode 15 [ 549.920711][ T6638] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 549.922255][ T6638] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #15: comm syz.6.10927: corrupted inode contents [ 549.978814][ T6638] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 549.979381][ T6638] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #15: comm syz.6.10927: mark_inode_dirty error [ 550.046384][ T6638] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 550.047484][ T6638] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3002: inode #15: comm syz.6.10927: mark inode dirty (error -117) [ 550.114578][ T6638] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 550.119060][ T6638] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -117) [ 550.140067][ T6668] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10925'. [ 550.140100][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10925'. [ 550.186603][ T6638] EXT4-fs (loop6): 1 orphan inode deleted [ 550.203373][ T6638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 550.212131][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10931'. [ 550.225432][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10931'. [ 550.257571][ T6673] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10931'. [ 550.396320][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.443300][ T6690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10937'. [ 550.478132][ T6694] netlink: 'syz.6.10936': attribute type 13 has an invalid length. [ 550.486783][ T6694] netlink: 'syz.6.10936': attribute type 17 has an invalid length. [ 550.501956][ T7696] lo speed is unknown, defaulting to 1000 [ 550.507906][ T6693] tipc: Enabling of bearer rejected, failed to enable media [ 550.508259][ T7696] syz2: Port: 1 Link DOWN [ 550.522577][ T5600] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.550941][ T5600] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.616507][ T6694] syz_tun: left promiscuous mode [ 550.654597][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.679181][ T6694] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.739029][ T6694] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.755985][ T7696] lo speed is unknown, defaulting to 1000 [ 550.767695][ T5600] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.801126][ T10] lo speed is unknown, defaulting to 1000 [ 550.807006][ T5600] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 550.818404][ T10] syz2: Port: 1 Link ACTIVE [ 551.299095][ T6708] netlink: 'syz.6.10944': attribute type 1 has an invalid length. [ 551.299216][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10953'. [ 551.324126][ T6707] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.347418][ T6708] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.413758][ T6711] syz_tun: entered promiscuous mode [ 551.420403][ T6711] macsec1: entered promiscuous mode [ 551.441222][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 551.441236][ T28] audit: type=1326 audit(2000000379.201:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.492200][ T28] audit: type=1326 audit(2000000379.201:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.494047][ T6714] bond4: (slave veth13): Enslaving as an active interface with a down link [ 551.529029][ T28] audit: type=1326 audit(2000000379.201:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.558412][ T6707] vlan4: entered allmulticast mode [ 551.578831][ T28] audit: type=1326 audit(2000000379.201:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.602348][ T6707] bond3: entered allmulticast mode [ 551.612602][ T6708] bond4: (slave dummy0): making interface the new active one [ 551.644530][ T6708] dummy0: entered promiscuous mode [ 551.650774][ T28] audit: type=1326 audit(2000000379.201:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.659823][ T6708] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 551.686312][ T28] audit: type=1326 audit(2000000379.201:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.747022][ T28] audit: type=1326 audit(2000000379.201:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.774796][ T28] audit: type=1326 audit(2000000379.201:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6717 comm="syz.4.10946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f265a6cc819 code=0x7ffc0000 [ 551.825465][ T6731] netlink: 'syz.0.10951': attribute type 3 has an invalid length. [ 551.844307][ T6731] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10951'. [ 551.859394][ T6720] bond4 (unregistering): (slave veth13): Releasing active interface [ 551.876933][ T6734] loop4: detected capacity change from 0 to 2048 [ 551.896527][ T6720] bond4 (unregistering): (slave dummy0): Releasing active interface [ 551.911995][ T6720] bond4 (unregistering): Released all slaves [ 551.924229][ T6736] ref_ctr_offset mismatch. inode: 0x1daa offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 551.956265][ T6734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.973741][ T6734] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.089771][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.139040][ T6800] ref_ctr increment failed for inode: 0xacc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103da5e80 [ 553.364405][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10984'. [ 553.604070][ T6823] loop4: detected capacity change from 0 to 512 [ 553.757338][ T6823] EXT4-fs: Ignoring removed nobh option [ 553.794875][ T6823] EXT4-fs (loop4): orphan cleanup on readonly fs [ 553.849876][ T6823] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.10985: EA inode hash validation failed [ 553.882957][ T6823] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.10985: corrupted inode contents [ 553.991034][ T6823] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 553.996152][ T6823] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.10985: mark_inode_dirty error [ 554.005332][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 554.005352][ C0] EXT4-fs (loop4): initial error at time 2000000381: ext4_do_update_inode:5569: inode 15 [ 554.005377][ C0] EXT4-fs (loop4): last error at time 2000000381: ext4_do_update_inode:5569: inode 15 [ 554.150592][ T6850] ip6gre2: entered promiscuous mode [ 554.155822][ T6850] ip6gre2: entered allmulticast mode [ 554.160425][ T6823] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 554.161563][ T6823] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.10985: corrupted inode contents [ 554.170879][ T6846] loop2: detected capacity change from 0 to 512 [ 554.218597][ T6823] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 554.232122][ T6823] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.10985: mark_inode_dirty error [ 554.259065][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10999'. [ 554.361549][ T6846] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10997: bg 0: block 248: padding at end of block bitmap is not set [ 554.382029][ T6823] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 554.391032][ T6823] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.10985: mark inode dirty (error -117) [ 554.480103][ T6846] loop2: lost filesystem error report for type 5 error -117 [ 554.481889][ T6846] Quota error (device loop2): write_blk: dquota write failed [ 554.489687][ T6823] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 554.496831][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 554.513228][ C0] EXT4-fs (loop2): last error at time 2000000382: ext4_validate_block_bitmap:441 [ 554.517285][ T6823] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 554.563644][ T6823] EXT4-fs (loop4): 1 orphan inode deleted [ 554.580665][ T6823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 554.613993][ T6846] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 554.721586][ T6846] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.10997: Failed to acquire dquot type 1 [ 554.762890][ T6846] loop2: lost filesystem error report for type 5 error -117 [ 554.776284][ T6846] EXT4-fs (loop2): 1 truncate cleaned up [ 554.839229][ T6846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.910491][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.921932][ T6846] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.016663][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.288221][ T6885] __nla_validate_parse: 1 callbacks suppressed [ 555.288313][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11010'. [ 