last executing test programs: 14m10.524779823s ago: executing program 32 (id=1115): r0 = eventfd2(0xffff5faa, 0x80000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r1, 0x1000) sendfile(r0, r1, 0x0, 0x10000000000c352) 13m43.408118436s ago: executing program 33 (id=2160): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fff, 0x1, 0x6, 0x4, 0x81}, 0x6, 0x0, 0x0, 0x2, 0x10, 0x9, 0x16, 0x19, 0x5, 0x82, {0x9, 0xb0, 0xb2, 0xebc9, 0xfffffff7, 0x5}}}}]}, 0x78}}, 0x0) 13m10.14753547s ago: executing program 34 (id=3093): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) 12m47.737031072s ago: executing program 35 (id=3724): r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000d50000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r1) 12m34.747700831s ago: executing program 36 (id=3679): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x4040000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 12m20.92108855s ago: executing program 37 (id=4240): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@delalloc}, {@noload}, {@errors_remount}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) write$UHID_INPUT(r1, &(0x7f0000001340)={0x8, {"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", 0x1000}}, 0x1006) 11m55.145609957s ago: executing program 38 (id=4460): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000080), 0x0, 0x567, &(0x7f0000000200)="$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") 11m10.997448276s ago: executing program 39 (id=5935): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1c, 0x8, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 11m1.680908757s ago: executing program 40 (id=6111): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) 10m31.888887531s ago: executing program 41 (id=6841): unshare(0x22020600) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000002c0)={0x1d, r1, 0x1, {0x2, 0x0, 0x1}, 0xff}, 0x18) 10m22.661816488s ago: executing program 42 (id=7003): r0 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 9m44.784941221s ago: executing program 43 (id=7773): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) 9m37.854214634s ago: executing program 5 (id=7897): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1, 0x84, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) 9m37.003878246s ago: executing program 5 (id=7898): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x8, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x204, 0x200004, 0xce1, 0x400}]}, 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x52000a11) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 9m36.984514327s ago: executing program 5 (id=7899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x28000006}) 9m36.959469369s ago: executing program 5 (id=7900): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 9m36.895187651s ago: executing program 5 (id=7901): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 9m33.683175521s ago: executing program 5 (id=7910): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000003c0)=""/251, 0xfb) 9m33.644352283s ago: executing program 44 (id=7910): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000003c0)=""/251, 0xfb) 8m20.150942518s ago: executing program 3 (id=9210): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x124) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0xf000, 0x863, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 8m20.150676518s ago: executing program 3 (id=9211): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace(0x4207, r0) 8m19.293981651s ago: executing program 3 (id=9246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'macvlan0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c011}, 0x20040054) 8m19.221310114s ago: executing program 3 (id=9248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1905406, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 8m19.203600735s ago: executing program 3 (id=9249): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 8m19.025213414s ago: executing program 3 (id=9250): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 8m19.024943244s ago: executing program 45 (id=9250): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 6m57.872889629s ago: executing program 8 (id=11233): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6m56.755074314s ago: executing program 8 (id=11271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) 6m56.504675806s ago: executing program 8 (id=11277): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x33, &(0x7f0000000080)={0xe, 0x0, 0x4}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r2, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) 6m56.43108951s ago: executing program 8 (id=11279): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) 6m56.176852913s ago: executing program 8 (id=11285): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff546}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x0, 0x3b}}, [@migrate={0x50, 0x11, [{@in6=@remote, @in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x33, 0x1, 0x0, 0x3502, 0x2, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x2, 0x3}, {0x0, 0xb, 0x26, 0xfffffffffffffffa}, 0x0, 0x4, 0x0, 0x0, 0x1}}, 0xb4}}, 0x0) 6m56.070609368s ago: executing program 8 (id=11288): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 6m56.02299579s ago: executing program 46 (id=11288): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 6m43.503649129s ago: executing program 2 (id=11522): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) 6m43.406479335s ago: executing program 2 (id=11525): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) 6m43.405802545s ago: executing program 2 (id=11527): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)={0x16}, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)={0x2f}, 0x8) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 6m43.330900978s ago: executing program 2 (id=11529): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0x9) 6m43.151138597s ago: executing program 2 (id=11533): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x2000000000903}, 0x20) 6m42.943119338s ago: executing program 2 (id=11540): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x5, 0x1000}], 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 6m42.923029868s ago: executing program 47 (id=11540): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0x5, 0x1000}], 0x1, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 2m50.819224349s ago: executing program 7 (id=15166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m50.79381973s ago: executing program 7 (id=15167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r0, &(0x7f0000000140)=""/105, 0x69, 0x40000102, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2m49.935689673s ago: executing program 7 (id=15182): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r2) 2m49.765355641s ago: executing program 7 (id=15184): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 2m49.749455192s ago: executing program 7 (id=15185): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x4083, 0x200, 0x8, 0x5, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1e}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x40028, 0x0) 2m49.360622711s ago: executing program 7 (id=15187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) r2 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 2m34.038200669s ago: executing program 48 (id=15187): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) syz_usb_connect$cdc_ncm(0x6, 0x6e, 0x0, 0x0) r2 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="049c01000750050008001300", @ANYRES32=r2, @ANYBLOB="140003002e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 4.579722283s ago: executing program 9 (id=17204): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x41e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x3, 0x40024e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, 0x0) 3.716384636s ago: executing program 6 (id=17220): r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x6258, &(0x7f0000004180)={0x0, 0x0, 0x80}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) 3.606279991s ago: executing program 9 (id=17222): socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.483660377s ago: executing program 6 (id=17226): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.339003604s ago: executing program 6 (id=17228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 2.686092197s ago: executing program 4 (id=17230): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 2.432151089s ago: executing program 6 (id=17232): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 1.700266056s ago: executing program 4 (id=17235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x87a, 0x9, 0x2, 0x9, 0x4, 0x7, 0x10001, 0x4, 0x3f}}}}]}, 0x58}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xe}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040054}, 0x40004) 1.587517001s ago: executing program 0 (id=17238): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$KDSKBLED(r3, 0x4b65, 0x5) 1.578759471s ago: executing program 4 (id=17239): socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x180) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = syz_io_uring_setup(0x49e, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd_index=0x3, 0x6, &(0x7f0000000500)=""/230, 0xe6, 0x2, 0x1}) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 1.423464549s ago: executing program 9 (id=17240): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x80a0, 0xa88, 0x1, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x43}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getpgrp(0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x4, "d30f388c42647612d91de4353d68b0fa00", 0x0, 0x8, 0x4000000, 0x7}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f2c7ed79c77e2e0f19a230000002007007c3d935f00", 0x3e1f, 0xa7}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) 1.423166049s ago: executing program 1 (id=17241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd0300000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.422668259s ago: executing program 4 (id=17242): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000000c0)='./file0\x00', 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001d5566752ecbe95886"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f00000002c0)}, 0x10) 1.422395559s ago: executing program 0 (id=17243): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40180, 0x0) socket$rxrpc(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004780)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xf2f9, 0x4) 1.360812392s ago: executing program 1 (id=17244): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x72, &(0x7f00000002c0)=""/209, 0x0, 0x21, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003980)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 1.267565507s ago: executing program 4 (id=17245): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.19724071s ago: executing program 0 (id=17246): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x8, 0xdd5}, 0x0, 0x7, 0x10000, 0xd, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 1.009825619s ago: executing program 9 (id=17247): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800000, &(0x7f0000000a00)={[{@dioread_lock}]}, 0x12, 0x522, &(0x7f00000023c0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x9575, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0, 0x0, 0x800}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x120, 0x1}) syz_usb_connect(0x6, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="120100030a242bff800410d0e50c01"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_uring_enter(r1, 0x2e06, 0x3071, 0x0, 0x0, 0xa5) 982.364881ms ago: executing program 6 (id=17248): unshare(0x20000680) openat$ptmx(0xffffffffffffff9c, 0x0, 0x40180, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 943.344053ms ago: executing program 1 (id=17249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x87a, 0x9, 0x2, 0x9, 0x4, 0x7, 0x10001, 0x4, 0x3f}}}}]}, 0x58}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff3, 0xe}, {}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040054}, 0x40004) 795.81275ms ago: executing program 1 (id=17250): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7d, &(0x7f00000000c0)="010000000980ffff", 0x8) 721.982804ms ago: executing program 1 (id=17251): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000900)={0x1d, r1, 0x1}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x130, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x3, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x5, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x28, 0x0, 0x0) 491.683165ms ago: executing program 6 (id=17252): socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 491.452765ms ago: executing program 4 (id=17253): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140401, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x5}, 0x4, 0x6, 0x10000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10b8}, 0x20008004) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 351.198682ms ago: executing program 9 (id=17254): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140)=0x4, 0x4) 179.481641ms ago: executing program 0 (id=17255): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) 96.139415ms ago: executing program 0 (id=17256): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x7) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 58.655557ms ago: executing program 1 (id=17257): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$eJzs3T9PA2UcB/DfldIWHdrByZB4iQxOBFhdSgwkRiZNB3VQI5AY2phAQuKfWJlcXRx9BSYmbr4JF9+BiauJmwwkZ653Rwu0hRoKGj+fAR6ee77P/e7yFErIPXy4Pjg5TOP44svfotVKotaNtbhMohO1qHwdN3S/DQDgv+wyy+LPrLBILomI1vLKAgCWaObP/5UZgZ+epCwAYIneefe9t3YPDvbeTtNW7A++Oe/lv9nnn4vju8fxSfTjKLaiHVcRWaX6+0CWZcN6mqZp1o4YDM97eXLwwS/l/Lt/RIzy29GOTpUo3m3kH/ffPNjbTguxcZ0f5nW8UJ6/m+d3oh0vTZx/Ir8zJR+9Rrz26kT9m9GOXz+OT6Mfh6MixvmvttP0jey7v754Py8vzyfD815zNG4sm/WOCAAAAAAAAAAAAAAAAAAAAAAAFrZZ7p3TjLQTG4O8q9x/Z+Uq/2I10krn5v48Rb5ZTXRrf6BhFt9X++tspWmaJcWwcb4eL9ej/jxXDQAAAAAAAAAAAAAAAAAAAP8uZ599fvJRv390+iiN8iH/68f6/+k83YmeV2L+4Ob4XLWyOWfmWKnGJBF5TzLrJuQX8Ui35b7G2qyaf/hx0Qlb949ZnXd/HqdRra789k4d04yqp1Utkp8nxzTigedqzDq0XpbwsHkaUw+1F772xoujxnDOmEjmvS5e/70ou+xJbr+IGqO7OjW+Wjbieo3fXhsLree73ysSu3UAAAAAAAAAAAAAAAAAAMBSjR/6vXOoHhdzo7WsucTCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAJjf///+xGPSJu9AzL8NxU0WjE6dkzXyIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/A38HAAD//zY6VNc=") pipe2$watch_queue(0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x40, 0x8}, 0x0, 0x0) mbind(&(0x7f0000982000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xffffffffffffffff, 0x2) 10.635039ms ago: executing program 9 (id=17258): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 0 (id=17259): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000600)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): 74.064138][ T28] audit: type=1326 audit(2000001099.035:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12613 comm="syz.0.15082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f964cbfcfce code=0x7ffc0000 [ 774.543790][T12600] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 774.545309][T12600] EXT4-fs error (device loop7): ext4_evict_inode:303: inode #15: comm syz.7.15076: mark_inode_dirty error [ 774.668198][T12600] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 774.704600][T12600] EXT4-fs (loop7): 1 orphan inode deleted [ 774.955853][T12600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.153194][ T4948] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.359422][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15097'. [ 775.614194][T12672] loop7: detected capacity change from 0 to 2048 [ 775.649994][T12672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.678937][T12672] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.759400][T12672] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 16: comm syz.7.15103: path /523/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 775.814262][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15110'. [ 775.833027][T12672] EXT4-fs (loop7): Remounting filesystem read-only [ 775.887182][ T4948] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.861670][T12766] loop0: detected capacity change from 0 to 1764 [ 777.973228][T12775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15140'. [ 778.692878][T12821] loop7: detected capacity change from 0 to 128 [ 779.952879][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 779.952914][ T28] audit: type=1326 audit(2000001104.965:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.003217][T12873] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15158'. [ 780.093896][ T28] audit: type=1326 audit(2000001104.995:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.151879][T12869] loop7: detected capacity change from 0 to 512 [ 780.294904][ T28] audit: type=1326 audit(2000001104.995:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.413920][ T28] audit: type=1326 audit(2000001104.995:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.493268][ T28] audit: type=1326 audit(2000001104.995:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.559318][ T28] audit: type=1326 audit(2000001104.995:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.649172][ T28] audit: type=1326 audit(2000001104.995:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.716932][ T28] audit: type=1326 audit(2000001104.995:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.760863][T12869] EXT4-fs (loop7): 1 orphan inode deleted [ 780.789660][T12869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 780.843284][ T28] audit: type=1326 audit(2000001104.995:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.893187][ T28] audit: type=1326 audit(2000001104.995:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12870 comm="syz.4.15157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 780.991960][ T4948] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.240610][T12895] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15166'. [ 781.743863][T12910] syzkaller0: entered promiscuous mode [ 781.749816][T12910] syzkaller0: entered allmulticast mode [ 781.905747][T12916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15174'. [ 781.917272][T12917] bridge_slave_0: Caught tx_queue_len zero misconfig [ 782.101806][T12930] netlink: 'syz.4.15178': attribute type 5 has an invalid length. [ 782.110024][T12930] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.15178'. [ 782.121687][T12930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15178'. [ 784.785899][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15203'. [ 785.002969][T12990] tipc: Enabled bearer , priority 10 [ 785.064494][T12998] loop0: detected capacity change from 0 to 2048 [ 785.128262][T12998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.400899][ T2807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.559490][T13025] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 786.003157][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15221'. [ 786.112800][ T28] kauditd_printk_skb: 267 callbacks suppressed [ 786.112818][ T28] audit: type=1400 audit(2000001111.125:7833): avc: denied { setopt } for pid=13040 comm="syz.6.15223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 786.150938][T13541] tipc: Node number set to 2886997007 [ 786.364508][T13049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15226'. [ 786.463602][T13056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=13056 comm=syz.0.15228 [ 786.494951][T13056] netlink: 1195 bytes leftover after parsing attributes in process `syz.0.15228'. [ 787.938972][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15239'. [ 788.302557][T13088] loop0: detected capacity change from 0 to 512 [ 788.566174][T13088] EXT4-fs (loop0): 1 orphan inode deleted [ 788.770753][T13088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.841691][ T2807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.108102][T13099] sctp: [Deprecated]: syz.4.15244 (pid 13099) Use of int in max_burst socket option deprecated. [ 789.108102][T13099] Use struct sctp_assoc_value instead [ 789.396557][ T28] audit: type=1400 audit(2000001114.405:7834): avc: denied { execute } for pid=13108 comm="syz.4.15249" path="/file1" dev="ramfs" ino=173028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 789.506907][T13117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15255'. [ 790.327426][ T28] audit: type=1400 audit(2000001115.335:7835): avc: denied { ioctl } for pid=13142 comm="syz.0.15265" path="socket:[171948]" dev="sockfs" ino=171948 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 790.331900][T13143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15265'. [ 790.426943][T13143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.202242][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15280'. [ 791.679510][T13217] netlink: 'syz.6.15293': attribute type 3 has an invalid length. [ 791.689925][T13217] netlink: 'syz.6.15293': attribute type 3 has an invalid length. [ 792.667079][ T28] audit: type=1400 audit(2000001117.675:7836): avc: denied { read } for pid=13236 comm="syz.4.15303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 793.667691][ T28] audit: type=1326 audit(2000001118.675:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 793.736577][ T28] audit: type=1326 audit(2000001118.675:7838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 793.778539][ T28] audit: type=1326 audit(2000001118.675:7839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 793.829841][ T28] audit: type=1326 audit(2000001118.675:7840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 793.886119][ T28] audit: type=1326 audit(2000001118.675:7841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 793.939744][ T28] audit: type=1326 audit(2000001118.715:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 793.988486][ T28] audit: type=1326 audit(2000001118.715:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 794.042130][ T28] audit: type=1326 audit(2000001118.725:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 794.112912][ T28] audit: type=1326 audit(2000001118.735:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13271 comm="syz.0.15317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f964cc3c799 code=0x7ffc0000 [ 794.407805][T13288] netlink: 'syz.4.15323': attribute type 4 has an invalid length. [ 794.433439][T13288] netlink: 'syz.4.15323': attribute type 4 has an invalid length. [ 794.710327][T13301] lo speed is unknown, defaulting to 1000 [ 794.722193][T13301] lo speed is unknown, defaulting to 1000 [ 794.740664][T13301] lo speed is unknown, defaulting to 1000 [ 794.867971][T13301] infiniband syz2: set active [ 794.872843][T13541] lo speed is unknown, defaulting to 1000 [ 794.890780][T13301] infiniband syz2: added lo [ 794.942868][T13301] RDS/IB: syz2: added [ 794.956275][T13301] smc: adding ib device syz2 with port count 1 [ 794.977583][T13301] smc: ib device syz2 port 1 has no pnetid [ 794.984472][T13541] lo speed is unknown, defaulting to 1000 [ 794.992879][T13301] lo speed is unknown, defaulting to 1000 [ 795.059889][T13301] lo speed is unknown, defaulting to 1000 [ 795.102028][T13301] lo speed is unknown, defaulting to 1000 [ 795.213579][T13301] lo speed is unknown, defaulting to 1000 [ 795.372453][T13301] lo speed is unknown, defaulting to 1000 [ 795.979197][T13315] loop0: detected capacity change from 0 to 1024 [ 795.987039][T13312] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15343'. [ 796.010212][T13315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 796.100835][T13315] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 796.130127][T13324] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15336'. [ 796.174666][T13315] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 796.190657][T13315] EXT4-fs (loop0): This should not happen!! Data will be lost [ 796.190657][T13315] [ 796.205043][T13315] EXT4-fs (loop0): Total free blocks count 0 [ 796.211467][T13315] EXT4-fs (loop0): Free/Dirty block details [ 796.217439][T13315] EXT4-fs (loop0): free_blocks=20480 [ 796.228267][T13315] EXT4-fs (loop0): dirty_blocks=32 [ 796.252354][T13315] EXT4-fs (loop0): Block reservation details [ 796.261058][T13315] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 796.294727][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15338'. [ 796.316390][ T125] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 796.387035][T13333] netlink: 'syz.0.15340': attribute type 39 has an invalid length. [ 797.734436][T13383] netlink: 'syz.6.15359': attribute type 11 has an invalid length. [ 798.321633][T13399] bond0: left promiscuous mode [ 798.339132][T13399] bridge4: left promiscuous mode [ 798.625713][T13393] lo speed is unknown, defaulting to 1000 [ 798.906574][T13393] chnl_net:caif_netlink_parms(): no params data found [ 799.051416][ T28] kauditd_printk_skb: 460 callbacks suppressed [ 799.051435][ T28] audit: type=1400 audit(2000001124.065:8306): avc: denied { append } for pid=13430 comm="syz.6.15374" name="rt_cache" dev="proc" ino=4026533130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 799.115603][T13393] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.132753][T13393] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.149762][T13393] bridge_slave_0: entered allmulticast mode [ 799.164429][T13393] bridge_slave_0: entered promiscuous mode [ 799.181010][T13393] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.194997][T13441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15379'. [ 799.213735][T13393] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.235793][T13393] bridge_slave_1: entered allmulticast mode [ 799.246988][T13393] bridge_slave_1: entered promiscuous mode [ 799.300362][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15379'. [ 799.355950][T13393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.389666][T13393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.501336][T13393] team0: Port device team_slave_0 added [ 799.520441][T13393] team0: Port device team_slave_1 added [ 799.544669][T13393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.552040][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.579799][T13393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.591682][T13393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.598897][T13393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.626672][T13393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.656582][T13393] hsr_slave_0: entered promiscuous mode [ 799.663122][T13393] hsr_slave_1: entered promiscuous mode [ 799.669715][T13393] debugfs: 'hsr0' already exists in 'hsr' [ 799.675620][T13393] Cannot create hsr debugfs directory [ 799.951976][T13393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 799.961314][T13393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 799.971907][T13393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 799.983641][T13393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 800.031740][T13393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.047309][T13393] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.059116][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.066748][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 