last executing test programs: 13m34.00645066s ago: executing program 32 (id=439): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000450000000400000002"], 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r0, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000240), 0x0}, 0x20) 13m16.764839482s ago: executing program 33 (id=688): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 13m13.650278065s ago: executing program 34 (id=495): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000b940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="acbd", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)="5bba", 0x2}], 0x1}}], 0x3, 0x400c404) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789", 0x2}], 0x1}}], 0x1, 0x84) 12m54.419925566s ago: executing program 35 (id=1183): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230041) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230040) close(r0) 12m4.651322915s ago: executing program 36 (id=2284): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r1, 0x3de8, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m31.478275094s ago: executing program 37 (id=2939): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b8008000900000001"], 0x184}}, 0x0) 11m29.578004518s ago: executing program 38 (id=2960): unshare(0x2c020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xc9, 0x0, 0x8, 0x0, 0x400006, 0x200, 0x0, 0xe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r2, 0x24, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 11m11.702290091s ago: executing program 39 (id=3305): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x0) close(r0) 10m32.502727028s ago: executing program 40 (id=3965): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m58.417856532s ago: executing program 41 (id=4605): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDSKBLED(r3, 0x4b65, 0x5) 9m52.473896676s ago: executing program 42 (id=4682): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x4, 0x5a, 0x4e22}]}}]}, 0x4c}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9m50.395472448s ago: executing program 43 (id=4706): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 9m43.842048522s ago: executing program 44 (id=4785): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 9m40.413326402s ago: executing program 45 (id=4816): socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000ffff6401010080000000000000000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000040fbffffffffffffff03000000000000000000000000000000000000000000000200000000000000000008"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x1200000, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 9m37.309346645s ago: executing program 3 (id=4850): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@init_itable}, {@quota}, {@noinit_itable}, {@grpjquota}, {@lazytime}, {@block_validity}, {}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) 9m36.329680543s ago: executing program 3 (id=4856): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x20, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44044}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x30, r2, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf9319b941e8669c5}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 9m36.109948424s ago: executing program 3 (id=4859): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8b, 0xffffffff, 0x40}) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x37}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', '', [{0x20, '\tB\xb7\xe3\xda\x91\x19\x94\f&8\xde\xf1\xe9\x1b\t'}]}, 0x15) 9m36.024864238s ago: executing program 3 (id=4861): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 9m34.538081082s ago: executing program 3 (id=4867): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1935710000000000000000003b00740095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 9m34.291389304s ago: executing program 3 (id=4875): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) close_range(r4, r4, 0x0) 9m34.227740907s ago: executing program 46 (id=4875): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) close_range(r4, r4, 0x0) 9m27.170989246s ago: executing program 1 (id=4970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 9m27.118000898s ago: executing program 1 (id=4971): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 9m27.117401549s ago: executing program 1 (id=4972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 9m27.023265523s ago: executing program 1 (id=4974): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") msgsnd(0x0, &(0x7f0000000000)={0x2, "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"}, 0x242, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='&'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 9m26.88816095s ago: executing program 1 (id=4975): ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x8, 0x8, 0x1, 0x5}, {0x8, 0xf8, 0x4a, 0x7}, {0x7, 0x0, 0x5, 0x7}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9m26.142365096s ago: executing program 1 (id=4987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955511d441ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9m26.090102649s ago: executing program 47 (id=4987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "6ac4b8d77751b955511d441ba765f109"}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "8c8f14bcf2a335c42db253db5bd80461"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9m6.085128558s ago: executing program 4 (id=5257): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x220901, 0x0) move_mount(0xffffffffffffff9c, 0x0, r2, 0x0, 0x54) 9m5.978417843s ago: executing program 4 (id=5258): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="251220", 0x3}], 0x1) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 9m5.876975508s ago: executing program 4 (id=5259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x1, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x84) 9m5.776565983s ago: executing program 4 (id=5260): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@acl}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x64842, 0x0) r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x593e, 0x10001, 0x0, 0x217, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x2272, 0x2, 0x5, 0x0, 0x0) 9m5.594074652s ago: executing program 4 (id=5263): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xffffffffffffff35, 0x8, {0x0, 0x3}}}}]}]}, 0x5c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 9m5.302640006s ago: executing program 4 (id=5268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 9m5.254417169s ago: executing program 48 (id=5268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 8m36.175286486s ago: executing program 6 (id=5777): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0xc, &(0x7f0000000140)="e0", 0x1) getsockopt$inet_opts(r1, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) 8m35.551066297s ago: executing program 6 (id=5789): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 8m35.436328652s ago: executing program 6 (id=5792): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000000000000000ffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x4d4, 0x32}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xb7, 0x2, 0x101, 0xfffffff7}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 8m35.251594051s ago: executing program 6 (id=5796): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 8m35.251423941s ago: executing program 6 (id=5798): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="b5282e"], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xfffd, 0x0) 8m34.87841442s ago: executing program 6 (id=5801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 8m34.87821583s ago: executing program 49 (id=5801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 1m15.296628059s ago: executing program 8 (id=11346): unshare(0x6a040000) inotify_init1(0x80000) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006b0000006a0a00ff000000002600000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="100800000000002505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xa, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) 1m14.655892921s ago: executing program 8 (id=11353): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1m14.525342308s ago: executing program 8 (id=11355): socket$inet(0x2, 0xa, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m14.423262583s ago: executing program 8 (id=11357): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m14.024536362s ago: executing program 8 (id=11364): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x104000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xa418be, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x125045, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m13.987956344s ago: executing program 8 (id=11365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fe, &(0x7f00000000c0)="$eJzs3U1vY1cZAODXN19OmjZp6QIQ0KEUBjQaJ/G0UdUFlBVCqBKiSxDTkHiiKHYcxU5pwizS/4BEJVaw5Aew7oo9GwQ7NmWBxEcEakZiYXSvbzKejD0J+bCD/TzS1b3nHtvve+Lcc+zjxCeAkXUrIg4iYjIi3ouIufx8Id/i7faW3u7Tw4erR4cPVwvRar37j0JWn56LjvuknssfsxgRP/hOxE8KT8dt7O1vrlSrlZ12cXqhWdteaOzt392oraxX1itb5fLy0vLim/feKF9ZW1+pTeZHX/zk9wff+Fma1mx+prMdV2k63892nBuPiO9dR7ABGMvbMznoRLiQJCJeiohXs+t/LsayZxMAGGat1ly05jrLAMCwS+LxG/4km6dKklKpPYf3cswk1XqjeedBfXdrrT2HNR8TyYONamUxnyucj4lCWl7Kjh+Xy6fK9yLixYj4+dR0Vi6t1qtrA3rNAwCj7rlszC8kpXz8//dUe/wHAIZccdAJAAB9Z/wHgNFj/AeA0WP8B4DRY/wHgNFj/AeA0WP8B4CR8v133km31lH+/ddr7+/tbtbfv7tWaWyWarurpdX6znZpvV5fz76zp3bW41Xr9e2l12P3g/lvbjeaC429/fu1+u5W8372vd73KxN9aRUA8CwvvvLxnwoRcfDWdLZFx1oOxmoYbsmgEwAGZmzQCQADc4HVvn58HXkA/XeJ9/imB2BIdFmi9wnFjrVsT7Rardb1pQRcs9ufu/D8vyWf4f9cx/y/vwKGEWP+H0bXBeb/gSHRahXOu+Z/nPeGAMDN5kN8oMfn/y/l+9/kHw78aO30LT66zqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZjte/7eUrwU+G0lSKkU8HxHzMVF4sFGtLEbECxHxx6mJqbS8NOCcAYDLSv5ayNf/uj332uzp2snCo6lsHxE//eW7v/hgpdnc+UN6/p8n55sf5efLg8gfADjL8Tid7TveyH96+HD1eOtnPn/7dkQU2/GPDifj6CT+eIxn+2JMRMTMvwp5ua3QMXdxGQcfRsRnu7W/ELPZHEh75dPT8dPYz/c1fvJE/CSra+/Tn8VnriAXGDUfp/3P292uvyRuZfvu138x66EuL+//0odaPcr6wMfxj/u/sR79363zxnj9d99tH00/XfdhxOfHI45jH3X0P8fxCz3iv3bO+H/+wpde7VXX+lXE7egevzPWQrO2vdDY27+7UVtZr6xXtsrl5aXlxTfvvVFeyOaoF3qPBn9/684LverS9s/0iF88o/1fPWf7f/2f93745WfE//pXusVP4uVnxE/HxK+dM/7KzG+LverS+Gs92n/W83/nnPE/+cv+U8uGAwCD09jb31ypVis7/Tw4fiHR16AOhuAg/a25AWl0PfhWv2JNxv90r1brQrF69RhXMesG3AQnF31EPBp0MgAAAAAAAAAAAAAAQFf9+I+lQbcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4fXfAAAA///jZ88E") close_range(r3, 0xffffffffffffffff, 0x0) 58.904474669s ago: executing program 50 (id=11365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fe, &(0x7f00000000c0)="$eJzs3U1vY1cZAODXN19OmjZp6QIQ0KEUBjQaJ/G0UdUFlBVCqBKiSxDTkHiiKHYcxU5pwizS/4BEJVaw5Aew7oo9GwQ7NmWBxEcEakZiYXSvbzKejD0J+bCD/TzS1b3nHtvve+Lcc+zjxCeAkXUrIg4iYjIi3ouIufx8Id/i7faW3u7Tw4erR4cPVwvRar37j0JWn56LjvuknssfsxgRP/hOxE8KT8dt7O1vrlSrlZ12cXqhWdteaOzt392oraxX1itb5fLy0vLim/feKF9ZW1+pTeZHX/zk9wff+Fma1mx+prMdV2k63892nBuPiO9dR7ABGMvbMznoRLiQJCJeiohXs+t/LsayZxMAGGat1ly05jrLAMCwS+LxG/4km6dKklKpPYf3cswk1XqjeedBfXdrrT2HNR8TyYONamUxnyucj4lCWl7Kjh+Xy6fK9yLixYj4+dR0Vi6t1qtrA3rNAwCj7rlszC8kpXz8//dUe/wHAIZccdAJAAB9Z/wHgNFj/AeA0WP8B4DRY/wHgNFj/AeA0WP8B4CR8v133km31lH+/ddr7+/tbtbfv7tWaWyWarurpdX6znZpvV5fz76zp3bW41Xr9e2l12P3g/lvbjeaC429/fu1+u5W8372vd73KxN9aRUA8CwvvvLxnwoRcfDWdLZFx1oOxmoYbsmgEwAGZmzQCQADc4HVvn58HXkA/XeJ9/imB2BIdFmi9wnFjrVsT7Rardb1pQRcs9ufu/D8vyWf4f9cx/y/vwKGEWP+H0bXBeb/gSHRahXOu+Z/nPeGAMDN5kN8oMfn/y/l+9/kHw78aO30LT66zqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZjte/7eUrwU+G0lSKkU8HxHzMVF4sFGtLEbECxHxx6mJqbS8NOCcAYDLSv5ayNf/uj332uzp2snCo6lsHxE//eW7v/hgpdnc+UN6/p8n55sf5efLg8gfADjL8Tid7TveyH96+HD1eOtnPn/7dkQU2/GPDifj6CT+eIxn+2JMRMTMvwp5ua3QMXdxGQcfRsRnu7W/ELPZHEh75dPT8dPYz/c1fvJE/CSra+/Tn8VnriAXGDUfp/3P292uvyRuZfvu138x66EuL+//0odaPcr6wMfxj/u/sR79363zxnj9d99tH00/XfdhxOfHI45jH3X0P8fxCz3iv3bO+H/+wpde7VXX+lXE7egevzPWQrO2vdDY27+7UVtZr6xXtsrl5aXlxTfvvVFeyOaoF3qPBn9/684LverS9s/0iF88o/1fPWf7f/2f93745WfE//pXusVP4uVnxE/HxK+dM/7KzG+LverS+Gs92n/W83/nnPE/+cv+U8uGAwCD09jb31ypVis7/Tw4fiHR16AOhuAg/a25AWl0PfhWv2JNxv90r1brQrF69RhXMesG3AQnF31EPBp0MgAAAAAAAAAAAAAAQFf9+I+lQbcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4fXfAAAA///jZ88E") close_range(r3, 0xffffffffffffffff, 0x0) 6.713937098s ago: executing program 5 (id=12053): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) flock(0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") 6.203194843s ago: executing program 5 (id=12066): getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000), 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, 0x10f, 0x0, 0x5, 0x0, 0x5, 0x0, 0x4000000000000003}, 0x0, 0x0) 4.001524282s ago: executing program 5 (id=12106): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.181449082s ago: executing program 2 (id=12112): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x2, @perf_config_ext={0x100000001, 0x1000dd5}, 0x0, 0x0, 0x4, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) process_vm_writev(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20000000dc811, 0xffffffffffffffff, 0xffffc000) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x14}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x9, 0x88, 0x0) 2.501959006s ago: executing program 5 (id=12117): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2004000, &(0x7f00000022c0)={[{@jqfmt_vfsv1}, {@errors_remount}, {@abort}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xaf6, 0x0) 2.148834753s ago: executing program 2 (id=12119): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xed}]}, 0x4c}}, 0x0) 1.906935785s ago: executing program 0 (id=12120): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) 1.849151168s ago: executing program 2 (id=12121): unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x44000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1.839221808s ago: executing program 0 (id=12122): r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000a00)=@file={0x1, './file1\x00'}, 0x6e) listen(r2, 0x3) r3 = syz_io_uring_setup(0x51e, &(0x7f0000000000)={0x0, 0x9e92, 0x10000}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x4, r2, 0x0}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0x0) shutdown(r2, 0x0) 1.59844514s ago: executing program 7 (id=12125): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 1.59810171s ago: executing program 7 (id=12126): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) flock(0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") 1.457490677s ago: executing program 2 (id=12127): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001400)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x100c7}}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r8], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 1.262430577s ago: executing program 2 (id=12131): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.046786178s ago: executing program 7 (id=12133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x5) r3 = syz_pidfd_open(0x0, 0x0) setns(r3, 0x24020000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 1.016676989s ago: executing program 9 (id=12134): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x0, 0x353}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x0, 0x9, 0x2, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 979.293441ms ago: executing program 9 (id=12135): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 978.783831ms ago: executing program 0 (id=12136): pipe2(&(0x7f0000000040), 0x0) pipe2$9p(0x0, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = dup3(r1, r0, 0x0) fchdir(r5) creat(&(0x7f0000000040)='./bus\x00', 0x0) 945.868283ms ago: executing program 9 (id=12137): unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x2, 0x1000, 0x3}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) r4 = open(&(0x7f0000000240)='./file1\x00', 0xcd042, 0x0) sendfile(r4, r3, 0x0, 0x80000000c) preadv(0xffffffffffffffff, &(0x7f0000003840)=[{0x0}], 0x1, 0x6, 0xa) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) 898.451825ms ago: executing program 0 (id=12138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000100), 0x48) 898.029105ms ago: executing program 0 (id=12139): add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1280c, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002740)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000002600)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}}], 0x1, 0x4050000) 742.301303ms ago: executing program 7 (id=12140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 648.233667ms ago: executing program 7 (id=12141): syz_mount_image$ext4(&(0x7f0000001680)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000016c0), 0xfe, 0x270, &(0x7f0000002b00)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) unshare(0x22020400) 538.515893ms ago: executing program 7 (id=12142): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0xffffffff, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) io_uring_enter(r2, 0x40044fd, 0x40000003, 0x28, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xfffffffffffbfefd]}, 0x8) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) 371.800551ms ago: executing program 2 (id=12143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x10b}, {0x18, 0x110, 0xc, ')'}], 0x28}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x0, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 300.115595ms ago: executing program 5 (id=12144): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r5], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 227.707069ms ago: executing program 9 (id=12145): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r2, 0x1}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1000002, r3}, 0x10) 135.395933ms ago: executing program 9 (id=12146): socket(0x10, 0x2, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x8, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 110.127654ms ago: executing program 5 (id=12147): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@nouser_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"ae36c6e51542a17e2e98db1d43c4be6c", 0x0, 0x0, {0x8, 0xb6}, {0x92, 0x10001}, 0x3, [0x5, 0x1, 0xfffffffffffffff8, 0x0, 0x2, 0x3, 0x401, 0xffff, 0x0, 0xfffffffffffffff9, 0x3, 0x81, 0xfffffffffffffff8, 0x2, 0x1, 0x5]}) prlimit64(0x0, 0xb, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x20044800) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 22.439029ms ago: executing program 0 (id=12148): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7ffff000) 0s ago: executing program 9 (id=12149): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "a65cfcf2cda7a068", "847496fde4225767afe5154a87722d7b", '\x00', "c732da70480029ab"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) r2 = syz_io_uring_setup(0xb5d, &(0x7f0000000640)={0x0, 0x9916, 0x0, 0x1000000, 0x164, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0xf23, 0x0, 0xc, 0x0, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 679.106546][ T3240] batadv_slave_1: entered promiscuous mode [ 679.123434][ T3240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10340'. [ 679.147713][ T3240] batadv_slave_1 (unregistering): left promiscuous mode [ 679.562009][ T3249] loop7: detected capacity change from 0 to 512 [ 679.827484][ T3269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10349'. [ 680.164619][ T3271] loop7: detected capacity change from 0 to 1024 [ 680.925040][ T3320] bridge10: entered promiscuous mode [ 680.930539][ T3320] bridge10: entered allmulticast mode [ 682.874882][ T3384] bridge13: entered promiscuous mode [ 682.933432][ T3384] bridge13: entered allmulticast mode [ 683.516901][ T3409] syzkaller0: entered promiscuous mode [ 683.522441][ T3409] syzkaller0: entered allmulticast mode [ 683.656759][ T3424] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 684.018340][ T3440] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10403'. [ 684.171387][ T3444] lo speed is unknown, defaulting to 1000 [ 684.236760][ T3446] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10404'. [ 684.520713][ T3451] bridge7: entered promiscuous mode [ 684.559852][ T3451] bridge7: entered allmulticast mode [ 684.586667][ T3451] team0: Port device bridge7 added [ 686.615135][ T3488] netlink: 'syz.2.10419': attribute type 1 has an invalid length. [ 686.665748][ T3488] gretap3: entered allmulticast mode [ 686.674517][ T3488] bond7: (slave gretap3): making interface the new active one [ 686.682679][ T3488] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 686.846274][ T3492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10421'. [ 686.971083][ T28] audit: type=1400 audit(2000001265.214:5927): avc: denied { create } for pid=3496 comm="syz.8.10423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 687.693753][ T28] audit: type=1400 audit(2000001265.794:5928): avc: denied { accept } for pid=3508 comm="syz.7.10427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 687.709655][ T3518] netlink: 'syz.8.10431': attribute type 1 has an invalid length. [ 687.739367][ T3518] bond1: entered promiscuous mode [ 687.745508][ T3518] bond1: entered allmulticast mode [ 687.751190][ T3518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 687.769013][ T3518] bridge8: entered promiscuous mode [ 687.774619][ T3518] bridge8: entered allmulticast mode [ 687.780835][ T3518] bond1: (slave bridge8): Enslaving as a backup interface with an up link [ 687.853404][ T30] net_ratelimit: 352 callbacks suppressed [ 687.853426][ T30] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 688.014662][ T7620] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 688.812593][ T28] audit: type=1326 audit(2000001267.054:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3537 comm="syz.2.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7fc00000 [ 688.904542][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10440'. [ 688.958462][ T28] audit: type=1326 audit(2000001267.054:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3537 comm="syz.2.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f63fee7c799 code=0x7fc00000 [ 689.030117][ T28] audit: type=1326 audit(2000001267.084:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3537 comm="syz.2.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7fc00000 [ 689.273316][ T3548] tc_dump_action: action bad kind [ 689.723697][ T3551] netlink: 84 bytes leftover after parsing attributes in process `syz.2.10444'. [ 689.732882][ T3551] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 689.893277][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10451'. [ 689.923726][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10451'. [ 690.673744][ T3581] loop7: detected capacity change from 0 to 512 [ 691.905877][ T3618] lo speed is unknown, defaulting to 1000 [ 692.016502][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10468'. [ 692.190895][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10484'. [ 692.246687][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10484'. [ 692.359199][ T3648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=3648 comm=syz.9.10477 [ 692.796197][ T3669] bond6: entered promiscuous mode [ 692.893594][ T3669] ip6gretap2: entered promiscuous mode [ 692.947858][ T3669] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 692.979331][ T3677] bond6 (unregistering): (slave ip6gretap2): Releasing backup interface [ 692.996476][ T3677] ip6gretap2: left promiscuous mode [ 693.011607][ T3677] bond6 (unregistering): Released all slaves [ 693.354077][ T3696] loop7: detected capacity change from 0 to 512 [ 693.382856][ T3696] EXT4-fs: Ignoring removed bh option [ 693.418224][ T3696] EXT4-fs: inline encryption not supported [ 693.712185][ T3478] kernel read not supported for file bpf-prog (pid: 3478 comm: kworker/0:5) [ 695.778130][ T3756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3756 comm=syz.0.10523 [ 695.808371][ T28] audit: type=1400 audit(2000001274.044:5932): avc: denied { nlmsg_tty_audit } for pid=3755 comm="syz.0.10523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 695.881007][ T3756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=3756 comm=syz.0.10523 [ 696.026547][ T3763] batadv_slave_1: entered promiscuous mode [ 696.039871][ T3763] pimreg: entered allmulticast mode [ 696.083964][ T3763] pimreg: left allmulticast mode [ 696.136306][ T3762] batadv_slave_1: left promiscuous mode [ 696.229509][ T28] audit: type=1400 audit(2000001274.474:5933): avc: denied { listen } for pid=3782 comm="syz.9.10531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 696.261324][ T3777] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10529'. [ 696.345502][ T3787] netlink: 'syz.9.10532': attribute type 2 has an invalid length. [ 696.363576][ T3787] netlink: 199792 bytes leftover after parsing attributes in process `syz.9.10532'. [ 696.583943][ T28] audit: type=1400 audit(2000001274.824:5934): avc: denied { setopt } for pid=3792 comm="syz.9.10534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 696.790526][ T3797] netlink: 'syz.2.10537': attribute type 11 has an invalid length. [ 696.872285][ T3803] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3803 comm=syz.2.10540 [ 696.911375][ T3803] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=3803 comm=syz.2.10540 [ 697.060645][ T3807] batadv_slave_1: entered promiscuous mode [ 697.128938][ T3807] pimreg: entered allmulticast mode [ 697.136529][ T3807] pimreg: left allmulticast mode [ 697.336192][ T3806] batadv_slave_1: left promiscuous mode [ 698.110980][ T3834] IPVS: sh: FWM 3 0x00000003 - no destination available [ 698.916763][ T3844] loop7: detected capacity change from 0 to 512 [ 700.257425][ T3871] loop8: detected capacity change from 0 to 512 [ 700.403097][ T3871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 700.651412][ T3871] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.10564: corrupted inode contents [ 700.680009][ T3871] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 700.683340][ T3871] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 700.693059][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 700.693140][ C1] EXT4-fs (loop8): initial error at time 2000001278: ext4_do_update_inode:5569: inode 15 [ 700.693989][ C1] EXT4-fs (loop8): last error at time 2000001278: ext4_do_update_inode:5569: inode 15 [ 700.731855][ T3871] loop8: lost filesystem error report for type 5 error -117 [ 700.737097][ T3871] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.10564: corrupted inode contents [ 700.793804][ T3871] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 700.799947][ T3871] EXT4-fs error (device loop8): ext4_evict_inode:303: inode #15: comm syz.8.10564: mark_inode_dirty error [ 700.840811][ T3871] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 700.844868][ T3871] EXT4-fs (loop8): 1 orphan inode deleted [ 700.898672][ T3871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.921495][ T3895] lo speed is unknown, defaulting to 1000 [ 701.005949][ T3903] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10571'. [ 701.024269][T21026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.238199][ T3911] syzkaller0: entered allmulticast mode [ 701.249811][ T3911] syzkaller0: entered promiscuous mode [ 701.296292][ T3911] syzkaller0 (unregistering): left promiscuous mode [ 701.303209][ T3911] syzkaller0 (unregistering): left allmulticast mode [ 701.835633][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.849120][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.862560][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.876985][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.892913][ T3934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10586'. [ 701.901500][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.902232][ T3934] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 701.929353][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.942605][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.956244][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.969304][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 701.981998][ T3931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3931 comm=syz.9.10587 [ 702.781382][ T28] audit: type=1326 audit(2000001281.024:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.9.10595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2879cc799 code=0x0 [ 704.861501][ T4008] lo speed is unknown, defaulting to 1000 [ 704.942283][ T4010] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10614'. [ 709.317327][ T4137] loop8: detected capacity change from 0 to 512 [ 709.328188][ T4137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 709.418813][ T4137] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.437344][ T4137] ext4 filesystem being mounted at /1008/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 710.005944][T21026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.336097][T16787] kernel write not supported for file bpf-prog (pid: 16787 comm: kworker/1:14) [ 711.036949][ T28] audit: type=1400 audit(2000001289.284:5936): avc: denied { mounton } for pid=4184 comm="syz.9.10659" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 711.465907][ T4210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10667'. [ 714.349420][ T4273] loop8: detected capacity change from 0 to 1024 [ 714.366983][ T4273] EXT4-fs: Ignoring removed orlov option [ 714.439797][ T4273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 715.030357][T21026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.214135][ T4293] serio: Serial port ttyS3 [ 715.241581][T16787] kernel write not supported for file bpf-prog (pid: 16787 comm: kworker/1:14) [ 715.253190][ T4298] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 715.300297][ T4303] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10701'. [ 715.301103][ T4302] tipc: Failed to remove unknown binding: 66,0,0/0:620188803/620188804 [ 715.343231][ T4302] tipc: Failed to remove unknown binding: 66,0,0/0:620188803/620188804 [ 716.614481][ T4337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10722'. [ 717.229978][ T4356] lo speed is unknown, defaulting to 1000 [ 717.357301][ T4358] lo speed is unknown, defaulting to 1000 [ 717.730471][ T4394] tipc: Failed to remove unknown binding: 66,1,1/0:389167875/389167877 [ 717.762067][ T4398] tipc: Failed to remove unknown binding: 66,0,0/0:4245599076/4245599077 [ 718.962024][ T4429] loop7: detected capacity change from 0 to 512 [ 720.240055][ T4484] loop8: detected capacity change from 0 to 128 [ 720.266142][ T4484] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 