555.378586][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11010'. [ 556.482859][ T6916] lo speed is unknown, defaulting to 1000 [ 557.187302][ T6950] bond11: entered allmulticast mode [ 557.201171][ T6950] ip6gre2: entered allmulticast mode [ 557.592287][ T6957] loop2: detected capacity change from 0 to 512 [ 557.630496][ T6957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 557.683219][ T6966] netlink: 172 bytes leftover after parsing attributes in process `syz.3.11039'. [ 557.712922][ T6957] EXT4-fs (loop2): 1 truncate cleaned up [ 557.724975][ T6957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.215808][ T6946] syz.4.11031 (6946) used greatest stack depth: 7000 bytes left [ 558.246538][ T6980] netlink: 'syz.4.11044': attribute type 1 has an invalid length. [ 558.295256][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.628601][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.648369][ T6980] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 558.661810][ T6980] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 558.742055][ T6988] team0 (unregistering): Port device team_slave_0 removed [ 558.779584][ T6988] team0 (unregistering): Port device team_slave_1 removed [ 558.827153][ T6988] team0 (unregistering): Port device netdevsim1 removed [ 559.137594][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 559.137609][ T28] audit: type=1400 audit(2000000386.891:7348): avc: denied { listen } for pid=7014 comm="syz.4.11057" lport=57673 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 559.563637][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.668255][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11069'. [ 559.695087][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11069'. [ 559.711198][ T7045] loop2: detected capacity change from 0 to 512 [ 559.720635][ T7045] ext4: Unknown parameter 'noacl' [ 562.057193][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11088'. [ 562.092868][ T7089] 8021q: adding VLAN 0 to HW filter on device bond12 [ 562.204468][ T7089] macsec1: entered promiscuous mode [ 562.231818][ T7089] bond12: entered promiscuous mode [ 562.256234][ T7089] bond12: left promiscuous mode [ 562.301516][ T7098] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11090'. [ 562.345718][ T7098] netlink: 228 bytes leftover after parsing attributes in process `syz.4.11090'. [ 562.455991][ T7110] netlink: 'syz.0.11095': attribute type 1 has an invalid length. [ 562.476636][ T7110] 8021q: adding VLAN 0 to HW filter on device bond13 [ 562.607169][ T7120] loop4: detected capacity change from 0 to 1024 [ 562.632905][ T7120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.657134][ T7128] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.11100'. [ 562.671385][ T7120] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.11099: Allocating blocks 385-513 which overlap fs metadata [ 562.699070][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11100'. [ 562.772712][ T7120] EXT4-fs (loop4): pa ffff88810768b620: logic 16, phys. 129, len 24 [ 562.781455][ T7120] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 7 [ 562.799130][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.806900][ T7130] lo speed is unknown, defaulting to 1000 [ 562.829724][ T7132] netlink: 'syz.4.11102': attribute type 4 has an invalid length. [ 563.207433][ T7144] lo speed is unknown, defaulting to 1000 [ 563.407210][ T7152] loop2: detected capacity change from 0 to 256 [ 563.425972][ T7152] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 563.466066][ T7152] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 563.493073][ T28] audit: type=1326 audit(2000000391.251:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 563.624763][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11114'. [ 563.647610][ T28] audit: type=1326 audit(2000000391.251:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 563.755555][ T28] audit: type=1326 audit(2000000391.251:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 563.889204][ T28] audit: type=1326 audit(2000000391.251:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 563.968979][ T28] audit: type=1326 audit(2000000391.251:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.045603][ T28] audit: type=1326 audit(2000000391.251:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.226848][ T28] audit: type=1326 audit(2000000391.251:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.319534][ T28] audit: type=1326 audit(2000000391.251:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.409363][ T28] audit: type=1326 audit(2000000391.251:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.449017][ T28] audit: type=1326 audit(2000000391.251:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.487622][ T28] audit: type=1326 audit(2000000391.251:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.531515][ T28] audit: type=1326 audit(2000000391.251:7360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.557890][ T28] audit: type=1326 audit(2000000391.251:7361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.583366][ T28] audit: type=1326 audit(2000000391.251:7362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.607221][ T28] audit: type=1326 audit(2000000391.251:7363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.652049][ T28] audit: type=1326 audit(2000000391.251:7364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.2.11110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 564.783877][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11123'. [ 564.824526][ T7184] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 565.069157][ T7198] loop2: detected capacity change from 0 to 512 [ 565.094649][ T7198] EXT4-fs: Ignoring removed nobh option [ 565.139258][ T7198] EXT4-fs (loop2): orphan cleanup on readonly fs [ 565.186616][ T7198] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.11127: EA inode hash validation failed [ 565.224419][ T7198] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.11127: corrupted inode contents [ 565.237663][ T7198] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.238747][ T7198] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.11127: mark_inode_dirty error [ 565.248253][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 565.248349][ C0] EXT4-fs (loop2): initial error at time 2000000392: ext4_do_update_inode:5569: inode 15 [ 565.248546][ C0] EXT4-fs (loop2): last error at time 2000000392: ext4_do_update_inode:5569: inode 15 [ 565.280015][ T7198] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.346187][ T7198] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.11127: corrupted inode contents [ 565.399321][ T7198] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.455729][ T7209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.472442][ T7198] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.11127: mark_inode_dirty error [ 565.502682][ T7198] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.522618][ T7212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11131'. [ 565.542040][ T7198] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.11127: mark inode dirty (error -117) [ 565.583958][ T7198] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 565.598209][ T7212] bridge9: entered promiscuous mode [ 565.602469][ T7198] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 565.608788][ T7212] bridge9: port 1(macvtap1) entered blocking state [ 565.620502][ T7198] EXT4-fs (loop2): 1 orphan inode deleted [ 565.633812][ T7212] bridge9: port 1(macvtap1) entered disabled state [ 565.646642][ T7198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 565.647417][ T7212] macvtap1: entered allmulticast mode [ 565.690982][ T7212] bridge9: entered allmulticast mode [ 565.704553][ T7212] macvtap1: left allmulticast mode [ 565.709930][ T7212] bridge9: left allmulticast mode [ 565.716454][ T7212] bridge9: left promiscuous mode [ 565.873803][ T7225] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11137'. [ 565.893692][ T7222] lo: Caught tx_queue_len zero misconfig [ 565.901122][ T7222] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 565.913544][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.996265][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11144'. [ 566.092617][ T7246] netlink: 'syz.0.11146': attribute type 4 has an invalid length. [ 566.142143][ T7246] netlink: 'syz.0.11146': attribute type 4 has an invalid length. [ 566.475436][ T7267] siw: device registration error -23 [ 