800.080351][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.088031][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 800.112066][T13393] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 800.124445][T13393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 800.204370][T13393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.312602][T13393] veth0_vlan: entered promiscuous mode [ 800.323454][T13393] veth1_vlan: entered promiscuous mode [ 800.347892][T13393] veth0_macvtap: entered promiscuous mode [ 800.356966][T13393] veth1_macvtap: entered promiscuous mode [ 800.374932][T13393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.389764][T13393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.404570][ T9471] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.423673][ T9471] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.449442][ T9471] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.461601][ T9471] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.615552][T13547] ipip0: left promiscuous mode [ 800.642217][T13547] ipip0: left allmulticast mode [ 800.648132][T13547] bond4: left promiscuous mode [ 800.676061][ T28] audit: type=1400 audit(2000001125.685:8307): avc: denied { listen } for pid=13557 comm="syz.9.15383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 800.684234][T13547] bond5: left promiscuous mode [ 800.736078][T13547] ip6gre2: left promiscuous mode [ 800.753543][T13547] ip6gre2: left allmulticast mode [ 800.764475][T13547] ipip5: left promiscuous mode [ 801.458062][T13547] bridge6: left promiscuous mode [ 801.469584][T13547] bridge6: left allmulticast mode [ 801.475132][T13547] bond13: left promiscuous mode [ 801.480702][T13547] bridge8: left promiscuous mode [ 801.757172][T13601] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15398'. [ 801.778127][T13603] netlink: 44 bytes leftover after parsing attributes in process `syz.4.15399'. [ 801.790983][T13603] netlink: 43 bytes leftover after parsing attributes in process `syz.4.15399'. [ 801.801596][T13603] netlink: 'syz.4.15399': attribute type 5 has an invalid length. [ 801.809766][T13603] netlink: 43 bytes leftover after parsing attributes in process `syz.4.15399'. [ 802.024987][T13547] bond14: left promiscuous mode [ 802.030262][T13547] vti0: left promiscuous mode [ 802.037589][T13570] bond_slave_0: Caught tx_queue_len zero misconfig [ 802.147727][T13618] geneve2: entered promiscuous mode [ 802.164600][ T125] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 40748 - 0 [ 802.202199][ T125] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 40748 - 0 [ 802.217593][ T125] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 40748 - 0 [ 802.241618][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15408'. [ 802.248716][ T125] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 40748 - 0 [ 802.300576][T13634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 802.370382][ T4833] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 802.892177][ T125] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.183848][T13541] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.449620][ T28] audit: type=1400 audit(2000001128.455:8308): avc: denied { watch watch_reads } for pid=13699 comm="syz.9.15417" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 803.588154][ T28] audit: type=1400 audit(2000001128.585:8309): avc: denied { write } for pid=13703 comm="syz.9.15418" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 803.968693][ T125] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 803.976883][ T125] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 804.058721][T13707] xt_hashlimit: size too large, truncated to 1048576 [ 804.129886][ T3395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 804.395649][ T28] audit: type=1326 audit(2000001129.405:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0c05c799 code=0x7ffc0000 [ 804.428562][ T28] audit: type=1326 audit(2000001129.435:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0c05c799 code=0x7ffc0000 [ 804.454881][ T28] audit: type=1326 audit(2000001129.435:8312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad0c05c799 code=0x7ffc0000 [ 804.481553][ T28] audit: type=1326 audit(2000001129.435:8313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0c05c799 code=0x7ffc0000 [ 804.506695][ T28] audit: type=1326 audit(2000001129.435:8314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad0c05c799 code=0x7ffc0000 [ 804.551930][ T28] audit: type=1326 audit(2000001129.435:8315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fad0c05c799 code=0x7ffc0000 [ 804.577145][ T28] audit: type=1326 audit(2000001129.435:8316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad0c05c502 code=0x7ffc0000 [ 804.603356][ T28] audit: type=1326 audit(2000001129.435:8317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad0c01cfce code=0x7ffc0000 [ 804.628241][ T28] audit: type=1326 audit(2000001129.435:8318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fad0c05c5c7 code=0x7ffc0000 [ 804.690214][ T28] audit: type=1326 audit(2000001129.435:8319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13763 comm="syz.9.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad0c01cfce code=0x7ffc0000 [ 805.116800][T13789] ref_ctr going negative. vaddr: 0x200000000002, curr val: -7112, delta: 1 [ 805.126515][T13789] ref_ctr increment failed for inode: 0xf1d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810cebec00 [ 805.563475][T13804] netlink: 'syz.9.15445': attribute type 1 has an invalid length. [ 805.602335][T13804] bond11: entered promiscuous mode [ 805.625855][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15445'. [ 805.626662][T13804] 8021q: adding VLAN 0 to HW filter on device bond11 [ 805.663039][T13808] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15445'. [ 805.887105][T13804] bond11: (slave bridge14): making interface the new active one [ 805.909382][T13804] bridge14: entered promiscuous mode [ 805.928384][T13804] bond11: (slave bridge14): Enslaving as an active interface with an up link [ 805.956487][T13814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13814 comm=syz.6.15448 [ 806.711094][T13840] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 806.739014][T13840] netlink: 212916 bytes leftover after parsing attributes in process `syz.4.15458'. [ 806.948666][T13846] netlink: 'syz.0.15461': attribute type 1 has an invalid length. [ 806.977997][T13846] bond4: entered promiscuous mode [ 806.986726][T13846] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.005525][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15461'. [ 807.016068][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15461'. [ 807.109441][T13853] lo speed is unknown, defaulting to 1000 [ 807.143804][T13858] bond4: (slave bridge10): making interface the new active one [ 807.154898][T13858] bridge10: entered promiscuous mode [ 807.164210][T13858] bond4: (slave bridge10): Enslaving as an active interface with an up link [ 807.196687][T13864] lo speed is unknown, defaulting to 1000 [ 807.276013][T13870] loop0: detected capacity change from 0 to 512 [ 807.296767][T13870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.324006][T13870] ext4 filesystem being mounted at /750/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 807.440794][ T2807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.368979][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 808.562911][T13912] lo speed is unknown, defaulting to 1000 [ 808.940282][T13931] loop1: detected capacity change from 0 to 1024 [ 808.947401][T13931] EXT4-fs: Ignoring removed orlov option [ 808.954324][T13931] EXT4-fs: Ignoring removed mblk_io_submit option [ 809.124511][T13931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.523651][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15497'. [ 809.679231][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.763063][T13975] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15504'. [ 809.806925][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15504'. [ 810.090273][T13981] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15507'. [ 810.516643][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 810.516662][ T28] audit: type=1326 audit(2000001135.525:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13994 comm="syz.9.15513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad0c05c799 code=0x0 [ 810.866451][T14010] loop1: detected capacity change from 0 to 256 [ 810.911940][T14010] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 810.937559][T14010] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 811.692390][T14047] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15531'. [ 811.801073][T21565] kernel write not supported for file bpf-prog (pid: 21565 comm: kworker/0:12) [ 812.369115][T14082] netlink: 'syz.4.15544': attribute type 5 has an invalid length. [ 812.380475][T14082] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.15544'. [ 