last executing test programs: 5.233044699s ago: executing program 4 (id=1145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 4.966157697s ago: executing program 4 (id=1150): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, 0x0, 0x10, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) remap_file_pages(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0x4, 0x3e0400000000, 0x1) 4.803542589s ago: executing program 2 (id=1153): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7}) mq_timedreceive(r2, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000002100)=0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.551761966s ago: executing program 1 (id=1155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = fsopen(&(0x7f0000000040)='proc\x00', 0x1) r2 = fsmount(r1, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c81, 0xfffffffffffffffe) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000000)) 3.847544195s ago: executing program 4 (id=1158): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0xe5, 0x5, 0xd, 0x0, 0x3, 0x10, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x3e, 0x1, 0x3, 0x3, 0x8001, 0x8, 0x9, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000cc0)={0x40000000, &(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f00000003c0), {0x1f}, &(0x7f00000004c0)=""/74, 0x4a, &(0x7f0000000400)=""/62, 0x0}, 0x58) perf_event_open(0x0, r1, 0x2, r0, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x700, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="be2357af9349caec", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000008009800000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) 3.847016125s ago: executing program 0 (id=1168): socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x48) r4 = openat$cgroup_type(r3, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 3.792318988s ago: executing program 2 (id=1159): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket(0x10, 0x2, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r6, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.659477248s ago: executing program 1 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001400010f00000000ffdbdf250a000400", @ANYRES32=r8, @ANYBLOB="140006000700000000010400000000000400000014000200fe"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 3.583639333s ago: executing program 1 (id=1161): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x50) shutdown(r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'erspan0\x00', @broadcast}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) close(r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x7, 0x0, &(0x7f00000019c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6c3a426e, 0x8}, 0x0, 0x89a}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x240, 0x0) 3.103655756s ago: executing program 1 (id=1162): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11, 0x0, @opaque='\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r4, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.830753325s ago: executing program 0 (id=1164): socket$inet_sctp(0x2, 0x1, 0x84) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.783001418s ago: executing program 2 (id=1166): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x214002, &(0x7f0000001200)={[{@abort}, {@bh}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000001e80)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") socket$inet6(0xa, 0x1, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.692195194s ago: executing program 0 (id=1169): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x6, 0xffff, 0x9e02, 0x4, "0000be0c00"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0xd, "0062007d82000000000000002240f7ffffff00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0x200}, 0x0, 0x0, 0x10, 0x80004, 0x0, 0x0, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) io_setup(0x3, &(0x7f0000008240)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) stat(&(0x7f00000001c0)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0x17) 2.493638128s ago: executing program 2 (id=1170): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") socket$kcm(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec", 0x43, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) 2.493381678s ago: executing program 3 (id=1171): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x3, 0x800, @vifc_lcl_addr=@loopback, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xffffffde, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000003c0)=0x3, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000200)='bridge0\x00') 2.455775781s ago: executing program 0 (id=1172): sync() sync() r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) preadv(r0, &(0x7f0000000180), 0x0, 0x0, 0x8800) sync() openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 2.246503625s ago: executing program 4 (id=1173): set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d, 0x12000, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) fspick(0xffffffffffffffff, 0x0, 0xf0961890b4faa8d0) setuid(0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) set_mempolicy(0x4000, &(0x7f0000000200)=0x7, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 2.201368688s ago: executing program 3 (id=1174): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}}, 0x0) 2.200800768s ago: executing program 1 (id=1175): write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x0, 0x3}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, 0x0, &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e1f, 0x3, 'lblc\x00', 0x11, 0x10000004, 0x8}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x10, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x7, 0x12d5a, 0x12d4c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.497886906s ago: executing program 2 (id=1176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0x2, 0x8406, 0x7, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x4e23}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) timer_gettime(r1, &(0x7f0000000000)) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000084b66fd450e795ef0000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000600000000004400050064010102000000000000000000000000000000003c00000002000000ac1414aa00000000000000000000000006000000040300"/180], 0xfc}}, 0x0) socket(0xa, 0x3, 0xff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x1400c0d1}, 0x0) futimesat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0) 1.45187649s ago: executing program 3 (id=1177): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000080)) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) sendmsg$kcm(r0, &(0x7f0000002900)={&(0x7f0000001600)=@llc={0x1a, 0x7, 0x1, 0x2, 0x58, 0x8, @broadcast}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)="6978a6e7f547357ef4f41953edd7aab491e9a2c917954aee212e254a76e5aab3590c8479ef704e7f883db8cd249b8de278162fc96f63bc681d9a554aad4eed248d78b2127f21c49dcd1efb2523d33811c6f0cfef36194db5233018e20e74522c3d2cb0ce8e70adccc86fffa77dad44513b2e002c2494d202cc61298299b7484b1bab60aed600c40eb6494bb1a55acbea9466c29207e36b8734f37851ac270e9ff3c41150eb7144378ff45598c2d37d8fadb8a6eb", 0xb4}, {&(0x7f0000001740)="41342ef714c5a542bb22807291c9bade7332fa108f13651d2cebc30f", 0x1c}], 0x2, &(0x7f00000017c0)=[{0x18, 0x119, 0x8001, "d8"}, {0xb0, 0x108, 0xb188, "9649e70e87adb5ace86636959e4d2b6ef75635f2101e301678ab196c9aa4db383448cf036f7b1819deb37a6dcd7444548995e9897113cc96921323ba8b6b7c9abe93ce96a36ce7deb3ea17617b2ad5051146a3cb17cd2de6c364b0e0058411c9a45b82ce4ad8d443970209128527cbf3961533a25b4a92b086e243cb75fac83d1a114cdf6042c082e84514bcc05a6abaf4397b398a52216d9bb0f7eb"}, {0x30, 0x29, 0x2, "ad4e6666e8cbacaf75b5cf6096f5ea475c65fff89ecdb9992800"}, {0x1010, 0x1, 0x2, "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"}, {0x38, 0xff, 0x8, "cf8bc3b501e67cac0271bfad6e3c942d125d31fe62fbf261f736657e23258c3eb4e3"}], 0x1140}, 0x4008880) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r3, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4080, 0xff0}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.101174394s ago: executing program 4 (id=1178): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x214002, &(0x7f0000001200)={[{@abort}, {@bh}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000001e80)="$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") openat(0xffffffffffffff9c, 0x0, 0xe58c0, 0x0) socket$inet6(0xa, 0x1, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) 1.039954578s ago: executing program 1 (id=1179): socket(0x10, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet(0x2, 0xa, 0x262) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) epoll_create1(0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x80, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}}) 570.80763ms ago: executing program 2 (id=1180): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x214002, &(0x7f0000001200)={[{@abort}, {@bh}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000001e80)="$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") socket$inet6(0xa, 0x1, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x1}, 0x10}}, 0xd209f6d814827b13) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x600) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 510.101735ms ago: executing program 3 (id=1181): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b3434076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x4, 0x4) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b06075, &(0x7f00000035c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYRES16, @ANYRESOCT, @ANYBLOB="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", @ANYBLOB="b13754b80dea7719ef0dc3f550fbdc73cba49d4e7c82016d5769fcbd99ef37581e8a1a59015dac55d80767f6ebd134de7aeb32fb8672e2854f2b1f232b59d913c818bafee229130f2f139c9abd8d6278fd2347233a650ab304a1d02efb4c9c6f4d32e45cad4ade56d6f2966fc3f418c537da6c8a2c1fcf66667f65c4f6794746c9da9c7778c19647890cd400af2cc623f50c755118d05171a980c539cac0576e4b616d0c4027", @ANYRES16, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT=r2, @ANYBLOB="94b65231ff72115114ebaa5c989b151934dc050b6a9a2be44298b5d84feb3892838280ec13531d79a890932db7ed059888c314982baa52e77255257748283ef9ebc6291f2ad639cd00274ba3bc494b67fe9b86ea83146429d9b58b5e5a5f4456ac6e3aaa769d671ec3e205be67d6bcb35240da8c3e3927beca9e0cc3e3ab04c4b217462801adae3786ceb99fd69be1bca660570b9cc3b0a6a3", @ANYRES64, @ANYRESDEC], 0x5, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001840), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd41, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) 289.722769ms ago: executing program 4 (id=1182): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="2000000044359d02063fe29ff4674a5e42120001002bbd7000fedbdf250700", @ANYRES32=0x0, @ANYBLOB], 0x12}, 0x1, 0x0, 0x0, 0x845}, 0x4084) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000880)=ANY=[@ANYRESHEX=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_io_uring_setup(0x3d, &(0x7f0000000580)={0x0, 0xaa9b, 0x13500}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440), 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x15c, r7, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x140, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xe8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0xc0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x4}]}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 127.967641ms ago: executing program 3 (id=1183): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)=ANY=[], 0x0, 0x3f}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 127.187681ms ago: executing program 0 (id=1193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0xfff, 0x7fff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "0d767b344a4107111e7e642d07ae014c02021bf9ea748c446391894699ec720ff9827531e9b3340038d7a0916c5984381baee6cd3a24fa9327dfcad6fa7c5135531ac295b264596f6d3e857f152d0b7083fb07acdfabd1324a0014a096078ac9c249f66d2af98841b65c33dc69677149a24390411bda91281cd201379858f2fcca40d86f69ed5fc1d5674c90eccc7818ecfcb9e0418db476b3beb17e7a33795eaaf955a98da4290b20627cd3c3edb40de32380fc7781ce8bc43a77a459d826255142030193a40d8f3b2ce6909a57c5bea695b7699c7a393ef756b8ce29f84499994a1138f4be3eea8583115628cedb67fee1eada59655f2b9d67580e94534bc7"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 770.629µs ago: executing program 3 (id=1184): munmap(&(0x7f0000aaf000/0x1000)=nil, 0x1000) r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0xe5, 0x5, 0xd, 0x0, 0x3, 0x10, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x3e, 0x1, 0x3, 0x3, 0x8001, 0x8, 0x9, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000cc0)={0x40000000, &(0x7f0000000180), &(0x7f0000000200)=0x0, &(0x7f00000003c0), {0x1f}, &(0x7f00000004c0)=""/74, 0x4a, &(0x7f0000000400)=""/62, 0x0}, 0x58) perf_event_open(0x0, r1, 0x2, r0, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x9, 0x4, 0x0, 0x700, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}]}, 0x20}, 0x1, 0x7}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="be2357af9349caec", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000008009800000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) 0s ago: executing program 0 (id=1195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x4044) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x363, &(0x7f0000000340)="$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") pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1000, 0x800000000000000) splice(r5, 0x0, r9, 0x0, 0x80, 0x8) write$tun(r6, &(0x7f00000033c0)=ANY=[], 0x107c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001800)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x24272, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6e7}, 0x94) kernel console output (not intermixed with test programs): =syz.4.603 [ 165.588991][ T28] audit: type=1400 audit(2000008250.805:1017): avc: denied { name_connect } for pid=5802 comm="syz.4.603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 165.611167][ T28] audit: type=1400 audit(2000008250.875:1019): avc: denied { bind } for pid=5791 comm="syz.1.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 165.630265][ T5807] loop4: detected capacity change from 0 to 128 [ 165.631984][ T28] audit: type=1400 audit(2000008250.875:1018): avc: denied { create } for pid=5789 comm="syz.0.