567.217649][ T7297] netlink: 'syz.6.11165': attribute type 1 has an invalid length. [ 567.252038][ T7300] __nla_validate_parse: 1 callbacks suppressed [ 567.252224][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11166'. [ 567.269013][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11166'. [ 567.322826][ T7297] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 567.357939][ T7297] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 567.369247][ T7297] bond4: (slave vxcan3): making interface the new active one [ 567.377774][ T7297] bond4: (slave vxcan3): Enslaving as an active interface with an up link [ 567.398433][ T7297] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 567.410856][ T7297] bond4: (slave vxcan5): Enslaving as a backup interface with an up link [ 567.445471][ T7311] tipc: Enabling of bearer rejected, failed to enable media [ 567.495863][ T7317] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.11172'. [ 567.505494][ T7317] netlink: 1472 bytes leftover after parsing attributes in process `syz.0.11172'. [ 567.542251][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11174'. [ 567.706799][ T7326] IPv6: sit6: Disabled Multicast RS [ 568.097925][ T7335] lo speed is unknown, defaulting to 1000 [ 568.164313][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11179'. [ 568.375266][ T7349] netlink: 'syz.3.11185': attribute type 4 has an invalid length. [ 568.580276][ T7355] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 569.153252][ T7373] netlink: 'syz.2.11196': attribute type 4 has an invalid length. [ 569.436753][ T7383] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11200'. [ 569.461727][ T7383] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11200'. [ 570.403578][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11213'. [ 570.414294][ T7415] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 570.457955][ T7413] loop4: detected capacity change from 0 to 1024 [ 570.500731][ T7417] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11214'. [ 570.514452][ T7413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 570.533798][ T7413] System zones: 0-1, 3-36 [ 570.589256][ T7413] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.11212: bad orphan inode 134217728 [ 570.632560][ T7413] loop4: lost filesystem error report for type 5 error -117 [ 570.638677][ T7413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.757994][ T7431] netlink: 'syz.3.11219': attribute type 13 has an invalid length. [ 570.766555][ T7431] netlink: 'syz.3.11219': attribute type 17 has an invalid length. [ 570.882889][ T7437] netlink: 'syz.2.11221': attribute type 1 has an invalid length. [ 571.131408][ T7431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 571.199277][ T7437] bond4: entered promiscuous mode [ 571.207080][ T7437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.281776][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.651870][ T7470] loop4: detected capacity change from 0 to 164 [ 571.679025][ T7470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 572.368596][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 572.368612][ T28] audit: type=1400 audit(2000000400.111:7371): avc: denied { name_bind } for pid=7513 comm="syz.0.11246" src=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 572.410760][ T7516] dvmrp1: entered allmulticast mode [ 572.619023][ T7526] bridge_slave_0: left allmulticast mode [ 572.627925][ T7526] bridge_slave_0: left promiscuous mode [ 572.639766][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.673127][ T7526] bridge_slave_1: left allmulticast mode [ 572.679335][ T7526] bridge_slave_1: left promiscuous mode [ 572.694027][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.725142][ T7526] team0: Port device team_slave_0 removed [ 572.733734][ T7526] team0: Port device team_slave_1 removed [ 572.762348][ T7526] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 573.160824][ T7563] netlink: 'syz.2.11266': attribute type 13 has an invalid length. [ 573.168816][ T7563] netlink: 'syz.2.11266': attribute type 17 has an invalid length. [ 573.170740][ T7518] loop4: detected capacity change from 0 to 1024 [ 573.292025][ T7563] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.355903][ T7518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.368154][ T7563] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 573.521891][ T7569] loop2: detected capacity change from 0 to 512 [ 573.555392][ T7569] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.11267: inode has both inline data and extents flags [ 573.569403][ T7569] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 573.569533][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 573.585064][ C1] EXT4-fs (loop2): initial error at time 2000000401: ext4_orphan_get:1391: inode 15 [ 573.594492][ C1] EXT4-fs (loop2): last error at time 2000000401: ext4_orphan_get:1391: inode 15 [ 573.669028][ T7569] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11267: couldn't read orphan inode 15 (err -117) [ 573.682936][ T7569] loop2: lost filesystem error report for type 5 error -117 [ 573.683309][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.700963][ T7569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.781013][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.829902][ T7574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 574.430003][ T7592] __nla_validate_parse: 4 callbacks suppressed [ 574.430020][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11276'. [ 574.477276][ T7592] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.777162][ T7600] netlink: 'syz.0.11280': attribute type 1 has an invalid length. [ 574.798154][ T7600] bond14: entered promiscuous mode [ 574.803866][ T7600] 8021q: adding VLAN 0 to HW filter on device bond14 [ 574.838263][ T7600] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 574.852549][ T7600] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 574.863265][ T7600] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 576.265393][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11293'. [ 576.313563][ T28] audit: type=1326 audit(2000000404.071:7372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.345209][ T28] audit: type=1326 audit(2000000404.081:7373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.371058][ T28] audit: type=1326 audit(2000000404.081:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.418610][ T28] audit: type=1326 audit(2000000404.081:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.454620][ T28] audit: type=1326 audit(2000000404.081:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.479854][ T28] audit: type=1326 audit(2000000404.081:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.505143][ T28] audit: type=1326 audit(2000000404.081:7378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.529172][ T28] audit: type=1326 audit(2000000404.081:7379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.555012][ T28] audit: type=1326 audit(2000000404.081:7380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7634 comm="syz.3.11294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f878295c819 code=0x7ffc0000 [ 576.864243][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11302'. [ 576.881011][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11302'. [ 577.306389][ T7667] loop2: detected capacity change from 0 to 512 [ 577.373446][ T7667] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 577.397108][ T7667] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 577.407529][ T7667] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.11307: Corrupt directory, running e2fsck is recommended [ 577.440132][ T7667] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 577.460700][ T7667] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.11307: corrupted in-inode xattr: e_name out of bounds [ 577.474828][ T7667] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 577.477048][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 577.477021][ T7667] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11307: couldn't read orphan inode 15 (err -117) [ 577.477152][ T28] audit: type=1326 audit(2000000405.231:7393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 577.489550][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 577.506339][ T7667] loop2: lost filesystem error report for type 5 error -117 [ 577.527658][ C0] EXT4-fs (loop2): initial error at time 2000000405: ext4_iget_extra_inode:5025: inode 