720.280051][ T4484] ext4 filesystem being mounted at /1030/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 720.311776][T21026] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 721.089723][ T4503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10769'. [ 722.026950][ T4544] netlink: 52 bytes leftover after parsing attributes in process `syz.8.10783'. [ 722.191001][ T4546] serio: Serial port ttyS3 [ 722.805167][ T4565] tipc: Failed to remove unknown binding: 66,1,1/0:689177518/689177520 [ 723.026083][ T4582] loop8: detected capacity change from 0 to 2048 [ 723.068514][ T8409] Alternate GPT is invalid, using primary GPT. [ 723.080214][ T8409] loop8: p2 p3 p7 [ 723.092977][ T4582] Alternate GPT is invalid, using primary GPT. [ 723.146571][ T4582] loop8: p2 p3 p7 [ 723.241251][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 723.242286][ T8410] udevd[8410]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 723.263842][ T8409] udevd[8409]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 723.378701][ T4591] netlink: 399 bytes leftover after parsing attributes in process `syz.2.10799'. [ 723.409005][ T4591] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 723.425443][ T4591] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 723.762965][ T4597] lo speed is unknown, defaulting to 1000 [ 723.833348][ T4603] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10803'. [ 724.133776][ T4610] tipc: Failed to remove unknown binding: 66,1,1/0:2371470219/2371470221 [ 724.619777][ T4612] xfrm0: entered promiscuous mode [ 724.656718][ T4601] lo speed is unknown, defaulting to 1000 [ 724.712295][ T4621] netlink: 'syz.0.10809': attribute type 27 has an invalid length. [ 724.779188][ T4621] ip6gre3: left promiscuous mode [ 724.785853][ T4621] ip6gre3: left allmulticast mode [ 724.838172][ T4625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 724.886452][T16781] lo speed is unknown, defaulting to 1000 [ 724.892279][T16781] syz2: Port: 1 Link ACTIVE [ 724.939884][ T4631] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10813'. [ 724.997444][ T4631] selinux_netlink_send: 69 callbacks suppressed [ 724.997464][ T4631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4631 comm=syz.9.10813 [ 725.411812][ T4646] netlink: 52 bytes leftover after parsing attributes in process `syz.9.10819'. [ 725.628714][ T4656] netlink: 'syz.2.10823': attribute type 27 has an invalid length. [ 726.266234][ T4667] loop7: detected capacity change from 0 to 1024 [ 726.323042][ T4656] bridge13: left promiscuous mode [ 726.337326][ T4656] bridge13: left allmulticast mode [ 726.356384][ T4656] gretap3: left allmulticast mode [ 726.385112][ T4674] tipc: Failed to remove unknown binding: 66,1,1/0:1136993388/1136993390 [ 726.426490][ T4658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.588564][ T9] lo speed is unknown, defaulting to 1000 [ 726.594807][ T9] syz2: Port: 1 Link DOWN [ 727.641364][ T4709] netlink: 'syz.7.10842': attribute type 27 has an invalid length. [ 727.677712][ T4709] ip6gre4: left promiscuous mode [ 727.694314][ T4709] ip6gre4: left allmulticast mode [ 727.701218][ T4709] vlan0: left promiscuous mode [ 727.706833][ T4709] bond7: left promiscuous mode [ 727.711691][ T4709] geneve2: left promiscuous mode [ 727.746769][ T4709] bridge10: left promiscuous mode [ 727.755067][ T4709] bridge10: left allmulticast mode [ 727.775522][ T5404] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.784998][ T5404] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.852533][ T4711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 727.897803][ T5404] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.917506][ T5404] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.056842][ T5418] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.104068][ T7624] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.112552][ T7624] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.153493][ T7624] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.333375][ T4738] syzkaller0: entered promiscuous mode [ 728.339933][ T4738] syzkaller0: entered allmulticast mode [ 728.805055][ T4761] netlink: 'syz.9.10859': attribute type 27 has an invalid length. [ 729.053026][ T4762] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 729.082845][ T4761] xfrm0: left promiscuous mode [ 729.102668][ T4761] bond13: left allmulticast mode [ 729.122870][ T4761] bridge12: left promiscuous mode [ 729.141463][ T4761] bridge12: left allmulticast mode [ 730.019492][ T4786] lo speed is unknown, defaulting to 1000 [ 730.806243][ T28] audit: type=1326 audit(2000001309.054:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 730.918850][ T4797] lo speed is unknown, defaulting to 1000 [ 731.046905][ T4803] tipc: Failed to remove unknown binding: 66,1,1/0:18325737/18325739 [ 731.055412][ T28] audit: type=1326 audit(2000001309.054:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.109441][ T28] audit: type=1326 audit(2000001309.054:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.135228][ T28] audit: type=1326 audit(2000001309.054:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.184214][ T28] audit: type=1326 audit(2000001309.054:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.211830][ T4806] netlink: 'syz.8.10876': attribute type 27 has an invalid length. [ 731.226735][ T4806] bridge7: left promiscuous mode [ 731.231892][ T4806] bridge7: left allmulticast mode [ 731.239289][ T4806] bond1: left promiscuous mode [ 731.244381][ T4806] bridge8: left promiscuous mode [ 731.249531][ T4806] bond1: left allmulticast mode [ 731.254525][ T4806] bridge8: left allmulticast mode [ 731.259682][ T28] audit: type=1326 audit(2000001309.054:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.346418][ T28] audit: type=1326 audit(2000001309.094:5943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.387506][ T4806] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.397929][ T28] audit: type=1326 audit(2000001309.094:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.428110][ T4806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 731.487127][ T28] audit: type=1326 audit(2000001309.134:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.511941][ T28] audit: type=1326 audit(2000001309.144:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="syz.7.10874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4823eec799 code=0x7ffc0000 [ 731.795135][ T4823] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10884'. [ 731.854405][ T4826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4826 comm=syz.9.10884 [ 733.517097][ T4868] netlink: 'syz.8.10900': attribute type 29 has an invalid length. [ 733.534848][ T4868] netlink: 'syz.8.10900': attribute type 29 has an invalid length. [ 733.568145][ T4868] netlink: 500 bytes leftover after parsing attributes in process `syz.8.10900'. [ 733.587014][ T4864] loop7: detected capacity change from 0 to 128 [ 733.594231][ T4867] delete_channel: no stack [ 733.624044][ T4864] vfat: Unknown parameter '017777777777777777777770xffffffffffffffff00000000000000000000000' [ 735.265981][ T4919] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 735.371995][ T4921] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10918'. [ 735.427602][ T4921] loop7: detected capacity change from 0 to 512 [ 735.524509][ T4928] loop7: detected capacity change from 0 to 1024 [ 735.534610][ T4930] tipc: Failed to remove unknown binding: 66,0,0/0:1343347609/1343347611 [ 735.543994][ T4928] EXT4-fs: inline encryption not supported [ 735.549955][ T4928] journal_path: Non-blockdev passed as './file1' [ 735.556772][ T4928] EXT4-fs: error: could not find journal device path [ 735.558552][ T4930] tipc: Failed to remove unknown binding: 66,0,0/0:1343347609/1343347610 [ 735.591888][ T4933] lo speed is unknown, defaulting to 1000 [ 735.598491][ T4930] tipc: Failed to remove unknown binding: 66,0,0/0:1343347609/1343347611 [ 735.658308][ T4930] tipc: Failed to remove unknown binding: 66,0,0/0:1343347609/1343347610 [ 736.348275][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 736.348299][ T28] audit: type=1400 audit(2000001314.594:6045): avc: denied { name_bind } for pid=4954 comm="syz.9.10930" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 737.339566][ T28] audit: type=1400 audit(2000001315.584:6046): avc: denied { dac_override } for pid=5007 comm="syz.9.10946" capability=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 737.452349][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10949'. [ 737.491287][ T5012] x_tables: duplicate underflow at hook 2 [ 738.294473][ T5039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10957'. [ 740.130240][ T5071] loop7: detected capacity change from 0 to 1024 [ 740.140960][ T5071] ext4: Unknown parameter 'ba' [ 740.200103][ T5074] netlink: 'syz.8.10969': attribute type 2 has an invalid length. [ 740.241131][ T5077] netlink: 'syz.9.10970': attribute type 4 has an invalid length. [ 740.267617][ T5085] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10974'. [ 740.279259][ T5080] loop8: detected capacity change from 0 to 164 [ 740.288503][ T5085] vlan0: entered allmulticast mode [ 740.294214][ T5085] bridge0: entered allmulticast mode [ 740.299719][ T5085] bridge14: port 1(vlan0) entered blocking state [ 740.306481][ T5085] bridge14: port 1(vlan0) entered disabled state [ 740.314192][ T5085] vlan0: entered promiscuous mode [ 740.324172][ T5085] bridge0: entered promiscuous mode [ 740.340802][ T5080] isofs_fill_super: root inode is not a directory. Corrupted media? [ 740.378553][ T5080] loop8: detected capacity change from 0 to 512 [ 740.403065][ T5080] EXT4-fs: Ignoring removed mblk_io_submit option [ 740.489709][ T5080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 740.522466][ T5080] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.558556][ T5080] ext4 filesystem being mounted at /1071/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 743.246944][ T5080] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 743.290660][T21026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.343281][ T5125] netlink: 'syz.0.10986': attribute type 4 has an invalid length. [ 743.891420][ T5137] netlink: 'syz.8.10990': attribute type 1 has an invalid length. [ 743.946601][ T5141] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10990'. [ 743.948577][ T5137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 743.975784][ T5141] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 744.341353][ T5141] bond2: entered allmulticast mode [ 744.353359][ T5137] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 744.410526][ T5152] loop7: detected capacity change from 0 to 1024 [ 744.428039][ T5152] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 744.453759][ T5152] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 744.473939][ T5152] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 744.505606][ T5152] EXT4-fs error (device loop7): ext4_get_journal_inode:5863: inode #5: comm syz.7.10994: unexpected bad inode w/o EXT4_IGET_BAD [ 744.529737][ T5152] loop7: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 744.529805][ T5152] EXT4-fs (loop7): no journal found [ 744.563812][ T5152] EXT4-fs (loop7): can't get journal size [ 744.570481][ T5152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 744.638182][T22813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.648008][ T28] audit: type=1400 audit(2000001322.884:6047): avc: denied { mounton } for pid=5155 comm="syz.9.10996" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 744.690927][ T5167] Bluetooth: hci0: Frame reassembly failed (-90) [ 744.739352][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11005'. [ 744.748981][ T5174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11005'. [ 744.785723][ T5177] netlink: 'syz.9.11004': attribute type 1 has an invalid length. [ 744.794597][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11004'. [ 745.044190][ T5194] lo speed is unknown, defaulting to 1000 [ 746.349284][ T5224] lo speed is unknown, defaulting to 1000 [ 746.529590][ T5235] loop7: detected capacity change from 0 to 512 [ 746.544101][ T5235] EXT4-fs: Ignoring removed nobh option [ 746.704500][ T6567] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 746.707180][ T5169] Bluetooth: hci0: command 0x1003 tx timeout [ 746.860907][ T5242] tunl0: Caught tx_queue_len zero misconfig [ 747.468575][ T5253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11035'. [ 747.505209][ T5248] loop7: detected capacity change from 0 to 8192 [ 747.654107][ T5255] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5255 comm=syz.0.11035 [ 747.660987][ T5243] loop8: detected capacity change from 0 to 1024 [ 747.847752][ T5243] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 747.860860][ T5243] System zones: 0-1, 3-36 [ 747.960962][ T5243] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.11031: bad orphan inode 134217728 [ 748.005170][ T5243] loop8: lost filesystem error report for type 5 error -117 [ 748.013627][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 748.027430][ C1] EXT4-fs (loop8): initial error at time 2000001326: ext4_orphan_get:1417 [ 748.036002][ C1] EXT4-fs (loop8): last error at time 2000001326: ext4_orphan_get:1417 [ 748.076945][ T5243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 748.638403][T21026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.790299][ T5272] tipc: Enabling of bearer rejected, failed to enable media [ 749.277673][ T5291] netlink: 'syz.9.11047': attribute type 1 has an invalid length. [ 749.444568][ T5296] 8021q: adding VLAN 0 to HW filter on device bond15 [ 749.475160][ T5296] bond14: (slave bond15): making interface the new active one [ 749.484290][ T5296] bond14: (slave bond15): Enslaving as an active interface with an up link [ 749.561661][ T5291] bond14: (slave gretap4): Enslaving as a backup interface with an up link [ 749.647395][ T5310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11051'. [ 749.689033][ T5310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5310 comm=syz.0.11051 [ 749.941330][ T5322] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 750.050787][ T5333] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11059'. [ 750.185717][ T5335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5335 comm=syz.2.11059 [ 750.352240][ T5333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11059'. [ 751.911286][T16781] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 751.925276][T16781] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 754.777026][ T5438] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 754.983817][ T28] audit: type=1326 audit(2000001333.224:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5444 comm="syz.2.11096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x0 [ 755.422560][ T5453] openvswitch: netlink: Missing key (keys=40, expected=100) [ 755.510013][ T5455] lo speed is unknown, defaulting to 1000 [ 759.690110][ T5559] bridge0: port 1(gretap0) entered blocking state [ 759.702925][ T5559] bridge0: port 1(gretap0) entered disabled state [ 759.730063][ T5559] gretap0: entered allmulticast mode [ 759.759787][ T5559] gretap0: entered promiscuous mode [ 760.097145][ T5553] loop7: detected capacity change from 0 to 1024 [ 