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.656665][ T5807] vfat: Unknown parameter 'ÿ' [ 165.798441][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.809078][ T28] audit: type=1400 audit(2000008251.085:1020): avc: denied { mount } for pid=5808 comm="syz.1.605" name="/" dev="ramfs" ino=12839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 165.895397][ T28] audit: type=1400 audit(2000008251.185:1021): avc: denied { read } for pid=5811 comm="syz.3.606" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 165.930903][ T28] audit: type=1400 audit(2000008251.215:1022): avc: denied { bind } for pid=5811 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.000085][ T28] audit: type=1400 audit(2000008251.215:1023): avc: denied { setopt } for pid=5811 comm="syz.3.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.656263][ T5824] loop0: detected capacity change from 0 to 128 [ 166.664913][ T28] audit: type=1400 audit(2000008251.955:1024): avc: denied { bind } for pid=5819 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.721200][ T28] audit: type=1400 audit(2000008251.985:1025): avc: denied { setopt } for pid=5819 comm="syz.0.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 166.768890][ T5826] tipc: Enabled bearer , priority 0 [ 166.776340][ T5826] syzkaller0: entered promiscuous mode [ 166.782110][ T5826] syzkaller0: entered allmulticast mode [ 166.801463][ T5826] tipc: Resetting bearer [ 166.817078][ T5825] tipc: Resetting bearer [ 166.839398][ T5825] tipc: Disabling bearer [ 167.339549][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 167.762524][ T5831] loop4: detected capacity change from 0 to 1024 [ 167.803196][ T5831] EXT4-fs: Ignoring removed bh option [ 168.060586][ T5844] loop3: detected capacity change from 0 to 8192 [ 168.090960][ T5831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.109146][ T5831] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.825220][ T5853] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 168.947667][ T5853] 8021q: adding VLAN 0 to HW filter on device bond2 [ 168.978277][ T1079] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 6) [ 169.006546][ T5853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5853 comm=syz.1.617 [ 169.119029][ T1079] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 169.149234][ T5854] bond2: (slave gretap2): making interface the new active one [ 169.156958][ T1079] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.156958][ T1079] [ 169.177716][ T5854] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 169.188785][ T12] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 169.204292][ T5850] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.222050][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 169.234578][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 169.234578][ T12] [ 169.258414][ T5859] loop0: detected capacity change from 0 to 512 [ 169.330984][ T3318] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 169.376075][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.379356][ T5507] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.397336][ T5507] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.500839][ T5507] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.530274][ T5507] rtc_cmos 00:00: Alarms can be up to one day in the future [ 170.561109][ T5507] rtc rtc0: __rtc_set_alarm: err=-22 [ 170.628316][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 170.628389][ T28] audit: type=1400 audit(2000008255.825:1035): avc: denied { setopt } for pid=5865 comm="syz.2.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 170.664639][ T5891] netlink: 28 bytes leftover after parsing attributes in process `syz.1.625'. [ 170.702195][ T5892] loop4: detected capacity change from 0 to 256 [ 170.725018][ T28] audit: type=1400 audit(2000008255.915:1036): avc: denied { setopt } for pid=5889 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.745884][ T5892] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 170.759426][ T28] audit: type=1400 audit(2000008256.015:1037): avc: denied { getopt } for pid=5889 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 170.852403][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.628'. [ 170.866870][ T5899] loop2: detected capacity change from 0 to 1024 [ 170.961861][ T28] audit: type=1400 audit(2000008256.245:1038): avc: denied { mount } for pid=5897 comm="syz.0.628" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.165897][ T28] audit: type=1400 audit(2000008256.245:1039): avc: denied { remount } for pid=5897 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.167564][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.198721][ T28] audit: type=1400 audit(2000008256.255:1040): avc: denied { unmount } for pid=5897 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 171.403287][ T5910] netlink: 'syz.0.630': attribute type 1 has an invalid length. [ 171.616022][ T5917] loop0: detected capacity change from 0 to 1024 [ 171.628070][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.661967][ T5916] loop3: detected capacity change from 0 to 1024 [ 171.688992][ T5917] EXT4-fs: inline encryption not supported [ 171.694984][ T5917] EXT4-fs: Ignoring removed nobh option [ 171.704534][ T5916] EXT4-fs: Ignoring removed bh option [ 171.715797][ T5917] EXT4-fs: Ignoring removed bh option [ 171.733899][ T5916] EXT4-fs: Ignoring removed bh option [ 171.768358][ T5917] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 171.768358][ T5917] [ 171.851401][ T5916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.444828][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.664656][ T5933] loop2: detected capacity change from 0 to 1024 [ 172.710094][ T5933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.744763][ T5933] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.779057][ T5933] syzkaller0: entered promiscuous mode [ 172.784804][ T5933] syzkaller0: entered allmulticast mode [ 172.946192][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 173.023428][ T28] audit: type=1400 audit(2000008258.315:1041): avc: denied { setopt } for pid=5937 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.095176][ T28] audit: type=1400 audit(2000008258.315:1042): avc: denied { write } for pid=5937 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.210236][ T28] audit: type=1400 audit(2000008258.315:1043): avc: denied { nlmsg_write } for pid=5937 comm="syz.2.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 173.301810][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.638'. [ 173.377263][ T28] audit: type=1400 audit(2000008258.665:1044): avc: denied { bind } for pid=5944 comm="syz.2.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.898392][ T5950] loop3: detected capacity change from 0 to 128 [ 174.767980][ T5957] loop3: detected capacity change from 0 to 1024 [ 174.795480][ T5957] EXT4-fs: test_dummy_encryption option not supported [ 176.284981][ T5963] syzkaller0: entered promiscuous mode [ 176.308341][ T5963] syzkaller0: entered allmulticast mode [ 176.885712][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 176.885740][ T28] audit: type=1400 audit(2000008262.105:1053): avc: denied { accept } for pid=5966 comm="syz.3.646" lport=59671 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.132193][ T28] audit: type=1400 audit(2000008262.125:1054): avc: denied { read } for pid=5966 comm="syz.3.646" lport=59671 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.273500][ T28] audit: type=1400 audit(2000008262.165:1055): avc: denied { setopt } for pid=5966 comm="syz.3.646" lport=59671 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.512951][ T28] audit: type=1400 audit(2000008262.215:1056): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 177.717403][ T5972] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 177.791748][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.936306][ T5978] bond0: (slave gretap1): making interface the new active one [ 177.944602][ T5978] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 177.984327][ T5972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5972 comm=syz.3.648 [ 178.104149][ T28] audit: type=1400 audit(2000008263.395:1057): avc: denied { create } for pid=5979 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.178279][ T28] audit: type=1400 audit(2000008263.425:1058): avc: denied { read } for pid=5979 comm="syz.3.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.326357][ T28] audit: type=1400 audit(2000008263.615:1059): avc: denied { listen } for pid=5984 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.364244][ T28] audit: type=1400 audit(2000008263.615:1060): avc: denied { accept } for pid=5984 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 178.670179][ T28] audit: type=1400 audit(2000008263.965:1061): avc: denied { ioctl } for pid=5995 comm="syz.2.656" path="socket:[14013]" dev="sockfs" ino=14013 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.823793][ T28] audit: type=1400 audit(2000008264.115:1062): avc: denied { create } for pid=6002 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 178.946403][ T6005] syzkaller0: entered promiscuous mode [ 178.960927][ T6005] syzkaller0: entered allmulticast mode [ 179.010070][ T6009] syzkaller0: entered promiscuous mode [ 179.030728][ T6009] syzkaller0: entered allmulticast mode [ 179.284097][ T6016] loop3: detected capacity change from 0 to 512 [ 179.301450][ T6016] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 179.396072][ T6024] loop0: detected capacity change from 0 to 256 [ 179.449890][ T6024] FAT-fs (loop0): Directory bread(block 64) failed [ 179.476733][ T6016] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 179.501065][ T6024] FAT-fs (loop0): Directory bread(block 65) failed [ 179.507663][ T6024] FAT-fs (loop0): Directory bread(block 66) failed [ 179.522832][ T6016] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 179.538361][ T6016] System zones: 0-2, 18-18, 34-35 [ 179.545997][ T6024] FAT-fs (loop0): Directory bread(block 67) failed [ 179.564699][ T6016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.579700][ T6024] FAT-fs (loop0): Directory bread(block 68) failed [ 179.586260][ T6024] FAT-fs (loop0): Directory bread(block 69) failed [ 179.621673][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 179.637813][ T6024] FAT-fs (loop0): Directory bread(block 70) failed [ 179.644461][ T6024] FAT-fs (loop0): Directory bread(block 71) failed [ 179.651133][ T6024] FAT-fs (loop0): Directory bread(block 72) failed [ 179.658087][ T6016] netlink: 'syz.3.666': attribute type 12 has an invalid length. [ 179.726603][ T6024] FAT-fs (loop0): Directory bread(block 73) failed [ 179.822253][ T6034] loop2: detected capacity change from 0 to 4096 [ 179.830517][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.858856][ T6034] EXT4-fs: Ignoring removed bh option [ 179.907041][ T6034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.924432][ T6034] tipc: Enabling of bearer rejected, already enabled [ 179.977295][ T6041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.673'. [ 180.003813][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.341802][ T6061] syzkaller0: entered promiscuous mode [ 180.359746][ T6061] syzkaller0: entered allmulticast mode [ 180.394994][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.401449][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.407826][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.414204][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.420650][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.427112][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.433500][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.439894][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.446279][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.452723][ T6061] tc action pedit 'at' offset 1298 out of bounds [ 180.459215][ T6061] 0: reclassify loop, rule prio 0, protocol 800 [ 180.484681][ T6064] loop0: detected capacity change from 0 to 4096 [ 180.512756][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.587806][ T6067] loop2: detected capacity change from 0 to 512 [ 180.597810][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.629176][ T6067] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.643004][ T6067] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 180.664252][ T6067] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 180.682631][ T6067] System zones: 0-2, 18-18, 34-35 [ 180.696577][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.721758][ T6067] netlink: 'syz.2.681': attribute type 12 has an invalid length. [ 180.881864][ T6073] loop3: detected capacity change from 0 to 8192 [ 180.917530][ T6073] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 180.925269][ T6073] FAT-fs (loop3): Filesystem has been set read-only [ 181.075787][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.464328][ T6087] tipc: Enabling of bearer rejected, already enabled [ 181.581371][ T6091] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 182.047940][ T6098] loop4: detected capacity change from 0 to 4096 [ 182.085569][ T6098] EXT4-fs: Ignoring removed bh option [ 182.132601][ T6098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.207574][ T6105] openvswitch: netlink: Key 23 has unexpected len 4 expected 2 [ 182.490467][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.046210][ T6116] loop3: detected capacity change from 0 to 1024 [ 183.059110][ T6116] EXT4-fs: inline encryption not supported [ 183.108485][ T6116] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.122308][ T6116] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.446323][ T857] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: block 3: comm kworker/u8:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 183.510072][ T857] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 183.532521][ T857] EXT4-fs (loop3): This should not happen!! Data will be lost [ 183.532521][ T857] [ 183.677978][ T6125] syzkaller0: entered promiscuous mode [ 183.685165][ T6125] syzkaller0: entered allmulticast mode [ 183.708701][ T6126] netlink: 'syz.1.698': attribute type 12 has an invalid length. [ 183.852724][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.700'. [ 184.010595][ T6133] syz_tun: entered promiscuous mode [ 184.049525][ T6133] bridge0: port 4(gretap0) entered blocking state [ 184.056063][ T6133] bridge0: port 4(gretap0) entered forwarding state [ 184.087886][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.107408][ T6133] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.154762][ T6133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.414098][ T6152] loop4: detected capacity change from 0 to 4096 [ 184.441318][ T6152] EXT4-fs: Ignoring removed bh option [ 184.488956][ T6152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.498384][ T857] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 184.519696][ T857] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 184.552505][ T6151] tipc: Enabling of bearer rejected, already enabled [ 184.562972][ T857] EXT4-fs (loop3): This should not happen!! Data will be lost [ 184.562972][ T857] [ 184.685094][ T3321] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 184.717806][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.743101][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.799658][ T6160] loop3: detected capacity change from 0 to 256 [ 184.895660][ T6165] loop4: detected capacity change from 0 to 2048 [ 184.906267][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 184.906286][ T28] audit: type=1400 audit(2000008270.195:1102): avc: denied { ioctl } for pid=6157 comm="syz.0.707" path="socket:[15365]" dev="sockfs" ino=15365 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.249018][ T3306] Alternate GPT is invalid, using primary GPT. [ 185.255512][ T3306] loop4: p2 p3 p7 [ 185.291518][ T6165] Alternate GPT is invalid, using primary GPT. [ 185.315424][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.711'. [ 185.319524][ T6165] loop4: p2 p3 p7 [ 185.728369][ T28] audit: type=1400 audit(2000008271.015:1103): avc: denied { map } for pid=6175 comm="syz.3.712" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 185.780647][ T6176] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 185.817277][ T6180] netlink: 14 bytes leftover after parsing attributes in process `syz.3.712'. [ 185.831711][ T28] audit: type=1400 audit(2000008271.015:1104): avc: denied { read write } for pid=6175 comm="syz.3.712" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15395 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 185.898354][ T28] audit: type=1400 audit(2000008271.055:1105): avc: denied { write } for pid=6175 comm="syz.3.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 185.979045][ T6180] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.039935][ T6180] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.061804][ T6182] loop4: detected capacity change from 0 to 4096 [ 186.078777][ T6182] EXT4-fs: Ignoring removed bh option [ 186.131592][ T6182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.185614][ T6180] .` (unregistering): Released all slaves [ 186.218345][ T5130] syz!: Port: 1 Link DOWN [ 186.222840][ T6182] tipc: Enabling of bearer rejected, already enabled [ 186.298593][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.383468][ T6188] tipc: Enabling of bearer rejected, already enabled [ 186.568400][ T6198] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 186.586923][ T6198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.602714][ T6198] bond3: (slave ip6erspan0): making interface the new active one [ 186.612055][ T6198] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 186.712310][ T6190] loop0: detected capacity change from 0 to 2048 [ 186.762325][ T6190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.879621][ T6211] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=6211 comm=syz.1.723 [ 187.331075][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.507929][ T6223] loop3: detected capacity change from 0 to 256 [ 187.654365][ T6223] FAT-fs (loop3): Directory bread(block 64) failed [ 187.661187][ T6223] FAT-fs (loop3): Directory bread(block 65) failed [ 187.667839][ T6223] FAT-fs (loop3): Directory bread(block 66) failed [ 187.674513][ T6223] FAT-fs (loop3): Directory bread(block 67) failed [ 187.681292][ T6223] FAT-fs (loop3): Directory bread(block 68) failed [ 187.688037][ T6223] FAT-fs (loop3): Directory bread(block 69) failed [ 187.694660][ T6223] FAT-fs (loop3): Directory bread(block 70) failed [ 187.701291][ T6223] FAT-fs (loop3): Directory bread(block 71) failed [ 187.708040][ T6223] FAT-fs (loop3): Directory bread(block 72) failed [ 187.714733][ T6223] FAT-fs (loop3): Directory bread(block 73) failed [ 187.885410][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'. [ 187.923420][ T6225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.727'. [ 187.949319][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'. [ 188.015456][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.728'. [ 189.218390][ T28] audit: type=1400 audit(2000008274.505:1106): avc: denied { connect } for pid=6239 comm="syz.0.732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 189.256635][ T6237] loop2: detected capacity change from 0 to 4096 [ 189.304053][ T6237] EXT4-fs: Ignoring removed bh option [ 189.361076][ T6237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.453340][ T6237] tipc: Enabling of bearer rejected, already enabled [ 189.564173][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.772428][ T6246] loop0: detected capacity change from 0 to 1024 [ 189.794593][ T6246] EXT4-fs: Ignoring removed bh option [ 189.812796][ T6249] loop2: detected capacity change from 0 to 2048 [ 189.861517][ T6249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.920355][ T6249] rtc_cmos 00:00: Alarms can be up to one day in the future [ 189.952023][ T6249] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 189.967050][ T28] audit: type=1400 audit(2000008275.235:1107): avc: denied { ioctl } for pid=6247 comm="syz.2.734" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 189.979846][ T6249] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 242 with error 28 [ 190.009280][ T6249] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.009280][ T6249] [ 190.019075][ T6249] EXT4-fs (loop2): Total free blocks count 0 [ 190.025183][ T6249] EXT4-fs (loop2): Free/Dirty block details [ 190.031203][ T6249] EXT4-fs (loop2): free_blocks=66060288 [ 190.036939][ T6249] EXT4-fs (loop2): dirty_blocks=256 [ 190.042306][ T6249] EXT4-fs (loop2): Block reservation details [ 190.048439][ T6249] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 190.071419][ T6246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.173857][ T6246] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.549543][ T857] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 190.578279][ T3314] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 190.590604][ T857] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: comm kworker/u8:6: lblock 0 mapped to illegal pblock 0 (length 6) [ 190.606692][ T857] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 190.619761][ T857] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.619761][ T857] [ 190.630020][ T857] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 190.648320][ T857] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 190.735056][ T857] EXT4-fs (loop0): This should not happen!! Data will be lost [ 190.735056][ T857] [ 190.928629][ T3322] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 190.999374][ T6266] tipc: New replicast peer: 255.255.255.255 [ 191.005918][ T6266] tipc: Enabled bearer , priority 10 [ 191.017175][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.364227][ T6269] netlink: 'syz.2.739': attribute type 2 has an invalid length. [ 192.400873][ T6269] netlink: 14 bytes leftover after parsing attributes in process `syz.2.739'. [ 193.104880][ T6275] loop0: detected capacity change from 0 to 512 [ 193.274316][ T6275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.288084][ T6275] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.368030][ T28] audit: type=1400 audit(2000008278.655:1108): avc: denied { mounton } for pid=6272 comm="syz.0.747" path="/137/bus" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.391761][ T28] audit: type=1400 audit(2000008278.685:1109): avc: denied { remount } for pid=6272 comm="syz.0.747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 193.402324][ T6281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6281 comm=syz.3.742 [ 193.486285][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.691328][ T6289] loop3: detected capacity change from 0 to 4096 [ 193.698137][ T6289] EXT4-fs: Ignoring removed bh option [ 193.734756][ T28] audit: type=1400 audit(2000008279.005:1110): avc: denied { module_load } for pid=6283 comm="syz.0.754" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=14630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 193.770078][ T6289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.779864][ T6284] Invalid ELF header magic: != ELF [ 193.812474][ T6287] tipc: Enabling of bearer rejected, already enabled [ 193.910384][ T28] audit: type=1400 audit(2000008279.145:1111): avc: denied { write } for pid=6292 comm="syz.0.745" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 193.934382][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.516395][ T6300] loop2: detected capacity change from 0 to 4096 [ 194.545727][ T6300] EXT4-fs: Ignoring removed bh option [ 194.570576][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.601877][ T6300] tipc: Enabling of bearer rejected, already enabled [ 194.658749][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.687267][ T28] audit: type=1326 audit(2000008279.975:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 194.742272][ T6305] loop0: detected capacity change from 0 to 512 [ 194.788306][ T28] audit: type=1326 audit(2000008279.975:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 194.812919][ T6305] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.839842][ T6305] FAT-fs (loop0): bogus number of FAT sectors [ 194.848313][ T6305] FAT-fs (loop0): Can't find a valid FAT filesystem [ 194.855140][ T28] audit: type=1326 audit(2000008279.975:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 194.929972][ T6308] syzkaller0: entered promiscuous mode [ 194.935522][ T6308] syzkaller0: entered allmulticast mode [ 194.958304][ T28] audit: type=1326 audit(2000008279.975:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.004084][ T6311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 195.018826][ T6311] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 195.023529][ T28] audit: type=1326 audit(2000008279.975:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.027697][ T6311] audit: backlog limit exceeded [ 195.082035][ T28] audit: type=1326 audit(2000008279.975:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.158346][ T28] audit: type=1326 audit(2000008279.975:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.208333][ T28] audit: type=1326 audit(2000008279.975:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.258293][ T28] audit: type=1326 audit(2000008279.975:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.333476][ T28] audit: type=1326 audit(2000008280.005:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.530290][ T28] audit: type=1326 audit(2000008280.005:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6304 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdb004c819 code=0x7ffc0000 [ 195.794374][ T6330] loop4: detected capacity change from 0 to 4096 [ 195.850267][ T6330] EXT4-fs: Ignoring removed bh option [ 196.131912][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.764'. [ 196.169223][ T6330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.215639][ T6330] tipc: Enabling of bearer rejected, already enabled [ 196.237728][ T6335] loop3: detected capacity change from 0 to 512 [ 196.277613][ T6335] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 196.303995][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.371829][ T6335] EXT4-fs (loop3): 1 truncate cleaned up [ 196.382224][ T6346] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6346 comm=syz.0.767 [ 196.436303][ T6335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.644759][ T6355] loop4: detected capacity change from 0 to 4096 [ 196.658778][ T6355] EXT4-fs: Ignoring removed bh option [ 196.678985][ T6355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.769808][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.789974][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.883623][ T6364] loop4: detected capacity change from 0 to 764 [ 196.996073][ T6368] loop3: detected capacity change from 0 to 512 [ 197.065136][ T6368] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 197.089048][ T6368] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 197.097818][ T6368] EXT4-fs (loop3): 1 truncate cleaned up [ 197.104191][ T6368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.393422][ T6368] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 197.523714][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.659172][ T6379] loop3: detected capacity change from 0 to 512 [ 197.689032][ T6379] EXT4-fs: Ignoring removed bh option [ 197.710079][ T6379] EXT4-fs: inline encryption not supported [ 197.768312][ T6379] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.842661][ T6379] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 197.902852][ T6379] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.776: bg 0: block 248: padding at end of block bitmap is not set [ 197.917139][ T6379] loop3: lost filesystem error report for type 5 error -117 [ 197.917455][ T6379] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.776: Failed to acquire dquot type 1 [ 197.924991][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 197.925017][ C1] EXT4-fs (loop3): last error at time 2000008283: ext4_validate_block_bitmap:441 [ 197.952194][ T6379] loop3: lost filesystem error report for type 5 error -28 [ 197.952951][ T6379] EXT4-fs (loop3): 1 truncate cleaned up [ 197.966476][ T6379] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 198.297260][ T6391] netlink: 'syz.4.778': attribute type 39 has an invalid length. [ 198.444080][ T6393] loop4: detected capacity change from 0 to 128 [ 198.490379][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 198.560070][ T6395] loop3: detected capacity change from 0 to 128 [ 199.844623][ T6404] loop3: detected capacity change from 