15 [ 577.527690][ C0] EXT4-fs (loop2): last error at time 2000000405: ext4_iget_extra_inode:5025: inode 15 [ 577.591494][ T28] audit: type=1326 audit(2000000405.231:7394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 577.631817][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11308'. [ 577.641534][ T28] audit: type=1326 audit(2000000405.261:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 577.655541][ T7667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.679695][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11308'. [ 577.702758][ T28] audit: type=1326 audit(2000000405.261:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 577.752416][ T7667] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 577.765442][ T7667] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 577.779369][ T28] audit: type=1326 audit(2000000405.261:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 577.789566][ T7667] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.11307: Corrupt directory, running e2fsck is recommended [ 577.829183][ T28] audit: type=1326 audit(2000000405.261:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 577.862900][ T28] audit: type=1326 audit(2000000405.261:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 577.894889][ T7680] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 577.920957][ T7680] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 577.934592][ T7680] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.11307: Corrupt directory, running e2fsck is recommended [ 577.996425][ T7667] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 578.019316][ T7667] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 578.043957][ T7667] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.11307: Corrupt directory, running e2fsck is recommended [ 578.088798][ T7680] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 578.119099][ T28] audit: type=1326 audit(2000000405.261:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 578.171441][ T28] audit: type=1326 audit(2000000405.261:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 578.202532][ T28] audit: type=1326 audit(2000000405.261:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7658 comm="syz.6.11304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 578.203831][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.321906][ T7700] loop2: detected capacity change from 0 to 1024 [ 578.419424][ T7700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.481197][ T7700] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.575824][ T7718] netlink: 'syz.3.11320': attribute type 10 has an invalid length. [ 578.596008][ T7700] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.11314: lblock 0 mapped to illegal pblock 0 (length 1) [ 578.620429][ T7700] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 578.642772][ T7700] EXT4-fs (loop2): This should not happen!! Data will be lost [ 578.642772][ T7700] [ 578.676576][ T4848] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:17: lblock 0 mapped to illegal pblock 0 (length 1) [ 578.709154][ T4848] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 578.723791][ T4848] EXT4-fs (loop2): This should not happen!! Data will be lost [ 578.723791][ T4848] [ 578.742497][ T4848] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 112: padding at end of block bitmap is not set [ 578.759137][ T4848] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 578.774693][ T4848] EXT4-fs (loop2): This should not happen!! Data will be lost [ 578.774693][ T4848] [ 578.824217][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 579.460827][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11329'. [ 579.612773][ T7751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11333'. [ 579.656671][ T7746] vlan2: entered allmulticast mode [ 579.689917][ T7746] bridge_slave_0: entered allmulticast mode [ 579.946831][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11336'. [ 579.969848][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11336'. [ 580.433511][ T7751] 8021q: adding VLAN 0 to HW filter on device bond15 [ 580.613411][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11342'. [ 580.650944][ T7774] bridge_slave_1: left allmulticast mode [ 580.656791][ T7774] bridge_slave_1: left promiscuous mode [ 580.673498][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.743030][ T7774] bridge_slave_0: left allmulticast mode [ 580.813061][ T7774] bridge_slave_0: left promiscuous mode [ 580.821113][ T7780] netlink: 'syz.2.11343': attribute type 1 has an invalid length. [ 580.840300][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.923960][ T7782] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 580.951025][ T7781] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 581.022330][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11346'. [ 581.051526][ T7781] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 581.077901][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11346'. [ 581.095799][ T7781] bond5: (slave ip6gre1): making interface the new active one [ 581.107023][ T7781] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 581.167725][ T7794] loop4: detected capacity change from 0 to 512 [ 581.189061][ T7794] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 581.264153][ T7804] tipc: Failed to remove unknown binding: 66,0,0/0:792250464/792250465 [ 581.282201][ T7794] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.11349: bad orphan inode 131083 [ 581.304227][ T7794] loop4: lost filesystem error report for type 5 error -117 [ 581.304932][ T7794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.639073][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.247511][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11374'. [ 582.725788][ T7860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.059651][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11385'. [ 583.212494][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11388'. [ 583.778604][ T7903] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.798830][ T7916] netlink: 'syz.3.11396': attribute type 2 has an invalid length. [ 584.307385][ T7938] vlan0: entered allmulticast mode [ 584.504542][ T7954] __nla_validate_parse: 3 callbacks suppressed [ 584.504632][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11411'. [ 584.573903][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11413'. [ 584.796175][ T7954] 8021q: adding VLAN 0 to HW filter on device bond5 [ 585.031817][ T7969] loop2: detected capacity change from 0 to 1024 [ 585.055546][ T7970] loop6: detected capacity change from 0 to 512 [ 585.057579][ T7969] EXT4-fs: Ignoring removed orlov option [ 585.141616][ T7969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.178565][ T7970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.202448][ T7970] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.236394][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 585.236408][ T28] audit: type=1400 audit(2000000412.991:7453): avc: denied { setattr } for pid=7967 comm="syz.6.11416" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 585.302998][ T7980] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 585.343671][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11421'. [ 585.374425][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.400375][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.504394][ T7991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11425'. [ 585.525015][ T7993] loop6: detected capacity change from 0 to 164 [ 585.600030][ T7991] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11425'. [ 585.680306][ T7991] macvlan0: entered allmulticast mode [ 585.689705][ T7991] veth1_vlan: entered allmulticast mode [ 585.780660][ T7997] 8021q: adding VLAN 0 to HW filter on device bond1 [ 585.801166][ T7997] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 585.902670][ T57] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 586.065149][ T4848] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 586.213192][ T8012] lo speed is unknown, defaulting to 1000 [ 586.442378][ T7987] loop2: detected capacity change from 0 to 1024 [ 586.521620][ T7987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.531567][ T8032] netlink: 'syz.0.11440': attribute type 2 has an invalid length. [ 586.725236][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.173442][ T28] audit: type=1400 audit(2000000415.921:7454): avc: denied { cmd } for pid=8116 comm="syz.3.11471" path="socket:[138020]" dev="sockfs" ino=138020 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 589.747293][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11481'. [ 589.781307][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11482'. [ 589.836239][ T8147] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 589.848403][ T8147] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 589.903307][ T8150] macvlan2: entered promiscuous mode [ 589.908787][ T8150] macvlan2: entered allmulticast mode [ 589.931267][ T8150] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 590.069846][ T8153] all: renamed from bridge_slave_1 (while UP) [ 590.152573][ T8160] loop4: detected capacity change from 0 to 512 [ 590.200727][ T8160] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 590.234933][ T8160] System zones: 0-2, 18-18, 34-34 [ 590.258350][ T8160] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11487: bg 0: block 248: padding at end of block bitmap is not set [ 590.329131][ T8160] loop4: lost filesystem error report for type 5 error -117 [ 590.329528][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 590.343340][ C1] EXT4-fs (loop4): last error at time 2000000418: ext4_validate_block_bitmap:441 [ 590.353921][ T8160] Quota error (device loop4): write_blk: dquota write failed [ 590.361370][ T8160] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 590.379133][ T8160] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.11487: Failed to acquire dquot type 1 [ 590.399373][ T8160] loop4: lost filesystem error report for type 5 error -117 [ 590.407546][ T8160] EXT4-fs (loop4): 1 truncate cleaned up [ 590.416157][ T8160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.430490][ T8160] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.640545][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.806064][ T8204] netlink: 'syz.4.11500': attribute type 2 has an invalid length. [ 590.825726][ T8204] netlink: 'syz.4.11500': attribute type 2 has an invalid length. [ 590.845471][ T8206] lo speed is unknown, defaulting to 1000 [ 591.791504][ T8237] loop6: detected capacity change from 0 to 8192 [ 592.545283][ T8258] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.631435][ T8258] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.730836][ T8258] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.821303][ T8258] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 592.849691][ T8258] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.957739][ T307] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.017959][ T307] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.075590][ T307] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.122904][ T307] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.337429][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11536'. [ 593.474799][ T8284] Invalid ELF header magic: != ELF [ 593.559707][ T28] audit: type=1400 audit(2000000421.311:7455): avc: denied { setopt } for pid=8302 comm="syz.2.11542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 593.662583][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11543'. [ 593.707154][ T8315] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 594.332135][ T8350] netlink: 'syz.0.11560': attribute type 4 has an invalid length. [ 594.352315][ T8350] netlink: 'syz.0.11560': attribute type 4 has an invalid length. [ 594.658767][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11562'. [ 596.505960][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.555441][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.626734][ T307] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.654588][ T307] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.693958][ T307] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.729053][ T307] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.115142][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11579'. [ 597.294682][ T8410] vlan2: entered allmulticast mode [ 597.333046][ T8410] bridge_slave_0: entered allmulticast mode [ 597.484657][ T8418] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 597.606183][ T8433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11589'. [ 597.743178][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11595'. [ 597.754789][ T8447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11595'. [ 597.781294][ T5982] kernel write not supported for file bpf-prog (pid: 5982 comm: kworker/0:6) [ 597.844174][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11601'. [ 597.864896][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11598'. [ 597.994300][ T28] audit: type=1400 audit(2000000425.751:7456): avc: denied { nlmsg_write } for pid=8459 comm="syz.3.11602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 598.059374][ T8470] netlink: 'syz.0.11606': attribute type 11 has an invalid length. [ 598.088665][ T8455] vlan2: entered allmulticast mode [ 598.095706][ T8455] bridge_slave_0: entered allmulticast mode [ 598.212778][ T8460] lo speed is unknown, defaulting to 1000 [ 598.256865][ T8477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11609'. [ 598.579315][ T28] audit: type=1400 audit(2000000426.331:7457): avc: denied { listen } for pid=8501 comm="syz.3.11616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 598.736842][ T8507] netlink: 'syz.3.11618': attribute type 1 has an invalid length. [ 598.807574][ T8507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.068309][ T8514] loop2: detected capacity change from 0 to 1024 [ 599.149295][ T8514] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 599.158740][ T8514] System zones: 0-1, 3-36 [ 599.200740][ T8515] vlan2: entered promiscuous mode [ 599.205875][ T8515] bond2: entered promiscuous mode [ 599.243030][ T8507] bond2: (slave geneve3): making interface the new active one [ 599.284067][ T8507] geneve3: entered promiscuous mode [ 599.300930][ T8507] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 599.308339][ T8514] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.11621: bad orphan inode 134217728 [ 599.337233][ T3302] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.338272][T29809] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.372604][ T5606] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.395526][ T5606] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.439612][ T8514] loop2: lost filesystem error report for type 5 error -117 [ 599.468425][ T8514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.573018][ T28] audit: type=1400 audit(2000000427.331:7458): avc: denied { listen } for pid=8532 comm="syz.6.11628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 599.612038][ T28] audit: type=1400 audit(2000000427.331:7459): avc: denied { read } for pid=8532 comm="syz.6.11628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.018266][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.247458][ T8562] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11636'. [ 600.308576][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11636'. [ 600.452225][ T28] audit: type=1326 audit(2000000428.211:7460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.0.11637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f176797c819 code=0x7fc00000 [ 600.492451][ T28] audit: type=1326 audit(2000000428.211:7461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8564 comm="syz.0.11637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f176797c819 code=0x7fc00000 [ 600.592794][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11654'. [ 600.690819][ T8589] netlink: 'syz.3.11646': attribute type 1 has an invalid length. [ 600.715753][ T8587] loop6: detected capacity change from 0 to 1024 [ 600.759326][ T8589] 8021q: adding VLAN 0 to HW filter on device bond3 [ 600.781569][ T8587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 600.807076][ T8587] System zones: 0-1, 3-36 [ 600.857130][ T8587] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.11644: bad orphan inode 134217728 [ 600.903980][ T8589] bond3: entered promiscuous mode [ 600.912125][ T8597] bond3: (slave dummy0): making interface the new active one [ 600.924700][ T8587] loop6: lost filesystem error report for type 5 error -117 [ 600.929028][ T8597] dummy0: entered promiscuous mode [ 600.946915][ T8587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.961321][ T8597] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 601.003191][ T8589] bond3 (unregistering): left promiscuous