last executing test programs: 5.924225004s ago: executing program 0 (id=418): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") socket$inet_udp(0x2, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000740), 0xffffffff00000000, 0x18bc00) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000780)=""/58) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x800, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, r7, 0x25, 0x2, @void}, 0x10) 4.743121734s ago: executing program 0 (id=427): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000500)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x3ff2e233}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, &(0x7f0000000880)}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_usbip_server_init(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x88, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc32}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x6) 4.193214966s ago: executing program 4 (id=429): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891016000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='loginuid\x00') write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYRESDEC], 0x15) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r4, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @local, 0xfffffffd}]}, &(0x7f0000000100)=0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x401, 0x6}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000200)={r8, 0x3, 0x6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffff9}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c200000ebbbbbbbbbbbb86dd6001012000303afffc01000000000000000000000088f487322d5f853b000000ff020000000000000000000000000001010090780400000066fe1c8e00033200fe8000000000000000000000000000aafc01000000000000"], 0x0) syz_usb_disconnect(0xffffffffffffffff) 4.093275931s ago: executing program 1 (id=430): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x5, 0xd, {{0x5, 0x4, 0x3, 0x1d, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @empty}}}}) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@const={0xb, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x21, 0x1}]}, {0x0, [0x2e, 0x0, 0x30, 0x30]}}, &(0x7f00000006c0)=""/209, 0x4e, 0xd1, 0x1, 0xfffffff7}, 0x28) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r7, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x220, '\x00', r5, 0x0, 0x0, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r10 = socket(0x28, 0x801, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fsmount(r11, 0x0, 0x71) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="322b894b"]) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x20000023893) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x5, 0x8}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r13, &(0x7f00000002c0)="c1dab8e572b0f24882bc2dda36b91614bcf16d8763043897fea5e6debae001a30c0e3dc04c9e5c377e6a5ece251c3c6f3b91eda6b0d9473c8bb1093e2a4477f872bc9c29ddcdae2102bafa43b4c1db238938ce8bb6439678499cd2084ad15a5ac4c7fd59b5b22f4f7654a05034baa6dd3ec6b83155be05ecad0b766081e957cf1daac004dce132d36d236dbef2017fd92b69ecd9ff1d1dd2e44f8178bd36971b573d2c85c032653890605e57", &(0x7f0000000380)=""/84, 0x4}, 0x20) 3.385341483s ago: executing program 4 (id=432): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x11000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x1}, 0x10, 0x0}, 0x4000000) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01"], 0x0, 0xfc5f}, 0x28) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) r5 = socket(0x1e, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x800, &(0x7f0000000640)={[{@bsdgroups}, {@usrjquota}, {@lazytime}, {@norecovery}, {@bsdgroups}, {@grpquota}, {@minixdf}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r6, &(0x7f0000000200)=[{&(0x7f0000002540)=""/4089, 0xff9}], 0x1, 0x7b, 0xfffffbfe, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0xa, &(0x7f0000000280)={0x2, 'qG'}, 0x3) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x1, @vifc_lcl_ifindex=r8, @broadcast}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) 3.26935081s ago: executing program 1 (id=434): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) ioctl$VT_OPENQRY(r5, 0x4b4b, &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x1, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @loopback, 0x8000, 0x0, 0x0, 0x300}}) close_range(r1, r0, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000071104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x8000000000000000, 0x12) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) 2.988883476s ago: executing program 1 (id=436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010000"], 0x94}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x10080, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000005c0)={0x58, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000001}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) write$cgroup_pid(r5, &(0x7f00000004c0), 0xfdb6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 2.988219776s ago: executing program 4 (id=437): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0xfffffffa, 0x8, 0xfffffff7}, &(0x7f0000000580)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x70) 2.987417786s ago: executing program 0 (id=438): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001d00)={[{@dax_inode}, {}, {@dioread_nolock}, {@resuid={'resuid', 0x3d, 0xee01}}, {@abort}, {@grpid}, {@nouid32}, {@resgid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0100001600010029bd7000fedbdf25e00000010000000000000000000000007f0000010000000000000000000000004e2200004e2047060000003002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d233000000e0000001000000000000000000000000070000000000000008000000000000000400000000000000ffffffff00000000000000000000000040340000000000000300000000000000d73b000000000000ffffffffffffffff0500000000000000010000800000000001800000000000000000000400000000000000002abd7000000000000a00040412000000e900000000000000931a0000050019002b0000002c00"], 0x12c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x10000000000004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbabaaaaaaaabb86dd60c6dd0000103afffc010000000000000000000000000000ff0200000000000000000000000000018b009078200696f90000000000000007"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r3}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x0, "e80c857b65087dea03da4c290569c738c39dac5defb806ba"}}]}, 0x19c}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r7) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf25040000003c0006800800060001000000060001000200000006000100020000000600010000000000080006000e000000060005f98b6cf6af3e8e35004e24000008000400080000000800030005000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001540)={'ip6tnl0\x00', &(0x7f00000014c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xa8, 0x40, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8000, 0x9, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001b80)={'ip_vti0\x00', &(0x7f0000001b40)={'gre0\x00', 0x0, 0xc1, 0x7800, 0x1b006178, 0x401, {{0x7, 0x4, 0x1, 0x21, 0x1c, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x7, 0x72, [@loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000001cc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xa0, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44040}, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 2.74698509s ago: executing program 4 (id=439): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000940)=[{&(0x7f00000031c0)="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", 0x442}], 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000000)={0x10, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x14) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r4, 0x2007ffb) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000300)) sendfile(r4, r4, 0x0, 0x1000000201005) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0xf774479bf5f7351b, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r6 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000100)={r7, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, 0x0, 0x0) bind$netlink(r8, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @empty, 0x5}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x1, &(0x7f0000000140)=0x5, 0x4) tee(r1, r5, 0x4, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="99eb01001800000000000000f4000000f40000919700030000010000000005000085060000000b00000003000000000000000300000002000000070000000800000001000000050000000900000001000000080000000900000003000000060000000a000000000000010000000070006602050000000400001306000000060000000800000037c000000300000008000000010000000a00000005000000856c00000a00000008000000f30000000f0000000200009304000000040000000800000005000000030000000200000000000000000000000600000d000000000800000000000400000003000000020000000e000000"], 0x0, 0x10f, 0x0, 0x1, 0x67}, 0x28) 2.7457448s ago: executing program 3 (id=440): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{}, 0x2, 0x1, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000002c0), 0xfd, 0x4a7, &(0x7f0000001cc0)="$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") ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) syz_genetlink_get_family_id$ieee802154(0x0, r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xffffffffffffff59, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x11) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x30024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x83) write$P9_RAUTH(r9, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[{0xfff, 0xf, 0x0, 0x6}, {0x97f, 0xc, 0x4b, 0xfffffffe}, {0x26, 0xa7, 0x9, 0xffffffff}, {0x6, 0x67, 0x7, 0x40}]}) 2.506391954s ago: executing program 3 (id=442): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) 2.378816151s ago: executing program 3 (id=443): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x0, 0x3, 0xfff, 0x8003, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x342) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000100), 0x0}, 0x20) fsmount(r0, 0x1, 0x0) fchdir(r0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, 0x0, 0x20004090) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n'], 0x44}}, 0x8000) getxattr(0x0, &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) 2.312248555s ago: executing program 2 (id=444): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01022dbd7000ffdbdf252100000009001f0070687931000000000500200000000000"], 0x28}, 0x1, 0x0, 0x0, 0x24004900}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x0, 0x0) signalfd4(r2, &(0x7f0000000080)={[0x100]}, 0x8, 0x800) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x9, 0x7fffffff}]}) io_getevents(r5, 0x10000000002, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0x20000014}) close_range(r7, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) clock_gettime(0x0, &(0x7f0000000900)) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="4a563d49d99a6bb8b481cc110614f97694e8ac24e082b331b0194530ff6d2bcbb23cea6004925c367ef59d087f72d782ec6f2d28c07753d2a7e436322e8b23eb53db1be846ffc7a4fc70e9009744c16b7c00eb95282673eab69f7c60a4e6f32cce473c24de3c8868af03f87c1b6323149b31bc01974de179afb0e6bde90c8eda2a110384104b08d6b8874e06985ff7874a26993d75fc6051a8f922f7d581a3b64d50b3ba824d92e43fca5f5684caabed803b61", 0xb3}, {&(0x7f0000000400)="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", 0xfe}, {&(0x7f0000000500)="c7cce788e9e2ea5c14e569870cab9c4494b7532261096c23e8cc4f66c81e42a74e10d661c7acf9836da63c73880d6dc8a416fa8021052024f52203d26a846bd3bc73d359446dc52ede688877dc5b35736e129a63beeab95ea4aba087373590a8912359409ced7d9cf47bbd65e13d19127b3246e150afd80c272a3877cf1cb0849775353026b4d5d584cb1f3d788d1ce3f97fa056b79133f9ae21d72c2be73d62617d50ebb71217a79c1c13da148b3623", 0xb0}, {&(0x7f00000005c0)="7585b7f79d1e89b68dead5391ea01d6efbd7fa11e99bfc213779ef4ca63e7f9112ff6a98c1f10d18b330d315205220af6a7005611729f5a83a3206b1d64f7098b09c27eb5abaef5e603ac509068271ed7c195306b1b48536b7c5ec002c5fcac464a44c05fff745a16b1f598d16f3449e100b6d97464dfacfd37714261960d65eddf927a481ce943f7ae8856dbf709e39f256a3a9d77246d5be55b7164f1386d22ade0e19b2ae1acac8e3dbcb6fc68db8a3b8b260f275503f35d167f8cb890c886e6da9a184a4719663d0786e05723a79226245050bb3d1b4a688d699f3f2faca66f529aed1f5f05339dea29e11af02447dd83e1549a0488d", 0xf8}, {&(0x7f0000000980)="a85ebc3ed894377d37db1e6585d78370b70ad6317e4137160e445a3def02c1cc768f9d8be31ef6d34f0e51a27ae48d53f43eb106b316373c5613c3d1359218d57165f8cf09dd19645727edb9309a069dd39d03b3ef3caec2b18c6424f9b1e627b50d2e4d4a7a61363dc7e88afa93a736ac8a206a4abc24e350a2ea82b4fd2c6e04c88e2b86184f3843b1d2a0e6d6bea96826c810db4107e86492f498a5de0f04513f308c12a605dc88e8d0042e85351968dd1bfa0fbc0cc96b2d9817a2d673801f5f2619af1aac24d648bfc4b60853140f46db606e501a672d0e2ae1e41e713d40131b6dba9b288369fb", 0xea}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="68000000000000000e012100ffffff7f8c3a7d672f9414160c234a650368929cbaf540cfc57493923982157e7582b4192c57dcca66149d83333d1c12cff11022356e93b5be1f72500d05d3bc0ad2"], 0x68}, 0x40001) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="814c8d8e"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@perf_event={0xbe1}}, 0x18) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380)=0x4) 2.2402801s ago: executing program 1 (id=445): openat$sysfs(0xffffff9c, 0x0, 0x800, 0x188) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r1}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'sha224-generic\x00'}}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}, 0x2}, 0x1c) sendmsg$NFT_BATCH(r2, 0x0, 0x40) 2.090215609s ago: executing program 2 (id=446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) r3 = syz_open_pts(r2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800000a00000000000000fbdbdf25054d0000000000000a004e200000000700000000000000000000ffff64010101000000d09b000000030006002b00000002004e23ac1414370000000000000000"], 0x50}}, 0x0) r5 = dup3(r3, r2, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="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", 0x589}], 0x1, &(0x7f0000001dc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @generic={0x82, 0x10, "66581ddb34253c0556c786172934"}, @timestamp_prespec={0x44, 0x14, 0x67, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x58}, 0x4) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002f00)=""/4096, 0x1000}], 0x1}}], 0x2, 0x62, 0x0) r7 = syz_clone(0x1001080, &(0x7f0000000800)="7999ce47792a0670eae4e9f0771ed953488358883d2f5bacf4a40ed672bc00da1b883ba9d7789d9c49ccbb361626ff3cefcc0dc66075196055b02e659bd8663a8bf6a067c4842f1e5f227b7a4034c79d91d821cf94cb7712881b66e62022af13d184227c9b6256e3e8625a1588b8a18888ed230e971d1b169256eb8024949906109772c81c1f2bf56c6829af4fb1d32e4c672d6c78379f765f6484b488b6445e1f552fc08b0d1c20312463cae0bc48d97822158263871374f10348af719a", 0xbe, &(0x7f00000006c0), &(0x7f00000008c0), &(0x7f0000001500)="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") fcntl$setownex(r5, 0xf, &(0x7f0000000900)={0x1, r7}) write$nci(r5, &(0x7f0000001300)=ANY=[@ANYBLOB="6103060a0401f4de4882af606e6877eda9fc969764d325de767f4f12cd6ef58b5e40a59103e4180ca47b3692c401000000fba6479aa0cbd66e9440599045f56b5d4d4f960504417f25ef51acec9d686a37cb1fbc0e59199e989b4b3a19239d79349eff6961ed578f2f9202562e9b8d122634c1a10f7ad3d86f21d01678c5a7481434b32cd2933a324f6726a0aa459cfa3a12b031b454b26e3c51d6267df9678a4a5770a595f1255c9e1b619f3906dd1091671b4ede76b36546e4c69b22363c652b34d49bfb5e1ef62f8f6f922e247fac057726836f6a433b17b66c09f1ff2063088e1ef75f7671552e789890010fe891ae477a6dc059b4e7ac4af59e4a5ccd8b7598f802d6a21250dfb3c460c34ea73f6785d4ae8c9c7eab0e3106f5756611afb75f9a415589da8cab520732df236e2139d25584e50d92260e01a1eb7bc61274cbdc163a8c5c987cb63724f037cde91b7d4fdab6e7832c642382850a7a072c985d11cd8f49cdd0531ffb9c5937"], 0xe7) r8 = openat$cgroup_freezer_state(r5, &(0x7f0000000300), 0x2, 0x0) fcntl$F_SET_FILE_RW_HINT(r8, 0x40e, &(0x7f0000000340)=0x3) read$watch_queue(r5, &(0x7f0000000240)=""/173, 0xad) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000040003000000400001802c0004001400010002000004ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffcc4, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4cc44}, 0x4040140) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=@newtaction={0x48, 