812.390509][T14082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15544'. [ 812.451493][T14084] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15545'. [ 812.936993][T14099] loop0: detected capacity change from 0 to 256 [ 813.087267][T14097] loop1: detected capacity change from 0 to 1024 [ 813.676997][T14097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.678839][T14097] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.685720][T14097] EXT4-fs (loop1): shut down requested (0) [ 814.150726][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 814.274880][T14122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.292853][T14122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.424656][T14127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15561'. [ 814.491056][T21565] kernel write not supported for file bpf-prog (pid: 21565 comm: kworker/0:12) [ 815.051174][T14156] netlink: 'syz.4.15575': attribute type 12 has an invalid length. [ 815.154325][T14156] netlink: 'syz.4.15575': attribute type 29 has an invalid length. [ 815.189324][T14156] netlink: 148 bytes leftover after parsing attributes in process `syz.4.15575'. [ 815.510300][T14172] netlink: 'syz.0.15579': attribute type 2 has an invalid length. [ 815.852002][T14193] lo speed is unknown, defaulting to 1000 [ 816.375291][T14197] netlink: 'syz.1.15588': attribute type 27 has an invalid length. [ 816.459928][T14197] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.467318][T14197] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.743231][T14197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.757485][T14197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.845065][T14197] geneve2: left promiscuous mode [ 817.081690][T14206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.092812][ T28] audit: type=1400 audit(2000001142.105:8330): avc: denied { setopt } for pid=14222 comm="syz.6.15597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 817.112590][T14206] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.136894][T14206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.161411][T22028] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.168756][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.170807][T22028] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 40748 - 0 [ 817.195657][T22028] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.205254][T22028] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 40748 - 0 [ 817.219957][T22028] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.229532][T22028] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 40748 - 0 [ 817.240948][T22028] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.251446][T22028] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 40748 - 0 [ 817.796685][T14243] lo speed is unknown, defaulting to 1000 [ 818.042867][T14243] chnl_net:caif_netlink_parms(): no params data found [ 818.344496][T14243] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.352300][T14243] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.363133][T14243] bridge_slave_0: entered allmulticast mode [ 818.373459][T14243] bridge_slave_0: entered promiscuous mode [ 818.387516][T14243] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.398045][T14243] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.438726][T14243] bridge_slave_1: entered allmulticast mode [ 818.445905][T14243] bridge_slave_1: entered promiscuous mode [ 818.511645][T14243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.523233][T14243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.549907][T14243] team0: Port device team_slave_0 added [ 818.557593][T14243] team0: Port device team_slave_1 added [ 818.583594][T14243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.591480][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.619666][T14243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.682782][T14243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.699203][T14243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.745601][T14243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.823619][T14243] hsr_slave_0: entered promiscuous mode [ 818.840320][T14243] hsr_slave_1: entered promiscuous mode [ 818.857033][T14243] debugfs: 'hsr0' already exists in 'hsr' [ 818.866683][T14243] Cannot create hsr debugfs directory [ 819.701100][T21565] IPVS: starting estimator thread 0... [ 820.009904][T14316] IPVS: using max 1728 ests per chain, 86400 per kthread [ 820.021732][T14243] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 820.034065][T14243] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 820.064367][T14243] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 820.084536][T14243] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 820.184760][T14243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.215050][T14243] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.255498][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.262951][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.285628][T22028] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.293197][T22028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.457589][T14243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.499372][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15643'. [ 820.528655][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15643'. [ 820.739896][T14243] veth0_vlan: entered promiscuous mode [ 820.909148][T14243] veth1_vlan: entered promiscuous mode [ 820.927190][T14243] veth0_macvtap: entered promiscuous mode [ 820.943223][T14243] veth1_macvtap: entered promiscuous mode [ 820.957275][T14243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.967814][T14243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.025847][T14397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.15647'. [ 821.090358][ T7918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.105206][ T7918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.284112][ T7918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.340916][ T7918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.620328][T14447] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15655'. [ 821.760726][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15657'. [ 821.892109][T14465] loop1: detected capacity change from 0 to 512 [ 821.915850][T14465] EXT4-fs: Ignoring removed mblk_io_submit option [ 821.967375][T14465] EXT4-fs (loop1): 1 truncate cleaned up [ 821.973890][T14465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.055839][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.241879][T14488] netlink: 'syz.9.15670': attribute type 12 has an invalid length. [ 822.810490][T14491] lo speed is unknown, defaulting to 1000 [ 823.645519][T14525] loop1: detected capacity change from 0 to 512 [ 823.754239][T14525] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 824.044215][T14525] loop1: detected capacity change from 0 to 764 [ 824.167829][T14525] iso9660: Unknown parameter 'ÿÿÿ' [ 825.363374][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15703'. [ 825.383464][T14577] bridge_slave_1: left allmulticast mode [ 825.399081][T14577] bridge_slave_1: left promiscuous mode [ 825.412029][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.468841][T14577] bridge_slave_0: left allmulticast mode [ 825.492613][T14577] bridge_slave_0: left promiscuous mode [ 825.501523][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.854028][T14589] loop0: detected capacity change from 0 to 128 [ 826.042952][T14600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=14600 comm=syz.6.15712 [ 826.058090][T14600] netlink: 'syz.6.15712': attribute type 2 has an invalid length. [ 826.067434][T14600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15712'. [ 826.121050][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15713'. [ 826.165716][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15714'. [ 826.179545][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15714'. [ 826.313818][T14616] lo: Caught tx_queue_len zero misconfig [ 826.324098][T14620] sctp: [Deprecated]: syz.6.15720 (pid 14620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 826.324098][T14620] Use struct sctp_sack_info instead [ 826.553751][T14642] lo speed is unknown, defaulting to 1000 [ 826.641860][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15734'. [ 826.662228][T14649] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15734'. [ 827.586811][ T28] audit: type=1326 audit(2000001152.595:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 827.594803][T14675] loop0: detected capacity change from 0 to 256 [ 827.617540][ T28] audit: type=1326 audit(2000001152.605:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 827.617739][ T28] audit: type=1326 audit(2000001152.605:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 827.678487][ T28] audit: type=1326 audit(2000001152.605:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 827.705111][ T28] audit: type=1326 audit(2000001152.605:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f55e5ddc502 code=0x7ffc0000 [ 