761.200290][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11152'. [ 761.219961][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11152'. [ 761.286103][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11154'. [ 761.462552][ T5615] bond16: entered promiscuous mode [ 761.473240][ T5615] 8021q: adding VLAN 0 to HW filter on device bond16 [ 761.578499][ T5615] 8021q: adding VLAN 0 to HW filter on device bond16 [ 761.587326][ T5615] bond16: (slave sit4): The slave device specified does not support setting the MAC address [ 761.600584][ T5615] bond16: (slave sit4): Error -95 calling set_mac_address [ 764.587052][ T5693] lo speed is unknown, defaulting to 1000 [ 765.253828][ T5704] bridge0: port 1(gretap0) entered blocking state [ 765.293007][ T5704] bridge0: port 1(gretap0) entered disabled state [ 765.304540][ T5704] gretap0: entered allmulticast mode [ 765.310510][ T5704] gretap0: entered promiscuous mode [ 766.381969][ T5716] syz.0.11191 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 766.413682][ T5716] CPU: 0 UID: 0 PID: 5716 Comm: syz.0.11191 Tainted: G W syzkaller #0 PREEMPT(full) [ 766.413721][ T5716] Tainted: [W]=WARN [ 766.413730][ T5716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.413752][ T5716] Call Trace: [ 766.413760][ T5716] [ 766.413768][ T5716] __dump_stack+0x1d/0x30 [ 766.413842][ T5716] dump_stack_lvl+0x95/0xd0 [ 766.413869][ T5716] dump_stack+0x15/0x1b [ 766.413894][ T5716] dump_header+0x80/0x240 [ 766.414001][ T5716] oom_kill_process+0x295/0x350 [ 766.414028][ T5716] out_of_memory+0x97d/0xb80 [ 766.414055][ T5716] try_charge_memcg+0x62e/0xa10 [ 766.414162][ T5716] obj_cgroup_charge_pages+0x23/0xc0 [ 766.414195][ T5716] __memcg_kmem_charge_page+0x9e/0x170 [ 766.414269][ T5716] __alloc_frozen_pages_noprof+0x18a/0x360 [ 766.414319][ T5716] alloc_pages_mpol+0xb3/0x260 [ 766.414352][ T5716] alloc_pages_noprof+0x8f/0x130 [ 766.414384][ T5716] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 766.414596][ T5716] __kvmalloc_node_noprof+0x3d4/0x650 [ 766.414624][ T5716] ? futex_hash_allocate+0x190/0x9d0 [ 766.414654][ T5716] ? futex_hash_allocate+0x190/0x9d0 [ 766.414684][ T5716] futex_hash_allocate+0x190/0x9d0 [ 766.414715][ T5716] ? cap_task_prctl+0x13f/0x6e0 [ 766.414748][ T5716] futex_hash_prctl+0xd8/0xf0 [ 766.414777][ T5716] __se_sys_prctl+0xa3d/0x13f0 [ 766.414881][ T5716] __x64_sys_prctl+0x67/0x80 [ 766.414906][ T5716] x64_sys_call+0x2533/0x3020 [ 766.414930][ T5716] do_syscall_64+0x12c/0x370 [ 766.414957][ T5716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.415104][ T5716] RIP: 0033:0x7f4244b4c799 [ 766.415122][ T5716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.415139][ T5716] RSP: 002b:00007f42435a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 766.415159][ T5716] RAX: ffffffffffffffda RBX: 00007f4244dc5fa0 RCX: 00007f4244b4c799 [ 766.415173][ T5716] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 766.415256][ T5716] RBP: 00007f4244be2c99 R08: 0000000000000000 R09: 0000000000000000 [ 766.415271][ T5716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.415284][ T5716] R13: 00007f4244dc6038 R14: 00007f4244dc5fa0 R15: 00007ffde12e5cf8 [ 766.415379][ T5716] [ 766.415388][ T5716] memory: usage 267940kB, limit 307200kB, failcnt 540 [ 766.703118][ T5716] memory+swap: usage 215804kB, limit 9007199254740988kB, failcnt 0 [ 766.719850][ T5716] kmem: usage 208612kB, limit 9007199254740988kB, failcnt 0 [ 766.731988][ T5716] Memory cgroup stats for /syz0: [ 766.732217][ T5716] cache 4341760 [ 766.764162][ T5716] rss 765952 [ 766.767442][ T5716] shmem 4341760 [ 766.770985][ T5716] mapped_file 0 [ 766.783680][ T5728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 766.813703][ T5716] dirty 0 [ 766.816697][ T5716] writeback 0 [ 766.820089][ T5716] workingset_refault_anon 2748 [ 766.854219][ T5716] workingset_refault_file 0 [ 766.858768][ T5716] swap 126976 [ 766.862835][ T5716] swapcached 14139392 [ 766.867138][ T5716] pgpgin 601858 [ 766.870617][ T5716] pgpgout 600603 [ 766.879724][ T5716] pgfault 525748 [ 766.884691][ T5716] pgmajfault 584 [ 766.888558][ T5716] inactive_anon 32768 [ 766.892847][ T5716] active_anon 5107712 [ 766.897246][ T5716] inactive_file 0 [ 766.901068][ T5716] active_file 0 [ 766.905019][ T5716] unevictable 0 [ 766.908810][ T5716] hierarchical_memory_limit 314572800 [ 766.915278][ T5716] hierarchical_memsw_limit 9223372036854771712 [ 766.921897][ T5731] netlink: 'syz.2.11197': attribute type 83 has an invalid length. [ 766.927961][ T5716] total_cache 4341760 [ 766.937744][ T5716] total_rss 765952 [ 766.941605][ T5716] total_shmem 4341760 [ 766.946484][ T5716] total_mapped_file 0 [ 766.954099][ T5716] total_dirty 0 [ 766.960751][ T5716] total_writeback 0 [ 766.979000][ T5716] total_workingset_refault_anon 2748 [ 766.990672][ T5716] total_workingset_refault_file 0 [ 766.999520][ T5716] total_swap 126976 [ 767.011176][ T5716] total_swapcached 14139392 [ 767.018399][ T5716] total_pgpgin 601858 [ 767.040790][ T5716] total_pgpgout 600603 [ 767.053724][ T5716] total_pgfault 525748 [ 767.062932][ T5716] total_pgmajfault 584 [ 767.080451][ T5716] total_inactive_anon 32768 [ 767.143677][ T5716] total_active_anon 5107712 [ 767.151571][ T5716] total_inactive_file 0 [ 767.168612][ T5716] total_active_file 0 [ 767.172729][ T5716] total_unevictable 0 [ 767.191018][ T5716] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5125,pid=20274,uid=0 [ 767.246316][ T5716] Memory cgroup out of memory: Killed process 20274 (syz.0.5125) total-vm:94032kB, anon-rss:1236kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 767.560230][ T5744] loop7: detected capacity change from 0 to 256 [ 767.710093][ T28] audit: type=1326 audit(2000001345.954:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5752 comm="syz.8.11207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65e29dc799 code=0x0 [ 767.882427][ T5741] lo speed is unknown, defaulting to 1000 [ 768.896464][ T28] audit: type=1400 audit(2000001347.134:6050): avc: denied { watch } for pid=5773 comm="syz.7.11216" path="/dev/pts/0" dev="devpts" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 769.269411][ T5783] lo speed is unknown, defaulting to 1000 [ 773.509936][ T5819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 773.610218][ T5819] netlink: 80 bytes leftover after parsing attributes in process `syz.7.11231'. [ 773.678610][ T5821] loop8: detected capacity change from 0 to 8192 [ 773.700305][ T5821] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 773.905685][ T5828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5828 comm=syz.0.11234 [ 773.918695][ T5828] netlink: 'syz.0.11234': attribute type 1 has an invalid length. [ 773.948626][ T5828] vlan0: entered allmulticast mode [ 773.980524][ T5828] bond6: entered allmulticast mode [ 774.041245][ T5833] loop8: detected capacity change from 0 to 256 [ 774.070649][ T5835] netlink: 763 bytes leftover after parsing attributes in process `syz.9.11237'. [ 774.241249][ T5846] netlink: 'syz.9.11242': attribute type 16 has an invalid length. [ 774.249499][ T5846] netlink: 'syz.9.11242': attribute type 17 has an invalid length. [ 774.281950][ T5846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 774.609353][ T5858] tipc: Enabled bearer , priority 10 [ 774.617623][ T5856] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 774.625998][ T5856] tipc: Enabled bearer , priority 10 [ 774.804945][ T28] audit: type=1326 audit(2000001353.044:6051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 774.871798][ T28] audit: type=1326 audit(2000001353.044:6052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 774.907900][ T28] audit: type=1326 audit(2000001353.054:6053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 774.977074][ T28] audit: type=1326 audit(2000001353.054:6054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 775.002933][ T28] audit: type=1326 audit(2000001353.054:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 775.084308][ T28] audit: type=1326 audit(2000001353.054:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 775.114201][ T28] audit: type=1326 audit(2000001353.054:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 775.242771][ T28] audit: type=1326 audit(2000001353.054:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f65e299cfce code=0x7ffc0000 [ 775.292084][ T28] audit: type=1326 audit(2000001353.054:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 775.343088][ T28] audit: type=1326 audit(2000001353.054:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5863 comm="syz.8.11249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65e29dc799 code=0x7ffc0000 [ 775.791514][ T815] tipc: Node number set to 2886997162 [ 776.834311][ T5931] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11272'. [ 776.868487][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11272'. [ 777.430302][ T5938] loop7: detected capacity change from 0 to 1024 [ 777.813099][ T5943] lo speed is unknown, defaulting to 1000 [ 778.016640][ T5948] netlink: 'syz.9.11278': attribute type 1 has an invalid length. [ 778.055666][ T5948] 8021q: adding VLAN 0 to HW filter on device bond17 [ 778.134550][ T5950] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11278'. [ 778.153114][ T5948] bond17: (slave ip6gretap2): making interface the new active one [ 778.162599][ T5948] bond17: (slave ip6gretap2): Enslaving as an active interface with an up link [ 778.195009][ T5950] bond17: entered allmulticast mode [ 778.200325][ T5950] ip6gretap2: entered allmulticast mode [ 778.251967][ T5953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11289'. [ 778.799565][ T5963] lo speed is unknown, defaulting to 1000 [ 778.812177][ T5963] lo speed is unknown, defaulting to 1000 [ 778.838622][ T5963] lo speed is unknown, defaulting to 1000 [ 778.959450][ T5963] infiniband syU: set active [ 778.964428][T16781] lo speed is unknown, defaulting to 1000 [ 778.984940][ T5963] infiniband syU: added lo [ 779.151073][ T5963] RDS/IB: syU: added [ 779.159092][ T5963] smc: adding ib device syU with port count 1 [ 779.251574][ T5963] smc: ib device syU port 1 has no pnetid [ 779.283947][ T5963] lo speed is unknown, defaulting to 1000 [ 779.289894][T16781] lo speed is unknown, defaulting to 1000 [ 779.378929][ T5963] lo speed is unknown, defaulting to 1000 [ 779.998940][ T5986] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 780.018296][ T5963] lo speed is unknown, defaulting to 1000 [ 780.079018][ T5963] lo speed is unknown, defaulting to 1000 [ 780.152269][ T5963] lo speed is unknown, defaulting to 1000 [ 780.182581][ T5963] lo speed is unknown, defaulting to 1000 [ 780.219370][ T5963] lo speed is unknown, defaulting to 1000 [ 780.304743][ T6004] lo speed is unknown, defaulting to 1000 [ 780.337963][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 780.337979][ T28] audit: type=1326 audit(2000001358.584:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 780.379197][ T6004] lo speed is unknown, defaulting to 1000 [ 780.421689][ T28] audit: type=1326 audit(2000001358.584:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 780.587538][ T6009] lo speed is unknown, defaulting to 1000 [ 780.818476][ T28] audit: type=1326 audit(2000001358.624:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 780.889299][ T28] audit: type=1326 audit(2000001358.624:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 780.937730][ T28] audit: type=1326 audit(2000001358.624:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 780.987157][ T28] audit: type=1326 audit(2000001358.624:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 781.035918][ T28] audit: type=1326 audit(2000001358.624:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 781.083888][ T28] audit: type=1326 audit(2000001358.624:6079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 781.154697][ T28] audit: type=1326 audit(2000001358.624:6080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 781.223639][ T28] audit: type=1326 audit(2000001358.624:6081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6006 comm="syz.2.11299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 781.602717][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:1903988537/1903988539 [ 781.611274][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:1903988537/1903988538 [ 781.624103][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:1903988537/1903988539 [ 781.638956][ T6022] tipc: Failed to remove unknown binding: 66,0,0/0:1903988537/1903988538 [ 781.655558][ T6010] loop8: detected capacity change from 0 to 2048 [ 782.071535][ T6010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.125552][ T6010] ext4 filesystem being mounted at /1123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.792937][ T6042] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.11297: bg 0: block 345: padding at end of block bitmap is not set [ 783.102716][ T6009] lo speed is unknown, defaulting to 1000 [ 783.125586][ T6042] EXT4-fs (loop8): Remounting filesystem read-only [ 783.327926][T21026] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.357283][ T6045] bridge0: port 1(gretap0) entered blocking state [ 783.363825][ T6045] bridge0: port 1(gretap0) entered listening state [ 783.399556][ T6045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.455238][ T6046] bridge14: port 1(vlan0) entered disabled state [ 783.488830][ T3478] lo speed is unknown, defaulting to 1000 [ 783.494764][ T3478] syz2: Port: 1 Link ACTIVE [ 783.510604][T16777] lo speed is unknown, defaulting to 1000 [ 783.520843][T16777] syU: Port: 1 Link DOWN [ 783.603706][T16788] lo speed is unknown, defaulting to 1000 [ 783.612000][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11312'. [ 783.668000][ T6060] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6060 comm=syz.2.11312 [ 784.539571][ T6050] rdma_rxe: rxe_newlink: failed to add lo [ 785.764439][ T6106] lo speed is unknown, defaulting to 1000 [ 785.852470][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11329'. [ 785.876838][ T6106] lo speed is unknown, defaulting to 1000 [ 785.989336][ T6119] bond0: entered promiscuous mode [ 785.994594][ T6119] geneve2: entered promiscuous mode [ 786.000934][ T6119] batadv0: entered promiscuous mode [ 786.006820][ T6119] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 786.020154][ T6119] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 786.039147][ T6119] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 786.068716][ T6119] bond0: left promiscuous mode [ 786.096321][ T6119] geneve2: left promiscuous mode [ 786.104329][ T6119] batadv0: left promiscuous mode [ 786.189730][ T6127] netlink: 'syz.9.11334': attribute type 4 has an invalid length. [ 786.205167][ T6123] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 786.234899][ T6127] netlink: 'syz.9.11334': attribute type 4 has an invalid length. [ 786.247262][ T9] lo speed is unknown, defaulting to 1000 [ 786.253075][ T9] syU: Port: 1 Link ACTIVE [ 786.328758][ T6127] bond17: left allmulticast mode [ 786.346423][ T6127] ip6gretap2: left allmulticast mode [ 786.373818][ T6137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11337'. [ 786.391805][ T3478] lo speed is unknown, defaulting to 1000 [ 786.406446][ T9] lo speed is unknown, defaulting to 1000 [ 786.412289][ T9] syU: Port: 1 Link DOWN [ 786.489716][ T6137] netlink: 