mode [ 601.010434][ T8589] dummy0: left promiscuous mode [ 601.024630][ T8589] bond3 (unregistering): (slave dummy0): Releasing active interface [ 601.044500][ T8589] bond3 (unregistering): Released all slaves [ 601.301745][ T28] audit: type=1326 audit(2000000429.051:7462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.2.11657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 601.368091][ T28] audit: type=1326 audit(2000000429.051:7463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.2.11657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 601.401981][ T28] audit: type=1326 audit(2000000429.051:7464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.2.11657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 601.446689][ T28] audit: type=1326 audit(2000000429.051:7465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8620 comm="syz.2.11657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7ffc0000 [ 601.556108][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.616716][ T8632] loop2: detected capacity change from 0 to 2048 [ 601.704838][ T8632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.767296][ T8632] netlink: 'syz.2.11660': attribute type 2 has an invalid length. [ 601.815029][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.968148][ T8662] netlink: 'syz.0.11674': attribute type 4 has an invalid length. [ 601.981210][ T8662] netlink: 'syz.0.11674': attribute type 4 has an invalid length. [ 602.045984][ T8665] loop6: detected capacity change from 0 to 1024 [ 602.072712][ T8665] EXT4-fs: Ignoring removed orlov option [ 602.106555][ T8665] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 602.164679][ T8665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.187698][ T8674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8674 comm=syz.0.11679 [ 602.221269][ T8674] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=8674 comm=syz.0.11679 [ 602.594837][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.851487][ T8694] __nla_validate_parse: 3 callbacks suppressed [ 602.851503][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11688'. [ 603.521827][ T8709] loop6: detected capacity change from 0 to 256 [ 603.567577][ T8709] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 603.831215][ T8719] ip6gretap0: entered promiscuous mode [ 603.837705][ T8719] macsec2: entered promiscuous mode [ 604.053059][ T8729] netlink: 'syz.2.11701': attribute type 4 has an invalid length. [ 604.402541][ T8731] netlink: 'syz.2.11701': attribute type 4 has an invalid length. [ 604.559981][ T8743] netlink: 'syz.0.11704': attribute type 1 has an invalid length. [ 604.585778][ T8743] 8021q: adding VLAN 0 to HW filter on device bond16 [ 604.625335][ T8743] vlan2: entered promiscuous mode [ 604.640734][ T8743] bond16: entered promiscuous mode [ 605.260281][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 605.260296][ T28] audit: type=1400 audit(2000000433.021:7477): avc: denied { mount } for pid=8755 comm="syz.0.11710" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 605.542909][ T8771] bond6: entered allmulticast mode [ 605.582804][ T8771] bridge8: entered promiscuous mode [ 605.590453][ T8771] bridge8: entered allmulticast mode [ 605.615856][ T8771] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 608.033836][ T8814] lo speed is unknown, defaulting to 1000 [ 608.111135][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11731'. [ 608.813465][ T8827] loop2: detected capacity change from 0 to 512 [ 608.857292][ T8827] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.11735: corrupted in-inode xattr: e_value out of bounds [ 608.890297][ T8827] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 608.890477][ T8827] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.11735: couldn't read orphan inode 15 (err -117) [ 608.899654][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 608.899675][ C1] EXT4-fs (loop2): initial error at time 2000000436: ext4_iget_extra_inode:5025: inode 15 [ 608.899716][ C1] EXT4-fs (loop2): last error at time 2000000436: ext4_iget_extra_inode:5025: inode 15 [ 608.952891][ T8827] loop2: lost filesystem error report for type 5 error -117 [ 608.961056][ T8827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.083910][ T8827] netlink: 'syz.2.11735': attribute type 4 has an invalid length. [ 609.140922][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.268503][ T8849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11741'. [ 609.326560][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11744'. [ 609.462826][ T8861] veth1_to_team: Caught tx_queue_len zero misconfig [ 609.509344][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11749'. [ 609.532699][ T8863] ip6gre1: entered promiscuous mode [ 609.542345][ T8863] ip6gre1: entered allmulticast mode [ 609.557250][ T8863] netlink: 'syz.3.11749': attribute type 6 has an invalid length. [ 609.580384][ T8863] netlink: 72 bytes leftover after parsing attributes in process `syz.3.11749'. [ 609.643010][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11751'. [ 609.652143][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11751'. [ 609.758437][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11754'. [ 609.769274][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11754'. [ 609.821721][ T28] audit: type=1326 audit(2000000437.581:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8876 comm="syz.4.11755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f265a6cc819 code=0x0 [ 610.302504][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11756'. [ 610.786203][ T8902] netlink: 'syz.3.11764': attribute type 10 has an invalid length. [ 610.836600][ T8902] veth1_vlan (unregistering): left allmulticast mode [ 611.291668][ T8900] loop4: detected capacity change from 0 to 512 [ 611.344994][ T8900] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 611.611137][ T8930] netlink: 'syz.4.11776': attribute type 3 has an invalid length. [ 611.619107][ T8930] netlink: 'syz.4.11776': attribute type 1 has an invalid length. [ 612.294863][ T8951] netlink: 'syz.2.11784': attribute type 10 has an invalid length. [ 612.366234][ T10] lo speed is unknown, defaulting to 1000 [ 612.389282][ T10] syz2: Port: 1 Link DOWN [ 612.904770][ T3478] lo speed is unknown, defaulting to 1000 [ 614.317545][ T9008] loop2: detected capacity change from 0 to 512 [ 614.341819][ T9008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.363042][ T9014] netlink: 'syz.6.11808': attribute type 1 has an invalid length. [ 614.374516][ T9014] netlink: 'syz.6.11808': attribute type 4 has an invalid length. [ 614.442751][ T9014] __nla_validate_parse: 118 callbacks suppressed [ 614.442802][ T9014] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.11808'. [ 615.112540][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.726758][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11822'. [ 615.749116][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11822'. [ 615.779227][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11822'. [ 615.796081][ T9056] loop4: detected capacity change from 0 to 256 [ 617.114013][ T307] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.123420][ T307] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.145603][ T307] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.217120][ T307] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.246031][ T28] audit: type=1400 audit(2000000444.991:7479): avc: denied { create } for pid=9096 comm="syz.6.11839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 617.305770][ T28] audit: type=1400 audit(2000000445.001:7480): avc: denied { write } for pid=9096 comm="syz.6.11839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 617.362534][ T28] audit: type=1326 audit(2000000445.111:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 617.397709][ T28] audit: type=1326 audit(2000000445.111:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 617.424744][ T28] audit: type=1326 audit(2000000445.111:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 617.474412][ T28] audit: type=1326 audit(2000000445.111:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 617.512382][ T28] audit: type=1326 audit(2000000445.111:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 617.538341][ T28] audit: type=1326 audit(2000000445.151:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 617.565295][ T28] audit: type=1326 audit(2000000445.151:7487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 