0 to 4096 [ 199.858605][ T6404] EXT4-fs: Ignoring removed bh option [ 199.872811][ T6404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.978785][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.261413][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 200.271712][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 200.281071][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 200.290458][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 200.300043][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.784'. [ 201.148276][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 201.148295][ T28] audit: type=1400 audit(2000008286.425:1192): avc: denied { mount } for pid=6419 comm="syz.3.786" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 201.237439][ T28] audit: type=1400 audit(2000008286.425:1193): avc: denied { sqpoll } for pid=6419 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 201.485012][ T6435] loop4: detected capacity change from 0 to 512 [ 201.542746][ T6435] EXT4-fs: Ignoring removed bh option [ 201.598348][ T6435] EXT4-fs: inline encryption not supported [ 201.631903][ T6435] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.714395][ T6435] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 201.756780][ T6435] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.790: bg 0: block 248: padding at end of block bitmap is not set [ 201.805688][ T6440] siw: device registration error -23 [ 201.813738][ T6440] netlink: 14 bytes leftover after parsing attributes in process `syz.0.791'. [ 201.837144][ T6435] loop4: lost filesystem error report for type 5 error -117 [ 201.837539][ T6435] Quota error (device loop4): write_blk: dquota write failed [ 201.844962][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 201.844979][ C1] EXT4-fs (loop4): last error at time 2000008287: ext4_validate_block_bitmap:441 [ 201.868607][ T6435] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 201.878777][ T6435] EXT4-fs error (device loop4): ext4_acquire_dquot:7026: comm syz.4.790: Failed to acquire dquot type 1 [ 201.890090][ T6435] loop4: lost filesystem error report for type 5 error -28 [ 201.890663][ T6435] EXT4-fs (loop4): 1 truncate cleaned up [ 201.904136][ T6435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 202.089970][ T6440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.162686][ T28] audit: type=1400 audit(2000008287.455:1194): avc: denied { append } for pid=6441 comm="syz.3.792" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.169616][ T6440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.263741][ T6442] tmpfs: Bad value for 'mpol' [ 202.264219][ T6440] bond0 (unregistering): Released all slaves [ 202.278621][ T28] audit: type=1400 audit(2000008287.555:1195): avc: denied { mounton } for pid=6441 comm="syz.3.792" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 202.338366][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 203.032191][ T28] audit: type=1326 audit(2000008288.305:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 203.057061][ T28] audit: type=1326 audit(2000008288.305:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 203.080621][ T28] audit: type=1326 audit(2000008288.305:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 203.104202][ T28] audit: type=1326 audit(2000008288.305:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6452 comm="syz.1.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 203.212196][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.798'. [ 203.339274][ T6466] tipc: Enabling of bearer rejected, already enabled [ 203.664650][ T6474] syzkaller0: entered promiscuous mode [ 203.678470][ T6474] syzkaller0: entered allmulticast mode [ 204.538612][ T6483] netlink: 44 bytes leftover after parsing attributes in process `syz.4.806'. [ 204.892391][ T6493] siw: device registration error -23 [ 204.899683][ T6493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.809'. [ 204.989443][ T6493] bond1: (slave macvlan2): Removing an active aggregator [ 205.016644][ T6493] bond1: (slave macvlan2): Releasing backup interface [ 205.146984][ T6493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.299004][ T6493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.572917][ T6493] bond0 (unregistering): Released all slaves [ 205.720050][ T6506] loop2: detected capacity change from 0 to 4096 [ 205.931432][ T6506] EXT4-fs: Ignoring removed bh option [ 205.971792][ T6506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.058572][ T6506] tipc: Enabling of bearer rejected, already enabled [ 206.129887][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.170458][ T28] kauditd_printk_skb: 4289 callbacks suppressed [ 206.170476][ T28] audit: type=1400 audit(2000008291.465:5489): avc: denied { append } for pid=6510 comm="syz.0.814" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 206.285255][ T6513] loop4: detected capacity change from 0 to 512 [ 206.310707][ T6513] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 206.344495][ T6511] infiniband syz2: set down [ 206.353870][ T6513] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 206.368370][ T6511] infiniband syz2: added syzkaller0 [ 206.379668][ T6513] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.816: bad orphan inode 4 [ 206.399236][ T6513] loop4: lost filesystem error report for type 5 error -117 [ 206.399378][ T6513] EXT4-fs (loop4): 1 orphan inode deleted [ 206.412834][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 206.412865][ C0] EXT4-fs (loop4): initial error at time 2000008291: ext4_orphan_get:1423 [ 206.412895][ C0] EXT4-fs (loop4): last error at time 2000008291: ext4_orphan_get:1423 [ 206.461765][ T6511] RDS/IB: syz2: added [ 206.465901][ T6511] smc: adding ib device syz2 with port count 1 [ 206.480820][ T6511] smc: ib device syz2 port 1 has no pnetid [ 206.510040][ T6513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.689952][ T6509] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 208.393822][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.444878][ T6531] loop4: detected capacity change from 0 to 128 [ 208.569210][ T6531] bio_check_eod: 2 callbacks suppressed [ 208.569227][ T6531] syz.4.820: attempt to access beyond end of device [ 208.569227][ T6531] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 208.608406][ T6531] syz.4.820: attempt to access beyond end of device [ 208.608406][ T6531] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 208.626394][ T857] smc: removing ib device syz2 [ 208.702533][ T6531] syz.4.820: attempt to access beyond end of device [ 208.702533][ T6531] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 208.750213][ T6527] autofs4:pid:6527:validate_dev_ioctl: path string terminator missing for cmd(0xc018937b) [ 208.776824][ T6531] syz.4.820: attempt to access beyond end of device [ 208.776824][ T6531] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 208.790502][ T6531] syz.4.820: attempt to access beyond end of device [ 208.790502][ T6531] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 208.840154][ T6531] syz.4.820: attempt to access beyond end of device [ 208.840154][ T6531] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 208.840214][ T6531] syz.4.820: attempt to access beyond end of device [ 208.840214][ T6531] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 208.840261][ T6531] syz.4.820: attempt to access beyond end of device [ 208.840261][ T6531] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 208.840305][ T6531] syz.4.820: attempt to access beyond end of device [ 208.840305][ T6531] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 208.840394][ T6531] syz.4.820: attempt to access beyond end of device [ 208.840394][ T6531] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 209.130660][ T6548] ip6gre1: entered promiscuous mode [ 209.136376][ T6548] ip6gre1: entered allmulticast mode [ 209.143214][ T857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.152213][ T857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.159386][ T6546] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.168336][ T5507] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.281198][ T6551] tipc: Enabling of bearer rejected, already enabled [ 209.465841][ T6565] lo speed is unknown, defaulting to 1000 [ 209.471926][ T6565] lo speed is unknown, defaulting to 1000 [ 209.478131][ T6565] lo speed is unknown, defaulting to 1000 [ 209.486039][ T6565] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 209.500057][ T6565] lo speed is unknown, defaulting to 1000 [ 209.506530][ T6565] lo speed is unknown, defaulting to 1000 [ 209.513352][ T6565] lo speed is unknown, defaulting to 1000 [ 209.520191][ T6565] lo speed is unknown, defaulting to 1000 [ 209.526590][ T6565] lo speed is unknown, defaulting to 1000 [ 209.794303][ T6562] syzkaller0: entered promiscuous mode [ 209.804978][ T6559] xt_hashlimit: size too large, truncated to 1048576 [ 209.856726][ T6562] syzkaller0: entered allmulticast mode [ 209.899636][ T6569] loop2: detected capacity change from 0 to 512 [ 209.918461][ T5507] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 209.967102][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.3.829'. [ 209.998335][ T5507] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 210.010413][ T6569] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 210.036325][ T6569] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 210.086375][ T6569] EXT4-fs (loop2): 1 truncate cleaned up [ 210.092788][ T6569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.156721][ T6569] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 210.183239][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 210.358721][ T6574] lo speed is unknown, defaulting to 1000 [ 210.379988][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.484802][ T6583] tipc: New replicast peer: 255.255.255.255 [ 210.485316][ T6583] tipc: Enabled bearer , priority 10 [ 210.832397][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 213.038315][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 213.401361][ T6609] tipc: Enabling of bearer rejected, already enabled [ 213.539884][ T28] audit: type=1400 audit(2000008298.835:5490): avc: denied { bind } for pid=6610 comm="syz.3.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.565428][ T6611] netlink: 'syz.3.844': attribute type 10 has an invalid length. [ 214.040108][ T6611] netlink: 2 bytes leftover after parsing attributes in process `syz.3.844'. [ 214.052381][ T6611] hsr0: entered promiscuous mode [ 214.060420][ T6611] bridge0: port 3(hsr0) entered blocking state [ 214.068699][ T6611] bridge0: port 3(hsr0) entered disabled state [ 214.078080][ T6611] hsr0: entered allmulticast mode [ 214.129419][ T6611] hsr_slave_0: entered allmulticast mode [ 214.322531][ T6611] hsr_slave_1: entered allmulticast mode [ 214.456170][ T6621] loop3: detected capacity change from 0 to 128 [ 214.533372][ T28] audit: type=1400 audit(2000008299.625:5491): avc: denied { read } for pid=6615 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.552739][ T28] audit: type=1400 audit(2000008299.735:5492): avc: denied { ioctl } for pid=6615 comm="syz.1.845" path="socket:[15231]" dev="sockfs" ino=15231 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 214.576726][ T6624] bio_check_eod: 19 callbacks suppressed [ 214.576788][ T6624] syz.3.846: attempt to access beyond end of device [ 214.576788][ T6624] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 214.620897][ T6629] loop2: detected capacity change from 0 to 512 [ 214.642197][ T6629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.689457][ T6629] EXT4-fs (loop2): 1 truncate cleaned up [ 214.698323][ T6629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.718851][ T6624] syz.3.846: attempt to access beyond end of device [ 214.718851][ T6624] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 214.749846][ T6624] syz.3.846: attempt to access beyond end of device [ 214.749846][ T6624] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 214.783709][ T28] audit: type=1400 audit(2000008300.045:5493): avc: denied { append } for pid=6628 comm="syz.2.849" path="/173/file2/pids.current" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 214.833455][ T6624] syz.3.846: attempt to access beyond end of device [ 214.833455][ T6624] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 214.885636][ T6624] syz.3.846: attempt to access beyond end of device [ 214.885636][ T6624] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 214.910203][ T28] audit: type=1400 audit(2000008300.165:5494): avc: denied { create } for pid=6628 comm="syz.2.849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 214.952214][ T6624] syz.3.846: attempt to access beyond end of device [ 214.952214][ T6624] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 214.990577][ T28] audit: type=1400 audit(2000008300.225:5495): avc: denied { map } for pid=6628 comm="syz.2.849" path="/173/file2/pids.current" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.016317][ T6624] syz.3.846: attempt to access beyond end of device [ 215.016317][ T6624] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 215.058382][ T6624] syz.3.846: attempt to access beyond end of device [ 215.058382][ T6624] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 215.099466][ T6624] syz.3.846: attempt to access beyond end of device [ 215.099466][ T6624] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 215.141540][ T6624] syz.3.846: attempt to access beyond end of device [ 215.141540][ T6624] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 215.286230][ T6639] loop3: detected capacity change from 0 to 1764 [ 215.498412][ T28] audit: type=1400 audit(2000008300.785:5496): avc: denied { load_policy } for pid=6640 comm="syz.3.851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 215.603838][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.799880][ T6647] loop0: detected capacity change from 0 to 128 [ 215.885499][ T6650] loop4: detected capacity change from 0 to 256 [ 215.966080][ T6641] SELinux: failed to load policy [ 216.052587][ T6650] FAT-fs (loop4): Directory bread(block 64) failed [ 216.059372][ T6650] FAT-fs (loop4): Directory bread(block 65) failed [ 216.066077][ T6650] FAT-fs (loop4): Directory bread(block 66) failed [ 216.072674][ T6650] FAT-fs (loop4): Directory bread(block 