0x76, 0x1, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.900871649s ago: executing program 0 (id=447): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = open(0x0, 0x60840, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xf}}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) lstat(&(0x7f00000022c0)='./file0\x00', 0x0) statx(0xffffffffffffff9c, 0x0, 0x400, 0x4, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) sendmmsg$unix(r5, 0x0, 0x0, 0x41) 1.506185293s ago: executing program 4 (id=448): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x80000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000500)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)={0x0, 0x2, 0x3ff2e233}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, &(0x7f0000000880)}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_usbip_server_init(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x80080100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x88, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc32}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x101}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xa}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x7, @local, 0x7}]}, &(0x7f0000000080)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000003a000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xa0}}, 0x8040) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x6) 939.588475ms ago: executing program 2 (id=449): r0 = syz_io_uring_setup(0xbc0, &(0x7f0000000100)={0x0, 0x5568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, 0x0, 0x0, 0x8, 0x1, {0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5b, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24004880) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) io_uring_enter(r3, 0x1c0b, 0xa074, 0xc, &(0x7f0000000780)={[0x100000001]}, 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = signalfd4(r5, &(0x7f0000000080)={[0x1000]}, 0x8, 0x80000) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000000140)) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x4b}, 0x2c) recvmmsg(0xffffffffffffffff, &(0x7f0000004040), 0x0, 0x40000000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syslog(0x2, &(0x7f00000004c0)=""/164, 0xa4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r8, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b3e143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x18}}, 0x0) 935.567066ms ago: executing program 1 (id=450): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000540)={0x0, 0xfffffffa, 0x8, 0xfffffff7}, &(0x7f0000000580)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x70) 630.318884ms ago: executing program 0 (id=451): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) syz_read_part_table(0x1065, &(0x7f0000002100)="$eJzsz7FNxEAQhtF/vV5pndKA2yAkQCIhBFEOIFECFRASkdMBXdCCGzCSse46uLvgvXDm00gTzmoa+tVXcv1W39OTvCR5aklq6rGak++f+5KkfSw9tdTcjNumJ3PZq5qMd8tD2vpcftdhm5Xb6b9qezS8zofD9fHzhK8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX6CwAA//9BDg4U") socket$inet_udp(0x2, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000740), 0xffffffff00000000, 0x18bc00) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000780)=""/58) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x800, 0x0, 0x1, 0xfffffffc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000280), &(0x7f0000000340)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r7, 0x25, 0x2, @void}, 0x10) 573.122497ms ago: executing program 3 (id=452): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) open(0x0, 0x64842, 0x2) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0xad) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x1, @perf_config_ext={0x9, 0x7ff7fffd}, 0x40, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x50) lseek(r0, 0x100000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0xc0041) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="76ea092000000000009bb5606c1e", 0x0, 0x2f00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x591) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x10) sendmmsg$inet(r5, &(0x7f0000004980), 0x0, 0x20008000) recvmsg(r5, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/103, 0x67}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x2}, 0x103) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) 445.394684ms ago: executing program 1 (id=453): socket$inet6(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0xbc3, 0x0, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000140)={0x0, 0x7, 0x0, 0xc, 0xffffffff}) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0x2, 0x100, 0x0, @loopback={0xff00000000000000}}}, 0x24) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r5}}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0xd4}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000001c0)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c757466383d302c73686f72746e616d653d77696e6e742c757466383d302c757466383d312c756e695f786c6174653d302c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c73686f72746e616d653d77696e39352c646973636172642c004338cb8631b26441e86414f461975e105d02960776fcb7ddfd80b96c1b2ffd13d5cc37784797dbc9e26b7c39310b49940995ce6e6ce1c218890b59506de99e2dd234abcde0be50d3de656741fee78f74e94ee73bd6d7162f0d2a8275e0a6125615ce223c21fe303d561d81b2681dce1c0b7061c5a347b2040e7b6c9210507527467dad005f3e38c47d4daa9d76c69f51ffeb2f81123fe54df14c6c02413e51ba63c35f11"], 0x0, 0x2b9, &(0x7f0000000280)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r9, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0, 0xe00}], 0x10000000000000fb) r10 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x1ff]}, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r11, @ANYRES32=r12, @ANYRESDEC=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 365.657299ms ago: executing program 3 (id=454): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x46, 0x1, 0x0, 0x0, 0x0}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038078000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e310000000000000000140001007665746831000000000000000000000014000100677265300000000000000000000000001400010069703665727370616e300000000000001400010076657468315f"], 0x340}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES32, @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 320.860341ms ago: executing program 2 (id=455): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000100)) write$binfmt_misc(r1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x77ff, 0x8, 0x80000000, 0x1, {{0x5, 0x4, 0x1, 0x1b, 0x14, 0x67, 0x0, 0x4, 0x29, 0x0, @loopback, @broadcast}}}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) mq_notify(r0, &(0x7f0000000340)={0x0, 0x8000013, 0x1}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 285.265714ms ago: executing program 2 (id=456): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500), 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@noload}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x480, &(0x7f0000000bc0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a810100000000000000000200000008000340000000010900010073797a3000000000a936fd15318d901e2182b0b6932732086b7e1a454e455a292d"], 0x28}}, 0x20004000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = accept$unix(r0, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) recvmsg$unix(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002140), 0x0, &(0x7f0000002200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40000002) getdents64(r2, &(0x7f0000000080)=""/109, 0x6d) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000)=0xb, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r7], 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) fsopen(&(0x7f0000000280)='ncpfs\x00', 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r5, 0xffffffffffffffff, 0x0) 284.255354ms ago: executing program 3 (id=457): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000400000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0) r6 = accept4$unix(r5, 0x0, 0x0, 0x80000) recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000004, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0xfa}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="a3a90200e180000008001b0000000000"], 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095", @ANYRES64=0x0, @ANYBLOB="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", @ANYRES16], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x89, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFADDR(r10, 0x8915, &(0x7f0000000f00)={'veth1_virt_wifi\x00', {0x2, 0x0, @initdev}}) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000000)=""/60) 188.162799ms ago: executing program 0 (id=458): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x0, 0xca, 0x3, 0x100000a, 0x8, 0x0, 0x0, 0x9f}) chown(0x0, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000140)={{0x7, 0x41}, 'port0\x00', 0x8, 0x100010, 0x7, 0x4000, 0x6a, 0xf, 0xffffa268, 0x0, 0x7}) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 430.76µs ago: executing program 2 (id=459): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020004000c00060006000364bc24eab556a70525", 0x3a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000711897000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYBLOB="82a3c2936729862ce61556c1b419eef2c1d91537ef0a811e57b8df3e4ef6d0877c284d0a9cf4be920d15d9c8c63d1f835d2e679d5836f85c0aff22d493f66550a2378e30e1e53d925a9fe9ad37e76f37163925e9ed80ce33731f1af69e1c2068cd0ecca2f469a74e3634aaff2824027474cf1c2d624b9bfe8054498556cab0ebd143407b641313587d4e891bd414a0a4f9911f82fd6cd34c0cefacd1b422071bf7a89cb99127c04d15f38a84e275c47e2f7aa0a9fbf104e09dc030b34f2421e8699ab08ced488f182721b08d55e22f006cf423e096cc6be16ab02c38237b48", @ANYBLOB="0000000003120100500012800b000100627269912d83c400400002800800050001000000060027d41ebc5206c95038067eedeec64bbf5d1f54f98b1e87cb7a1429"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) ioctl$KDGKBDIACR(r5, 0x4bfb, &(0x7f0000000180)=""/255) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd700000350000020000005000000000000000600012"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 0s ago: executing program 4 (id=460): ustat(0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x230, 0x32, 0x43a1bd76, 0x5, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) kernel console output (not intermixed with test programs): 2023][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.703591][ T3323] hsr_slave_0: entered promiscuous mode [ 30.709550][ T3323] hsr_slave_1: entered promiscuous mode [ 30.717316][ T3327] team0: Port device team_slave_0 added [ 30.727535][ T3327] team0: Port device team_slave_1 added [ 30.769526][ T3322] hsr_slave_0: entered promiscuous mode [ 30.775613][ T3322] hsr_slave_1: entered promiscuous mode [ 30.781463][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 30.787242][ T3322] Cannot create hsr debugfs directory [ 30.798673][ T3332] hsr_slave_0: entered promiscuous mode [ 30.804753][ T3332] hsr_slave_1: entered promiscuous mode [ 30.810607][ T3332] debugfs: 'hsr0' already exists in 'hsr' [ 30.816353][ T3332] Cannot create hsr debugfs directory [ 30.824052][ T3326] hsr_slave_0: entered promiscuous mode [ 30.830082][ T3326] hsr_slave_1: entered promiscuous mode [ 30.835931][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 30.841656][ T3326] Cannot create hsr debugfs directory [ 30.847770][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.854746][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.880715][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.896330][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.903313][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.929246][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.975119][ T3327] hsr_slave_0: entered promiscuous mode [ 30.981090][ T3327] hsr_slave_1: entered promiscuous mode [ 30.987189][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 30.993010][ T3327] Cannot create hsr debugfs directory [ 31.169442][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.178429][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.187357][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.197816][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.218883][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.228052][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.239387][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.247989][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.275338][ T3332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.284347][ T3332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.293314][ T3332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.303155][ T3332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.342795][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.357414][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.369292][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.387582][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.415907][ T3326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.430044][ T3326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.438801][ T3326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.449191][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.456957][ T3326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.472580][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.493268][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.509832][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.518708][ T3332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.529276][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.536433][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.550532][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.557610][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.566087][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.573260][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.586163][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.593298][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.605332][ T3332] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.619125][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.626187][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.645895][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.652931][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.694308][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.719753][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.761520][ T1685] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.768678][ T1685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.778671][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.799350][ T1685] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.806482][ T1685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.819028][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.834710][ T934] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.841791][ T934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.850713][ T934] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.857792][ T934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.871014][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.908914][ T3332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.922097][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.954844][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.038057][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.073653][ T3323] veth0_vlan: entered promiscuous mode [ 32.092742][ T3323] veth1_vlan: entered promiscuous mode [ 32.106984][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.126479][ T3323] veth0_macvtap: entered promiscuous mode [ 32.134049][ T3323] veth1_macvtap: entered promiscuous mode [ 32.164861][ T3322] veth0_vlan: entered promiscuous mode [ 32.173062][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.192708][ T3322] veth1_vlan: entered promiscuous mode [ 32.200483][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.220877][ T3332] veth0_vlan: entered promiscuous mode [ 32.229983][ T312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.244694][ T3326] veth0_vlan: entered promiscuous mode [ 32.253663][ T312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.264399][ T3332] veth1_vlan: entered promiscuous mode [ 32.272792][ T312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.286184][ T312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298307][ T3326] veth1_vlan: entered promiscuous mode [ 32.315185][ T3322] veth0_macvtap: entered promiscuous mode [ 32.329670][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 32.329725][ T29] audit: type=1400 audit(1768938998.723:90): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.Nwunql/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.348838][ T3327] veth0_vlan: entered promiscuous mode [ 32.367123][ T29] audit: type=1400 audit(1768938998.763:91): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.377161][ T3326] veth0_macvtap: entered promiscuous mode [ 32.389299][ T29] audit: type=1400 audit(1768938998.763:92): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.Nwunql/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.399685][ T3326] veth1_macvtap: entered promiscuous mode [ 32.419965][ T29] audit: type=1400 audit(1768938998.763:93): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.440866][ T3332] veth0_macvtap: entered promiscuous mode [ 32.447648][ T29] audit: type=1400 audit(1768938998.763:94): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.Nwunql/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.447676][ T29] audit: type=1400 audit(1768938998.773:95): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.Nwunql/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4676 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.485335][ T3322] veth1_macvtap: entered promiscuous mode [ 32.507610][ T29] audit: type=1400 audit(1768938998.773:96): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.530975][ T3332] veth1_macvtap: entered promiscuous mode [ 32.535089][ T29] audit: type=1400 audit(1768938998.833:97): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.561028][ T29] audit: type=1400 audit(1768938998.833:98): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=3855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.583641][ T3327] veth1_vlan: entered promiscuous mode [ 32.590183][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.604693][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.628350][ T29] audit: type=1400 audit(1768938999.023:99): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.628651][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.668789][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.682547][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.695223][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.704903][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.715030][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.725559][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.737036][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.748747][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.762402][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.771220][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.789863][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.806193][ T3327] veth0_macvtap: entered promiscuous mode [ 32.817249][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.835978][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.863474][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.876583][ T3327] veth1_macvtap: entered promiscuous mode [ 32.883849][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902847][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.915573][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.930497][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.952999][ T3498] pim6reg: entered allmulticast mode [ 32.961861][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.999642][ T3498] pim6reg: left allmulticast mode [ 33.016217][ T3500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 33.027070][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.042989][ T3507] loop1: detected capacity change from 0 to 1024 [ 33.062675][ T3507] EXT4-fs: Ignoring removed orlov option [ 33.066397][ T3500] batadv0: entered promiscuous mode [ 33.083889][ T3500] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 33.093465][ T3500] batadv0: left promiscuous mode [ 33.099485][ T3507] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 33.114696][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.126907][ T3510] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 33.147646][ T3507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.162042][ T123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.202168][ T3512] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.224800][ T3517] loop4: detected capacity change from 0 to 1024 [ 33.248899][ T3510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 33.269346][ T3517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.288445][ T3520] loop3: detected capacity change from 0 to 512 [ 33.299478][ T3520] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.312642][ T3520] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.329528][ T3520] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.347357][ T3525] loop2: detected capacity change from 0 to 512 [ 33.354152][ T3520] EXT4-fs (loop3): 1 truncate cleaned up [ 33.360219][ T3520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.374496][ T3525] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10: invalid indirect mapped block 256 (level 2) [ 33.388439][ T3525] EXT4-fs (loop2): 2 truncates cleaned up [ 33.394863][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.424591][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.435710][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.583068][ T3531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11'. [ 33.625235][ T3531] netlink: 'syz.4.11': attribute type 10 has an invalid length. [ 33.644688][ T3534] IPv6: NLM_F_REPLACE set, but no existing node found! [ 33.701366][ T3533] loop0: detected capacity change from 0 to 1024 [ 33.730869][ T3535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11'. [ 33.753186][ T3533] ext4: Unknown parameter 'b' [ 33.861926][ T3531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.916956][ T3531] team0: Port device bond0 added [ 34.005164][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 34.049167][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 34.075049][ T3533] infiniband syz!: set active [ 34.079759][ T3533] infiniband syz!: added team_slave_0 [ 34.094865][ T3533] RDS/IB: syz!: added [ 34.098940][ T3533] smc: adding ib device syz! with port count 1 [ 34.107458][ T3535] team0 (unregistering): Port device bond0 removed [ 34.108472][ T3533] smc: ib device syz! port 1 has no pnetid [ 34.124469][ T3537] atomic_op ffff88811bd71d28 conn xmit_atomic 0000000000000000 [ 34.267443][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.339513][ T3546] bridge0: entered allmulticast mode [ 34.357812][ T3546] loop2: detected capacity change from 0 to 1024 [ 34.387135][ T3546] ======================================================= [ 34.387135][ T3546] WARNING: The mand mount option has been deprecated and [ 34.387135][ T3546] and is ignored by this kernel. Remove the mand [ 34.387135][ T3546] option from the mount to silence this warning. [ 34.387135][ T3546] ======================================================= [ 34.395361][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.569367][ T3546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.608310][ T3546] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.832253][ T3546] pim6reg: entered allmulticast mode [ 34.869965][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 34.878959][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.886392][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.895417][ T3546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.902962][ T3546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.920516][ T3561] Zero length message leads to an empty skb [ 35.086816][ T3563] loop1: detected capacity change from 0 to 512 [ 35.138362][ T3563] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 35.149313][ T3314] udevd[3314]: incorrect ext4 checksum on /dev/loop1 [ 35.174402][ T3563] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.285435][ T3575] loop0: detected capacity change from 0 to 2048 [ 35.376192][ T3575] Alternate GPT is invalid, using primary GPT. [ 35.382690][ T3575] loop0: p1 p2 p3 [ 35.386430][ T3575] loop0: partition table partially beyond EOD, truncated [ 35.409693][ T3580] loop3: detected capacity change from 0 to 512 [ 35.421496][ T3580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.430028][ T3580] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.439125][ T3580] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 35.650589][ T3583] mmap: syz.0.23 (3583) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.694299][ T3585] loop3: detected capacity change from 0 to 512 [ 35.722439][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 35.723050][ C0] hrtimer: interrupt took 35585 ns [ 35.748673][ T3587] ip6tnl0: entered promiscuous mode [ 35.754075][ T3587] ip6tnl0: entered allmulticast mode [ 35.771713][ T3585] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.792044][ T3585] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.804970][ T3585] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.24: error while reading EA inode 32 err=-116 [ 35.817555][ T3585] EXT4-fs (loop3): Remounting filesystem read-only [ 35.826208][ T3585] EXT4-fs (loop3): 1 orphan inode deleted [ 35.833835][ T3585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.875485][ T3583] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 35.893498][ T3583] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.904701][ T3595] capability: warning: `syz.4.26' uses 32-bit capabilities (legacy support in use) [ 35.942836][ T3585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.993212][ T3326] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.026050][ T3327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 36.161697][ T3603] usb usb7: usbfs: process 3603 (syz.2.30) did not claim interface 0 before use [ 36.189805][ T3605] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 36.197496][ T3605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 36.266553][ T3603] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 36.305108][ T3605] netlink: 68 bytes leftover after parsing attributes in process `syz.0.29'. [ 37.178897][ T3603] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 37.187080][ T3603] FAT-fs (loop2): Filesystem has been set read-only [ 37.262394][ T3609] loop0: p1 p3 p4 [ 37.269795][ T3609] loop0: p4 size 589824 extends beyond EOD, truncated [ 37.335947][ T3605] netlink: 'syz.0.29': attribute type 8 has an invalid length. [ 37.998973][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 37.999058][ T29] audit: type=1326 audit(1768939260.397:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.056475][ T29] audit: type=1326 audit(1768939260.427:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.079697][ T29] audit: type=1326 audit(1768939260.427:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.103193][ T29] audit: type=1326 audit(1768939260.427:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.126737][ T29] audit: type=1326 audit(1768939260.427:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.149924][ T29] audit: type=1326 audit(1768939260.427:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.173170][ T29] audit: type=1326 audit(1768939260.427:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.196713][ T29] audit: type=1326 audit(1768939260.427:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.220070][ T29] audit: type=1326 audit(1768939260.437:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.243214][ T29] audit: type=1326 audit(1768939260.437:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.3.34" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 38.297236][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.304493][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.447739][ T1827] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.452757][ T3621] netdevsim netdevsim3: Direct firmware load for / [ 38.452757][ T3621] failed with error -2 [ 38.467398][ T1827] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.483658][ T1827] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.532168][ T1827] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.583507][ T3633] tipc: Started in network mode [ 38.588411][ T3633] tipc: Node identity 4, cluster identity 4711 [ 38.594606][ T3633] tipc: Node number set to 4 [ 38.747837][ T3642] syzkaller0: entered promiscuous mode [ 38.753443][ T3642] syzkaller0: entered allmulticast mode [ 38.763405][ T3638] netlink: 'syz.4.38': attribute type 11 has an invalid length. [ 38.959320][ T3647] set_capacity_and_notify: 4 callbacks suppressed [ 38.959364][ T3647] loop4: detected capacity change from 0 to 4096 [ 38.974098][ T3647] EXT4-fs: dax option not supported [ 38.993643][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 39.020656][ T3654] veth0: entered promiscuous mode [ 39.025760][ T3654] veth0: entered allmulticast mode [ 39.034069][ T3656] loop3: detected capacity change from 0 to 1024 [ 39.076485][ T3610] IPVS: starting estimator thread 0... [ 39.121227][ T3656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.153840][ T3656] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.173409][ T3658] IPVS: using max 2448 ests per chain, 122400 per kthread [ 39.348511][ T3668] loop4: detected capacity change from 0 to 512 [ 39.377621][ T3668] EXT4-fs (loop4): orphan cleanup on readonly fs [ 39.390404][ T3668] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.48: bg 0: block 127: padding at end of block bitmap is not set [ 39.525080][ T3668] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.599386][ T3673] loop1: detected capacity change from 0 to 1024 [ 39.620978][ T3668] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.48: corrupted inode contents [ 39.692805][ T3673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.723690][ T3668] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 39.761290][ T3668] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.48: corrupted inode contents [ 39.810243][ T3668] EXT4-fs error (device loop4): ext4_evict_inode:301: inode #15: comm syz.4.48: mark_inode_dirty error [ 39.849600][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.870111][ T3668] EXT4-fs (loop4): 1 orphan inode deleted [ 39.879042][ T3668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 39.952594][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.970910][ T3668] syz.4.48 (3668) used greatest stack depth: 10288 bytes left [ 39.979227][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.990247][ T3681] hub 6-0:1.0: USB hub found [ 39.996071][ T3681] hub 6-0:1.0: 8 ports detected [ 40.032302][ T3683] loop0: detected capacity change from 0 to 8192 [ 40.240144][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.51'. [ 40.249032][ T3681] netlink: 28 bytes leftover after parsing attributes in process `syz.1.51'. [ 40.272066][ T3692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 40.308944][ T3692] bridge_slave_1: left allmulticast mode [ 40.314739][ T3692] bridge_slave_1: left promiscuous mode [ 40.320436][ T3692] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.328737][ T3692] bridge_slave_0: left allmulticast mode [ 40.334430][ T3692] bridge_slave_0: left promiscuous mode [ 40.340122][ T3692] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.352754][ T3692] bridge0 (unregistering): left allmulticast mode [ 40.474722][ T3704] batman_adv: batadv0: Adding interface: dummy0 [ 40.481059][ T3704] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.506899][ T3704] batman_adv: batadv0: Interface activated: dummy0 [ 40.592454][ T3710] 9p: Bad value for 'rfdno' [ 41.209186][ T3730] bridge0: port 3(syz_tun) entered blocking state [ 41.215742][ T3730] bridge0: port 3(syz_tun) entered disabled state [ 41.343696][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 41.404388][ T3730] syz_tun: entered allmulticast mode [ 41.410309][ T3730] syz_tun: entered promiscuous mode [ 41.421854][ T3730] bridge0: port 3(syz_tun) entered blocking state [ 41.428344][ T3730] bridge0: port 3(syz_tun) entered forwarding state [ 41.498724][ T3731] bridge0: port 3(syz_tun) entered disabled state [ 41.506848][ T3731] syz_tun (unregistering): left allmulticast mode [ 41.513376][ T3731] syz_tun (unregistering): left promiscuous mode [ 41.519933][ T3731] bridge0: port 3(syz_tun) entered disabled state [ 41.547067][ T3735] loop1: detected capacity change from 0 to 512 [ 41.554178][ T3735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.565006][ T3735] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.571848][ T3735] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.67: inode #15: comm syz.1.67: iget: illegal inode # [ 41.584923][ T3735] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.67: couldn't read orphan inode 15 (err -117) [ 41.618467][ T3735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 41.651758][ T3735] EXT4-fs error (device loop1): ext4_lookup:1785: comm syz.1.67: inode #15: comm syz.1.67: iget: illegal inode # [ 41.707627][ T3739] futex_wake_op: syz.0.68 tries to shift op by 32; fix this program [ 42.326588][ T3752] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.351746][ T3752] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.398012][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.659522][ T3762] bridge_slave_0: left allmulticast mode [ 42.665461][ T3762] bridge_slave_0: left promiscuous mode [ 42.671379][ T3762] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.696182][ T3762] bridge_slave_1: left allmulticast mode [ 42.702022][ T3762] bridge_slave_1: left promiscuous mode [ 42.707725][ T3762] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.747684][ T3762] bond0: (slave bond_slave_0): Releasing backup interface [ 42.859385][ T3762] bond0: (slave bond_slave_1): Releasing backup interface [ 42.932099][ T3762] team0: Port device team_slave_0 removed [ 42.976563][ T3762] team0: Port device team_slave_1 removed [ 43.014836][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.022344][ T3762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.045567][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 43.045583][ T29] audit: type=1400 audit(1768939265.447:898): avc: denied { getopt } for pid=3765 comm="syz.3.