617.589313][ T28] audit: type=1326 audit(2000000445.151:7488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9108 comm="syz.6.11846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa380c819 code=0x7ffc0000 [ 618.345531][ T9123] netlink: 'syz.2.11851': attribute type 4 has an invalid length. [ 618.354452][ T9123] netlink: 'syz.2.11851': attribute type 4 has an invalid length. [ 619.483564][ T9158] netlink: 'syz.6.11867': attribute type 1 has an invalid length. [ 619.552233][ T9158] bond6: entered promiscuous mode [ 619.588525][ T9158] 8021q: adding VLAN 0 to HW filter on device bond6 [ 619.631674][ T9152] loop2: detected capacity change from 0 to 256 [ 619.660458][ T9158] bond6: (slave bridge5): making interface the new active one [ 619.684394][ T9152] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 619.706056][ T9158] bridge5: entered promiscuous mode [ 619.712853][ T9158] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 619.912557][ T9170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.997010][ T9179] tc_dump_action: action bad kind [ 620.185005][ T9194] netlink: 'syz.2.11880': attribute type 4 has an invalid length. [ 620.239841][ T9194] netlink: 'syz.2.11880': attribute type 4 has an invalid length. [ 620.508820][ T9205] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 620.516563][ T9205] netlink: 'syz.2.11893': attribute type 3 has an invalid length. [ 620.524503][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11893'. [ 620.534241][ T9205] ------------[ cut here ]------------ [ 620.539792][ T9205] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 620.552030][ T9205] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.2.11893/9205 [ 620.562547][ T9205] Modules linked in: [ 620.566468][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.2.11893 Tainted: G W syzkaller #0 PREEMPT(full) [ 620.577570][ T9205] Tainted: [W]=WARN [ 620.581389][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.592184][ T9205] RIP: 0010:u32_change+0x1463/0x14d0 [ 620.597492][ T9205] Code: 31 ed e9 96 fe ff ff e8 eb f4 c1 fc 48 8d 3d 44 2c 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 fb 65 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 620.617162][ T9205] RSP: 0018:ffffc900044375e0 EFLAGS: 00010283 [ 620.624023][ T9205] RAX: ffffffff84976c05 RBX: ffffc900044377f0 RCX: 0000000000000010 [ 620.632171][ T9205] RDX: ffffffff867e65fb RSI: 0000000000000020 RDI: ffffffff87209850 [ 620.640209][ T9205] RBP: ffffc900044376e8 R08: 0001888103d90387 R09: 0000000000000000 [ 620.648344][ T9205] R10: ffff888103d90300 R11: 0001c90004437357 R12: ffff88810d125100 [ 620.657056][ T9205] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88810d1251c0 [ 620.665066][ T9205] FS: 00007f133d07f6c0(0000) GS:ffff8882ae8d8000(0000) knlGS:0000000000000000 [ 620.674145][ T9205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 620.681506][ T9205] CR2: 0000001b3351fff8 CR3: 0000000161d8c000 CR4: 00000000003506f0 [ 620.689521][ T9205] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 620.697495][ T9205] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 620.705557][ T9205] Call Trace: [ 620.708841][ T9205] [ 620.712499][ T9205] tc_new_tfilter+0xfc0/0x1200 [ 620.717400][ T9205] ? ns_capable+0x7c/0xb0 [ 620.721780][ T9205] ? __pfx_tc_new_tfilter+0x10/0x10 [ 620.727096][ T9205] rtnetlink_rcv_msg+0x64b/0x720 [ 620.732084][ T9205] ? avc_has_perm_noaudit+0xab/0x130 [ 620.737390][ T9205] netlink_rcv_skb+0x123/0x220 [ 620.742957][ T9205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 620.748438][ T9205] rtnetlink_rcv+0x1c/0x30 [ 620.753062][ T9205] netlink_unicast+0x5c0/0x690 [ 620.757919][ T9205] netlink_sendmsg+0x5c8/0x6f0 [ 620.762705][ T9205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.767995][ T9205] ____sys_sendmsg+0x563/0x5b0 [ 620.773628][ T9205] ___sys_sendmsg+0x195/0x1e0 [ 620.778335][ T9205] ? place_entity+0x1ab/0x210 [ 620.783259][ T9205] __sys_sendmmsg+0x185/0x320 [ 620.787976][ T9205] __x64_sys_sendmmsg+0x57/0x70 [ 620.792894][ T9205] x64_sys_call+0x27aa/0x3020 [ 620.797590][ T9205] do_syscall_64+0x12c/0x370 [ 620.802827][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.808887][ T9205] RIP: 0033:0x7f133e62c819 [ 620.813430][ T9205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.833716][ T9205] RSP: 002b:00007f133d07f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 620.842281][ T9205] RAX: ffffffffffffffda RBX: 00007f133e8a5fa0 RCX: 00007f133e62c819 [ 620.850332][ T9205] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 620.858311][ T9205] RBP: 00007f133e6c2c91 R08: 0000000000000000 R09: 0000000000000000 [ 620.866993][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.875003][ T9205] R13: 00007f133e8a6038 R14: 00007f133e8a5fa0 R15: 00007ffca88fe0a8 [ 620.883103][ T9205] [ 620.886177][ T9205] ---[ end trace 0000000000000000 ]--- [ 620.940702][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11884'. [ 620.973567][ T9205] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11893'. [ 621.139623][ T9219] loop6: detected capacity change from 0 to 512 [ 621.251016][ T9219] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.11888: inode has both inline data and extents flags [ 621.288174][ T9202] loop4: detected capacity change from 0 to 256 [ 621.308883][ T9219] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 621.309504][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 621.325068][ C1] EXT4-fs (loop6): initial error at time 2000000449: ext4_orphan_get:1391: inode 15 [ 621.334481][ C1] EXT4-fs (loop6): last error at time 2000000449: ext4_orphan_get:1391: inode 15 [ 621.349646][ T9219] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.11888: couldn't read orphan inode 15 (err -117) [ 621.379609][ T9219] loop6: lost filesystem error report for type 5 error -117 [ 621.389929][ T9219] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.447178][ T9202] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 621.530641][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.681986][ T9246] bond4: entered promiscuous mode [ 621.704736][ T9254] Q6`Ҙ: renamed from lo [ 621.726537][ T9246] ip6gretap1: entered promiscuous mode [ 621.780068][ T9246] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 621.881593][ T9260] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 621.935904][ T9260] ip6gretap1: left promiscuous mode [ 622.020157][ T9260] bond4 (unregistering): Released all slaves [ 622.227844][ T9295] lo speed is unknown, defaulting to 1000 [ 622.757259][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11925'. [ 623.089725][ T9335] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 623.124069][ T9335] team0: No ports can be present during mode change [ 623.475034][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 623.475048][ T28] audit: type=1326 audit(2000000451.231:7521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.2.11931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7fc00000 [ 623.522912][ T28] audit: type=1326 audit(2000000451.271:7522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.2.11931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f133e62c819 code=0x7fc00000 [ 623.596661][ T28] audit: type=1326 audit(2000000451.331:7523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9343 comm="syz.2.11931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f133e62c819 code=0x7fc00000 [ 623.774935][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11936'. [ 624.043593][ T9367] netlink: 'syz.6.11940': attribute type 2 has an invalid length. [ 624.126033][ T9369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 624.324258][ T9380] loop6: detected capacity change from 0 to 512 [ 624.334475][ T9380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.376965][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11946'. [ 624.459595][ T9384] vlan2: entered promiscuous mode [ 624.469196][ T9384] syz_tun: entered promiscuous mode [ 624.685069][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.631182][ T9409] Set syz1 is full, maxelem 65536 reached [ 626.356221][ T9419] 6: renamed from wg2 [ 626.440777][ T9431] loop4: detected capacity change from 0 to 512 [ 626.447363][ T9431] EXT4-fs: Ignoring removed bh option [ 626.482516][ T9431] EXT4-fs: inline encryption not supported [ 626.508708][ T9431] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 626.581907][ T9431] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 