'syz.0.11337': attribute type 30 has an invalid length. [ 786.532258][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.554581][ T50] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.564422][ T50] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.574994][ T50] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 786.743414][ T6145] lo speed is unknown, defaulting to 1000 [ 786.878258][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11341'. [ 787.136665][ T6145] lo speed is unknown, defaulting to 1000 [ 787.186822][ T6154] netlink: 'syz.9.11343': attribute type 21 has an invalid length. [ 787.260497][ T6162] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4281111764/4281111766 [ 787.279965][ T6162] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4281111764/4281111765 [ 787.305337][ T6163] ------------[ cut here ]------------ [ 787.310855][ T6163] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 787.331514][ T6163] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.2.11344/6163 [ 787.342648][ T6163] Modules linked in: [ 787.346709][ T6163] CPU: 0 UID: 0 PID: 6163 Comm: syz.2.11344 Tainted: G W syzkaller #0 PREEMPT(full) [ 787.358259][ T6163] Tainted: [W]=WARN [ 787.362074][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.372223][ T6163] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 787.378563][ T6163] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 787.399092][ T6163] RSP: 0018:ffffc900016d3370 EFLAGS: 00010246 [ 787.405278][ T6163] RAX: ffff888103d9ef48 RBX: 00000000ffffffff RCX: 0000000000000000 [ 787.413452][ T6163] RDX: ffffffff86818eef RSI: ffffffff8682d453 RDI: ffffffff871d2140 [ 787.421677][ T6163] RBP: ffff88813d90a040 R08: 0000007800000000 R09: 0000000000000000 [ 787.430442][ T6163] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88813d90a000 [ 787.438467][ T6163] R13: 0000000000000000 R14: ffff88813d90a04c R15: ffff88813d90a038 [ 787.446496][ T6163] FS: 00007f63fd8956c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 787.456012][ T6163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.462615][ T6163] CR2: 00007f63fd894ff8 CR3: 000000013fa76000 CR4: 00000000003506f0 [ 787.470613][ T6163] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 787.478641][ T6163] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 787.487263][ T6163] Call Trace: [ 787.490556][ T6163] [ 787.493520][ T6163] reg_set_min_max+0x1f2/0x260 [ 787.498330][ T6163] check_cond_jmp_op+0x13b2/0x1a80 [ 787.503501][ T6163] do_check+0x4a9b/0x9860 [ 787.507928][ T6163] do_check_common+0xd0b/0x1630 [ 787.512980][ T6163] bpf_check+0x2f78/0xcc30 [ 787.518033][ T6163] ? __list_del_entry_valid_or_report+0x65/0x130 [ 787.524450][ T6163] ? __rcu_read_unlock+0x33/0x70 [ 787.529399][ T6163] ? __perf_event_task_sched_in+0xa65/0xad0 [ 787.535366][ T6163] ? __perf_event_task_sched_out+0x192/0x710 [ 787.541364][ T6163] ? _raw_spin_unlock+0x9/0x30 [ 787.546774][ T6163] ? finish_task_switch+0x7d/0x280 [ 787.552005][ T6163] ? _raw_spin_lock+0x52/0xa0 [ 787.556722][ T6163] ? __list_del_entry_valid_or_report+0x65/0x130 [ 787.563151][ T6163] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 787.569229][ T6163] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 787.576431][ T6163] ? __rcu_read_unlock+0x4e/0x70 [ 787.581416][ T6163] ? avc_has_perm_noaudit+0xab/0x130 [ 787.586777][ T6163] ? avc_has_perm+0x101/0x190 [ 787.591490][ T6163] ? selinux_bpf_prog_load+0x197/0x1c0 [ 787.596991][ T6163] ? security_bpf_prog_load+0x9e/0x140 [ 787.602473][ T6163] bpf_prog_load+0xf76/0x1140 [ 787.607764][ T6163] ? security_bpf+0x2b/0x90 [ 787.611802][ T6162] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4281111764/4281111766 [ 787.612287][ T6163] __sys_bpf+0x505/0x7e0 [ 787.625799][ T6163] __x64_sys_bpf+0x41/0x50 [ 787.630312][ T6163] x64_sys_call+0x10cb/0x3020 [ 787.635587][ T6163] do_syscall_64+0x12c/0x370 [ 787.640200][ T6163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.646286][ T6163] RIP: 0033:0x7f63fee7c799 [ 787.650964][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.653534][ T6162] tipc: Failed to remove unknown binding: 66,0,0/2886997162:4281111764/4281111765 [ 787.671539][ T6163] RSP: 002b:00007f63fd895028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 787.689010][ T6163] RAX: ffffffffffffffda RBX: 00007f63ff0f6180 RCX: 00007f63fee7c799 [ 787.697651][ T6163] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 787.705755][ T6163] RBP: 00007f63fef12c99 R08: 0000000000000000 R09: 0000000000000000 [ 787.713870][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.721863][ T6163] R13: 00007f63ff0f6218 R14: 00007f63ff0f6180 R15: 00007fff70b17208 [ 787.730553][ T6163] [ 787.733623][ T6163] ---[ end trace 0000000000000000 ]--- [ 787.763126][ T6167] lo speed is unknown, defaulting to 1000 [ 787.850906][ T6173] gretap0: left allmulticast mode [ 787.868688][ T6173] gretap0: left promiscuous mode [ 787.880673][ T6173] bridge0: port 1(gretap0) entered disabled state [ 787.906545][ T6178] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11348'. [ 787.906485][ T6173] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 787.956244][ T6177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 788.013812][T16784] lo speed is unknown, defaulting to 1000 [ 788.029601][T16784] syU: Port: 1 Link ACTIVE [ 788.047403][ T6167] lo speed is unknown, defaulting to 1000 [ 788.055947][T16784] lo speed is unknown, defaulting to 1000 [ 788.381027][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11354'. [ 788.496334][ T6186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6186 comm=syz.0.11354 [ 788.579845][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11359'. [ 788.963688][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 788.963708][ T28] audit: type=1400 audit(2000001367.194:6143): avc: denied { remount } for pid=6214 comm="syz.8.11364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 788.978883][ T6204] syz.0.11360 invoked oom-killer: gfp_mask=0x482cc0(GFP_KERNEL_ACCOUNT|__GFP_NOWARN|__GFP_NOMEMALLOC), order=1, oom_score_adj=0 [ 789.019775][ T6204] CPU: 0 UID: 0 PID: 6204 Comm: syz.0.11360 Tainted: G W syzkaller #0 PREEMPT(full) [ 789.019812][ T6204] Tainted: [W]=WARN [ 789.019820][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.019832][ T6204] Call Trace: [ 789.019840][ T6204] [ 789.019850][ T6204] __dump_stack+0x1d/0x30 [ 789.019912][ T6204] dump_stack_lvl+0x95/0xd0 [ 789.019936][ T6204] dump_stack+0x15/0x1b [ 789.019962][ T6204] dump_header+0x80/0x240 [ 789.019997][ T6204] oom_kill_process+0x295/0x350 [ 789.020024][ T6204] out_of_memory+0x97d/0xb80 [ 789.020048][ T6204] try_charge_memcg+0x62e/0xa10 [ 789.020145][ T6204] obj_cgroup_charge_pages+0x23/0xc0 [ 789.020179][ T6204] obj_cgroup_charge_account+0x73/0x1a0 [ 789.020282][ T6204] __memcg_slab_post_alloc_hook+0x392/0x540 [ 789.020392][ T6204] __kmalloc_node_track_caller_noprof+0x353/0x560 [ 789.020421][ T6204] ? alloc_skb_with_frags+0x7d/0x470 [ 789.020465][ T6204] __alloc_skb+0x3a4/0x690 [ 789.020496][ T6204] ? __alloc_skb+0x200/0x690 [ 789.020543][ T6204] alloc_skb_with_frags+0x7d/0x470 [ 789.020576][ T6204] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 789.020609][ T6204] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 789.020640][ T6204] ? __list_del_entry_valid_or_report+0x65/0x130 [ 789.020759][ T6204] sock_alloc_send_pskb+0x44d/0x500 [ 789.020866][ T6204] ? __pfx_autoremove_wake_function+0x10/0x10 [ 789.020903][ T6204] unix_stream_sendmsg+0x40a/0xbb0 [ 789.020962][ T6204] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 789.021018][ T6204] ____sys_sendmsg+0x563/0x5b0 [ 789.021049][ T6204] ___sys_sendmsg+0x195/0x1e0 [ 789.021095][ T6204] __x64_sys_sendmsg+0xd4/0x160 [ 789.021183][ T6204] x64_sys_call+0x194c/0x3020 [ 789.021207][ T6204] do_syscall_64+0x12c/0x370 [ 789.021229][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.021393][ T6204] RIP: 0033:0x7f4244b4c799 [ 789.021413][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.021435][ T6204] RSP: 002b:00007f4243586028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.021459][ T6204] RAX: ffffffffffffffda RBX: 00007f4244dc6090 RCX: 00007f4244b4c799 [ 789.021473][ T6204] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000004 [ 789.021544][ T6204] RBP: 00007f4244be2c99 R08: 0000000000000000 R09: 0000000000000000 [ 789.021556][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.021620][ T6204] R13: 00007f4244dc6128 R14: 00007f4244dc6090 R15: 00007ffde12e5cf8 [ 789.021643][ T6204] [ 789.023713][ T28] audit: type=1400 audit(2000001367.194:6144): avc: denied { mounton } for pid=6214 comm="syz.8.11364" path="/1135/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 789.047102][ T6204] memory: usage 260660kB, limit 307200kB, failcnt 721 [ 789.308376][ T6204] memory+swap: usage 81000kB, limit 9007199254740988kB, failcnt 0 [ 789.316471][ T6204] kmem: usage 71704kB, limit 9007199254740988kB, failcnt 0 [ 789.333732][ T6204] Memory cgroup stats for /syz0: [ 789.333972][ T6204] cache 4341760 [ 789.342540][ T6204] rss 5107712 [ 789.346276][ T6204] shmem 4341760 [ 789.349772][ T6204] mapped_file 0 [ 789.353426][ T6204] dirty 0 [ 789.364104][ T6204] writeback 0 [ 789.367470][ T6204] workingset_refault_anon 2748 [ 789.372287][ T6204] workingset_refault_file 0 [ 789.394355][ T6204] swap 0 [ 789.415597][ T6204] swapcached 14127104 [ 789.443672][ T6204] pgpgin 618195 [ 789.447221][ T6204] pgpgout 615883 [ 789.450768][ T6204] pgfault 546732 [ 789.463676][ T6204] pgmajfault 584 [ 789.467450][ T6204] inactive_anon 32768 [ 789.471454][ T6204] active_anon 9437184 [ 789.643662][ T6204] inactive_file 0 [ 789.647384][ T6204] active_file 0 [ 789.650918][ T6204] unevictable 0 [ 789.708064][ T6204] hierarchical_memory_limit 314572800 [ 789.713565][ T6204] hierarchical_memsw_limit 9223372036854771712 [ 789.813707][ T6204] total_cache 4341760 [ 789.837864][ T6204] total_rss 5107712 [ 789.860744][ T6204] total_shmem 4341760 [ 789.903694][ T6204] total_mapped_file 0 [ 789.913688][ T6204] total_dirty 0 [ 789.917293][ T6204] total_writeback 0 [ 789.921102][ T6204] total_workingset_refault_anon 2748 [ 789.973884][ T6204] total_workingset_refault_file 0 [ 789.983753][ T6204] total_swap 0 [ 789.987223][ T6204] total_swapcached 14127104 [ 790.003195][ T6204] total_pgpgin 618195 [ 790.022321][ T6204] total_pgpgout 615883 [ 790.026499][ T6204] total_pgfault 546732 [ 790.033857][ T6204] total_pgmajfault 584 [ 790.037979][ T6204] total_inactive_anon 32768 [ 790.042558][ T6204] total_active_anon 9437184 [ 790.070412][ T6204] total_inactive_file 0 [ 790.074683][ T6204] total_active_file 0 [ 790.078779][ T6204] total_unevictable 0 [ 790.082773][ T6204] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.11360,pid=6201,uid=0 [ 790.133723][ T6204] Memory cgroup out of memory: Killed process 6204 (syz.0.11360) total-vm:100580kB, anon-rss:5656kB, file-rss:26376kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:0 [ 790.854902][ T6235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 790.957040][ T6243] tipc: Failed to remove unknown binding: 66,0,0/0:2848324902/2848324904 [ 790.965859][ T6243] tipc: Failed to remove unknown binding: 66,0,0/0:2848324902/2848324903 [ 790.986728][ T6243] tipc: Failed to remove unknown binding: 66,0,0/0:2848324902/2848324904 [ 791.029348][ T6243] tipc: Failed to remove unknown binding: 66,0,0/0:2848324902/2848324903 [ 791.077533][ T6249] netlink: 'syz.0.11376': attribute type 11 has an invalid length. [ 791.350208][ T6260] lo speed is unknown, defaulting to 1000 [ 791.546297][ T6260] lo speed is unknown, defaulting to 1000 [ 791.934252][ T6267] netlink: 'syz.7.11386': attribute type 2 has an invalid length. [ 791.942534][ T28] audit: type=1400 audit(2000001370.184:6145): avc: denied { listen } for pid=6266 comm="syz.7.11386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 791.964151][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11386'. [ 792.033469][ T6279] loop7: detected capacity change from 0 to 512 [ 794.318899][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11410'. [ 794.396845][ T6315] lo speed is unknown, defaulting to 1000 [ 794.491223][ T6315] lo speed is unknown, defaulting to 1000 [ 794.784279][ T6332] loop7: detected capacity change from 0 to 2048 [ 795.528057][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11421'. [ 795.559912][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11421'. [ 795.601826][ T6346] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 795.621984][ T6346] netlink: 'syz.2.11413': attribute type 3 has an invalid length. [ 795.634979][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11413'. [ 795.652991][ T6346] ------------[ cut here ]------------ [ 795.659055][ T6346] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 795.671217][ T6346] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.2.11413/6346 [ 795.681029][ T6346] Modules linked in: [ 795.685521][ T6346] CPU: 0 UID: 0 PID: 6346 Comm: syz.2.11413 Tainted: G W syzkaller #0 PREEMPT(full) [ 795.696554][ T6346] Tainted: [W]=WARN [ 795.700392][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 795.710522][ T6346] RIP: 0010:u32_change+0x1463/0x14d0 [ 795.716434][ T6346] Code: 31 ed e9 96 fe ff ff e8 eb 05 c2 fc 48 8d 3d 44 39 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 ab 95 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 795.736322][ T6346] RSP: 0018:ffffc900017ab5e0 EFLAGS: 00010287 [ 795.742657][ T6346] RAX: ffffffff849758e5 RBX: ffffc900017ab7f0 RCX: 0000000000000010 [ 795.751324][ T6346] RDX: ffffffff867e95ab RSI: 0000000000000020 RDI: ffffffff87209230 [ 795.759347][ T6346] RBP: ffffc900017ab6e8 R08: 000188811b634687 R09: 0000000000000000 [ 795.767417][ T6346] R10: ffffc900017ab0d8 R11: 0001c900017ab0d8 R12: ffff888126acbe00 [ 795.776101][ T6346] R13: 0000000000000001 R14: 0000000000000020 R15: ffff888126acbec0 [ 795.784210][ T6346] FS: 00007f63fd8d76c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 795.793163][ T6346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.799804][ T6346] CR2: 0000001b2fc1eff8 CR3: 000000011dc60000 CR4: 00000000003506f0 [ 795.808399][ T6346] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 795.816561][ T6346] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 795.824624][ T6346] Call Trace: [ 795.827921][ T6346] [ 795.830903][ T6346] tc_new_tfilter+0xfc0/0x1200 [ 795.836385][ T6346] ? ns_capable+0x7c/0xb0 [ 795.840735][ T6346] ? __pfx_tc_new_tfilter+0x10/0x10 [ 795.846028][ T6346] rtnetlink_rcv_msg+0x64b/0x720 [ 795.851089][ T6346] netlink_rcv_skb+0x123/0x220 [ 795.855941][ T6346] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 795.861559][ T6346] rtnetlink_rcv+0x1c/0x30 [ 795.866669][ T6346] netlink_unicast+0x5c0/0x690 [ 795.871478][ T6346] netlink_sendmsg+0x5c8/0x6f0 [ 795.876470][ T6346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.882051][ T6346] ____sys_sendmsg+0x563/0x5b0 [ 795.886913][ T6346] ___sys_sendmsg+0x195/0x1e0 [ 795.891750][ T6346] ? place_entity+0x1ab/0x210 [ 795.897146][ T6346] __sys_sendmmsg+0x185/0x320 [ 795.901883][ T6346] __x64_sys_sendmmsg+0x57/0x70 [ 795.906988][ T6346] x64_sys_call+0x27aa/0x3020 [ 795.911745][ T6346] do_syscall_64+0x12c/0x370 [ 795.916469][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.922412][ T6346] RIP: 0033:0x7f63fee7c799 [ 