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.118775][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.126296][ T3762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.137047][ T3762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.150319][ T29] audit: type=1326 audit(1768939265.537:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 43.179299][ T3610] syz!: Port: 1 Link DOWN [ 43.226805][ T29] audit: type=1326 audit(1768939265.577:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 43.250026][ T29] audit: type=1326 audit(1768939265.617:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3761 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44b2acb9 code=0x7ffc0000 [ 43.273161][ T29] audit: type=1326 audit(1768939265.617:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3761 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44b2acb9 code=0x7ffc0000 [ 43.296350][ T29] audit: type=1326 audit(1768939265.617:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 43.302334][ T3767] loop3: detected capacity change from 0 to 512 [ 43.319488][ T29] audit: type=1326 audit(1768939265.617:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8f58baaa22 code=0x7ffc0000 [ 43.390774][ T29] audit: type=1326 audit(1768939265.677:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f58b6b58e code=0x7ffc0000 [ 43.413784][ T29] audit: type=1326 audit(1768939265.687:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8f58baaae7 code=0x7ffc0000 [ 43.436925][ T29] audit: type=1326 audit(1768939265.697:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3765 comm="syz.3.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f58b6b58e code=0x7ffc0000 [ 43.524620][ T3762] syz.0.74 (3762) used greatest stack depth: 9888 bytes left [ 43.576349][ T3767] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.75: corrupted inode contents [ 43.588967][ T3767] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.75: mark_inode_dirty error [ 43.617831][ T3775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.642756][ T3775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.713340][ T3767] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.75: corrupted inode contents [ 43.740288][ T3767] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.75: mark_inode_dirty error [ 43.802234][ T3767] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.75: mark inode dirty (error -117) [ 43.842120][ T3767] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 43.862038][ T3767] EXT4-fs (loop3): 1 orphan inode deleted [ 43.886890][ T3767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.156341][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.205268][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 44.239750][ T3797] loop0: detected capacity change from 0 to 128 [ 44.424784][ T3797] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.444211][ T3797] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.467260][ T3800] loop3: detected capacity change from 0 to 1024 [ 44.489325][ T3800] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.546524][ T3800] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.81: iget: bogus i_mode (1) [ 44.575588][ T3800] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.81: couldn't read orphan inode 11 (err -117) [ 44.832526][ T3800] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.451991][ T1827] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.622756][ T3805] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 45.855573][ T3793] syz.3.81 (3793) used greatest stack depth: 6160 bytes left [ 45.864990][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.967138][ T3826] loop0: detected capacity change from 0 to 512 [ 45.992489][ T3826] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.069898][ T3826] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.087663][ T3826] EXT4-fs error (device loop0): ext4_orphan_get:1391: comm syz.0.90: inode #15: comm syz.0.90: iget: illegal inode # [ 46.111770][ T3826] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.90: couldn't read orphan inode 15 (err -117) [ 46.126669][ T3833] loop4: detected capacity change from 0 to 1024 [ 46.136682][ T3826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.150660][ T3826] EXT4-fs error (device loop0): ext4_lookup:1785: comm syz.0.90: inode #15: comm syz.0.90: iget: illegal inode # [ 46.163137][ T3833] EXT4-fs: Ignoring removed orlov option [ 46.738292][ T3852] loop1: detected capacity change from 0 to 128 [ 46.962851][ T3833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.055332][ T3852] syz.1.96: attempt to access beyond end of device [ 47.055332][ T3852] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 47.068838][ T3852] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 47.079597][ T3833] xt_connbytes: Forcing CT accounting to be enabled [ 47.121959][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.156162][ T3855] syz.1.96: attempt to access beyond end of device [ 47.156162][ T3855] loop1: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 47.169740][ T3855] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 47.197558][ T3860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 47.206450][ T3860] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 47.219536][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.219898][ T3860] syzkaller0: entered promiscuous mode [ 47.234046][ T3860] syzkaller0: entered allmulticast mode [ 47.296758][ T3866] loop4: detected capacity change from 0 to 1024 [ 47.313832][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.327198][ T3866] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.355134][ T3864] loop3: detected capacity change from 0 to 1024 [ 47.362794][ T3864] EXT4-fs: Ignoring removed oldalloc option [ 47.368823][ T3864] EXT4-fs: Ignoring removed bh option [ 47.384595][ T3864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.402560][ T3864] SELinux: Context @ is not valid (left unmapped). [ 47.513045][ T3332] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.528770][ T3873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 47.546880][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.613340][ T3886] futex_wake_op: syz.3.104 tries to shift op by 32; fix this program [ 47.625402][ T3889] netlink: 148 bytes leftover after parsing attributes in process `syz.0.105'. [ 47.655170][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 47.754544][ T3896] netlink: 'syz.1.106': attribute type 39 has an invalid length. [ 47.842338][ T3903] loop4: detected capacity change from 0 to 512 [ 47.860293][ T3903] EXT4-fs: Ignoring removed orlov option [ 47.866042][ T3903] EXT4-fs: Ignoring removed i_version option [ 47.872067][ T3903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.905285][ T3909] loop1: detected capacity change from 0 to 512 [ 47.917842][ T3903] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 47.925780][ T3903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 47.937862][ T3903] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.944862][ T3903] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.959505][ T3903] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 48.001895][ T3903] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.110: bg 0: block 40: padding at end of block bitmap is not set [ 48.106361][ T3903] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 48.127108][ T3903] EXT4-fs (loop4): 1 truncate cleaned up [ 48.133347][ T3903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.134367][ T3909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.152774][ T3903] EXT4-fs (loop4): shut down requested (1) [ 48.164394][ T3909] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.191933][ T3903] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 48.202400][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 48.202416][ T29] audit: type=1400 audit(1768939270.597:1035): avc: denied { read } for pid=2992 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.230644][ T29] audit: type=1400 audit(1768939270.597:1036): avc: denied { search } for pid=2992 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.252299][ T29] audit: type=1400 audit(1768939270.597:1037): avc: denied { search } for pid=2992 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.273888][ T29] audit: type=1400 audit(1768939270.597:1038): avc: denied { add_name } for pid=2992 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.288403][ T3903] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 48.294661][ T29] audit: type=1400 audit(1768939270.607:1039): avc: denied { create } for pid=2992 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.324149][ T29] audit: type=1400 audit(1768939270.607:1040): avc: denied { append open } for pid=2992 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.347539][ T29] audit: type=1400 audit(1768939270.607:1041): avc: denied { getattr } for pid=2992 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.519896][ T3901] loop0: detected capacity change from 0 to 1024 [ 48.538083][ T3901] EXT4-fs: Ignoring removed orlov option [ 48.545105][ T29] audit: type=1400 audit(1768939270.797:1042): avc: denied { read } for pid=3902 comm="syz.4.110" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 48.575317][ T3903] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.599554][ T3919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 48.612702][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.634113][ T3901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.672084][ T3901] xt_connbytes: Forcing CT accounting to be enabled [ 48.679708][ T3922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.113'. [ 48.688547][ T3922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 48.748189][ T29] audit: type=1400 audit(1768939271.147:1043): avc: denied { create } for pid=3926 comm="syz.4.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 48.784087][ T29] audit: type=1400 audit(1768939271.177:1044): avc: denied { read } for pid=3924 comm="syz.1.112" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.808025][ T3932] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 48.821359][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.845520][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.852825][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.918152][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.117'. [ 48.936482][ T3932] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.943670][ T3932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.951015][ T3932] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.958176][ T3932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.008396][ T3932] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 49.056219][ T3919] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.084395][ T3922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.093102][ T3922] bond1: (slave bond0): making interface the new active one [ 49.101961][ T3922] bond1: (slave bond0): Enslaving as an active interface with an up link [ 49.239891][ T3919] infiniband syz1: set active [ 49.244717][ T3919] infiniband syz1: added syz_tun [ 49.281658][ T3936] bridge0: port 3(syz_tun) entered blocking state [ 49.288239][ T3936] bridge0: port 3(syz_tun) entered disabled state [ 49.359090][ T3936] syz_tun: entered allmulticast mode [ 49.369165][ T3936] syz_tun: entered promiscuous mode [ 49.379567][ T3957] syz.2.120 uses obsolete (PF_INET,SOCK_PACKET) [ 49.393730][ T3936] bridge0: port 3(syz_tun) entered blocking state [ 49.400299][ T3936] bridge0: port 3(syz_tun) entered forwarding state [ 49.616624][ T3919] RDS/IB: syz1: added [ 49.623618][ T3919] smc: adding ib device syz1 with port count 1 [ 49.629885][ T3919] smc: ib device syz1 port 1 has no pnetid [ 49.696176][ T3957] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.120'. [ 49.705559][ T3957] netlink: zone id is out of range [ 49.710691][ T3957] netlink: zone id is out of range [ 49.729509][ T3957] netlink: zone id is out of range [ 49.734682][ T3957] netlink: zone id is out of range [ 49.739818][ T3957] netlink: zone id is out of range [ 49.745667][ T3957] netlink: zone id is out of range [ 49.750826][ T3957] netlink: zone id is out of range [ 49.755982][ T3957] netlink: zone id is out of range [ 49.761093][ T3957] netlink: zone id is out of range [ 49.766232][ T3957] netlink: zone id is out of range [ 49.959206][ T3964] syz_tun: entered allmulticast mode [ 49.980249][ T3964] loop0: detected capacity change from 0 to 512 [ 50.011952][ T3964] ext4: Unknown parameter 'nouser_xattr' [ 50.070037][ T3969] vlan2: entered promiscuous mode [ 50.075766][ T3969] vlan2: entered allmulticast mode [ 50.080906][ T3969] hsr_slave_1: entered allmulticast mode [ 50.118365][ T3973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 50.223435][ T3970] loop1: detected capacity change from 0 to 8192 [ 50.248680][ T3979] loop3: detected capacity change from 0 to 512 [ 50.262361][ T3979] EXT4-fs: Ignoring removed orlov option [ 50.268065][ T3979] EXT4-fs: Ignoring removed i_version option [ 50.274107][ T3979] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.301188][ T3979] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.309234][ T3979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 50.331772][ T3314] loop1: p1 p2[DM] p4 [ 50.337756][ T3314] loop1: p1 size 196608 extends beyond EOD, truncated [ 50.351770][ T3979] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.358329][ T3979] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.372943][ T3979] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 50.393254][ T3314] loop1: p2 start 4292936063 is beyond EOD, truncated [ 50.400044][ T3314] loop1: p4 size 50331648 extends beyond EOD, truncated [ 50.429634][ T3970] loop1: p1 p2[DM] p4 [ 50.435252][ T3970] loop1: p1 size 196608 extends beyond EOD, truncated [ 50.481785][ T3970] loop1: p2 start 4292936063 is beyond EOD, truncated [ 50.488586][ T3970] loop1: p4 size 50331648 extends beyond EOD, truncated [ 50.523533][ T3979] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.127: bg 0: block 40: padding at end of block bitmap is not set [ 50.538181][ T3979] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 50.577005][ T3979] EXT4-fs (loop3): 1 truncate cleaned up [ 50.593381][ T3979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.685115][ T3979] EXT4-fs (loop3): shut down requested (1) [ 50.734168][ T3979] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 50.841612][ T3979] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 51.003658][ T3979] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.020322][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 51.022294][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 51.083689][ T3972] syz.4.125 (3972) used greatest stack depth: 5960 bytes left [ 51.143679][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 51.148250][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 51.164014][ T3994] xt_hashlimit: size too large, truncated to 1048576 [ 51.428327][ T3994] –: renamed from vxcan1 (while UP) [ 51.444547][ T4009] Process accounting resumed [ 51.460440][ T4014] ip6t_srh: unknown srh match flags 4000 [ 51.598966][ T4020] lo: entered allmulticast mode [ 51.690017][ T4022] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 51.710920][ T4022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.737686][ T4022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'. [ 51.747066][ T4022] bond1: entered promiscuous mode [ 51.752813][ T4022] bond1: entered allmulticast mode [ 51.796653][ T4024] bond1: (slave dummy0): making interface the new active one [ 51.822948][ T4024] dummy0: entered promiscuous mode [ 51.848206][ T4024] dummy0: entered allmulticast mode [ 51.874664][ T4024] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 52.212659][ T4040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 52.369085][ T4051] capability: warning: `syz.1.150' uses deprecated v2 capabilities in a way that may be insecure [ 52.380275][ T4049] loop0: detected capacity change from 0 to 1024 [ 52.610439][ T4049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.859707][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.987126][ T4088] loop0: detected capacity change from 0 to 512 [ 53.052277][ T4085] syz_tun: entered allmulticast mode [ 53.253648][ T4103] ip6t_srh: unknown srh match flags 4000 [ 53.271328][ T4088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.290243][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 53.290256][ T29] audit: type=1400 audit(1768939275.687:1252): avc: denied { ioctl } for pid=4086 comm="syz.0.159" path="/31/file0/blkio.throttle.io_service_bytes_recursive" dev="loop0" ino=18 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.331040][ T4102] uprobe: syz.2.163:4102 failed to unregister, leaking uprobe [ 53.342559][ T29] audit: type=1400 audit(1768939275.727:1253): avc: denied { remount } for pid=4095 comm="syz.2.163" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.375652][ T29] audit: type=1400 audit(1768939275.777:1254): avc: denied { mount } for pid=4086 comm="syz.0.159" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 53.401870][ T4109] netlink: 44 bytes leftover after parsing attributes in process `syz.0.159'. [ 53.469191][ T29] audit: type=1400 audit(1768939275.867:1255): avc: denied { create } for pid=4112 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.490034][ T29] audit: type=1400 audit(1768939275.887:1256): avc: denied { write } for pid=4112 comm="syz.3.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 53.531513][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 53.596439][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.761144][ T4125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 53.873679][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 53.882631][ T4129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 53.905546][ T4125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.930210][ T4125] netlink: 'syz.0.170': attribute type 10 has an invalid length. [ 54.131409][ T4129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.149020][ T4129] bond1: (slave bond0): Enslaving as an active interface with a down link [ 54.257237][ T29] audit: type=1326 audit(1768939276.657:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 54.280521][ T4129] rdma_rxe: rxe_newlink: failed to add syz_tun [ 54.280823][ T29] audit: type=1326 audit(1768939276.657:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 54.310075][ T29] audit: type=1326 audit(1768939276.657:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 54.333630][ T29] audit: type=1326 audit(1768939276.657:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 54.357054][ T29] audit: type=1326 audit(1768939276.657:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 54.417475][ T4136] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.424692][ T4136] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.616669][ T4136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.626919][ T4136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.734275][ T4125] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.820937][ T37] net_ratelimit: 71 callbacks suppressed [ 54.820953][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 54.833775][ T4133] bridge0: port 1(syz_tun) entered blocking state [ 54.840355][ T4133] bridge0: port 1(syz_tun) entered disabled state [ 54.858545][ T4149] netlink: 'syz.4.178': attribute type 1 has an invalid length. [ 54.867651][ T4133] syz_tun: entered promiscuous mode [ 54.873505][ T4133] bridge0: port 1(syz_tun) entered blocking state [ 54.879992][ T4133] bridge0: port 1(syz_tun) entered forwarding state [ 54.891702][ T2814] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.921446][ T4149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.954627][ T4154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.178'. [ 54.965472][ T2814] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.974798][ T2814] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.985734][ T4154] bond1: entered promiscuous mode [ 54.990874][ T4154] bond1: entered allmulticast mode [ 54.997031][ T2814] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.013546][ T4149] bond1: (slave dummy0): making interface the new active one [ 55.021129][ T4149] dummy0: entered promiscuous mode [ 55.026488][ T4149] dummy0: entered allmulticast mode [ 55.032289][ T4149] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 55.051639][ T2814] bond1: (slave bond0): failed to get link speed/duplex [ 55.163176][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 55.200949][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 55.271896][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 55.392593][ T2814] bond1: (slave bond0): failed to get link speed/duplex [ 55.424940][ T4176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'. [ 55.501778][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 55.584206][ T4184] 9p: Bad value for 'rfdno' [ 55.612999][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 55.784398][ T1686] bond1: (slave bond0): failed to get link speed/duplex [ 56.202452][ T1686] bond1: (slave bond0): failed to get link speed/duplex [ 56.312710][ T2814] bond1: (slave bond0): failed to get link speed/duplex [ 56.680800][ T4200] netlink: 14 bytes leftover after parsing attributes in process `syz.4.191'. [ 57.037696][ T4205] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.192'. [ 57.174911][ T4211] veth3: entered promiscuous mode [ 57.180025][ T4211] veth3: entered allmulticast mode [ 57.211634][ T4211] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 57.241828][ T4211] bond1: (slave dummy0): Releasing active interface [ 57.259998][ T4211] dummy0: left promiscuous mode [ 57.276288][ T4211] dummy0: left allmulticast mode [ 57.296033][ T4211] team0: Port device dummy0 added [ 57.529069][ T4214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 57.679261][ T4224] loop1: detected capacity change from 0 to 1024 [ 57.697120][ T4224] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 57.841719][ T4224] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 57.865900][ T4224] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.052037][ T4224] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 58.067361][ T4224] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 58.254600][ T4224] EXT4-fs (loop1): 1 truncate cleaned up [ 58.260752][ T4224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.275127][ T4224] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.323288][ T4220] geneve2: entered promiscuous mode [ 58.328608][ T4220] geneve2: entered allmulticast mode [ 58.550188][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 58.550204][ T29] audit: type=1400 audit(1768939280.947:1305): avc: denied { unlink } for pid=3322 comm="syz-executor" name="file0" dev="tmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.602710][ T4243] netlink: 'syz.3.202': attribute type 21 has an invalid length. [ 58.639635][ T4243] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 58.647409][ T4243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.202'. [ 58.964869][ T29] audit: type=1400 audit(1768939281.367:1306): avc: denied { write } for pid=4250 comm="syz.0.205" path="socket:[6898]" dev="sockfs" ino=6898 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.005354][ T4253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.206'. [ 59.040524][ T4253] IPVS: Error connecting to the multicast addr [ 59.091651][ T29] audit: type=1400 audit(1768939281.497:1307): avc: denied { shutdown } for pid=4250 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.157257][ T29] audit: type=1326 audit(1768939281.527:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 59.181751][ T29] audit: type=1326 audit(1768939281.527:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 59.205206][ T29] audit: type=1326 audit(1768939281.527:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 59.229087][ T29] audit: type=1326 audit(1768939281.527:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 59.253030][ T29] audit: type=1326 audit(1768939281.527:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 59.276393][ T29] audit: type=1326 audit(1768939281.537:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 59.300486][ T29] audit: type=1326 audit(1768939281.537:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4252 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 59.644447][ T4261] loop0: detected capacity change from 0 to 512 [ 59.784267][ T4266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.209'. [ 59.818832][ T4261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.833501][ T37] net_ratelimit: 29 callbacks suppressed [ 59.833519][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 59.883064][ T4261] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.956479][ T123] bond1: (slave bond0): failed to get link speed/duplex [ 59.992828][ T4275] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 60.073335][ T4275] Cannot find add_set index 0 as target [ 60.223036][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 60.496031][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 60.621799][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 60.732037][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 60.851804][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 60.894697][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.961948][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 61.084175][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 61.158627][ T4307] loop0: detected capacity change from 0 to 8192 [ 61.189167][ T4304] infiniband !yz!: set active [ 61.194014][ T4304] infiniband !yz!: added team_slave_0 [ 61.199511][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 61.208634][ T4310] C: renamed from team_slave_0 (while UP) [ 61.230261][ T4307] loop0: p1 p2[DM] p4 [ 61.239433][ T4307] loop0: p1 size 196608 extends beyond EOD, truncated [ 61.244245][ T4304] RDS/IB: !yz!: added [ 61.258652][ T4310] netlink: 152 bytes leftover after parsing attributes in process `syz.3.219'. [ 61.260674][ T4304] smc: adding ib device !yz! with port count 1 [ 61.289244][ T4313] loop1: detected capacity change from 0 to 512 [ 61.296478][ T4307] loop0: p2 start 4292936063 is beyond EOD, truncated [ 61.297657][ T4304] smc: ib device !yz! port 1 has no pnetid [ 61.305104][ T4307] loop0: p4 size 50331648 extends beyond EOD, truncated [ 61.332514][ T4313] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.366932][ T4313] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.223: Allocating blocks 41-42 which overlap fs metadata [ 61.382633][ T4313] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.223: Allocating blocks 41-42 which overlap fs metadata [ 61.396672][ T4313] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.223: Failed to acquire dquot type 1 [ 61.408305][ T4313] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 61.423199][ T4313] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.223: corrupted inode contents [ 61.444655][ T4313] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.223: mark_inode_dirty error [ 61.456229][ T4313] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.223: corrupted inode contents [ 61.480377][ T4318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 61.492268][ T4313] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.223: mark_inode_dirty error [ 61.506410][ T4313] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.223: corrupted inode contents [ 61.519097][ T4313] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 61.529506][ T4313] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.223: corrupted inode contents [ 61.543343][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.545727][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.559696][ T4313] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.223: mark_inode_dirty error [ 61.584667][ T4313] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 61.599605][ T4313] EXT4-fs (loop1): 1 truncate cleaned up [ 61.606185][ T4313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.629632][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.639838][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 61.671326][ T4313] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 61.677902][ T4313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 61.685405][ T4313] vhci_hcd vhci_hcd.0: Device attached [ 61.755830][ T4331] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.223: Allocating blocks 41-42 which overlap fs metadata [ 61.792768][ T4331] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.223: Failed to acquire dquot type 1 [ 61.883199][ T3399] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 61.932454][ T4326] netlink: 14 bytes leftover after parsing attributes in process `syz.1.223'. [ 61.944144][ T3399] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 62.120689][ T4324] vhci_hcd: connection reset by peer [ 62.141622][ T2814] vhci_hcd vhci_hcd.1: stop threads [ 62.146921][ T2814] vhci_hcd vhci_hcd.1: release socket [ 62.152363][ T2814] vhci_hcd vhci_hcd.1: disconnect device [ 62.172256][ T4350] tipc: Started in network mode [ 62.177193][ T4350] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 62.188100][ T4350] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 62.196504][ T4350] tipc: Enabled bearer , priority 10 [ 62.580257][ T4348] veth2: entered promiscuous mode [ 62.585439][ T4348] veth2: entered allmulticast mode [ 62.891323][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.990945][ T4373] loop1: detected capacity change from 0 to 1024 [ 63.029092][ T4376] 9p: Bad value for 'wfdno' [ 63.043078][ T4373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.052002][ T4374] ip_vti0: entered promiscuous mode [ 63.060497][ T4374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 