67) failed [ 216.079492][ T6650] FAT-fs (loop4): Directory bread(block 68) failed [ 216.086057][ T6650] FAT-fs (loop4): Directory bread(block 69) failed [ 216.092867][ T6650] FAT-fs (loop4): Directory bread(block 70) failed [ 216.099493][ T6650] FAT-fs (loop4): Directory bread(block 71) failed [ 216.106377][ T6650] FAT-fs (loop4): Directory bread(block 72) failed [ 216.113020][ T6650] FAT-fs (loop4): Directory bread(block 73) failed [ 216.309672][ T6651] loop2: detected capacity change from 0 to 512 [ 216.419736][ T6651] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 216.456500][ T6651] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 216.734513][ T6651] EXT4-fs (loop2): 1 truncate cleaned up [ 216.771192][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.855'. [ 216.797348][ T6651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.948852][ T6657] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 217.018493][ T6660] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=6660 comm=syz.2.853 [ 217.126680][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.856'. [ 217.204614][ T6670] loop0: detected capacity change from 0 to 512 [ 217.229304][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.244690][ T6672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'. [ 217.253925][ T6670] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 217.274171][ T6668] xt_CT: No such helper "snmp_trap" [ 217.280802][ T6670] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 217.289750][ T6670] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.860: bad orphan inode 4 [ 217.308489][ T6670] loop0: lost filesystem error report for type 5 error -117 [ 217.308681][ T6670] EXT4-fs (loop0): 1 orphan inode deleted [ 217.321927][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 217.321950][ C0] EXT4-fs (loop0): initial error at time 2000008302: ext4_orphan_get:1423 [ 217.321970][ C0] EXT4-fs (loop0): last error at time 2000008302: ext4_orphan_get:1423 [ 217.384165][ T6670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.788628][ T28] audit: type=1326 audit(2000008303.065:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 217.945187][ T6681] loop4: detected capacity change from 0 to 512 [ 218.862234][ T28] audit: type=1326 audit(2000008303.065:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 218.885731][ T28] audit: type=1326 audit(2000008303.065:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 218.954030][ T28] audit: type=1326 audit(2000008303.075:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 218.977816][ T28] audit: type=1326 audit(2000008303.075:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 219.048369][ T28] audit: type=1326 audit(2000008303.075:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 219.120791][ T28] audit: type=1326 audit(2000008303.075:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 219.195179][ T28] audit: type=1326 audit(2000008303.075:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 219.268484][ T28] audit: type=1326 audit(2000008303.105:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 219.322292][ T28] audit: type=1326 audit(2000008303.115:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 219.366416][ T28] audit: type=1326 audit(2000008303.115:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6680 comm="syz.4.864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e988bc819 code=0x7ffc0000 [ 220.050676][ T6698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.870'. [ 220.098135][ T6700] loop2: detected capacity change from 0 to 512 [ 220.117187][ T6700] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 220.153506][ T6700] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 220.170968][ T6700] EXT4-fs (loop2): 1 truncate cleaned up [ 220.177238][ T6700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.211986][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.264775][ T6705] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 220.284587][ T6705] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=6705 comm=syz.2.871 [ 220.462106][ T6710] loop3: detected capacity change from 0 to 512 [ 220.630715][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 220.638458][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.651020][ T6710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.749799][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.066817][ T6722] netlink: 'syz.2.874': attribute type 10 has an invalid length. [ 221.075494][ T6722] netlink: 2 bytes leftover after parsing attributes in process `syz.2.874'. [ 221.085774][ T6722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.096741][ T6722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.107814][ T6722] hsr0: entered promiscuous mode [ 221.119329][ T6722] bridge0: port 3(hsr0) entered blocking state [ 221.126095][ T6722] bridge0: port 3(hsr0) entered disabled state [ 221.216394][ T6722] hsr0: entered allmulticast mode [ 221.227170][ T6722] hsr_slave_0: entered allmulticast mode [ 221.237711][ T6722] hsr_slave_1: entered allmulticast mode [ 221.258885][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.876'. [ 221.285579][ T6726] lo speed is unknown, defaulting to 1000 [ 221.384627][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.888'. [ 221.409950][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.179453][ T6740] siw: device registration error -23 [ 222.588638][ T6742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 222.718738][ T6743] lo speed is unknown, defaulting to 1000 [ 225.300540][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 225.312648][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 225.322719][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 225.332359][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 225.341453][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'. [ 225.480657][ T6775] loop2: detected capacity change from 0 to 512 [ 225.489898][ T6776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'. [ 225.539767][ T6775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.831902][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.893'. [ 225.856034][ T6779] loop4: detected capacity change from 0 to 164 [ 225.869106][ T6779] ISOFS: unable to read i-node block [ 225.874446][ T6779] isofs_fill_super: get root inode failed [ 225.957825][ T6779] ipip0: entered promiscuous mode [ 226.029406][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 226.029493][ T28] audit: type=1400 audit(2000008311.325:5590): avc: denied { read } for pid=6787 comm="syz.0.895" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 226.090457][ T28] audit: type=1400 audit(2000008311.325:5591): avc: denied { open } for pid=6787 comm="syz.0.895" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 226.152161][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.896'. [ 226.349494][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.373952][ T6800] lo speed is unknown, defaulting to 1000 [ 226.436552][ T6803] loop2: detected capacity change from 0 to 128 [ 226.638889][ T28] audit: type=1400 audit(2000008311.935:5592): avc: denied { connect } for pid=6806 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 227.123062][ T6811] loop3: detected capacity change from 0 to 128 [ 227.129460][ T28] audit: type=1400 audit(2000008312.415:5593): avc: denied { map } for pid=6810 comm="syz.3.902" path="socket:[16564]" dev="sockfs" ino=16564 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.199011][ T28] audit: type=1326 audit(2000008312.495:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 227.224855][ T6817] bio_check_eod: 23 callbacks suppressed [ 227.224874][ T6817] syz.3.902: attempt to access beyond end of device [ 227.224874][ T6817] loop3: rw=2049, sector=145, nr_sectors = 344 limit=128 [ 227.254675][ T6817] syz.3.902: attempt to access beyond end of device [ 227.254675][ T6817] loop3: rw=2049, sector=497, nr_sectors = 8 limit=128 [ 227.276821][ T28] audit: type=1326 audit(2000008312.495:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 227.321877][ T6817] syz.3.902: attempt to access beyond end of device [ 227.321877][ T6817] loop3: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 227.335313][ T28] audit: type=1326 audit(2000008312.495:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 227.335421][ T28] audit: type=1326 audit(2000008312.515:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 227.368744][ T6817] syz.3.902: attempt to access beyond end of device [ 227.368744][ T6817] loop3: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 227.399000][ T6819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6819 comm=syz.1.903 [ 227.448868][ T6821] loop2: detected capacity change from 0 to 512 [ 227.467967][ T6821] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 227.477361][ T6821] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 227.480534][ T28] audit: type=1326 audit(2000008312.535:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbcf11fd04e code=0x7ffc0000 [ 227.509906][ T6821] EXT4-fs (loop2): 1 truncate cleaned up [ 227.525555][ T6817] syz.3.902: attempt to access beyond end of device [ 227.525555][ T6817] loop3: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 227.538321][ T28] audit: type=1326 audit(2000008312.535:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6814 comm="syz.1.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fbcf123c819 code=0x7ffc0000 [ 227.572181][ T6821] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.605024][ T6811] syz.3.902: attempt to access beyond end of device [ 227.605024][ T6811] loop3: rw=8388608, sector=150, nr_sectors = 1 limit=128 [ 227.648298][ T6817] syz.3.902: attempt to access beyond end of device [ 227.648298][ T6817] loop3: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 227.663657][ T6817] syz.3.902: attempt to access beyond end of device [ 227.663657][ T6817] loop3: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 227.687199][ T6826] syz.3.902: attempt to access beyond end of device [ 227.687199][ T6826] loop3: rw=8388608, sector=145, nr_sectors = 1 limit=128 [ 227.724408][ T6817] syz.3.902: attempt to access beyond end of device [ 227.724408][ T6817] loop3: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 227.726021][ T6833] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 227.752585][ T6828] loop0: detected capacity change from 0 to 164 [ 227.760595][ T6828] ISOFS: unable to read i-node block [ 227.766016][ T6828] isofs_fill_super: get root inode failed [ 227.789062][ T6826] buffer_io_error: 7691 callbacks suppressed [ 227.789080][ T6826] Buffer I/O error on dev loop3, logical block 145, async page read [ 227.805646][ T6835] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=6835 comm=syz.2.905 [ 227.836203][ T6826] Buffer I/O error on dev loop3, logical block 146, async page read [ 227.856230][ T6826] Buffer I/O error on dev loop3, logical block 147, async page read [ 227.878345][ T6826] Buffer I/O error on dev loop3, logical block 148, async page read [ 227.900188][ T6828] ipip0: entered promiscuous mode [ 227.900625][ T6826] Buffer I/O error on dev loop3, logical block 149, async page read [ 227.926520][ T6826] Buffer I/O error on dev loop3, logical block 150, async page read [ 227.937006][ T6826] Buffer I/O error on dev loop3, logical block 151, async page read [ 227.946201][ T6826] Buffer I/O error on dev loop3, logical block 152, async page read [ 227.989367][ T6840] loop3: detected capacity change from 0 to 128 [ 228.001657][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.010927][ T6838] loop0: detected capacity change from 0 to 1764 [ 228.136676][ T6842] loop2: detected capacity change from 0 to 4096 [ 228.218559][ T6842] EXT4-fs: Ignoring removed bh option [ 228.237660][ T6842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.252658][ T6848] loop3: detected capacity change from 0 to 128 [ 228.404117][ T6853] FAT-fs (loop0): Directory bread(block 64) failed [ 228.410869][ T6853] FAT-fs (loop0): Directory bread(block 65) failed [ 228.417688][ T6853] FAT-fs (loop0): Directory bread(block 66) failed [ 228.424260][ T6853] FAT-fs (loop0): Directory bread(block 67) failed [ 228.430916][ T6853] FAT-fs (loop0): Directory bread(block 68) failed [ 228.437483][ T6853] FAT-fs (loop0): Directory bread(block 69) failed [ 228.444218][ T6853] FAT-fs (loop0): Directory bread(block 70) failed [ 228.450833][ T6853] FAT-fs (loop0): Directory bread(block 71) failed [ 228.457484][ T6853] FAT-fs (loop0): Directory bread(block 72) failed [ 228.464123][ T6853] FAT-fs (loop0): Directory bread(block 73) failed [ 228.713987][ T6842] tipc: Enabling of bearer rejected, already enabled [ 229.153215][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.092835][ T6879] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 230.101067][ T6879] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 230.110018][ T6879] EXT4-fs (loop4): 1 truncate cleaned up [ 230.116134][ T6879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.297194][ T6888] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 230.478277][ T6888] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=6888 comm=syz.4.921 [ 230.573374][ T6890] bridge_slave_0: left allmulticast mode [ 230.579244][ T6890] bridge_slave_0: left promiscuous mode [ 230.634775][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.719951][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.769428][ T6890] bridge_slave_1: left allmulticast mode [ 230.812983][ T6890] bridge_slave_1: left promiscuous mode [ 230.850419][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.904009][ T6890] bond0: (slave bond_slave_0): Releasing backup interface [ 230.956911][ T6890] bond0: (slave bond_slave_1): Releasing backup interface [ 230.996642][ T6890] team0: Port device team_slave_0 removed [ 231.037929][ T6890] team0: Port device team_slave_1 removed [ 231.068465][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.142665][ T6890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.171856][ T6890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.439432][ T6906] set_capacity_and_notify: 2 callbacks suppressed [ 231.439449][ T6906] loop2: detected capacity change from 0 to 512 [ 231.507162][ T6906] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 231.533895][ T6906] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 231.565786][ T6906] EXT4-fs (loop2): 1 truncate cleaned up [ 231.576869][ T6906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.612260][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 231.691963][ T6910] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 231.796004][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.290552][ T6918] loop2: detected capacity change from 0 to 256 [ 232.315546][ T6918] FAT-fs (loop2): Directory bread(block 64) failed [ 232.322274][ T6918] FAT-fs (loop2): Directory bread(block 65) failed [ 232.328889][ T6918] FAT-fs (loop2): Directory bread(block 66) failed [ 232.335557][ T6918] FAT-fs (loop2): Directory bread(block 67) failed [ 232.342320][ T6918] FAT-fs (loop2): Directory bread(block 68) failed [ 232.348947][ T6918] FAT-fs (loop2): Directory bread(block 69) failed [ 232.355950][ T6918] FAT-fs (loop2): Directory bread(block 70) failed [ 232.362685][ T6918] FAT-fs (loop2): Directory bread(block 71) failed [ 232.369466][ T6918] FAT-fs (loop2): Directory bread(block 72) failed [ 232.376147][ T6918] FAT-fs (loop2): Directory bread(block 73) failed [ 232.975203][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 232.975230][ T28] audit: type=1400 audit(2000008318.265:5608): avc: denied { name_connect } for pid=6920 comm="syz.0.944" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 233.904705][ T6928] loop3: detected capacity change from 0 to 4096 [ 233.937901][ T6928] EXT4-fs: Ignoring removed bh option [ 234.161061][ T6938] netlink: 104 bytes leftover after parsing attributes in process `syz.4.937'. [ 234.170572][ T28] audit: type=1400 audit(2000008319.455:5609): avc: denied { watch watch_reads } for pid=6932 comm="syz.4.937" path="/proc/598" dev="proc" ino=17756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 234.196753][ T6928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.266036][ T6928] tipc: Enabling of bearer rejected, already enabled [ 234.403341][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.939'. [ 234.468825][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.782130][ T28] audit: type=1400 audit(2000008320.075:5610): avc: denied { shutdown } for pid=6949 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 234.846218][ T6947] lo speed is unknown, defaulting to 1000 [ 235.350578][ T6958] loop2: detected capacity change from 0 to 1024 [ 235.585108][ T6954] lo speed is unknown, defaulting to 1000 [ 235.703613][ T6958] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 235.826863][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 235.846629][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 235.858811][ T6958] System zones: 0-1, 3-36 [ 235.878248][ T6958] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.945: bad orphan inode 134217728 [ 235.887018][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 235.893114][ T6958] loop2: lost filesystem error report for type 5 error -117 [ 235.912817][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 235.948373][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 235.966108][ T6958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.981851][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 235.992296][ T6947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.942'. [ 236.215317][ T6970] SELinux: failed to load policy [ 236.232825][ T6974] syzkaller0: entered promiscuous mode [ 236.238509][ T28] audit: type=1400 audit(2000008321.525:5611): avc: denied { ioctl } for pid=6973 comm="syz.0.949" path="socket:[16761]" dev="sockfs" ino=16761 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.276017][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.278962][ T6974] syzkaller0: entered allmulticast mode [ 236.295293][ T6975] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 236.494256][ T6979] loop4: detected capacity change from 0 to 4096 [ 236.511713][ T6979] EXT4-fs: Ignoring removed bh option [ 236.517932][ T6980] loop2: detected capacity change from 0 to 512 [ 236.537629][ T6979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.541079][ T6982] netlink: 'syz.3.952': attribute type 27 has an invalid length. [ 236.634061][ T6980] FAT-fs (loop2): Directory bread(block 199916) failed [ 236.641099][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.718326][ T6980] FAT-fs (loop2): Directory bread(block 199917) failed [ 236.727709][ T6980] FAT-fs (loop2): Directory bread(block 199918) failed [ 236.749197][ T6982] bridge0: left allmulticast mode [ 236.764211][ T6980] FAT-fs (loop2): Directory bread(block 199919) failed [ 236.802719][ T6980] FAT-fs (loop2): Directory bread(block 199920) failed [ 236.834462][ T6980] FAT-fs (loop2): Directory bread(block 199921) failed [ 236.850090][ T6980] FAT-fs (loop2): Directory bread(block 199922) failed [ 236.876184][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.879867][ T6980] FAT-fs (loop2): Directory bread(block 199923) failed [ 236.907018][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.981208][ T6982] tipc: Resetting bearer [ 237.015701][ T6982] erspan1: left allmulticast mode [ 237.042857][ T6982] bond3: left promiscuous mode [ 237.063107][ T6985] tipc: Enabling of bearer rejected, already enabled [ 237.153564][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.165960][ T6984] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.208597][ T6984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.261612][ T6986] __nla_validate_parse: 13 callbacks suppressed [ 237.261709][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.952'. [ 237.392009][ T5684] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.402359][ T5684] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.423823][ T5684] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.438823][ T5684] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.086641][ T6974] lo speed is unknown, defaulting to 1000 [ 238.556876][ T5684] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.565441][ T5684] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.574263][ T5684] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.582871][ T5684] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.958435][ T7006] loop3: detected capacity change from 0 to 512 [ 239.027477][ T7005] vlan2: entered promiscuous mode [ 239.077373][ T7005] bridge0: entered promiscuous mode [ 239.101686][ T7006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.455625][ T7017] loop4: detected capacity change from 0 to 128 [ 239.574897][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.585832][ T7017] bio_check_eod: 38 callbacks suppressed [ 239.585851][ T7017] syz.4.962: attempt to access beyond end of device [ 239.585851][ T7017] loop4: rw=2049, sector=145, nr_sectors = 344 limit=128 [ 239.593891][ T7011] ip6gre1: entered allmulticast mode [ 239.609083][ T7017] syz.4.962: attempt to access beyond end of device [ 239.609083][ T7017] loop4: rw=2049, sector=497, nr_sectors = 8 limit=128 [ 239.629047][ T28] audit: type=1400 audit(2000008324.925:5612): avc: denied { ioctl } for pid=7012 comm="syz.2.961" path="socket:[16815]" dev="sockfs" ino=16815 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 239.657103][ T7017] syz.4.962: attempt to access beyond end of device [ 239.657103][ T7017] loop4: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 239.683341][ T7017] syz.4.962: attempt to access beyond end of device [ 239.683341][ T7017] loop4: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 239.698830][ T7022] syz.4.962: attempt to access beyond end of device [ 239.698830][ T7022] loop4: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 239.713544][ T7017] syz.4.962: attempt to access beyond end of device [ 239.713544][ T7017] loop4: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 239.727410][ T7022] syz.4.962: attempt to access beyond end of device [ 239.727410][ T7022] loop4: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 239.748110][ T7014] syzkaller0: entered promiscuous mode [ 239.753876][ T7014] syzkaller0: entered allmulticast mode [ 239.768598][ T7017] syz.4.962: attempt to access beyond end of device [ 239.768598][ T7017] loop4: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 239.812825][ T7017] syz.4.962: attempt to access beyond end of device [ 239.812825][ T7017] loop4: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 239.830338][ T7026] loop3: detected capacity change from 0 to 4096 [ 239.838124][ T5684] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.854845][ T7026] EXT4-fs: Ignoring removed bh option [ 239.886224][ T7017] syz.4.962: attempt to access beyond end of device [ 239.886224][ T7017] loop4: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 239.906731][ T7022] Buffer I/O error on dev loop4, logical block 145, async page read [ 239.915103][ T7022] Buffer I/O error on dev loop4, logical block 146, async page read [ 239.923390][ T7022] Buffer I/O error on dev loop4, logical block 147, async page read [ 239.933401][ T7026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.952147][ T7022] Buffer I/O error on dev loop4, logical block 148, async page read [ 239.964025][ T7022] Buffer I/O error on dev loop4, logical block 149, async page read [ 239.972181][ T7022] Buffer I/O error on dev loop4, logical block 150, async page read [ 239.980386][ T7022] Buffer I/O error on dev loop4, logical block 151, async page read [ 239.988505][ T7022] Buffer I/O error on dev loop4, logical block 152, async page read [ 239.996971][ T7022] Buffer I/O error on dev loop4, logical block 145, async page read [ 240.005342][ T7022] Buffer I/O error on dev loop4, logical block 146, async page read [ 240.083185][ T7026] tipc: Enabling of bearer rejected, already enabled [ 240.255023][ T7032] loop2: detected capacity change from 0 to 512 [ 240.400294][ T7032] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 240.413616][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.439519][ T7032] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 240.480786][ T7032] EXT4-fs (loop2): 1 truncate cleaned up [ 240.487920][ T7032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.588798][ T7036] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 240.639656][ T7036] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7036 comm=syz.2.965 [ 240.700175][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.966'. [ 240.767836][ T28] audit: type=1326 audit(2000008326.055:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 240.803680][ T28] audit: type=1326 audit(2000008326.055:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 240.827431][ T28] audit: type=1326 audit(2000008326.055:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 240.851198][ T28] audit: type=1326 audit(2000008326.065:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 240.909127][ T28] audit: type=1326 audit(2000008326.085:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 240.938019][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.970872][ T7046] loop3: detected capacity change from 0 to 512 [ 241.024850][ T7046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.043616][ T28] audit: type=1326 audit(2000008326.085:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 241.182661][ T7046] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.969: invalid indirect mapped block 4294967295 (level 0) [ 241.259699][ T28] audit: type=1326 audit(2000008326.085:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 241.295744][ T7046] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 241.298261][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 241.315472][ C1] EXT4-fs (loop3): initial error at time 2000008326: ext4_free_branches:1023: inode 16 [ 241.326049][ C1] EXT4-fs (loop3): last error at time 2000008326: ext4_free_branches:1023: inode 16 [ 241.374434][ T7046] EXT4-fs (loop3): Remounting filesystem read-only [ 241.398329][ T28] audit: type=1326 audit(2000008326.145:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 241.434233][ T7046] EXT4-fs (loop3): 1 orphan inode deleted [ 241.453051][ T28] audit: type=1326 audit(2000008326.145:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7045 comm="syz.3.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x7ffc0000 [ 241.459104][ T7046] EXT4-fs (loop3): 1 truncate cleaned up [ 241.489889][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.613841][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.628034][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 241.757291][ T7071] netlink: 277 bytes leftover after parsing attributes in process `syz.2.974'. [ 241.769377][ T7071] 9p: Bad value for 'wfdno' [ 242.283370][ T7074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.976'. [ 242.545055][ T7076] bridge0: entered promiscuous mode [ 242.552203][ T7076] vlan0: entered promiscuous mode [ 242.688427][ T7079] netlink: 28 bytes leftover after parsing attributes in process `syz.2.979'. [ 243.006198][ T7089] lo speed is unknown, defaulting to 1000 [ 243.569086][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.578811][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.587869][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.596956][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.606194][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.615411][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.624454][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.633572][ T7089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.982'. [ 243.782802][ T7101] loop0: detected capacity change from 0 to 512 [ 243.802955][ T7101] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.985: inode has both inline data and extents flags [ 243.816351][ T7097] syzkaller0: entered promiscuous mode [ 243.828825][ T7097] syzkaller0: entered allmulticast mode [ 243.841886][ T7101] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 243.844617][ T7101] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.985: couldn't read orphan inode 15 (err -117) [ 243.853991][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 243.854009][ C0] EXT4-fs (loop0): initial error at time 2000008329: ext4_orphan_get:1397: inode 15 [ 243.854053][ C0] EXT4-fs (loop0): last error at time 2000008329: ext4_orphan_get:1397: inode 15 [ 243.978316][ T7101] loop0: lost filesystem error report for type 5 error -117 [ 