827.740948][ T28] audit: type=1326 audit(2000001152.605:8336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f55e5d9cfce code=0x7ffc0000 [ 827.777625][ T28] audit: type=1326 audit(2000001152.605:8337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f55e5ddc5c7 code=0x7ffc0000 [ 827.803337][ T28] audit: type=1326 audit(2000001152.605:8338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55e5d9cfce code=0x7ffc0000 [ 827.827552][ T28] audit: type=1326 audit(2000001152.605:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f55e5ddc42b code=0x7ffc0000 [ 827.855824][ T28] audit: type=1326 audit(2000001152.655:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14674 comm="syz.0.15742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 827.951982][T14687] netlink: 'syz.6.15747': attribute type 29 has an invalid length. [ 827.969078][T14689] netlink: 'syz.0.15748': attribute type 12 has an invalid length. [ 827.978268][T14687] netlink: 'syz.6.15747': attribute type 29 has an invalid length. [ 827.996764][T14687] netlink: 'syz.6.15747': attribute type 29 has an invalid length. [ 828.305932][T14705] loop0: detected capacity change from 0 to 512 [ 828.561799][T14717] loop0: detected capacity change from 0 to 128 [ 828.607094][T14717] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 828.713759][T14717] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 828.772044][T14243] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 829.038607][T14733] netlink: 'syz.1.15768': attribute type 12 has an invalid length. [ 829.336741][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15771'. [ 829.383354][T14741] bond15: entered promiscuous mode [ 829.399243][T14741] bond15: entered allmulticast mode [ 829.399492][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15771'. [ 829.419853][T14741] 8021q: adding VLAN 0 to HW filter on device bond15 [ 829.609894][T14743] macsec1: entered promiscuous mode [ 829.630536][T14743] macsec1: entered allmulticast mode [ 829.986268][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15774'. [ 830.484129][T14755] netlink: 'syz.4.15776': attribute type 1 has an invalid length. [ 830.494627][T14755] netlink: 'syz.4.15776': attribute type 4 has an invalid length. [ 830.503423][T14755] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15776'. [ 831.092590][T14768] loop1: detected capacity change from 0 to 512 [ 831.188314][T14774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15783'. [ 831.365822][T14782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15787'. [ 832.162521][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15808'. [ 832.182287][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15808'. [ 832.243980][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15809'. [ 832.637876][T14847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15816'. [ 832.670069][T14847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15816'. [ 834.087664][ T3384] kernel write not supported for file bpf-prog (pid: 3384 comm: kworker/1:2) [ 834.101107][T14890] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15834'. [ 834.112303][T14886] team0 (unregistering): Port device team_slave_0 removed [ 834.125516][T14886] team0 (unregistering): Port device team_slave_1 removed [ 834.448926][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 834.952469][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 834.952510][ T28] audit: type=1400 audit(2000001159.965:8418): avc: denied { name_bind } for pid=14907 comm="syz.1.15842" path="socket:[203896]" dev="sockfs" ino=203896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 834.998334][T14910] netlink: 'syz.4.15843': attribute type 1 has an invalid length. [ 835.062181][T14910] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 835.124945][T14910] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 835.179620][T14910] bond8: (slave vxcan3): making interface the new active one [ 835.202102][T14924] loop0: detected capacity change from 0 to 512 [ 835.228329][T14924] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.15848: inode has both inline data and extents flags [ 835.234382][T14910] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 835.274819][T14924] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 835.275522][T14924] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.15848: couldn't read orphan inode 15 (err -117) [ 835.285360][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 835.285391][ C1] EXT4-fs (loop0): initial error at time 2000001160: ext4_orphan_get:1391: inode 15 [ 835.285416][ C1] EXT4-fs (loop0): last error at time 2000001160: ext4_orphan_get:1391: inode 15 [ 835.327378][T14924] loop0: lost filesystem error report for type 5 error -117 [ 835.328132][T14924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.351803][T14920] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 835.380636][T14920] bond8: (slave vxcan5): Enslaving as a backup interface with an up link [ 835.430273][T14243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.549277][T26520] lo speed is unknown, defaulting to 1000 [ 835.556323][T26520] syz2: Port: 1 Link DOWN [ 835.561201][ T3395] lo speed is unknown, defaulting to 1000 [ 835.607654][T14944] netlink: 'syz.0.15855': attribute type 13 has an invalid length. [ 835.616028][T14944] netlink: 'syz.0.15855': attribute type 17 has an invalid length. [ 835.717443][T14944] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.130463][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15875'. [ 838.139961][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15875'. [ 838.418387][T15005] netlink: 'syz.1.15880': attribute type 1 has an invalid length. [ 838.453184][T15005] bond1: entered promiscuous mode [ 838.459940][T15005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 838.496646][T15012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.534724][ T23] lo speed is unknown, defaulting to 1000 [ 838.546149][T15005] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 838.566851][T15005] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 838.577467][ T23] syz2: Port: 1 Link ACTIVE [ 838.584331][T15005] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 838.629729][T15022] netlink: 'syz.4.15885': attribute type 1 has an invalid length. [ 838.650681][T13541] lo speed is unknown, defaulting to 1000 [ 838.664832][T15022] 8021q: adding VLAN 0 to HW filter on device bond9 [ 839.064844][T15040] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.15891'. [ 839.089267][T15040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15891'. [ 840.444991][T15051] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 840.772869][T15067] netlink: 'syz.4.15902': attribute type 5 has an invalid length. [ 840.789703][T15067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15902'. [ 842.420436][T15103] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2118892803/2118892805 [ 842.430699][T15103] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2118892803/2118892805 [ 842.587777][T15113] tipc: Started in network mode [ 842.609051][T15113] tipc: Node identity @, cluster identity 4711 [ 842.626187][T15113] tipc: Enabling of bearer rejected, failed to enable media [ 843.044863][T15126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15924'. [ 843.861063][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15938'. [ 843.927079][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15938'. [ 844.413419][T15185] tipc: Failed to remove unknown binding: 66,1,1/0:1164736123/1164736125 [ 844.428993][T15185] tipc: Failed to remove unknown binding: 66,1,1/0:1164736123/1164736125 [ 844.503602][T15192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15953'. [ 844.677562][T15215] tipc: Failed to remove unknown binding: 66,1,1/0:2408151898/2408151900 [ 844.697351][T15215] tipc: Failed to remove unknown binding: 66,1,1/0:2408151898/2408151900 [ 845.666461][T15224] xt_hashlimit: size too large, truncated to 1048576 [ 845.746753][T15233] netlink: 'syz.0.15968': attribute type 4 has an invalid length. [ 845.758489][ T28] audit: type=1326 audit(2000001170.755:8419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 845.763554][T15233] netlink: 152 bytes leftover after parsing attributes in process `syz.0.15968'. [ 845.835003][ T28] audit: type=1326 audit(2000001170.755:8420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 845.940728][ T28] audit: type=1326 audit(2000001170.755:8421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 846.130198][ T28] audit: type=1326 audit(2000001170.755:8422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 846.180646][ T28] audit: type=1326 audit(2000001170.755:8423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 846.238478][ T28] audit: type=1326 audit(2000001170.755:8424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 846.300721][ T28] audit: type=1326 audit(2000001170.755:8425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 846.467445][T15233] .