63.158197][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 63.181830][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.206661][ T4386] netlink: 236 bytes leftover after parsing attributes in process `syz.2.247'. [ 63.218610][ T3488] tipc: Node number set to 1 [ 63.453137][ T4388] loop1: detected capacity change from 0 to 8192 [ 63.548922][ T4395] netlink: 'syz.1.248': attribute type 1 has an invalid length. [ 63.585773][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 63.585791][ T29] audit: type=1326 audit(1768939285.987:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7feeb224acb9 code=0x7ffc0000 [ 64.054704][ T29] audit: type=1326 audit(1768939286.457:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.078237][ T29] audit: type=1326 audit(1768939286.457:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.133196][ T4405] loop1: detected capacity change from 0 to 512 [ 64.147884][ T29] audit: type=1326 audit(1768939286.457:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.149898][ T4405] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.253: corrupted inode contents [ 64.171657][ T29] audit: type=1326 audit(1768939286.457:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.171754][ T29] audit: type=1326 audit(1768939286.457:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.171812][ T29] audit: type=1326 audit(1768939286.457:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.171855][ T29] audit: type=1326 audit(1768939286.457:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.171900][ T29] audit: type=1326 audit(1768939286.457:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.171931][ T29] audit: type=1326 audit(1768939286.457:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4404 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 64.327735][ T4405] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 64.340062][ T4384] loop0: detected capacity change from 0 to 512 [ 64.351181][ T4405] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.253: corrupted inode contents [ 64.383761][ T4405] EXT4-fs error (device loop1): ext4_evict_inode:301: inode #15: comm syz.1.253: mark_inode_dirty error [ 64.439936][ T4384] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.450445][ T4405] EXT4-fs (loop1): 1 orphan inode deleted [ 64.457334][ T4405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.479519][ T4384] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.527747][ T4384] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.246: Allocating blocks 41-42 which overlap fs metadata [ 64.550191][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.259'. [ 64.565965][ T4384] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.246: Allocating blocks 41-42 which overlap fs metadata [ 64.600403][ T4384] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.246: Failed to acquire dquot type 1 [ 64.615334][ T4384] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 64.650583][ T4384] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.246: corrupted inode contents [ 64.650891][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.697655][ T4384] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.246: mark_inode_dirty error [ 64.714621][ T4384] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.246: corrupted inode contents [ 64.752488][ T4384] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.246: mark_inode_dirty error [ 64.772995][ T4384] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.246: corrupted inode contents [ 64.794013][ T4428] ip6t_srh: unknown srh match flags 4000 [ 64.843369][ T4384] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 64.865730][ T4384] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.246: corrupted inode contents [ 64.889188][ T2814] net_ratelimit: 29 callbacks suppressed [ 64.889224][ T2814] bond1: (slave bond0): failed to get link speed/duplex [ 64.910494][ T4384] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.246: mark_inode_dirty error [ 64.962366][ T4428] loop1: detected capacity change from 0 to 1024 [ 64.993466][ T4428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.009979][ T4384] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 65.021799][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 65.037750][ T4384] EXT4-fs (loop0): 1 truncate cleaned up [ 65.092748][ T4384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.212051][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 65.323415][ T2096] bond1: (slave bond0): failed to get link speed/duplex [ 65.338715][ T4439] Set syz1 is full, maxelem 65536 reached [ 65.413055][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.431786][ T123] bond1: (slave bond0): failed to get link speed/duplex [ 65.547696][ T4467] veth5: entered promiscuous mode [ 65.552865][ T4467] veth5: entered allmulticast mode [ 65.581928][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 65.589303][ T4461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.265'. [ 65.599079][ T4463] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 65.626135][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.701707][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 65.847812][ T4479] syzkaller0: entered promiscuous mode [ 65.853449][ T4479] syzkaller0: entered allmulticast mode [ 65.911663][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 66.021652][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 66.150831][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 66.159766][ T4487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 66.266661][ T4492] SELinux: failed to load policy [ 66.275283][ T4492] __nla_validate_parse: 7 callbacks suppressed [ 66.275299][ T4492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.275'. [ 66.290546][ T4492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.275'. [ 66.302775][ T4492] bridge0: entered promiscuous mode [ 66.308370][ T4492] bridge0: left promiscuous mode [ 66.425244][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 66.487052][ T4510] loop0: detected capacity change from 0 to 128 [ 66.511286][ T4473] syz.1.280 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 66.522996][ T4473] CPU: 1 UID: 0 PID: 4473 Comm: syz.1.280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.523025][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.523037][ T4473] Call Trace: [ 66.523049][ T4473] [ 66.523060][ T4473] __dump_stack+0x1d/0x30 [ 66.523092][ T4473] dump_stack_lvl+0x95/0xd0 [ 66.523176][ T4473] dump_stack+0x15/0x1b [ 66.523201][ T4473] dump_header+0x80/0x240 [ 66.523228][ T4473] oom_kill_process+0x295/0x350 [ 66.523276][ T4473] out_of_memory+0x97d/0xb80 [ 66.523301][ T4473] try_charge_memcg+0x62e/0xa10 [ 66.523347][ T4473] charge_memcg+0x51/0xc0 [ 66.523384][ T4473] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 66.523480][ T4473] __read_swap_cache_async+0x17b/0x2d0 [ 66.523512][ T4473] swap_cluster_readahead+0x362/0x3c0 [ 66.523546][ T4473] swapin_readahead+0xde/0x840 [ 66.523647][ T4473] ? __rcu_read_unlock+0x33/0x70 [ 66.523666][ T4473] ? __rcu_read_unlock+0x4e/0x70 [ 66.523687][ T4473] ? swap_cache_get_folio+0x26f/0x280 [ 66.523721][ T4473] do_swap_page+0x2f4/0x2140 [ 66.523824][ T4473] ? css_rstat_updated+0xbb/0x280 [ 66.523909][ T4473] ? __pfx_default_wake_function+0x10/0x10 [ 66.523954][ T4473] handle_mm_fault+0xb40/0x3030 [ 66.523994][ T4473] ? vma_start_read+0x1c7/0x2c0 [ 66.524041][ T4473] do_user_addr_fault+0x62f/0x1050 [ 66.524070][ T4473] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 66.524135][ T4473] ? irqentry_exit+0x3c/0x510 [ 66.524175][ T4473] exc_page_fault+0x62/0xa0 [ 66.524212][ T4473] asm_exc_page_fault+0x26/0x30 [ 66.524243][ T4473] RIP: 0033:0x7fd185588721 [ 66.524260][ T4473] Code: ff e8 b3 8a fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 69 3d 7e cf ed 00 e8 03 00 00 48 8d 1d 7f d8 3a 00 ca 30 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f [ 66.524277][ T4473] RSP: 002b:00007fff626ae630 EFLAGS: 00010206 [ 66.524293][ T4473] RAX: 000000000001037b RBX: 00007fd185935fa0 RCX: 00000000000101d0 [ 66.524306][ T4473] RDX: 00000000000001ab RSI: 00007fff626ae610 RDI: 00000000000003e8 [ 66.524359][ T4473] RBP: 00007fd185937da0 R08: 0000000019778f72 R09: 7fffffffffffffff [ 66.524376][ T4473] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00000000000103a8 [ 66.524393][ T4473] R13: 00007fd18593609c R14: 00000000000100fc R15: 00007fd185936090 [ 66.524426][ T4473] [ 66.524441][ T4473] memory: usage 307200kB, limit 307200kB, failcnt 240 [ 66.592671][ T4512] netlink: 'syz.3.282': attribute type 25 has an invalid length. [ 66.594306][ T4473] memory+swap: usage 307564kB, limit 9007199254740988kB, failcnt 0 [ 66.775217][ T4473] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 66.782609][ T4473] Memory cgroup stats for /syz1: [ 66.783021][ T4473] cache 0 [ 66.790938][ T4473] rss 0 [ 66.794425][ T4473] shmem 0 [ 66.797460][ T4473] mapped_file 0 [ 66.800971][ T4473] dirty 0 [ 66.803993][ T4473] writeback 0 [ 66.807303][ T4473] workingset_refault_anon 2063 [ 66.812144][ T4473] workingset_refault_file 257 [ 66.816849][ T4473] swap 372736 [ 66.820157][ T4473] swapcached 0 [ 66.824356][ T4473] pgpgin 46782 [ 66.827820][ T4473] pgpgout 46781 [ 66.830808][ T4514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'. [ 66.831323][ T4473] pgfault 53939 [ 66.831334][ T4473] pgmajfault 274 [ 66.847194][ T4473] inactive_anon 0 [ 66.850854][ T4473] active_anon 0 [ 66.855099][ T4473] inactive_file 0 [ 66.858742][ T4473] active_file 4096 [ 66.862677][ T4473] unevictable 0 [ 66.866158][ T4473] hierarchical_memory_limit 314572800 [ 66.871652][ T4473] hierarchical_memsw_limit 9223372036854771712 [ 66.877823][ T4473] total_cache 0 [ 66.881306][ T4473] total_rss 0 [ 66.885292][ T4473] total_shmem 0 [ 66.888783][ T4473] total_mapped_file 0 [ 66.892835][ T4473] total_dirty 0 [ 66.896323][ T4473] total_writeback 0 [ 66.900146][ T4473] total_workingset_refault_anon 2063 [ 66.905472][ T4473] total_workingset_refault_file 257 [ 66.910681][ T4473] total_swap 372736 [ 66.915136][ T4473] total_swapcached 0 [ 66.919054][ T4473] total_pgpgin 46782 [ 66.923023][ T4473] total_pgpgout 46781 [ 66.927040][ T4473] total_pgfault 53939 [ 66.931030][ T4473] total_pgmajfault 274 [ 66.935127][ T4473] total_inactive_anon 0 [ 66.939391][ T4473] total_active_anon 0 [ 66.944134][ T4473] total_inactive_file 0 [ 66.948309][ T4473] total_active_file 4096 [ 66.952589][ T4473] total_unevictable 0 [ 66.956628][ T4473] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.280,pid=4473,uid=0 [ 66.971253][ T4473] Memory cgroup out of memory: Killed process 4473 (syz.1.280) total-vm:94132kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 66.989260][ T3399] usb 3-1: enqueue for inactive port 0 [ 66.994819][ T3399] usb 3-1: enqueue for inactive port 0 [ 67.061569][ T3399] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 67.202658][ T4524] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 67.229674][ T4530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.290'. [ 67.289144][ T4530] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 67.303888][ T4534] dvmrp0: entered allmulticast mode [ 67.314800][ T4530] bond1: (slave bond0): Releasing active interface [ 67.344372][ T37] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 67.346222][ T4530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.364542][ T37] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 67.383550][ T4530] team0: Port device bond0 added [ 67.433026][ T4544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 68.055479][ T4561] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 68.149248][ T4561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.176795][ T4561] macvlan2: entered promiscuous mode [ 68.182795][ T4561] macvlan2: entered allmulticast mode [ 68.213243][ T4561] bond2: entered promiscuous mode [ 68.218690][ T4561] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.352586][ T4561] bond2: left promiscuous mode [ 68.376055][ T4567] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 68.622951][ T4582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 68.807568][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 68.807586][ T29] audit: type=1326 audit(1768939291.207:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 68.857552][ T29] audit: type=1326 audit(1768939291.207:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 68.880953][ T29] audit: type=1326 audit(1768939291.217:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 68.961841][ T29] audit: type=1326 audit(1768939291.367:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 69.022409][ T29] audit: type=1326 audit(1768939291.397:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 69.045815][ T29] audit: type=1326 audit(1768939291.397:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 69.069114][ T29] audit: type=1326 audit(1768939291.397:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 69.092565][ T29] audit: type=1326 audit(1768939291.397:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 69.115966][ T29] audit: type=1326 audit(1768939291.397:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 69.139268][ T29] audit: type=1326 audit(1768939291.397:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4587 comm="syz.3.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f58baacb9 code=0x7ffc0000 [ 69.328963][ T4590] loop0: detected capacity change from 0 to 512 [ 69.616641][ T4590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.972375][ T1686] net_ratelimit: 29 callbacks suppressed [ 69.972392][ T1686] bond1: (slave bond0): failed to get link speed/duplex [ 70.042599][ T4590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.135087][ T947] bond1: (slave bond0): failed to get link speed/duplex [ 70.163428][ T4590] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.252259][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 70.371936][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 70.543536][ T947] bond1: (slave bond0): failed to get link speed/duplex [ 70.674372][ T123] bond1: (slave bond0): failed to get link speed/duplex [ 70.792154][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 70.903730][ T947] bond1: (slave bond0): failed to get link speed/duplex [ 71.011776][ T312] bond1: (slave bond0): failed to get link speed/duplex [ 71.234307][ T4615] pim6reg1: entered promiscuous mode [ 71.239716][ T4615] pim6reg1: entered allmulticast mode [ 71.271035][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.328851][ T4620] xt_TCPMSS: Only works on TCP SYN packets [ 71.341285][ T4620] loop0: detected capacity change from 0 to 1024 [ 71.347753][ T1929] bond1: (slave bond0): failed to get link speed/duplex [ 71.355374][ T4620] EXT4-fs: Ignoring removed orlov option [ 71.378496][ T4620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.462353][ T4620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.765719][ T4628] loop1: detected capacity change from 0 to 128 [ 71.815978][ T4625] can0: slcan on ttyS3. [ 71.913153][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 72.269142][ T4628] syz.1.322: attempt to access beyond end of device [ 72.269142][ T4628] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 72.283555][ T4628] syz.1.322: attempt to access beyond end of device [ 72.283555][ T4628] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 72.509308][ T4628] syz.1.322: attempt to access beyond end of device [ 72.509308][ T4628] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 72.570014][ T4628] syz.1.322: attempt to access beyond end of device [ 72.570014][ T4628] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 72.663945][ T4628] syz.1.322: attempt to access beyond end of device [ 72.663945][ T4628] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 72.677436][ T4628] syz.1.322: attempt to access beyond end of device [ 72.677436][ T4628] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 72.691689][ T4628] syz.1.322: attempt to access beyond end of device [ 72.691689][ T4628] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 72.705249][ T4628] syz.1.322: attempt to access beyond end of device [ 72.705249][ T4628] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 