626.605354][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11970'. [ 626.634522][ T9431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11964: bg 0: block 248: padding at end of block bitmap is not set [ 626.649019][ T9431] loop4: lost filesystem error report for type 5 error -117 [ 626.659224][ T9431] Quota error (device loop4): write_blk: dquota write failed [ 626.666651][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 626.666682][ C0] EXT4-fs (loop4): last error at time 2000000454: ext4_validate_block_bitmap:441 [ 626.709577][ T9431] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 626.720239][ T9431] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.11964: Failed to acquire dquot type 1 [ 626.731714][ T9431] loop4: lost filesystem error report for type 5 error -117 [ 626.741651][ T9431] EXT4-fs (loop4): 1 truncate cleaned up [ 626.755812][ T9431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 627.840496][ T9431] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000. [ 629.662718][ T28] audit: type=1400 audit(2000000457.411:7524): avc: denied { bind } for pid=9477 comm="syz.6.11978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 629.724108][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 629.930812][ T9506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9506 comm=syz.0.11989 [ 629.945374][ T9506] netlink: 'syz.0.11989': attribute type 1 has an invalid length. [ 629.995267][ T9506] bond17: (slave gretap1): making interface the new active one [ 630.005903][ T9504] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11988'. [ 630.029447][ T9506] bond17: (slave gretap1): Enslaving as an active interface with an up link [ 630.852594][ T9532] ip6gre1: entered promiscuous mode [ 630.869610][ T9532] ip6gre1: entered allmulticast mode [ 631.094229][ T9546] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12006'. [ 631.245038][ T9556] loop4: detected capacity change from 0 to 512 [ 631.267622][ T9556] EXT4-fs: Ignoring removed nobh option [ 631.283022][ T9556] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 631.313979][ T9556] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 631.376029][ T9556] EXT4-fs (loop4): 1 truncate cleaned up [ 631.397544][ T9556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.144998][ T5010] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.416370][ T9584] lo speed is unknown, defaulting to 1000 [ 633.043743][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12035'. [ 633.053606][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12035'. [ 633.154522][ T9630] syzkaller0: entered promiscuous mode [ 633.180447][ T9630] syzkaller0: entered allmulticast mode [ 633.296626][ T28] audit: type=1400 audit(2000000717.054:7525): avc: denied { create } for pid=9635 comm="syz.6.12038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 633.374401][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12039'. [ 633.386611][ T28] audit: type=1400 audit(2000000717.084:7526): avc: denied { bind } for pid=9635 comm="syz.6.12038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 633.387882][ T9640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12040'. [ 633.442302][ T9641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9641 comm=syz.2.12039 [ 633.464700][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12040'. [ 634.338624][ T9644] loop2: detected capacity change from 0 to 512 [ 634.363853][ T9644] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 634.510489][ T9657] tipc: Failed to remove unknown binding: 66,0,0/0:2635454660/2635454662 [ 634.542348][ T9657] tipc: Failed to remove unknown binding: 66,0,0/0:2635454660/2635454661 [ 634.561781][ T9657] tipc: Failed to remove unknown binding: 66,0,0/0:2635454660/2635454662 [ 634.571691][ T9659] netlink: 'syz.2.12047': attribute type 21 has an invalid length. [ 634.591999][ T9657] tipc: Failed to remove unknown binding: 66,0,0/0:2635454660/2635454661 [ 634.793762][ T9664] loop2: detected capacity change from 0 to 1024 [ 634.970321][ T9664] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 634.984633][ T9664] System zones: 0-1, 3-36 [ 635.025663][ T9673] xfrm0: entered promiscuous mode [ 635.132439][ T9664] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.12049: bad orphan inode 134217728 [ 635.190913][ T9664] loop2: lost filesystem error report for type 5 error -117 [ 635.203663][ T9664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.257214][ T9686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=9686 comm=syz.6.12057 [ 635.617150][T31336] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.815282][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.848579][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.124844][ T9708] lo speed is unknown, defaulting to 1000 [ 636.408901][ T9714] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 636.432615][ T9714] team0 (unregistering): Port device team_slave_0 removed [ 636.459742][ T9714] team0 (unregistering): Failed to send options change via netlink (err -105) [ 636.478484][ T9714] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 636.511258][ T9714] team0 (unregistering): Port device team_slave_1 removed [ 636.547779][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12067'. [ 636.596652][ T9719] netlink: 'syz.6.12068': attribute type 1 has an invalid length. [ 636.611606][ T9717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9717 comm=syz.2.12067 [ 636.690276][ T9719] 8021q: adding VLAN 0 to HW filter on device bond7 [ 636.708330][ T9724] netlink: 20 bytes leftover after parsing attributes in process `syz.6.12068'. [ 636.747851][ T9724] bond7: entered allmulticast mode [ 636.793106][ T9719] bond7: (slave ip6gretap1): making interface the new active one [ 636.827785][ T9719] ip6gretap1: entered allmulticast mode [ 636.847623][ T9719] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 636.966241][ T9728] loop6: detected capacity change from 0 to 1024 [ 636.984466][ T9728] EXT4-fs: Ignoring removed oldalloc option [ 637.004760][ T9728] EXT4-fs: Ignoring removed bh option [ 637.024972][ T9728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.186226][ T9737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12073'. [ 637.314018][ T9738] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9738 comm=syz.0.12073 [ 637.624470][ T4848] ================================================================== [ 637.632589][ T4848] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 637.642064][ T4848] [ 637.644397][ T4848] write to 0xffff8881b4c0560c of 20 bytes by task 9735 on cpu 1: [ 637.652107][ T4848] copy_folio_from_iter_atomic+0x75f/0x1170 [ 637.658013][ T4848] generic_perform_write+0x2c1/0x490 [ 637.663304][ T4848] ext4_buffered_write_iter+0x1ee/0x3c0 [ 637.668852][ T4848] ext4_file_write_iter+0x380/0xfa0 [ 637.674051][ T4848] iter_file_splice_write+0x6c4/0xa80 [ 637.679433][ T4848] direct_splice_actor+0x156/0x2a0 [ 637.684549][ T4848] splice_direct_to_actor+0x311/0x670 [ 637.689929][ T4848] do_splice_direct+0x119/0x1a0 [ 637.694787][ T4848] do_sendfile+0x382/0x650 [ 637.699215][ T4848] __x64_sys_sendfile64+0x105/0x150 [ 637.704423][ T4848] x64_sys_call+0x2dc4/0x3020 [ 637.709102][ T4848] do_syscall_64+0x12c/0x370 [ 637.713695][ T4848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.719583][ T4848] [ 637.721898][ T4848] read to 0xffff8881b4c05400 of 1024 bytes by task 4848 on cpu 0: [ 637.729710][ T4848] copy_folio_from_iter_atomic+0x75f/0x1170 [ 637.735613][ T4848] generic_perform_write+0x2c1/0x490 [ 637.740902][ T4848] shmem_file_write_iter+0xc5/0xf0 [ 637.746023][ T4848] lo_rw_aio+0x67d/0x730 [ 637.750534][ T4848] loop_process_work+0x56c/0xac0 [ 637.755477][ T4848] loop_workfn+0x31/0x40 [ 637.759767][ T4848] process_scheduled_works+0x513/0xa10 [ 637.765240][ T4848] worker_thread+0x58a/0x780 [ 637.769852][ T4848] kthread+0x22a/0x280 [ 637.773922][ T4848] ret_from_fork+0x150/0x360 [ 637.778527][ T4848] ret_from_fork_asm+0x1a/0x30 [ 637.783292][ T4848] [ 637.785609][ T4848] Reported by Kernel Concurrency Sanitizer on: [ 637.791751][ T4848] CPU: 0 UID: 0 PID: 4848 Comm: kworker/u8:17 Tainted: G W syzkaller #0 PREEMPT(full) [ 637.802856][ T4848] Tainted: [W]=WARN [ 637.806656][ T4848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.816709][ T4848] Workqueue: loop6 loop_workfn [ 637.821485][ T4848] ================================================================== [ 637.920283][ T1169] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.