243.980400][ T7101] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.069000][ T7101] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 244.198741][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.318370][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 244.325723][ T7119] lo speed is unknown, defaulting to 1000 [ 244.710239][ T7156] loop0: detected capacity change from 0 to 128 [ 244.756097][ T7152] lo speed is unknown, defaulting to 1000 [ 244.772174][ T7154] tipc: Enabling of bearer rejected, already enabled [ 244.784108][ T7158] bio_check_eod: 14527 callbacks suppressed [ 244.784128][ T7158] syz.0.998: attempt to access beyond end of device [ 244.784128][ T7158] loop0: rw=2049, sector=145, nr_sectors = 344 limit=128 [ 244.830975][ T7158] syz.0.998: attempt to access beyond end of device [ 244.830975][ T7158] loop0: rw=2049, sector=497, nr_sectors = 8 limit=128 [ 244.905918][ T7158] syz.0.998: attempt to access beyond end of device [ 244.905918][ T7158] loop0: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 244.930033][ T7156] syz.0.998: attempt to access beyond end of device [ 244.930033][ T7156] loop0: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 244.956438][ T7158] syz.0.998: attempt to access beyond end of device [ 244.956438][ T7158] loop0: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 245.038965][ T7158] syz.0.998: attempt to access beyond end of device [ 245.038965][ T7158] loop0: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 245.126167][ T7156] syz.0.998: attempt to access beyond end of device [ 245.126167][ T7156] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 245.473870][ T7156] syz.0.998: attempt to access beyond end of device [ 245.473870][ T7156] loop0: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 245.651888][ T7158] syz.0.998: attempt to access beyond end of device [ 245.651888][ T7158] loop0: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 245.767449][ T7166] syz.0.998: attempt to access beyond end of device [ 245.767449][ T7166] loop0: rw=8388608, sector=150, nr_sectors = 1 limit=128 [ 246.069731][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 246.069747][ T28] audit: type=1400 audit(2000008331.365:5700): avc: denied { execute_no_trans } for pid=7174 comm="syz.3.1002" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 246.342620][ T28] audit: type=1326 audit(2000008331.635:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fa7d46597 code=0x7ffc0000 [ 246.373623][ T28] audit: type=1326 audit(2000008331.665:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6fa7cedb99 code=0x7ffc0000 [ 246.398680][ T28] audit: type=1326 audit(2000008331.665:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fa7d46597 code=0x7ffc0000 [ 246.422993][ T28] audit: type=1326 audit(2000008331.665:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6fa7cedb99 code=0x7ffc0000 [ 246.447193][ T28] audit: type=1326 audit(2000008331.665:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fa7d46597 code=0x7ffc0000 [ 246.471195][ T28] audit: type=1326 audit(2000008331.665:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6fa7cedb99 code=0x7ffc0000 [ 246.495700][ T28] audit: type=1326 audit(2000008331.665:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fa7d46597 code=0x7ffc0000 [ 246.520152][ T28] audit: type=1326 audit(2000008331.665:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6fa7cedb99 code=0x7ffc0000 [ 246.544209][ T28] audit: type=1326 audit(2000008331.665:5709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7185 comm="syz.2.1007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6fa7d46597 code=0x7ffc0000 [ 246.726572][ T7190] loop0: detected capacity change from 0 to 512 [ 246.771875][ T7190] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 246.786821][ T7190] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 246.846714][ T7190] EXT4-fs (loop0): 1 truncate cleaned up [ 246.858300][ T7190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.007843][ T7194] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 247.094671][ T7197] loop4: detected capacity change from 0 to 4096 [ 247.102530][ T7197] EXT4-fs: Ignoring removed bh option [ 247.128634][ T7197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.181398][ T7197] tipc: Enabling of bearer rejected, already enabled [ 247.212025][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.293017][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.347495][ T7205] lo speed is unknown, defaulting to 1000 [ 248.682321][ T7217] loop0: detected capacity change from 0 to 512 [ 248.794329][ T7219] __nla_validate_parse: 35 callbacks suppressed [ 248.794348][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1017'. [ 249.165842][ T7232] lo speed is unknown, defaulting to 1000 [ 249.840910][ T7239] loop3: detected capacity change from 0 to 4096 [ 249.847883][ T7239] EXT4-fs: Ignoring removed bh option [ 249.890204][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.964856][ T7239] tipc: Enabling of bearer rejected, already enabled [ 250.968892][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.651341][ T7254] loop3: detected capacity change from 0 to 4096 [ 251.658708][ T7254] EXT4-fs: Ignoring removed bh option [ 251.687697][ T7254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.205552][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.432688][ T7266] syzkaller0: entered promiscuous mode [ 253.278354][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.418408][ T7266] syzkaller0: entered allmulticast mode [ 253.622828][ T7271] bridge0: entered promiscuous mode [ 253.662449][ T7271] vlan2: entered promiscuous mode [ 254.026579][ T7278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1035'. [ 255.399968][ T7290] GUP no longer grows the stack in syz.4.1038 (7290): 200000006000-200000009000 (200000004000) [ 255.410432][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.4.1038 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.410487][ T7290] Tainted: [W]=WARN [ 255.410497][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 255.410515][ T7290] Call Trace: [ 255.410522][ T7290] [ 255.410534][ T7290] __dump_stack+0x1d/0x30 [ 255.410563][ T7290] dump_stack_lvl+0x95/0xd0 [ 255.410650][ T7290] dump_stack+0x15/0x1b [ 255.410673][ T7290] fixup_user_fault+0x4fb/0x550 [ 255.410720][ T7290] fault_in_user_writeable+0x5c/0xc0 [ 255.410769][ T7290] futex_lock_pi+0x617/0x7f0 [ 255.410938][ T7290] ? __pfx_futex_wake_mark+0x10/0x10 [ 255.410984][ T7290] do_futex+0x21f/0x380 [ 255.411019][ T7290] __se_sys_futex+0x2f6/0x370 [ 255.411053][ T7290] ? xfd_validate_state+0x45/0xf0 [ 255.411166][ T7290] __x64_sys_futex+0x78/0x90 [ 255.411201][ T7290] x64_sys_call+0x24ab/0x3020 [ 255.411281][ T7290] do_syscall_64+0x12c/0x370 [ 255.411315][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.411383][ T7290] RIP: 0033:0x7f2e988bc819 [ 255.411404][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.411423][ T7290] RSP: 002b:00007f2e972ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 255.411463][ T7290] RAX: ffffffffffffffda RBX: 00007f2e98b36090 RCX: 00007f2e988bc819 [ 255.411479][ T7290] RDX: 0000000000000002 RSI: 000000000000008d RDI: 0000200000004000 [ 255.411492][ T7290] RBP: 00007f2e98952c91 R08: 0000000000000000 R09: 0000000000000082 [ 255.411505][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.411517][ T7290] R13: 00007f2e98b36128 R14: 00007f2e98b36090 R15: 00007ffdf195e8f8 [ 255.411539][ T7290] [ 255.714007][ T7283] lo speed is unknown, defaulting to 1000 [ 255.912845][ T7287] loop3: detected capacity change from 0 to 8192 [ 256.189112][ T7287] loop3: p1 < > p2 p4 < p5 > [ 256.380129][ T7287] loop3: partition table partially beyond EOD, truncated [ 256.489051][ T7287] loop3: p1 start 134217728 is beyond EOD, truncated [ 256.561988][ T7287] loop3: p2 size 591360 extends beyond EOD, truncated [ 256.821762][ T7287] loop3: p5 size 591360 extends beyond EOD, truncated [ 256.853411][ T3001] loop3: p1 < > p2 p4 < p5 > [ 256.858149][ T3001] loop3: partition table partially beyond EOD, truncated [ 256.875879][ T3001] loop3: p1 start 134217728 is beyond EOD, truncated [ 256.903049][ T3001] loop3: p2 size 591360 extends beyond EOD, truncated [ 256.926582][ T3001] loop3: p5 size 591360 extends beyond EOD, truncated [ 257.544082][ T28] kauditd_printk_skb: 5440 callbacks suppressed [ 257.544101][ T28] audit: type=1400 audit(2000008342.835:11150): avc: denied { watch } for pid=7309 comm="syz.1.1043" path="/210" dev="tmpfs" ino=1104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 257.634544][ T7317] lo speed is unknown, defaulting to 1000 [ 257.928605][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 257.958256][ T28] audit: type=1400 audit(2000008343.245:11151): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=1110 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 258.054747][ T7332] loop4: detected capacity change from 0 to 512 [ 258.178614][ T7332] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 258.186669][ T7332] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 258.190880][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1049'. [ 258.208810][ T7332] EXT4-fs (loop4): 1 truncate cleaned up [ 258.218568][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.228805][ T7332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.279622][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.312306][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1050'. [ 258.336684][ T7336] syzkaller0: entered promiscuous mode [ 258.342316][ T7336] syzkaller0: entered allmulticast mode [ 258.502467][ T28] audit: type=1400 audit(2000008343.795:11152): avc: denied { setopt } for pid=7349 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 258.554769][ T28] audit: type=1400 audit(2000008343.845:11153): avc: denied { ioctl } for pid=7351 comm="syz.1.1056" path="socket:[17371]" dev="sockfs" ino=17371 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 258.908848][ T7361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1061'. [ 258.962953][ T7367] loop3: detected capacity change from 0 to 4096 [ 258.969984][ T7367] EXT4-fs: Ignoring removed bh option [ 258.988259][ T7367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.022905][ T7367] tipc: Enabling of bearer rejected, already enabled [ 259.035713][ T28] audit: type=1400 audit(2000008344.325:11154): avc: denied { getopt } for pid=7358 comm="syz.1.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.286601][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.345431][ T28] audit: type=1400 audit(2000008344.635:11155): avc: denied { listen } for pid=7372 comm="syz.4.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.389937][ T28] audit: type=1326 audit(2000008344.675:11156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4581c66597 code=0x7ffc0000 [ 259.440038][ T28] audit: type=1326 audit(2000008344.675:11157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4581c0db99 code=0x7ffc0000 [ 259.487938][ T28] audit: type=1326 audit(2000008344.675:11158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4581c66597 code=0x7ffc0000 [ 259.502050][ T7373] loop4: detected capacity change from 0 to 8192 [ 259.537427][ T28] audit: type=1326 audit(2000008344.675:11159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.3.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4581c0db99 code=0x7ffc0000 [ 259.976044][ T7378] lo speed is unknown, defaulting to 1000 [ 260.024609][ T7381] loop4: detected capacity change from 0 to 4096 [ 260.108756][ T7381] EXT4-fs: Ignoring removed bh option [ 260.179675][ T7381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.218925][ T7381] tipc: Enabling of bearer rejected, already enabled [ 260.581821][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.760972][ T7401] loop3: detected capacity change from 0 to 1024 [ 261.792757][ T7401] EXT4-fs: Ignoring removed bh option [ 261.823388][ T7401] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 261.823388][ T7401] [ 262.039306][ T7401] loop3: detected capacity change from 0 to 128 [ 262.100467][ T7401] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 262.154964][ T7401] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.179796][ T7416] loop0: detected capacity change from 0 to 512 [ 262.227711][ T7416] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1076: inode has both inline data and extents flags [ 262.256832][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 262.266300][ T7416] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 262.268202][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 262.283923][ C1] EXT4-fs (loop0): initial error at time 2000008347: ext4_orphan_get:1397: inode 15 [ 262.293444][ C1] EXT4-fs (loop0): last error at time 2000008347: ext4_orphan_get:1397: inode 15 [ 262.362871][ T7416] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1076: couldn't read orphan inode 15 (err -117) [ 262.379825][ T7416] loop0: lost filesystem error report for type 5 error -117 [ 262.430622][ T7416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.615350][ T28] kauditd_printk_skb: 2541 callbacks suppressed [ 262.615428][ T28] audit: type=1400 audit(2000008347.905:13701): avc: denied { read } for pid=7415 comm="syz.0.1076" path="socket:[19583]" dev="sockfs" ino=19583 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.739874][ T7426] loop2: detected capacity change from 0 to 512 [ 263.535955][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.553761][ T5684] Bluetooth: hci0: Frame reassembly failed (-84) [ 263.578252][ T28] audit: type=1400 audit(2000008348.865:13702): avc: denied { create } for pid=7430 comm="syz.3.1080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 263.948052][ T7433] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 264.084371][ T7431] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.099286][ T7438] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7438 comm=syz.1.1081 [ 264.147113][ T7431] bond4: (slave bond5): making interface the new active one [ 264.176309][ T7431] bond4: (slave bond5): Enslaving as an active interface with an up link [ 264.209162][ T7440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1080'. [ 264.437127][ T7433] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 264.494302][ T7440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.563879][ T7426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.854466][ T28] audit: type=1326 audit(2000008350.145:13703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbcf1236597 code=0x7ffc0000 [ 265.118828][ T28] audit: type=1326 audit(2000008350.145:13704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbcf11ddb99 code=0x7ffc0000 [ 265.191302][ T28] audit: type=1326 audit(2000008350.175:13705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbcf1236597 code=0x7ffc0000 [ 265.238308][ T28] audit: type=1326 audit(2000008350.175:13706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbcf11ddb99 code=0x7ffc0000 [ 265.262566][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.263895][ T28] audit: type=1326 audit(2000008350.175:13707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbcf1236597 code=0x7ffc0000 [ 265.297036][ T28] audit: type=1326 audit(2000008350.175:13708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbcf11ddb99 code=0x7ffc0000 [ 265.341433][ T28] audit: type=1326 audit(2000008350.175:13709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbcf1236597 code=0x7ffc0000 [ 265.371721][ T28] audit: type=1326 audit(2000008350.175:13710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7442 comm="syz.1.1082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbcf11ddb99 code=0x7ffc0000 [ 265.583561][ T7461] netlink: 'syz.2.1088': attribute type 10 has an invalid length. [ 265.608397][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 265.646567][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.657685][ T7461] team0: Port device xfrm0 added [ 265.705070][ T7461] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1088'. [ 265.820247][ T7464] loop0: detected capacity change from 0 to 4096 [ 265.826999][ T7464] EXT4-fs: Ignoring removed bh option [ 265.845578][ T7466] syzkaller0: entered promiscuous mode [ 265.857427][ T7466] syzkaller0: entered allmulticast mode [ 265.907183][ T7464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.066943][ T7471] tipc: Enabled bearer , priority 0 [ 266.100842][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.167206][ T7476] loop0: detected capacity change from 0 to 512 [ 266.214159][ T7476] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 266.263705][ T7476] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 266.313600][ T7476] EXT4-fs (loop0): 1 truncate cleaned up [ 266.348851][ T7476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.375797][ T7492] lo speed is unknown, defaulting to 1000 [ 266.741740][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.358455][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.556226][ T7526] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 268.956466][ T7545] syzkaller0: entered promiscuous mode [ 268.992616][ T7545] syzkaller0: entered allmulticast mode [ 270.907086][ T7563] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1111'. [ 271.198266][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 272.391227][ T7576] loop2: detected capacity change from 0 to 128 [ 272.398813][ T7576] vfat: Unknown parameter '¾' [ 272.855054][ T7582] loop4: detected capacity change from 0 to 512 [ 272.919044][ T7586] lo speed is unknown, defaulting to 1000 [ 272.984569][ T7582] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 272.997918][ T7582] System zones: 1-12 [ 273.128404][ T7582] EXT4-fs error (device loop4): ext4_iget_extra_inode:5040: inode #15: comm syz.4.1114: corrupted in-inode xattr: e_value size too large [ 273.225053][ T7582] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 273.226314][ T7582] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1114: couldn't read orphan inode 15 (err -117) [ 273.235605][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 273.235625][ C1] EXT4-fs (loop4): initial error at time 2000008358: ext4_iget_extra_inode:5040: inode 15 [ 273.235670][ C1] EXT4-fs (loop4): last error at time 2000008358: ext4_iget_extra_inode:5040: inode 15 [ 273.519868][ T7582] loop4: lost filesystem error report for type 5 error -117 [ 273.529119][ T7582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.642936][ T7582] lo speed is unknown, defaulting to 1000 [ 273.746173][ T7597] loop0: detected capacity change from 0 to 1024 [ 273.761581][ T7597] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.769482][ T7597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.808638][ T7597] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 273.844494][ T7597] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #11: comm syz.0.1120: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 273.863859][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.988276][ T7597] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 273.990504][ T7597] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1120: couldn't read orphan inode 11 (err -117) [ 273.999730][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 273.999749][ C0] EXT4-fs (loop0): initial error at time 2000008359: ext4_ext_check_inode:521: inode 11 [ 273.999799][ C0] EXT4-fs (loop0): last error at time 2000008359: ext4_ext_check_inode:521: inode 11 [ 274.057231][ T7597] loop0: lost filesystem error report for type 5 error -117 [ 274.090509][ T7597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.245867][ T7597] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.374442][ T7618] lo speed is unknown, defaulting to 1000 [ 274.491574][ T28] kauditd_printk_skb: 1325 callbacks suppressed [ 274.491594][ T28] audit: type=1326 audit(2000008359.785:15036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7617 comm="syz.3.1126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4581c6c819 code=0x0 [ 274.529655][ T28] audit: type=1400 audit(2000008359.815:15037): avc: denied { connect } for pid=7625 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.549646][ T28] audit: type=1400 audit(2000008359.815:15038): avc: denied { read } for pid=7625 comm="syz.2.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 274.572813][ T28] audit: type=1400 audit(2000008359.865:15039): avc: denied { append } for pid=7627 comm="syz.4.1129" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 275.509949][ T7643] lo speed is unknown, defaulting to 1000 [ 276.029564][ T7647] lo speed is unknown, defaulting to 1000 [ 276.374028][ T7651] lo speed is unknown, defaulting to 1000 [ 277.784981][ T7681] loop2: detected capacity change from 0 to 512 [ 277.824601][ T7681] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 277.854428][ T7681] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 277.865677][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1145'. [ 277.892170][ T7681] EXT4-fs (loop2): 1 truncate cleaned up [ 277.900337][ T7681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.983534][ T28] audit: type=1400 audit(2000008363.275:15040): avc: denied { unmount } for pid=7685 comm="syz.1.1147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 278.110338][ T7681] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 278.146295][ T7689] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7689 comm=syz.2.1144 [ 278.207788][ T7691] loop4: detected capacity change from 0 to 8192 [ 278.220222][ T7697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1151'. [ 278.252677][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.282931][ T3306] loop4: p1 < > p2 p4 < p5 > [ 278.287683][ T3306] loop4: partition table partially beyond EOD, truncated [ 278.318617][ T3306] loop4: p1 start 134217728 is beyond EOD, truncated [ 278.325586][ T3306] loop4: p2 size 591360 extends beyond EOD, truncated [ 278.346691][ T3306] loop4: p5 size 591360 extends beyond EOD, truncated [ 278.411899][ T7691] loop4: p1 < > p2 p4 < p5 > [ 278.416781][ T7691] loop4: partition table partially beyond EOD, truncated [ 278.487173][ T7691] loop4: p1 start 134217728 is beyond EOD, truncated [ 278.514889][ T7691] loop4: p2 size 591360 extends beyond EOD, truncated [ 278.542622][ T7691] loop4: p5 size 591360 extends beyond EOD, truncated [ 278.562156][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.618944][ T7710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.669146][ T28] audit: type=1400 audit(2000008363.965:15041): avc: denied { listen } for pid=7712 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.324474][ T7721] lo speed is unknown, defaulting to 1000 [ 279.430788][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 279.848881][ T28] audit: type=1400 audit(2000008365.135:15042): avc: denied { getopt } for pid=7734 comm="syz.1.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.001796][ T7728] loop4: detected capacity change from 0 to 1024 [ 280.064712][ T7728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 280.078152][ T7741] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7741 comm=syz.3.1163 [ 280.079884][ T7728] System zones: 0-1, 3-36 [ 280.127627][ T7728] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1158: bad orphan inode 134217728 [ 280.139583][ T7728] loop4: lost filesystem error report for type 5 error -117 [ 280.148207][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 280.162016][ C0] EXT4-fs (loop4): initial error at time 2000008365: ext4_orphan_get:1423 [ 280.170596][ C0] EXT4-fs (loop4): last error at time 2000008365: ext4_orphan_get:1423 [ 280.237879][ T7728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.320702][ T7746] tipc: Enabling of bearer rejected, already enabled [ 280.364025][ T7748] loop2: detected capacity change from 0 to 4096 [ 280.411858][ T7748] EXT4-fs: Ignoring removed bh option [ 280.450839][ T7748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.548881][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.570811][ T7762] bridge7: entered promiscuous mode [ 280.576179][ T7762] bridge7: entered allmulticast mode [ 280.583713][ T7762] team0: Port device bridge7 added [ 280.620022][ T7762] bridge0: port 4(team0) entered blocking state [ 280.627190][ T7762] bridge0: port 4(team0) entered disabled state [ 280.688426][ T7762] team0: entered allmulticast mode [ 280.694619][ T7762] team_slave_0: entered allmulticast mode [ 280.707386][ T7762] team_slave_1: entered allmulticast mode [ 280.735819][ T7762] team0: entered promiscuous mode [ 280.750187][ T7762] team_slave_0: entered promiscuous mode [ 280.756096][ T7762] team_slave_1: entered promiscuous mode [ 280.793272][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.969001][ T7774] loop2: detected capacity change from 0 to 512 [ 281.067669][ T7771] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 281.133401][ T7774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.422308][ T7771] veth3: entered promiscuous mode [ 281.429060][ T7771] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 281.446087][ T7771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1174'. [ 281.477857][ T7782] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7782 comm=syz.4.1173 [ 281.543842][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.610070][ T7785] loop2: detected capacity change from 0 to 512 [ 281.636235][ T7785] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 281.668580][ T7785] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 281.698746][ T7785] EXT4-fs (loop2): 1 truncate cleaned up [ 281.715205][ T7785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.751057][ T28] audit: type=1400 audit(2000008367.025:15043): avc: denied { bind } for pid=7783 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 281.848248][ T28] audit: type=1400 audit(2000008367.025:15044): avc: denied { node_bind } for pid=7783 comm="syz.3.1177" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 281.956149][ T7795] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 282.018729][ T7794] loop4: detected capacity change from 0 to 4096 [ 282.037685][ T7798] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=7798 comm=syz.2.1176 [ 282.143661][ T7794] EXT4-fs: Ignoring removed bh option [ 282.201121][ T7794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.360916][ T7794] tipc: Enabling of bearer rejected, already enabled [ 282.412028][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.755587][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.772116][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 282.980248][ T7809] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 283.108972][ T7813] lo speed is unknown, defaulting to 1000 [ 283.201354][ T3001] ================================================================== [ 283.209506][ T3001] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 283.217908][ T3001] [ 283.220273][ T3001] write to 0xffff88811b66f538 of 8 bytes by task 3306 on cpu 0: [ 283.227949][ T3001] inode_set_ctime_current+0x5f2/0x960 [ 283.233541][ T3001] simple_unlink+0x2d/0x80 [ 283.237985][ T3001] shmem_unlink+0x12d/0x140 [ 283.242523][ T3001] vfs_unlink+0x1c7/0x490 [ 283.246889][ T3001] filename_unlinkat+0x1e2/0x410 [ 283.251868][ T3001] __se_sys_unlink+0x2b/0xe0 [ 283.256503][ T3001] __x64_sys_unlink+0x1f/0x30 [ 283.261220][ T3001] x64_sys_call+0x2eb6/0x3020 [ 283.265933][ T3001] do_syscall_64+0x12c/0x370 [ 283.270565][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.276493][ T3001] [ 283.278923][ T3001] read to 0xffff88811b66f538 of 8 bytes by task 3001 on cpu 1: [ 283.286486][ T3001] atime_needs_update+0x2ef/0x3e0 [ 283.291546][ T3001] touch_atime+0x4a/0x330 [ 283.295909][ T3001] do_readlinkat+0x137/0x2f0 [ 283.300531][ T3001] __x64_sys_readlink+0x47/0x60 [ 283.305429][ T3001] x64_sys_call+0x2b51/0x3020 [ 283.310146][ T3001] do_syscall_64+0x12c/0x370 [ 283.314846][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.320761][ T3001] [ 283.323095][ T3001] value changed: 0x000000007735b4ae -> 0x000000007735b4b0 [ 283.330210][ T3001] [ 283.332645][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 283.338832][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 283.349277][ T3001] Tainted: [W]=WARN [ 283.353098][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.363194][ T3001] ================================================================== [ 283.714751][ T7820] loop2: detected capacity change from 0 to 4096 [ 283.751859][ T7820] EXT4-fs: Ignoring removed bh option [ 283.782159][ T7820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.873601][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.