72.721075][ T4628] syz.1.322: attempt to access beyond end of device [ 72.721075][ T4628] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 72.737146][ T4628] syz.1.322: attempt to access beyond end of device [ 72.737146][ T4628] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 72.773280][ T4624] can0 (unregistered): slcan off ttyS3. [ 72.906383][ T4672] loop1: detected capacity change from 0 to 8192 [ 73.275899][ T4707] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.284338][ T4707] smc: net device bond0 erased user defined pnetid SYZ0 [ 73.375409][ T4710] loop0: detected capacity change from 0 to 2048 [ 73.484939][ T4710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.657167][ T4710] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.332: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 73.684258][ T4719] netlink: 14 bytes leftover after parsing attributes in process `syz.4.335'. [ 73.698646][ T4724] netlink: 'syz.1.334': attribute type 13 has an invalid length. [ 73.841035][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 73.841056][ T29] audit: type=1326 audit(1768939296.237:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 73.871655][ T29] audit: type=1326 audit(1768939296.267:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 73.895126][ T29] audit: type=1326 audit(1768939296.267:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 73.918634][ T29] audit: type=1326 audit(1768939296.267:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 73.942065][ T29] audit: type=1326 audit(1768939296.267:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 73.965474][ T29] audit: type=1326 audit(1768939296.267:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 73.993267][ T4727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.000553][ T4727] IPv6: NLM_F_CREATE should be set when creating new route [ 74.007809][ T4727] IPv6: NLM_F_CREATE should be set when creating new route [ 74.015053][ T4727] IPv6: NLM_F_CREATE should be set when creating new route [ 74.089195][ T4727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.097372][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.104738][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.131547][ T29] audit: type=1326 audit(1768939296.277:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 74.154942][ T29] audit: type=1326 audit(1768939296.287:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 74.178329][ T29] audit: type=1326 audit(1768939296.287:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 74.201692][ T29] audit: type=1326 audit(1768939296.307:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.1.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1856bacb9 code=0x7ffc0000 [ 74.232499][ T4724] batman_adv: batadv0: Interface deactivated: dummy0 [ 74.334145][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.371319][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.431633][ T4715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 74.537772][ T4745] netlink: 14 bytes leftover after parsing attributes in process `syz.3.339'. [ 74.626132][ T123] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.645255][ T123] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.671597][ T123] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.701847][ T123] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.710865][ T4753] SET target dimension over the limit! [ 75.021272][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.021813][ T1929] net_ratelimit: 21 callbacks suppressed [ 75.021857][ T1929] bond1: (slave bond0): failed to get link speed/duplex [ 75.085715][ T4772] loop1: detected capacity change from 0 to 4096 [ 75.144268][ T4772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.162607][ T947] bond1: (slave bond0): failed to get link speed/duplex [ 75.168969][ T3327] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 75.180677][ T3327] CPU: 1 UID: 0 PID: 3327 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.180709][ T3327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.180725][ T3327] Call Trace: [ 75.180732][ T3327] [ 75.180742][ T3327] __dump_stack+0x1d/0x30 [ 75.180822][ T3327] dump_stack_lvl+0x95/0xd0 [ 75.180926][ T3327] dump_stack+0x15/0x1b [ 75.180945][ T3327] dump_header+0x80/0x240 [ 75.181044][ T3327] oom_kill_process+0x295/0x350 [ 75.181066][ T3327] out_of_memory+0x97d/0xb80 [ 75.181094][ T3327] try_charge_memcg+0x62e/0xa10 [ 75.181165][ T3327] charge_memcg+0x51/0xc0 [ 75.181204][ T3327] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 75.181248][ T3327] __read_swap_cache_async+0x17b/0x2d0 [ 75.181284][ T3327] swap_cluster_readahead+0x362/0x3c0 [ 75.181329][ T3327] swapin_readahead+0xde/0x840 [ 75.181425][ T3327] ? next_uptodate_folio+0x84c/0x8c0 [ 75.181531][ T3327] ? percpu_counter_add_batch+0xb6/0x130 [ 75.181560][ T3327] ? __rcu_read_unlock+0x4e/0x70 [ 75.181583][ T3327] ? swap_cache_get_folio+0x26f/0x280 [ 75.181654][ T3327] do_swap_page+0x2f4/0x2140 [ 75.181687][ T3327] ? css_rstat_updated+0xbb/0x280 [ 75.181730][ T3327] ? __pfx_default_wake_function+0x10/0x10 [ 75.181832][ T3327] handle_mm_fault+0xb40/0x3030 [ 75.181948][ T3327] ? vma_start_read+0x1c7/0x2c0 [ 75.181985][ T3327] do_user_addr_fault+0x62f/0x1050 [ 75.182016][ T3327] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 75.182038][ T3327] ? irqentry_exit+0x3c/0x510 [ 75.182118][ T3327] exc_page_fault+0x62/0xa0 [ 75.182242][ T3327] asm_exc_page_fault+0x26/0x30 [ 75.182263][ T3327] RIP: 0033:0x7fb6ade58db7 [ 75.182279][ T3327] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 39 7c 24 [ 75.182357][ T3327] RSP: 002b:00007ffe64dfce80 EFLAGS: 00010202 [ 75.182379][ T3327] RAX: 0000001b34324000 RBX: 00000000000000e1 RCX: 0000000000012110 [ 75.182397][ T3327] RDX: 000000000f19db0c RSI: 00007ffe64dfcf10 RDI: 000000000000000c [ 75.182436][ T3327] RBP: 00007ffe64dfcebc R08: 00000000399b11a9 R09: 7fffffffffffffff [ 75.182525][ T3327] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 75.182547][ T3327] R13: 00000000000927c0 R14: 0000000000012425 R15: 00007ffe64dfcf10 [ 75.182573][ T3327] [ 75.412195][ T3327] memory: usage 307200kB, limit 307200kB, failcnt 654 [ 75.418991][ T3327] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 75.427010][ T3327] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 75.434435][ T3327] Memory cgroup stats for /syz2: [ 75.441561][ T1929] bond1: (slave bond0): failed to get link speed/duplex [ 75.465137][ T4779] netlink: 14 bytes leftover after parsing attributes in process `syz.1.347'. [ 75.478407][ T3327] cache 0 [ 75.481723][ T3327] rss 0 [ 75.484610][ T3327] shmem 0 [ 75.487568][ T3327] mapped_file 0 [ 75.491075][ T3327] dirty 0 [ 75.494103][ T3327] writeback 0 [ 75.497427][ T3327] workingset_refault_anon 289 [ 75.502253][ T3327] workingset_refault_file 886 [ 75.506946][ T3327] swap 262144 [ 75.510248][ T3327] swapcached 0 [ 75.513661][ T3327] pgpgin 45922 [ 75.517104][ T3327] pgpgout 45922 [ 75.520582][ T3327] pgfault 53025 [ 75.524187][ T3327] pgmajfault 73 [ 75.527258][ T4776] loop0: detected capacity change from 0 to 512 [ 75.527656][ T3327] inactive_anon 0 [ 75.527668][ T3327] active_anon 0 [ 75.541198][ T3327] inactive_file 0 [ 75.544907][ T3327] active_file 0 [ 75.548398][ T3327] unevictable 0 [ 75.551928][ T3327] hierarchical_memory_limit 314572800 [ 75.557326][ T3327] hierarchical_memsw_limit 9223372036854771712 [ 75.563605][ T3327] total_cache 0 [ 75.567254][ T3327] total_rss 0 [ 75.570640][ T3327] total_shmem 0 [ 75.574159][ T3327] total_mapped_file 0 [ 75.578223][ T3327] total_dirty 0 [ 75.581764][ T3327] total_writeback 0 [ 75.585624][ T3327] total_workingset_refault_anon 289 [ 75.590882][ T3327] total_workingset_refault_file 886 [ 75.596177][ T3327] total_swap 262144 [ 75.596782][ T4776] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 75.600132][ T3327] total_swapcached 0 [ 75.600145][ T3327] total_pgpgin 45922 [ 75.609473][ T1929] bond1: (slave bond0): failed to get link speed/duplex [ 75.613261][ T3327] total_pgpgout 45922 [ 75.613273][ T3327] total_pgfault 53025 [ 75.613283][ T3327] total_pgmajfault 73 [ 75.636480][ T3327] total_inactive_anon 0 [ 75.640863][ T3327] total_active_anon 0 [ 75.644932][ T3327] total_inactive_file 0 [ 75.649107][ T3327] total_active_file 0 [ 75.653139][ T3327] total_unevictable 0 [ 75.657138][ T3327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.341,pid=4752,uid=0 [ 75.671717][ T3327] Memory cgroup out of memory: Killed process 4752 (syz.2.341) total-vm:96180kB, anon-rss:1328kB, file-rss:22072kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 75.770381][ T4779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.792963][ T4776] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.348: Allocating blocks 41-42 which overlap fs metadata [ 75.833006][ T4776] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.348: Failed to acquire dquot type 1 [ 75.847174][ T4779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.922584][ T4776] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 75.943946][ T4779] bond0 (unregistering): Released all slaves [ 75.979673][ T4776] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.348: corrupted inode contents [ 76.001705][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 76.021148][ T4776] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.348: mark_inode_dirty error [ 76.053461][ T4776] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.348: corrupted inode contents [ 76.083625][ T4776] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.348: mark_inode_dirty error [ 76.095282][ T4776] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.348: corrupted inode contents [ 76.109550][ T4776] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 76.118168][ T123] bond1: (slave bond0): failed to get link speed/duplex [ 76.125634][ T4776] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.348: corrupted inode contents [ 76.137807][ T4776] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.348: mark_inode_dirty error [ 76.149514][ T4776] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 76.158743][ T4776] EXT4-fs (loop0): 1 truncate cleaned up [ 76.165783][ T4776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.199981][ T4776] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 76.206588][ T4776] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.214145][ T4776] vhci_hcd vhci_hcd.0: Device attached [ 76.241588][ T123] bond1: (slave bond0): failed to get link speed/duplex [ 76.293102][ T4776] netlink: 14 bytes leftover after parsing attributes in process `syz.0.348'. [ 76.303544][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.372463][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 76.411601][ T23] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 76.472998][ T4800] vhci_hcd: connection closed [ 76.474014][ T23] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 76.486416][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 76.521321][ T4808] tipc: Started in network mode [ 76.526927][ T4808] tipc: Node identity a5, cluster identity 4711 [ 76.533280][ T4808] tipc: Node number set to 165 [ 76.538392][ T1686] vhci_hcd vhci_hcd.0: stop threads [ 76.543697][ T1686] vhci_hcd vhci_hcd.0: release socket [ 76.549124][ T1686] vhci_hcd vhci_hcd.0: disconnect device [ 76.601597][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 76.748193][ T4811] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.766121][ T4811] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.897763][ T4818] team0: Port device team_slave_0 removed [ 76.943012][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.954667][ T1827] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 1 [ 77.197787][ T4828] netlink: 'syz.0.360': attribute type 1 has an invalid length. [ 77.235932][ T4828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.258425][ T4831] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 77.258425][ T4831] The task syz.4.357 (4831) triggered the difference, watch for misbehavior. [ 77.447891][ T4835] gretap1: entered promiscuous mode [ 77.475636][ T4835] bond2: (slave gretap1): making interface the new active one [ 77.491979][ T4835] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 77.513267][ T4838] SET target dimension over the limit! [ 77.527193][ T4828] macvlan2: entered promiscuous mode [ 77.532625][ T4828] macvlan2: entered allmulticast mode [ 77.540834][ T4828] bond2: entered promiscuous mode [ 77.561035][ T4828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.613865][ T4828] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 77.640292][ T4828] bond2: left promiscuous mode [ 77.981609][ T4859] No source specified [ 78.873199][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 78.873213][ T29] audit: type=1326 audit(1768939301.277:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 79.057217][ T4885] loop1: detected capacity change from 0 to 512 [ 79.084016][ T29] audit: type=1326 audit(1768939301.337:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 79.107515][ T29] audit: type=1326 audit(1768939301.357:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 79.131748][ T29] audit: type=1326 audit(1768939301.357:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 79.155151][ T29] audit: type=1326 audit(1768939301.357:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 79.179167][ T29] audit: type=1326 audit(1768939301.357:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 79.203314][ T29] audit: type=1326 audit(1768939301.357:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4881 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6adf8acb9 code=0x7ffc0000 [ 79.226779][ T29] audit: type=1400 audit(1768939301.357:1835): avc: denied { read } for pid=4866 comm="syz.3.369" path="socket:[8734]" dev="sockfs" ino=8734 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.291212][ T4887] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 79.389259][ T4887] batadv_slave_0: entered promiscuous mode [ 79.403579][ T4887] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 79.437834][ T4885] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 79.438627][ T4886] batadv_slave_0: left promiscuous mode [ 79.486661][ T4885] EXT4-fs (loop1): mount failed [ 79.544647][ T4892] lo speed is unknown, defaulting to 1000 [ 79.561911][ T4894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 79.570813][ T4892] lo speed is unknown, defaulting to 1000 [ 79.581073][ T4892] lo speed is unknown, defaulting to 1000 [ 79.617623][ T29] audit: type=1400 audit(1768939301.987:1836): avc: denied { ioctl } for pid=4879 comm="syz.1.371" path="socket:[9336]" dev="sockfs" ino=9336 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.650632][ T4896] smc: removing ib device syz! [ 79.663100][ T4892] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 79.682177][ T3399] IPVS: starting estimator thread 0... [ 79.691230][ T29] audit: type=1400 audit(1768939302.047:1837): avc: denied { lock } for pid=4893 comm="syz.2.375" path="socket:[8756]" dev="sockfs" ino=8756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 79.745814][ T4892] lo speed is unknown, defaulting to 1000 [ 79.783520][ T4892] lo speed is unknown, defaulting to 1000 [ 79.793341][ T4901] IPVS: using max 2064 ests per chain, 103200 per kthread [ 79.891458][ T4892] lo speed is unknown, defaulting to 1000 [ 79.919562][ T4892] lo speed is unknown, defaulting to 1000 [ 79.953218][ T4892] lo speed is unknown, defaulting to 1000 [ 79.980128][ T4892] lo speed is unknown, defaulting to 1000 [ 80.121575][ T52] net_ratelimit: 23 callbacks suppressed [ 80.121597][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 80.241564][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 80.352281][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 80.471671][ T312] bond1: (slave bond0): failed to get link speed/duplex [ 80.581585][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 80.691580][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 80.802297][ T1685] bond1: (slave bond0): failed to get link speed/duplex [ 80.878030][ T5027] SET target dimension over the limit! [ 80.886431][ T5023] netlink: 'syz.4.383': attribute type 