795.927447][ T6346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.929194][ T6348] loop7: detected capacity change from 0 to 256 [ 795.947210][ T6346] RSP: 002b:00007f63fd8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 795.947278][ T6346] RAX: ffffffffffffffda RBX: 00007f63ff0f5fa0 RCX: 00007f63fee7c799 [ 795.947296][ T6346] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 795.947314][ T6346] RBP: 00007f63fef12c99 R08: 0000000000000000 R09: 0000000000000000 [ 795.947329][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.947344][ T6346] R13: 00007f63ff0f6038 R14: 00007f63ff0f5fa0 R15: 00007fff70b17208 [ 795.947410][ T6346] [ 795.947418][ T6346] ---[ end trace 0000000000000000 ]--- [ 798.354762][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11434'. [ 798.390556][ T6395] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11435'. [ 798.473623][ T6393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6393 comm=syz.7.11434 [ 798.492313][ T6395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6395 comm=syz.9.11435 [ 799.229250][ T6413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6413 comm=syz.0.11441 [ 799.253807][ T6413] batadv_slave_0: Caught tx_queue_len zero misconfig [ 799.294942][ T6414] bridge_slave_0: invalid flags given to default FDB implementation [ 799.456630][ T6423] lo speed is unknown, defaulting to 1000 [ 799.858698][ T6423] lo speed is unknown, defaulting to 1000 [ 800.956352][ T6451] lo speed is unknown, defaulting to 1000 [ 801.055582][ T6451] lo speed is unknown, defaulting to 1000 [ 802.122704][ T6447] lo speed is unknown, defaulting to 1000 [ 803.724526][ T6476] netlink: 'syz.2.11463': attribute type 4 has an invalid length. [ 803.732590][ T6476] netlink: 17 bytes leftover after parsing attributes in process `syz.2.11463'. [ 804.855651][ T6513] loop7: detected capacity change from 0 to 16384 [ 804.927911][ T6513] loop7: detected capacity change from 16384 to 16383 [ 805.569432][ T6488] lo speed is unknown, defaulting to 1000 [ 805.642965][ T6447] lo speed is unknown, defaulting to 1000 [ 806.028042][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11480'. [ 806.046763][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11480'. [ 806.314273][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11484'. [ 806.347308][ T6543] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6543 comm=syz.7.11484 [ 806.381535][ T28] audit: type=1326 audit(2000001384.614:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.405730][ T28] audit: type=1326 audit(2000001384.614:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.460005][ T28] audit: type=1326 audit(2000001384.614:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.485360][ T28] audit: type=1326 audit(2000001384.614:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.561372][ T28] audit: type=1326 audit(2000001384.614:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.593256][ T28] audit: type=1326 audit(2000001384.614:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.684885][ T28] audit: type=1326 audit(2000001384.614:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.749230][ T28] audit: type=1326 audit(2000001384.614:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.839499][ T28] audit: type=1326 audit(2000001384.614:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 806.863139][ T28] audit: type=1326 audit(2000001384.614:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6544 comm="syz.2.11486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 808.047195][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11493'. [ 808.098149][ T6488] lo speed is unknown, defaulting to 1000 [ 808.490373][ T6580] loop7: detected capacity change from 0 to 4096 [ 809.155210][ T6488] chnl_net:caif_netlink_parms(): no params data found [ 809.257576][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.273716][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.291498][ T6488] bridge_slave_0: entered allmulticast mode [ 809.302246][ T6488] bridge_slave_0: entered promiscuous mode [ 809.325724][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.332818][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.361213][ T6488] bridge_slave_1: entered allmulticast mode [ 809.413205][ T6488] bridge_slave_1: entered promiscuous mode [ 809.757030][ T6627] 9p: Could not find request transport: uni^ek}toر)&KpJws A4}(3ݒ [ 810.429822][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.453171][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.473049][ T6624] lo speed is unknown, defaulting to 1000 [ 810.496836][ T6488] team0: Port device team_slave_0 added [ 810.511676][ T6488] team0: Port device team_slave_1 added [ 810.697204][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.719421][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.757283][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.770332][ T6624] lo speed is unknown, defaulting to 1000 [ 810.770998][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.783510][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.811596][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.901796][ T6488] hsr_slave_0: entered promiscuous mode [ 810.909768][ T6488] hsr_slave_1: entered promiscuous mode [ 810.942816][ T6488] debugfs: 'hsr0' already exists in 'hsr' [ 810.948632][ T6488] Cannot create hsr debugfs directory [ 811.618021][ T6488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 811.655733][ T6488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 811.683552][ T6488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 811.714357][ T6488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 811.809526][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.827159][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.844569][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.852199][ T5418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.008677][ T6488] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 812.019460][ T6488] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 812.115472][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.122696][ T5418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.157519][ T6712] : port 1(veth0_to_team) entered blocking state [ 812.165246][ T6712] : port 1(veth0_to_team) entered disabled state [ 812.172283][ T6712] veth0_to_team: entered allmulticast mode [ 812.186757][ T6712] veth0_to_team: entered promiscuous mode [ 812.231360][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.450521][ T6488] veth0_vlan: entered promiscuous mode [ 812.458900][ T6488] veth1_vlan: entered promiscuous mode [ 812.481445][ T6488] veth0_macvtap: entered promiscuous mode [ 812.489391][ T6488] veth1_macvtap: entered promiscuous mode [ 812.501818][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.516435][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 812.528486][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.537542][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.922152][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.000137][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.146067][ T6764] loop5: detected capacity change from 0 to 1024 [ 813.173675][ T6764] EXT4-fs: inline encryption not supported [ 813.214602][ T6764] EXT4-fs: Ignoring removed bh option [ 813.277235][ T6764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.334189][ T6764] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.11466: Allocating blocks 449-513 which overlap fs metadata [ 813.428537][ T6764] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.11466: Allocating blocks 497-513 which overlap fs metadata [ 813.482329][ T6764] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.11466: Allocating blocks 497-513 which overlap fs metadata [ 813.606899][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.658824][ T6803] netlink: 'syz.9.11548': attribute type 4 has an invalid length. [ 813.694301][ T6803] netlink: 'syz.9.11548': attribute type 4 has an invalid length. [ 813.702189][ T3414] lo speed is unknown, defaulting to 1000 [ 813.709556][ T3414] syU: Port: 1 Link DOWN [ 813.737451][T16781] lo speed is unknown, defaulting to 1000 [ 813.749264][T16781] syU: Port: 1 Link ACTIVE [ 813.879092][ T3421] lo speed is unknown, defaulting to 1000 [ 813.935411][ T6811] : port 1(veth0_to_bridge) entered blocking state [ 814.044752][ T6811] : port 1(veth0_to_bridge) entered disabled state [ 814.114416][ T6811] veth0_to_bridge: entered allmulticast mode [ 814.176813][ T6811] veth0_to_bridge: entered promiscuous mode [ 814.233930][ T6817] : port 2(veth0_to_team) entered blocking state [ 814.246042][ T6817] : port 2(veth0_to_team) entered disabled state [ 814.263055][ T6817] veth0_to_team: entered allmulticast mode [ 814.283499][ T6817] veth0_to_team: entered promiscuous mode [ 817.572998][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 817.573021][ T28] audit: type=1400 audit(2000001651.810:6217): avc: denied { accept } for pid=6963 comm="syz.2.11554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 817.739210][ T28] audit: type=1326 audit(2000001651.990:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 817.796067][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11558'. [ 817.819719][ T28] audit: type=1326 audit(2000001651.990:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 817.851604][ T28] audit: type=1326 audit(2000001651.990:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 817.876367][ T28] audit: type=1326 audit(2000001651.990:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 817.918310][ T28] audit: type=1326 audit(2000001651.990:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 817.977334][ T28] audit: type=1326 audit(2000001651.990:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 818.037060][ T28] audit: type=1326 audit(2000001651.990:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 818.099528][ T28] audit: type=1326 audit(2000001651.990:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 818.122665][ T6981] : port 1(veth0_to_bridge) entered blocking state [ 818.134977][ T6981] : port 1(veth0_to_bridge) entered disabled state [ 818.148617][ T6981] veth0_to_bridge: entered allmulticast mode [ 818.149840][ T28] audit: type=1326 audit(2000001651.990:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6967 comm="syz.2.11556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63fee7c799 code=0x7ffc0000 [ 818.161054][ T6981] veth0_to_bridge: entered promiscuous mode [ 818.286671][ T6955] loop7: detected capacity change from 0 to 2048 [ 818.320305][ T6981] : port 2(veth0_to_team) entered blocking state [ 818.327339][ T6981] : port 2(veth0_to_team) entered disabled state [ 818.335377][ T6981] veth0_to_team: entered allmulticast mode [ 818.344367][ T6981] veth0_to_team: entered promiscuous mode [ 818.349525][ T6955] Alternate GPT is invalid, using primary GPT. [ 818.359514][ T6955] loop7: p2 p3 p7 [ 818.397532][ T6987] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.11564'. [ 818.491455][ T3002] Alternate GPT is invalid, using primary GPT. [ 818.498169][ T3002] loop7: p2 p3 p7 [ 818.555828][ T6991] bond7: (slave veth21): Enslaving as an active interface with a down link [ 818.574190][ T6994] bond7: (slave veth23): Enslaving as an active interface with a down link [ 818.779048][ T7004] netlink: 'syz.5.11569': attribute type 4 has an invalid length. [ 818.799603][ T7004] netlink: 'syz.5.11569': attribute type 4 has an invalid length. [ 818.878410][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11571'. [ 819.047632][ T7019] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 819.213757][ T7019] ref_ctr increment failed for inode: 0x1c95 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810aef5e80 [ 819.295622][ T7022] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 819.396748][ T7022] ref_ctr decrement failed for inode: 0x1c95 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810aef5e80 [ 819.474349][ T7022] uprobe: syz.2.11574:7022 failed to unregister, leaking uprobe [ 819.823989][ T7049] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11585'. [ 819.835328][ T7049] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7049 comm=syz.5.11585 [ 820.158280][ T7051] loop7: detected capacity change from 0 to 512 [ 820.173324][ T7051] EXT4-fs: Ignoring removed oldalloc option [ 822.319564][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.9.11603'. [ 822.427291][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11603'. [ 822.872995][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11608'. [ 823.262026][ T7125] delete_channel: no stack [ 823.356242][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11615'. [ 823.378878][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11615'. [ 823.444161][ T28] kauditd_printk_skb: 129 callbacks suppressed [ 823.444178][ T28] audit: type=1326 audit(2000001657.700:6357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.481143][ T28] audit: type=1326 audit(2000001657.700:6356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.506268][ T28] audit: type=1326 audit(2000001657.730:6358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.515868][ T7131] loop7: detected capacity change from 0 to 512 [ 823.530436][ T28] audit: type=1326 audit(2000001657.730:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.530567][ T28] audit: type=1326 audit(2000001657.730:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.530669][ T28] audit: type=1326 audit(2000001657.730:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.530696][ T28] audit: type=1326 audit(2000001657.730:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.530887][ T28] audit: type=1326 audit(2000001657.730:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.530916][ T28] audit: type=1326 audit(2000001657.730:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 823.530952][ T28] audit: type=1326 audit(2000001657.730:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7134 comm="syz.9.11618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2879cc799 code=0x7ffc0000 [ 824.569990][ T7158] loop5: detected capacity change from 0 to 512 [ 824.638108][ T7158] EXT4-fs: Ignoring removed oldalloc option [ 824.799489][ T7158] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.11624: invalid block [ 824.836007][ T7158] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 824.836838][ T7158] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11624: invalid indirect mapped block 4294967295 (level 1) [ 824.848266][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 824.848287][ C0] EXT4-fs (loop5): initial error at time 2000001659: ext4_get_branch:178: inode 11: block 4294967295 [ 824.848325][ C0] EXT4-fs (loop5): last error at time 2000001659: ext4_get_branch:178: inode 11: block 4294967295 [ 824.937627][ T7158] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 824.939876][ T7158] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11624: invalid indirect mapped block 4294967295 (level 1) [ 825.027063][ T7158] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 825.032965][ T7158] EXT4-fs (loop5): 2 truncates cleaned up [ 825.067931][ T7166] netlink: 'syz.9.11627': attribute type 15 has an invalid length. [ 825.077831][ T7158] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.092216][ T7166] netlink: 11930 bytes leftover after parsing attributes in process `syz.9.11627'. [ 825.442206][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.741808][ T7184] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.808125][ T7184] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.890369][ T7184] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.957762][ T7184] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.131886][ T7620] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.153869][ T7620] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.162134][ T7620] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.204876][ T7620] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.055877][ T7199] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11650'. [ 827.179409][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11642'. [ 827.213941][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11642'. [ 827.242172][ T7190] loop7: detected capacity change from 0 to 2048 [ 827.556209][ T7221] loop5: detected capacity change from 0 to 1024 [ 827.605502][ T7221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 828.331324][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.365918][ T7237] syzkaller0: entered promiscuous mode [ 828.371466][ T7237] syzkaller0: entered allmulticast mode [ 828.422308][ T7243] Set syz0 is full, maxelem 0 reached [ 829.155099][ T28] kauditd_printk_skb: 249 callbacks suppressed [ 829.155156][ T28] audit: type=1400 audit(2000001663.410:6615): avc: denied { setopt } for pid=7251 comm="syz.0.11655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 829.257051][ T7251] delete_channel: no stack [ 830.211149][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11662'. [ 830.232881][ T7272] vlan1: entered allmulticast mode [ 830.238208][ T7272] bridge15: entered allmulticast mode [ 830.260069][ T7272] bridge15: port 1(veth27) entered blocking state [ 830.266886][ T7272] bridge15: port 1(veth27) entered disabled state [ 830.273883][ T7272] veth27: entered allmulticast mode [ 830.280088][ T7272] veth27: entered promiscuous mode [ 830.447200][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11676'. [ 830.789139][ T7284] loop5: detected capacity change from 0 to 512 [ 830.949646][ T7284] EXT4-fs (loop5): 1 orphan inode deleted [ 830.974971][ T7284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 831.065598][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.260312][ T7307] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.305376][ T7307] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.413344][ T7307] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.495075][ T7307] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.542326][ T5414] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.565711][ T5414] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.598117][T24138] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 831.611593][T24138] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 832.921595][ T7341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11686'. [ 832.951962][ T7341] bond1: (slave vcan1): refused to change device type [ 833.073925][ T7349] loop5: detected capacity change from 0 to 2048 [ 833.097073][ T7349] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 833.126974][ T7349] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.203654][ T28] audit: type=1400 audit(2000001667.450:6616): avc: denied { lock } for pid=7348 comm="syz.5.11687" path="/32/file1/cpuset.effective_mems" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 833.554262][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.627123][ T7358] netlink: 'syz.5.11690': attribute type 21 has an invalid length. [ 833.726181][ T28] audit: type=1326 audit(2000001667.980:6617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7364 comm="syz.9.11693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2879cc799 code=0x0 [ 834.269505][ T7394] loop5: detected capacity change from 0 to 2048 [ 834.292429][ T7394] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 834.310333][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11702'. [ 834.343848][ T7396] vlan3: entered allmulticast mode [ 834.351184][ T7394] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 834.356249][ T7396] bridge18: entered allmulticast mode [ 834.396354][ T7396] bridge18: port 1(veth25) entered blocking state [ 834.403027][ T7396] bridge18: port 1(veth25) entered disabled state [ 834.409871][ T7396] veth25: entered allmulticast mode [ 834.416190][ T7396] veth25: entered promiscuous mode [ 834.591527][ T7404] netlink: 'syz.9.11704': attribute type 21 has an invalid length. [ 835.193440][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.949180][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11715'. [ 835.968757][ T7432] netlink: 'syz.2.11715': attribute type 1 has an invalid length. [ 836.573304][ T28] audit: type=1326 audit(2000001670.820:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 836.671559][ T7446] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 836.761258][ T28] audit: type=1326 audit(2000001670.850:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.145994][ T28] audit: type=1326 audit(2000001670.850:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.243767][ T28] audit: type=1326 audit(2000001670.850:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.311689][ T7454] loop5: detected capacity change from 0 to 512 [ 837.364433][ T28] audit: type=1326 audit(2000001670.850:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.414584][ T7454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.440523][ T7454] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 837.474503][ T28] audit: type=1326 audit(2000001670.860:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.547035][ T28] audit: type=1326 audit(2000001670.860:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.655850][ T28] audit: type=1326 audit(2000001670.860:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.685981][ T7460] EXT4-fs (loop5): shut down requested (0) [ 837.767559][ T28] audit: type=1326 audit(2000001670.860:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 837.847550][ T28] audit: type=1326 audit(2000001670.860:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7445 comm="syz.0.11720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f4244b4c799 code=0x7ffc0000 [ 838.178563][ T6488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.692570][ T7482] lo speed is unknown, defaulting to 1000 [ 839.088804][ T7482] lo speed is unknown, defaulting to 1000 [ 839.436542][ T7487] lo speed is unknown, defaulting to 1000 [ 839.454460][ T7489] xt_limit: Overflow, try lower: 0/0 [ 839.593275][ T7487] lo speed is unknown, defaulting to 1000 [ 839.935891][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 839.944638][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 839.952660][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 839.961473][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 839.969708][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 839.978229][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 839.986507][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 839.995905][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 840.005460][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 840.013376][ T7512] netlink: 'syz.0.11745': attribute type 3 has an invalid length. [ 841.275861][ T7555] lo speed is unknown, defaulting to 1000 [ 841.300079][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11760'. [ 841.414998][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11764'. [ 841.427278][ T7555] lo speed is unknown, defaulting to 1000 [ 841.615183][ T28] kauditd_printk_skb: 189 callbacks suppressed [ 841.615200][ T28] audit: type=1400 audit(2000001675.870:6817): avc: denied { map_create } for pid=7574 comm="syz.0.11767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 841.703658][ T28] audit: type=1400 audit(2000001675.870:6818): avc: denied { create } for pid=7574 comm="syz.0.11767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 841.748886][ T28] audit: type=1400 audit(2000001675.890:6819): avc: denied { prog_load } for pid=7544 comm="syz.7.11754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 841.775641][ T28] audit: type=1400 audit(2000001675.930:6820): avc: denied { open } for pid=7576 comm="syz.0.11778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 841.839140][ T28] audit: type=1400 audit(2000001675.930:6821): avc: denied { open } for pid=7576 comm="syz.0.11778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 841.880321][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11770'. [ 841.897076][ T28] audit: type=1400 audit(2000001675.980:6822): avc: denied { read write } for pid=22813 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 841.943889][ T28] audit: type=1400 audit(2000001676.000:6823): avc: denied { allowed } for pid=7578 comm="syz.2.11768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 842.031935][ T28] audit: type=1400 audit(2000001676.050:6824): avc: denied { open } for pid=7578 comm="syz.2.11768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 842.098284][ T28] audit: type=1400 audit(2000001676.130:6825): avc: denied { create } for pid=7584 comm="syz.7.11770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 842.158761][ T28] audit: type=1400 audit(2000001676.130:6826): avc: denied { open } for pid=7584 comm="syz.7.11770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 842.847136][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11790'. [ 843.050163][ T7653] IPVS: sh: FWM 3 0x00000003 - no destination available [ 843.061982][ T7653] IPVS: sh: FWM 3 0x00000003 - no destination available [ 843.926325][ T7665] lo speed is unknown, defaulting to 1000 [ 843.999491][ T7665] lo speed is unknown, defaulting to 1000 [ 844.921516][ T7728] lo speed is unknown, defaulting to 1000 [ 844.999119][ T7728] lo speed is unknown, defaulting to 1000 [ 845.005538][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11828'. [ 845.014750][ T7731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11828'. [ 845.129657][ T7746] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11835'. [ 845.192401][ T7746] bridge15: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 845.217932][ T7746] bridge15: entered promiscuous mode [ 845.223528][ T7746] bridge15: entered allmulticast mode [ 845.265180][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11839'. [ 845.288311][T26422] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.288343][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11839'. [ 845.296767][T26422] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.296870][T26422] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.296904][T26422] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 845.316287][ T7757] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11839'. [ 845.465951][ T7768] validate_nla: 5 callbacks suppressed [ 845.465969][ T7768] netlink: 'syz.9.11845': attribute type 1 has an invalid length. [ 845.489203][ T7768] bond18: entered promiscuous mode [ 845.495207][ T7768] 8021q: adding VLAN 0 to HW filter on device bond18 [ 845.517911][ T7768] bond18: (slave bridge16): making interface the new active one [ 845.525929][ T7768] bridge16: entered promiscuous mode [ 845.535638][ T7768] bond18: (slave bridge16): Enslaving as an active interface with an up link [ 845.726061][ T7780] lo speed is unknown, defaulting to 1000 [ 845.879506][ T7780] lo speed is unknown, defaulting to 1000 [ 846.102338][ T7792] netlink: 'syz.5.11853': attribute type 1 has an invalid length. [ 846.147636][ T7792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.396478][ T7792] macvlan2: entered promiscuous mode [ 846.425709][ T7792] bond2: entered promiscuous mode [ 846.433256][ T7792] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 846.487273][ T7792] bond2: left promiscuous mode [ 846.627403][ T28] kauditd_printk_skb: 294 callbacks suppressed [ 846.627492][ T28] audit: type=1400 audit(2000001936.881:7121): avc: denied { prog_load } for pid=7811 comm="syz.5.11861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 846.670166][ T28] audit: type=1400 audit(2000001936.911:7122): avc: denied { read write } for pid=22813 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 846.808884][ T7831] __nla_validate_parse: 3 callbacks suppressed [ 846.808903][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11869'. [ 846.824912][ T28] audit: type=1400 audit(2000001936.911:7123): avc: denied { open } for pid=7811 comm="syz.5.11861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 846.880063][ T7831] bond19: entered promiscuous mode [ 846.893630][ T28] audit: type=1400 audit(2000001936.951:7124): avc: denied { allowed } for pid=7813 comm="syz.0.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 846.901196][ T7831] 8021q: adding VLAN 0 to HW filter on device bond19 [ 846.913777][ T28] audit: type=1400 audit(2000001936.951:7125): avc: denied { create } for pid=7813 comm="syz.0.11863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 846.939943][ T28] audit: type=1400 audit(2000001936.971:7126): avc: denied { create } for pid=7814 comm="syz.7.11864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 846.962387][ T28] audit: type=1400 audit(2000001936.971:7127): avc: denied { execmem } for pid=7821 comm="syz.2.11865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 846.981831][ T28] audit: type=1400 audit(2000001936.981:7128): avc: denied { read write } for pid=22813 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 846.999880][ T7836] bridge17: entered promiscuous mode [ 847.006907][ T28] audit: type=1400 audit(2000001936.981:7129): avc: denied { prog_load } for pid=7823 comm="syz.7.11867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 847.030837][ T28] audit: type=1400 audit(2000001936.981:7130): avc: denied { open } for pid=7823 comm="syz.7.11867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 847.052113][ T7836] bond19: (slave bridge17): Enslaving as an active interface with an up link [ 847.288430][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11872'. [ 847.326278][ T7845] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7845 comm=syz.5.11872 [ 847.658884][ T7873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11886'. [ 847.688538][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11886'. [ 848.146501][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11907'. [ 848.165958][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11907'. [ 848.181615][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11907'. [ 848.194731][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11907'. [ 848.204807][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11907'. [ 848.215261][ T7925] netlink: 'syz.5.11911': attribute type 1 has an invalid length. [ 848.215497][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11907'. [ 848.291908][ T7925] 8021q: adding VLAN 0 to HW filter on device bond3 [ 848.328839][ T7923] lo speed is unknown, defaulting to 1000 [ 848.407729][ T7925] bond3: (slave dummy0): making interface the new active one [ 848.455339][ T7925] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 848.543321][ T7923] lo speed is unknown, defaulting to 1000 [ 849.837856][ T7995] vlan4: entered promiscuous mode [ 849.843049][ T7995] bridge19: entered promiscuous mode [ 849.859122][ T7995] vlan4: entered allmulticast mode [ 849.872081][ T7995] bridge19: entered allmulticast mode [ 850.004847][ T8005] syzkaller0: entered promiscuous mode [ 850.010443][ T8005] syzkaller0: entered allmulticast mode [ 850.379112][ T8011] netlink: 'syz.2.11940': attribute type 1 has an invalid length. [ 850.439215][ T8011] 8021q: adding VLAN 0 to HW filter on device bond8 [ 850.466940][ T8011] macvlan0: entered promiscuous mode [ 850.473183][ T8011] bond8: entered promiscuous mode [ 850.502808][ T8011] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 850.512526][ T8011] bond8: left promiscuous mode [ 850.557019][ T8018] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8018 comm=syz.9.11942 [ 850.641581][ T8020] syzkaller0: entered promiscuous mode [ 850.648702][ T8020] syzkaller0: entered allmulticast mode [ 850.668684][ T8026] syzkaller0: entered promiscuous mode [ 851.635965][ T28] kauditd_printk_skb: 341 callbacks suppressed [ 851.635981][ T28] audit: type=1400 audit(2000001941.891:7472): avc: denied { prog_load } for pid=8090 comm="syz.5.11971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 851.673028][ T28] audit: type=1400 audit(2000001941.911:7473): avc: denied { create } for pid=8090 comm="syz.5.11971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 851.694954][ T28] audit: type=1400 audit(2000001941.911:7474): avc: denied { map_create } for pid=8090 comm="syz.5.11971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 851.716119][ T28] audit: type=1400 audit(2000001941.911:7475): avc: denied { prog_load } for pid=8090 comm="syz.5.11971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 851.736841][ T28] audit: type=1400 audit(2000001941.921:7476): avc: denied { prog_load } for pid=8093 comm="syz.0.11972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 851.764660][ T28] audit: type=1400 audit(2000001941.921:7477): avc: denied { prog_load } for pid=8093 comm="syz.0.11972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 851.785158][ T28] audit: type=1400 audit(2000001941.921:7478): avc: denied { open } for pid=8093 comm="syz.0.11972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 851.812169][ T28] audit: type=1400 audit(2000001941.921:7479): avc: denied { create } for pid=8092 comm="syz.2.11973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 851.866323][ T28] audit: type=1400 audit(2000001941.921:7480): avc: denied { map_create } for pid=8090 comm="syz.5.11971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 851.887245][ T28] audit: type=1400 audit(2000001941.921:7481): avc: denied { prog_load } for pid=8090 comm="syz.5.11971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 851.978251][ T8118] netlink: 'syz.7.11983': attribute type 1 has an invalid length. [ 851.992402][ T8118] 8021q: adding VLAN 0 to HW filter on device bond8 [ 852.019258][ T8118] bond8: (slave gretap2): making interface the new active one [ 852.028519][ T8118] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 852.045418][ T8118] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8118 comm=syz.7.11983 [ 852.075895][ T8123] __nla_validate_parse: 11 callbacks suppressed [ 852.075913][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11985'. [ 852.110955][ T8123] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8123 comm=syz.7.11985 [ 852.356616][ T8139] lo speed is unknown, defaulting to 1000 [ 852.399457][ T8139] lo speed is unknown, defaulting to 1000 [ 852.666053][ T8147] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11995'. [ 852.692379][ T8147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8147 comm=syz.5.11995 [ 852.823122][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12000'. [ 852.958158][ T8164] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8164 comm=syz.9.12002 [ 853.021538][ T8168] lo speed is unknown, defaulting to 1000 [ 853.111752][ T8168] lo speed is unknown, defaulting to 1000 [ 853.411216][ T8185] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 853.487145][ T8192] netlink: 'syz.0.12014': attribute type 1 has an invalid length. [ 853.520732][ T8192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12014'. [ 853.533418][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12015'. [ 853.535885][ T8192] bond8: (slave geneve4): making interface the new active one [ 853.551266][ T8192] bond8: (slave geneve4): Enslaving as an active interface with an up link [ 853.563707][ T5404] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 853.572088][ T5404] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 853.581475][ T5404] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 853.590264][ T5404] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 853.612384][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12015'. [ 853.622469][ T5404] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.647557][ T5404] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.664890][ T5414] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.674736][ T5414] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.678371][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12015'. [ 853.695652][ T8197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12015'. [ 853.986539][ T8224] netlink: 72 bytes leftover after parsing attributes in process `syz.7.12026'. [ 854.753166][ T8243] xt_CT: No such helper "pptp" [ 854.865369][ T8249] bond9 (unregistering): Released all slaves [ 855.009879][ T8249] bond9: entered promiscuous mode [ 855.016542][ T8249] bond9: entered allmulticast mode [ 855.028751][ T8249] 8021q: adding VLAN 0 to HW filter on device bond9 [ 855.335379][ T8265] netlink: 'syz.2.12040': attribute type 2 has an invalid length. [ 856.220557][ T8296] ipip2: entered promiscuous mode [ 856.496531][ T8309] bond9: left promiscuous mode [ 856.519760][ T8309] bond9: left allmulticast mode [ 856.561557][ T8311] bridge0: entered promiscuous mode [ 856.608924][ T8311] bridge0: port 1(macsec1) entered blocking state [ 856.634312][ T8311] bridge0: port 1(macsec1) entered disabled state [ 856.643475][ T8311] macsec1: entered allmulticast mode [ 856.653977][ T8311] bridge0: entered allmulticast mode [ 856.654335][ T28] kauditd_printk_skb: 392 callbacks suppressed [ 856.654350][ T28] audit: type=1400 audit(2000001946.901:7874): avc: denied { create } for pid=8320 comm="syz.7.12063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 856.686438][ T8311] macsec1: left allmulticast mode [ 856.692078][ T8311] bridge0: left allmulticast mode [ 856.699119][ T8311] bridge0: left promiscuous mode [ 856.732984][ T28] audit: type=1400 audit(2000001946.941:7875): avc: denied { module_request } for pid=8318 comm="syz.9.12062" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 856.771844][ T8330] x_tables: duplicate entry at hook 2 [ 856.784701][ T8331] xt_connbytes: Forcing CT accounting to be enabled [ 856.802169][ T8324] lo speed is unknown, defaulting to 1000 [ 856.803654][ T8331] set match dimension is over the limit! [ 856.879432][ T8324] lo speed is unknown, defaulting to 1000 [ 856.982335][ T28] audit: type=1400 audit(2000001946.941:7876): avc: denied { sys_module } for pid=8318 comm="syz.9.12062" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 857.025230][ T28] audit: type=1400 audit(2000001946.941:7877): avc: denied { module_request } for pid=8318 comm="syz.9.12062" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 857.084525][ T28] audit: type=1400 audit(2000001946.941:7878): avc: denied { sys_module } for pid=8318 comm="syz.9.12062" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 857.164295][ T28] audit: type=1400 audit(2000001946.951:7879): avc: denied { prog_load } for pid=8320 comm="syz.7.12063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 857.186858][ T28] audit: type=1400 audit(2000001946.971:7880): avc: denied { create } for pid=8320 comm="syz.7.12063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 857.244600][ T28] audit: type=1400 audit(2000001946.971:7881): avc: denied { prog_load } for pid=8320 comm="syz.7.12063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 857.274618][ T8352] syzkaller0: entered promiscuous mode [ 857.280205][ T28] audit: type=1400 audit(2000001946.981:7882): avc: denied { execmem } for pid=8325 comm="syz.9.12065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 857.309475][ T8352] syzkaller0: entered allmulticast mode [ 857.373735][ T28] audit: type=1400 audit(2000001947.001:7883): avc: denied { read write } for pid=6488 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 857.428362][ T8364] netlink: 'syz.7.12079': attribute type 1 has an invalid length. [ 857.438405][ T8362] IPVS: sh: FWM 3 0x00000003 - no destination available [ 857.464581][ T8364] 8021q: adding VLAN 0 to HW filter on device bond9 [ 857.478783][ T8367] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 857.508674][ T8364] bond9: (slave veth21): Enslaving as an active interface with a down link [ 857.531912][ T8364] vlan1: entered allmulticast mode [ 857.537531][ T8364] veth0_to_bond: entered allmulticast mode [ 857.545643][ T8364] bond9: (slave vlan1): Opening slave failed [ 857.711984][ T8380] netlink: 'syz.7.12086': attribute type 1 has an invalid length. [ 857.730102][ T8380] 8021q: adding VLAN 0 to HW filter on device bond10 [ 857.751941][ T8380] vlan1: entered promiscuous mode [ 857.757884][ T8380] bond10: entered promiscuous mode [ 857.763074][ T8380] vlan1: entered allmulticast mode [ 857.769150][ T8380] bond10: entered allmulticast mode [ 857.777181][ T8380] netlink: 44 bytes leftover after parsing attributes in process `syz.7.12086'. [ 857.791699][ T8380] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 857.802873][ T8380] bond10: (slave batadv1): making interface the new active one [ 857.811414][ T8380] batadv1: entered promiscuous mode [ 857.817811][ T8380] batadv1: entered allmulticast mode [ 857.825000][ T8380] bond10: (slave batadv1): Enslaving as an active interface with an up link [ 858.349948][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12099'. [ 858.738166][ T8427] netlink: 172 bytes leftover after parsing attributes in process `syz.2.12103'. [ 859.808195][ T8453] lo speed is unknown, defaulting to 1000 [ 859.952810][ T8453] lo speed is unknown, defaulting to 1000 [ 860.155072][ T8461] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 861.223486][ T8478] lo speed is unknown, defaulting to 1000 [ 861.282221][ T8478] lo speed is unknown, defaulting to 1000 [ 861.520599][ T8492] 8021q: adding VLAN 0 to HW filter on device bond10 [ 861.543329][ T8492] bond10: (slave ip6gretap2): making interface the new active one [ 861.556253][ T8492] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 861.722397][ T28] kauditd_printk_skb: 227 callbacks suppressed [ 861.722416][ T28] audit: type=1400 audit(2000001951.971:8111): avc: denied { allowed } for pid=8502 comm="syz.2.12131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 861.760408][ T8501] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 861.776091][ T8501] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 861.784149][ T28] audit: type=1400 audit(2000001952.001:8112): avc: denied { create } for pid=8502 comm="syz.2.12131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 861.844253][ T28] audit: type=1400 audit(2000001952.091:8113): avc: denied { read write } for pid=8489 comm="syz.7.12126" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 861.901802][ T28] audit: type=1400 audit(2000001952.141:8114): avc: denied { read write } for pid=22813 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 861.938077][ T28] audit: type=1400 audit(2000001952.191:8115): avc: denied { open } for pid=8508 comm="syz.9.12134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 862.047560][ T8520] lo speed is unknown, defaulting to 1000 [ 862.131469][ T8520] lo speed is unknown, defaulting to 1000 [ 862.455076][ T28] audit: type=1400 audit(2000001952.191:8116): avc: denied { prog_load } for pid=8508 comm="syz.9.12134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 862.494447][ T28] audit: type=1400 audit(2000001952.191:8117): avc: denied { create } for pid=8508 comm="syz.9.12134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 862.594484][ T28] audit: type=1400 audit(2000001952.191:8118): avc: denied { open } for pid=8508 comm="syz.9.12134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 862.625769][ T28] audit: type=1400 audit(2000001952.191:8119): avc: denied { prog_load } for pid=8508 comm="syz.9.12134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 862.651339][ T28] audit: type=1400 audit(2000001952.191:8120): avc: denied { prog_load } for pid=8508 comm="syz.9.12134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 862.673034][ T8538] netlink: 'syz.5.12144': attribute type 1 has an invalid length. [ 862.689003][ T8538] 8021q: adding VLAN 0 to HW filter on device bond4 [ 862.721755][ T8538] vlan2: entered promiscuous mode [ 862.726971][ T8538] bond4: entered promiscuous mode [ 862.732174][ T8538] vlan2: entered allmulticast mode [ 862.738222][ T8538] bond4: entered allmulticast mode [ 862.764764][ T8538] bond4: (slave bridge1): making interface the new active one [ 862.774501][ T8538] bridge1: entered promiscuous mode [ 862.779903][ T8538] bridge1: entered allmulticast mode [ 862.787547][ T8538] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 863.030357][ T8549] ================================================================== [ 863.038511][ T8549] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 863.047163][ T8549] [ 863.049509][ T8549] write to 0xffff888129b9b828 of 8 bytes by task 8545 on cpu 1: [ 863.057152][ T8549] shmem_file_splice_read+0x470/0x600 [ 863.062555][ T8549] splice_direct_to_actor+0x26e/0x670 [ 863.067943][ T8549] do_splice_direct+0x119/0x1a0 [ 863.072814][ T8549] do_sendfile+0x382/0x650 [ 863.077246][ T8549] __x64_sys_sendfile64+0x105/0x150 [ 863.082452][ T8549] x64_sys_call+0x2dc4/0x3020 [ 863.087151][ T8549] do_syscall_64+0x12c/0x370 [ 863.091761][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.097681][ T8549] [ 863.100021][ T8549] write to 0xffff888129b9b828 of 8 bytes by task 8549 on cpu 0: [ 863.107671][ T8549] shmem_file_splice_read+0x470/0x600 [ 863.113155][ T8549] splice_direct_to_actor+0x26e/0x670 [ 863.118545][ T8549] do_splice_direct+0x119/0x1a0 [ 863.123403][ T8549] do_sendfile+0x382/0x650 [ 863.127839][ T8549] __x64_sys_sendfile64+0x105/0x150 [ 863.133055][ T8549] x64_sys_call+0x2dc4/0x3020 [ 863.137759][ T8549] do_syscall_64+0x12c/0x370 [ 863.142385][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.148300][ T8549] [ 863.150627][ T8549] value changed: 0x00000000000026c6 -> 0x00000000000026cb [ 863.157748][ T8549] [ 863.160091][ T8549] Reported by Kernel Concurrency Sanitizer on: [ 863.166250][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.5.12147 Tainted: G W syzkaller #0 PREEMPT(full) [ 863.177206][ T8549] Tainted: [W]=WARN [ 863.181012][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.191195][ T8549] ==================================================================