12 has an invalid length. [ 80.921574][ T52] bond1: (slave bond0): failed to get link speed/duplex [ 81.031565][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 81.082206][ T5038] bond1: (slave dummy0): Releasing active interface [ 81.088868][ T5038] dummy0: left promiscuous mode [ 81.093925][ T5038] dummy0: left allmulticast mode [ 81.100006][ T5038] bridge_slave_0: left allmulticast mode [ 81.106591][ T5038] bridge_slave_0: left promiscuous mode [ 81.112396][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.128547][ T5038] bridge_slave_1: left allmulticast mode [ 81.135110][ T5038] bridge_slave_1: left promiscuous mode [ 81.140841][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.150481][ T5038] bond0: (slave bond_slave_0): Releasing backup interface [ 81.158595][ T5038] bond0: (slave bond_slave_1): Releasing backup interface [ 81.167376][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.175103][ T5038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.182837][ T5038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 81.389218][ T5056] Driver unsupported XDP return value 0 on prog (id 116) dev N/A, expect packet loss! [ 81.475194][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 81.541628][ T23] usb 1-1: enqueue for inactive port 0 [ 81.549480][ T23] usb 1-1: enqueue for inactive port 0 [ 81.707179][ T23] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 82.299751][ T5079] netlink: 'syz.1.394': attribute type 13 has an invalid length. [ 82.477424][ T5091] netlink: 14 bytes leftover after parsing attributes in process `syz.4.397'. [ 82.505395][ T5091] hsr_slave_0: left promiscuous mode [ 82.530009][ T5091] hsr_slave_1: left promiscuous mode [ 82.554687][ T5095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 82.584169][ T5088] pimreg: entered allmulticast mode [ 82.656235][ T5088] pimreg: left allmulticast mode [ 82.715974][ T5104] netlink: 'syz.4.403': attribute type 10 has an invalid length. [ 82.725092][ T5104] netlink: 'syz.4.403': attribute type 10 has an invalid length. [ 82.734448][ T5104] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.418737][ T5135] process 'syz.2.409' launched '/dev/fd/16' with NULL argv: empty string added [ 83.647442][ T5145] tipc: Enabled bearer , priority 10 [ 83.778690][ T5149] SELinux: failed to load policy [ 84.128415][ T5159] loop0: detected capacity change from 0 to 8192 [ 84.236195][ T3314] loop0: p1 p2[DM] p4 [ 84.250269][ T3314] loop0: p1 size 196608 extends beyond EOD, truncated [ 84.259921][ T5170] netlink: 'syz.3.421': attribute type 4 has an invalid length. [ 84.355137][ T3314] loop0: p2 start 4292936063 is beyond EOD, truncated [ 84.362032][ T3314] loop0: p4 size 50331648 extends beyond EOD, truncated [ 84.848113][ T5159] loop0: p1 p2[DM] p4 [ 84.853294][ T5159] loop0: p1 size 196608 extends beyond EOD, truncated [ 84.891735][ T5159] loop0: p2 start 4292936063 is beyond EOD, truncated [ 84.898582][ T5159] loop0: p4 size 50331648 extends beyond EOD, truncated [ 85.023654][ T3010] loop0: p1 p2[DM] p4 [ 85.032866][ T3010] loop0: p1 size 196608 extends beyond EOD, truncated [ 85.040427][ T3010] loop0: p2 start 4292936063 is beyond EOD, truncated [ 85.047301][ T3010] loop0: p4 size 50331648 extends beyond EOD, truncated [ 85.161262][ T31] net_ratelimit: 34 callbacks suppressed [ 85.161282][ T31] bond1: (slave bond0): failed to get link speed/duplex [ 85.191486][ T5185] loop0: detected capacity change from 0 to 512 [ 85.221443][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.237735][ T5185] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.273111][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.286548][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 85.330346][ T5185] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.427: Allocating blocks 41-42 which overlap fs metadata [ 85.351415][ T5185] __quota_error: 235 callbacks suppressed [ 85.351431][ T5185] Quota error (device loop0): write_blk: dquota write failed [ 85.364730][ T5185] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 85.374100][ T5185] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.427: Allocating blocks 41-42 which overlap fs metadata [ 85.376707][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.399019][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.410648][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 85.418023][ T5185] Quota error (device loop0): write_blk: dquota write failed [ 85.425677][ T5185] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 85.459882][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 85.470434][ T5185] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.427: Failed to acquire dquot type 1 [ 85.471729][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 85.501385][ T5185] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 85.522343][ T1685] bond1: (slave bond0): failed to get link speed/duplex [ 85.546898][ T5185] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.427: corrupted inode contents [ 85.567761][ T5097] loop1: detected capacity change from 0 to 2048 [ 85.601110][ T5185] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.427: mark_inode_dirty error [ 85.631913][ T1686] bond1: (slave bond0): failed to get link speed/duplex [ 85.661658][ T5185] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.427: corrupted inode contents [ 85.678310][ T5185] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.427: mark_inode_dirty error [ 85.690845][ T5185] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.427: corrupted inode contents [ 85.741094][ T1685] bond1: (slave bond0): failed to get link speed/duplex [ 85.751390][ T5185] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 85.761907][ T5185] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.427: corrupted inode contents [ 85.781060][ T29] audit: type=1400 audit(1768939564.181:2073): avc: denied { mounton } for pid=5193 comm="syz.1.430" path="/68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 85.837898][ T5185] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.427: mark_inode_dirty error [ 85.851052][ T1686] bond1: (slave bond0): failed to get link speed/duplex [ 85.859367][ T29] audit: type=1400 audit(1768939564.231:2074): avc: denied { ioctl } for pid=5193 comm="syz.1.430" path="socket:[9550]" dev="sockfs" ino=9550 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.884722][ T5185] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 85.893870][ T5185] EXT4-fs (loop0): 1 truncate cleaned up [ 85.921445][ T5185] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.961198][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 85.998612][ T5185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 86.005183][ T5185] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 86.013345][ T5185] vhci_hcd vhci_hcd.0: Device attached [ 86.058834][ T5202] Quota error (device loop0): write_blk: dquota write failed [ 86.071305][ T1686] bond1: (slave bond0): failed to get link speed/duplex [ 86.077553][ T5202] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 86.100188][ T5202] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.427: Failed to acquire dquot type 1 [ 86.121779][ T5204] netlink: 14 bytes leftover after parsing attributes in process `syz.0.427'. [ 86.191484][ T1686] bond1: (slave bond0): failed to get link speed/duplex [ 86.198760][ T3816] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 86.239281][ T5200] vhci_hcd: connection closed [ 86.239481][ T1929] vhci_hcd vhci_hcd.0: stop threads [ 86.249479][ T1929] vhci_hcd vhci_hcd.0: release socket [ 86.254951][ T1929] vhci_hcd vhci_hcd.0: disconnect device [ 86.261304][ T3816] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 86.268816][ T3816] usb 1-1: enqueue for inactive port 0 [ 86.284935][ T5197] lo speed is unknown, defaulting to 1000 [ 86.291059][ T3816] usb 1-1: enqueue for inactive port 0 [ 86.296594][ T3816] usb 1-1: enqueue for inactive port 0 [ 86.371174][ T3816] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 86.497127][ T5206] netlink: 'syz.4.432': attribute type 6 has an invalid length. [ 86.590495][ T29] audit: type=1400 audit(1768939564.991:2075): avc: denied { connect } for pid=5205 comm="syz.4.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.691210][ T5213] blkio.reset_stats is deprecated [ 86.707097][ T5214] netlink: 44 bytes leftover after parsing attributes in process `syz.2.435'. [ 86.727902][ T5214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 86.857074][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.885289][ T5218] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 87.074896][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.140037][ T5226] loop0: detected capacity change from 0 to 1024 [ 87.147254][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 87.156209][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 87.186391][ T5226] EXT4-fs: dax option not supported [ 87.201421][ T5226] unsupported nla_type 7440 [ 87.228787][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 87.231770][ T29] audit: type=1400 audit(1768939565.631:2076): avc: denied { read } for pid=5217 comm="syz.1.436" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 87.237909][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 87.430228][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 87.439301][ T5218] netlink: 44 bytes leftover after parsing attributes in process `syz.1.436'. [ 87.831272][ T5261] tipc: Enabling of bearer rejected, already enabled [ 88.013771][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 88.576333][ T5247] C: entered promiscuous mode [ 88.581732][ T5247] team_slave_1: entered promiscuous mode [ 88.588309][ T5247] bond_slave_0: entered promiscuous mode [ 88.594770][ T5247] bond_slave_1: entered promiscuous mode [ 88.601051][ T5247] bridge0: entered promiscuous mode [ 88.688143][ T5247] macsec1: entered promiscuous mode [ 88.694142][ T5247] team0: entered promiscuous mode [ 88.701792][ T5247] bond0: entered promiscuous mode [ 88.718170][ T5247] macsec1: entered allmulticast mode [ 88.724167][ T5247] team0: entered allmulticast mode [ 88.729648][ T5247] C: entered allmulticast mode [ 88.735224][ T5247] team_slave_1: entered allmulticast mode [ 88.743486][ T5247] bond0: entered allmulticast mode [ 88.749203][ T5247] bond_slave_0: entered allmulticast mode [ 88.755684][ T5247] bond_slave_1: entered allmulticast mode [ 88.762204][ T5247] bridge0: entered allmulticast mode [ 88.872169][ T5247] team0: left allmulticast mode [ 88.877671][ T5247] C: left allmulticast mode [ 88.883327][ T5247] team_slave_1: left allmulticast mode [ 88.889399][ T5247] bond0: left allmulticast mode [ 88.910134][ T5247] bond_slave_0: left allmulticast mode [ 88.917936][ T5247] bond_slave_1: left allmulticast mode [ 88.925675][ T5247] bridge0: left allmulticast mode [ 88.946460][ T5247] team0: left promiscuous mode [ 88.955384][ T5247] bond0: left promiscuous mode [ 88.970549][ T5247] C: left promiscuous mode [ 88.975889][ T5247] team_slave_1: left promiscuous mode [ 88.982431][ T5247] bond_slave_0: left promiscuous mode [ 88.989046][ T5247] bond_slave_1: left promiscuous mode [ 88.995014][ T5247] bridge0: left promiscuous mode [ 89.421307][ T5284] loop0: detected capacity change from 0 to 8192 [ 89.499427][ T3314] loop0: p1 p2[DM] p4 [ 89.509488][ T3314] loop0: p1 size 196608 extends beyond EOD, truncated [ 89.528561][ T3314] loop0: p2 start 4292936063 is beyond EOD, truncated [ 89.536279][ T3314] loop0: p4 size 50331648 extends beyond EOD, truncated [ 89.551871][ T5284] loop0: p1 p2[DM] p4 [ 89.556127][ T5284] loop0: p1 size 196608 extends beyond EOD, truncated [ 89.565530][ T5284] loop0: p2 start 4292936063 is beyond EOD, truncated [ 89.565616][ T5292] loop1: detected capacity change from 0 to 256 [ 89.572479][ T5284] loop0: p4 size 50331648 extends beyond EOD, truncated [ 89.682687][ T3816] lo speed is unknown, defaulting to 1000 [ 89.704186][ T5297] netlink: 'syz.3.457': attribute type 1 has an invalid length. [ 89.708503][ T5299] loop7: detected capacity change from 0 to 16384 [ 89.806629][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 89.816467][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 89.851970][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 89.853410][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 89.959100][ T5299] ================================================================== [ 89.967242][ T5299] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 89.974667][ T5299] [ 89.977021][ T5299] read-write to 0xffff8881004a8908 of 8 bytes by interrupt on cpu 0: [ 89.985120][ T5299] __xa_clear_mark+0xf5/0x1e0 [ 89.989844][ T5299] __folio_end_writeback+0xf4/0x360 [ 89.995098][ T5299] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 90.001387][ T5299] folio_end_writeback+0x1c/0x70 [ 90.006370][ T5299] end_buffer_async_write+0x156/0x1f0 [ 90.011795][ T5299] end_bio_bh_io_sync+0x79/0xa0 [ 90.016722][ T5299] bio_endio+0x37a/0x410 [ 90.021000][ T5299] blk_update_request+0x338/0x730 [ 90.026068][ T5299] blk_mq_end_request+0x26/0x50 [ 90.030949][ T5299] lo_complete_rq+0x98/0x140 [ 90.035568][ T5299] blk_done_softirq+0x77/0xb0 [ 90.040273][ T5299] handle_softirqs+0xb9/0x280 [ 90.045070][ T5299] run_ksoftirqd+0x1c/0x30 [ 90.049505][ T5299] smpboot_thread_fn+0x32a/0x510 [ 90.054477][ T5299] kthread+0x488/0x510 [ 90.058585][ T5299] ret_from_fork+0x148/0x280 [ 90.063208][ T5299] ret_from_fork_asm+0x1a/0x30 [ 90.068037][ T5299] [ 90.070407][ T5299] read to 0xffff8881004a8908 of 8 bytes by task 5299 on cpu 1: [ 90.077980][ T5299] xas_find_marked+0x213/0x620 [ 90.082774][ T5299] find_get_entry+0x5d/0x380 [ 90.087394][ T5299] filemap_get_folios_tag+0x15f/0x230 [ 90.092803][ T5299] filemap_write_and_wait_range+0x1f5/0x370 [ 90.098727][ T5299] sync_blockdev+0x35/0x50 [ 90.103169][ T5299] loop_set_status+0x1a9/0x750 [ 90.108054][ T5299] lo_ioctl+0x7a3/0x13a0 [ 90.112324][ T5299] blkdev_ioctl+0x387/0x460 [ 90.116851][ T5299] __se_sys_ioctl+0xce/0x140 [ 90.121472][ T5299] __x64_sys_ioctl+0x43/0x50 [ 90.126092][ T5299] x64_sys_call+0x14b0/0x3000 [ 90.130806][ T5299] do_syscall_64+0xc0/0x2a0 [ 90.135333][ T5299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.141256][ T5299] [ 90.143596][ T5299] value changed: 0xfffffffffffff000 -> 0xffffffffc0000000 [ 90.150714][ T5299] [ 90.153050][ T5299] Reported by Kernel Concurrency Sanitizer on: [ 90.159217][ T5299] CPU: 1 UID: 0 PID: 5299 Comm: syz.0.458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.169045][ T5299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 90.179123][ T5299] ================================================================== [ 90.187549][ T1955] net_ratelimit: 22 callbacks suppressed [ 90.187563][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 90.310534][ T5299] loop7: detected capacity change from 16384 to 0 [ 90.320755][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 90.430667][ T312] bond1: (slave bond0): failed to get link speed/duplex [ 90.541163][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 90.650546][ T312] bond1: (slave bond0): failed to get link speed/duplex [ 90.760539][ T312] bond1: (slave bond0): failed to get link speed/duplex [ 90.870509][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 90.990461][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 91.100450][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 91.211081][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 95.199943][ T1955] net_ratelimit: 35 callbacks suppressed [ 95.199964][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 95.330113][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 95.440639][ T1955] bond1: (slave bond0): failed to get link speed/duplex [ 95.550135][ T1827] bond1: (slave bond0): failed to get link speed/duplex [ 95.660333][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 95.770493][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 95.879844][ T190] bond1: (slave bond0): failed to get link speed/duplex [ 95.999918][ T312] bond1: (slave bond0): failed to get link speed/duplex [ 96.109916][ T1685] bond1: (slave bond0): failed to get link speed/duplex [ 96.220506][ T1685] bond1: (slave bond0): failed to get link speed/duplex