`: renamed from bond0 (while UP) [ 846.480423][ T28] audit: type=1326 audit(2000001170.755:8426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 846.558541][ T28] audit: type=1326 audit(2000001170.755:8427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f55e5dd6517 code=0x7ffc0000 [ 846.624887][ T28] audit: type=1326 audit(2000001170.755:8428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15232 comm="syz.0.15968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f55e5d7db19 code=0x7ffc0000 [ 846.832627][T15272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15272 comm=syz.1.15978 [ 847.135929][T15288] syzkaller0: entered allmulticast mode [ 847.448320][T15305] netlink: 228 bytes leftover after parsing attributes in process `syz.9.15988'. [ 847.468480][T15305] netlink: 228 bytes leftover after parsing attributes in process `syz.9.15988'. [ 847.766785][T15337] all: renamed from bridge_slave_1 [ 848.159510][T15360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16003'. [ 848.456460][T15360] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16003'. [ 848.613837][T15375] netlink: 'syz.6.16007': attribute type 2 has an invalid length. [ 848.891114][T15360] macvlan0: entered allmulticast mode [ 848.897308][T15360] veth1_vlan: entered allmulticast mode [ 848.936671][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16012'. [ 849.002047][T15391] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16012'. [ 849.253270][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16022'. [ 849.263452][T15404] ref_ctr_offset mismatch. inode: 0x29df offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 849.277541][T15416] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16022'. [ 849.476173][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16027'. [ 850.176620][T15443] lo speed is unknown, defaulting to 1000 [ 850.487850][T15471] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.904194][T15471] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.012540][T15471] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.153070][T15471] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.365435][ T9559] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.439936][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16054'. [ 851.450689][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16054'. [ 851.454207][T15471] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.477420][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16054'. [ 851.499159][T15501] netlink: 'syz.4.16055': attribute type 1 has an invalid length. [ 851.516826][T15501] 8021q: adding VLAN 0 to HW filter on device bond10 [ 851.566336][T15506] 8021q: adding VLAN 0 to HW filter on device bond10 [ 851.639922][T15506] bond10: (slave vxcan7): The slave device specified does not support setting the MAC address [ 851.685718][T15506] bond10: (slave vxcan7): Error -95 calling set_mac_address [ 852.155002][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 852.155019][ T28] audit: type=1326 audit(2000001177.165:8557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 852.188398][T15515] netlink: 'syz.4.16059': attribute type 4 has an invalid length. [ 852.197436][T15515] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16059'. [ 852.240422][ T28] audit: type=1326 audit(2000001177.165:8558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 852.570150][ T28] audit: type=1326 audit(2000001177.165:8559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 852.611662][ T28] audit: type=1326 audit(2000001177.165:8560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 852.660711][ T28] audit: type=1326 audit(2000001177.165:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 852.709692][ T28] audit: type=1326 audit(2000001177.165:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 853.332046][ T28] audit: type=1326 audit(2000001177.165:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 853.378482][ T28] audit: type=1326 audit(2000001177.165:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 853.452351][ T28] audit: type=1326 audit(2000001177.165:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 853.492503][ T28] audit: type=1326 audit(2000001177.165:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="syz.4.16059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 853.853550][T15570] loop1: detected capacity change from 0 to 128 [ 853.867865][T15570] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 853.876501][T15570] System zones: 1-3, 19-19, 35-36 [ 853.901811][T15570] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 853.938688][T15570] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 854.188964][T15564] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 854.304008][T13393] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 855.126184][T15610] loop0: detected capacity change from 0 to 1024 [ 855.146107][T15610] EXT4-fs: inline encryption not supported [ 855.171329][T15615] netlink: 28 bytes leftover after parsing attributes in process `syz.6.16099'. [ 855.174370][T15612] lo speed is unknown, defaulting to 1000 [ 855.190844][T15610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.235177][T14243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 855.287177][T15625] netlink: 'syz.4.16103': attribute type 1 has an invalid length. [ 855.650571][T15642] IPv6: sit2: Disabled Multicast RS [ 856.307163][T15671] lo speed is unknown, defaulting to 1000 [ 856.361847][T15676] loop1: detected capacity change from 0 to 164 [ 856.511512][T15676] isofs_fill_super: bread failed, dev=loop1, iso_blknum=41, block=82 [ 856.522245][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16122'. [ 857.271878][T15715] loop0: detected capacity change from 0 to 512 [ 857.307951][T15715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 857.349984][T15715] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #15: comm syz.0.16135: corrupted inode contents [ 857.370367][T15715] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 857.370622][T15715] EXT4-fs (loop0): Remounting filesystem read-only [ 857.380217][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 857.380244][ C0] EXT4-fs (loop0): initial error at time 2000001182: ext4_do_update_inode:5569: inode 15 [ 857.380284][ C0] EXT4-fs (loop0): last error at time 2000001182: ext4_do_update_inode:5569: inode 15 [ 857.429363][T15715] EXT4-fs (loop0): 1 orphan inode deleted [ 857.438716][T15715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 857.546817][T14243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.891094][T15733] veth1_vlan: left allmulticast mode [ 857.926050][T13541] lo speed is unknown, defaulting to 1000 [ 857.932963][T13541] syz2: Port: 1 Link DOWN [ 857.943172][T13541] lo speed is unknown, defaulting to 1000 [ 858.162944][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16147'. [ 858.218978][T15753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16147'. [ 858.312754][T15763] loop1: detected capacity change from 0 to 1024 [ 858.331731][T15763] EXT4-fs: Ignoring removed bh option [ 858.385765][T15763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.410151][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16149'. [ 858.471964][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.821715][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16157'. [ 859.916605][T15837] netlink: 'syz.0.16172': attribute type 1 has an invalid length. [ 860.867023][T15868] IPv6: sit1: Disabled Multicast RS [ 861.794611][T15893] loop1: detected capacity change from 0 to 1024 [ 861.834307][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 861.834325][ T28] audit: type=1400 audit(2000001186.845:8639): avc: denied { shutdown } for pid=15895 comm="syz.0.16196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 861.878302][T15893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.000803][T15893] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.16195: Allocating blocks 497-513 which overlap fs metadata [ 862.020816][T15893] EXT4-fs (loop1): Remounting filesystem read-only [ 862.361151][T15891] EXT4-fs (loop1): pa ffff8881082ab230: logic 304, phys. 433, len 5 [ 862.508105][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16202'. [ 862.520886][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.840390][T15954] loop0: detected capacity change from 0 to 4096 [ 863.875280][T15954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.984614][T14243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.740182][T15985] loop1: detected capacity change from 0 to 2048 [ 865.563833][T16017] lo speed is unknown, defaulting to 1000 [ 867.453866][T16077] netlink: 71 bytes leftover after parsing attributes in process `syz.0.16267'. [ 867.640085][T16080] lo speed is unknown, defaulting to 1000 [ 867.728517][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 868.276332][T16091] cgroup: fork rejected by pids controller in /syz0 [ 869.125326][ T28] audit: type=1326 audit(2000001194.135:8640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.138114][T16407] lo speed is unknown, defaulting to 1000 [ 869.204603][ T28] audit: type=1326 audit(2000001194.135:8641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.279677][ T28] audit: type=1326 audit(2000001194.135:8642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.352262][ T28] audit: type=1326 audit(2000001194.135:8643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.385576][ T28] audit: type=1326 audit(2000001194.135:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.415068][ T28] audit: type=1326 audit(2000001194.135:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.444027][T16428] ip6gre1: entered promiscuous mode [ 869.450032][T16428] ip6gre1: entered allmulticast mode [ 869.461293][ T28] audit: type=1326 audit(2000001194.185:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.487347][ T28] audit: type=1326 audit(2000001194.185:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.539571][ T28] audit: type=1326 audit(2000001194.185:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.577051][ T28] audit: type=1326 audit(2000001194.185:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16408 comm="syz.4.16283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 869.981923][T16450] loop0: detected capacity change from 0 to 256 [ 870.063060][T16441] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 870.079183][T16441] FAT-fs (loop0): Filesystem has been set read-only [ 870.087213][T16441] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 870.096010][T16441] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 198) [ 870.594384][T16466] lo speed is unknown, defaulting to 1000 [ 871.792808][T16510] loop1: detected capacity change from 0 to 256 [ 871.844711][T16510] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 871.907475][T16512] netlink: 'syz.9.16321': attribute type 3 has an invalid length. [ 871.936982][T16512] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.16321'. [ 873.156061][T16522] cgroup: fork rejected by pids controller in /syz4 [ 873.770183][T16639] lo speed is unknown, defaulting to 1000 [ 873.932297][T16649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16342'. [ 874.158859][T16662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16344'. [ 874.204832][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16349'. [ 874.243165][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16349'. [ 874.436811][T16680] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.16355'. [ 874.596715][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 874.596734][ T28] audit: type=1400 audit(2000001455.606:8675): avc: denied { watch } for pid=16699 comm="syz.9.16365" path="/" dev="ramfs" ino=211233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 874.653971][T16703] loop0: detected capacity change from 0 to 1024 [ 874.683564][T16703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.719856][T16714] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16370'. [ 874.734407][T16703] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.16366: Allocating blocks 497-513 which overlap fs metadata [ 874.818250][T16703] EXT4-fs (loop0): pa ffff8881081d4460: logic 48, phys. 177, len 21 [ 874.828778][T16703] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 874.857847][T14243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.456721][T16753] macvlan2: entered promiscuous mode [ 875.466495][T16753] bridge0: entered promiscuous mode [ 876.210828][T16786] macvlan2: entered promiscuous mode [ 876.216708][T16786] bridge0: entered promiscuous mode [ 878.225465][ T28] audit: type=1326 audit(2000001459.226:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.255214][ T28] audit: type=1326 audit(2000001459.236:8677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.282011][ T28] audit: type=1326 audit(2000001459.236:8678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.310359][ T28] audit: type=1326 audit(2000001459.236:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.344424][ T28] audit: type=1326 audit(2000001459.236:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.371391][ T28] audit: type=1326 audit(2000001459.236:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.399700][ T28] audit: type=1326 audit(2000001459.236:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.426848][ T28] audit: type=1326 audit(2000001459.236:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 878.456641][ T28] audit: type=1326 audit(2000001459.236:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.4.16411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 879.623222][ T28] kauditd_printk_skb: 50 callbacks suppressed [ 879.623240][ T28] audit: type=1326 audit(2000001460.636:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16903 comm="syz.1.16445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 879.693275][T16909] loop1: detected capacity change from 0 to 1024 [ 879.762673][T16909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.791198][T16915] lo speed is unknown, defaulting to 1000 [ 879.828120][T16922] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0, syncid = 2, id = 0 [ 879.843189][T16909] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.16446: Allocating blocks 497-513 which overlap fs metadata [ 879.949295][T16925] EXT4-fs (loop1): pa ffff8881082ab230: logic 48, phys. 177, len 21 [ 879.957694][T16925] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 880.112735][T16937] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16457'. [ 880.140515][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 880.671109][T16939] loop1: detected capacity change from 0 to 32768 [ 880.701449][ T1047] loop1: p1 p3 < > [ 880.720472][T16939] loop1: p1 p3 < > [ 881.656446][T16965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16466'. [ 881.675274][T16965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 881.769315][T16965] macsec1: entered promiscuous mode [ 881.774880][T16965] bond2: entered promiscuous mode [ 881.807610][T16965] bond2: left promiscuous mode [ 882.334676][ T28] audit: type=1400 audit(2000001463.346:8736): avc: denied { bind } for pid=16979 comm="syz.9.16471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 882.620723][ T28] audit: type=1400 audit(2000001463.456:8737): avc: denied { ioctl } for pid=16986 comm="syz.9.16474" path="socket:[211646]" dev="sockfs" ino=211646 ioctlcmd=0x89f7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 883.962786][T17033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 883.994373][T17033] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 884.081287][ T9559] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 884.209734][ T7918] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 884.231403][ T28] audit: type=1326 audit(2000001465.246:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17034 comm="syz.4.16494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7fc00000 [ 884.355724][T17050] netlink: 76 bytes leftover after parsing attributes in process `syz.1.16499'. [ 884.662758][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16504'. [ 884.673229][T17063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16504'. [ 884.771872][T17073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16509'. [ 884.797162][ T28] audit: type=1326 audit(2000001465.806:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17034 comm="syz.4.16494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae509bc799 code=0x7fc00000 [ 885.161316][ T28] audit: type=1326 audit(2000001466.176:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.201849][T17099] bond0: entered promiscuous mode [ 885.216030][ T28] audit: type=1326 audit(2000001466.176:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.257009][T17099] macvlan0: entered promiscuous mode [ 885.305572][T17099] macvlan0: entered allmulticast mode [ 885.329614][T17099] bond0: (slave macvlan0): Opening slave failed [ 885.373657][ T28] audit: type=1326 audit(2000001466.206:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.431930][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16522'. [ 885.450594][ T28] audit: type=1326 audit(2000001466.206:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.497065][ T28] audit: type=1326 audit(2000001466.206:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.533624][ T28] audit: type=1326 audit(2000001466.206:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.602804][ T28] audit: type=1326 audit(2000001466.206:8746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.656523][T17108] bond16: entered promiscuous mode [ 885.685749][ T28] audit: type=1326 audit(2000001466.206:8747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 885.715922][ T28] audit: type=1326 audit(2000001466.206:8748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17096 comm="syz.1.16518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 886.931210][T17129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17129 comm=syz.6.16529 [ 888.275058][T17181] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16551'. [ 888.861537][T17183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17183 comm=syz.9.16552 [ 889.868322][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 889.868338][ T28] audit: type=1400 audit(2000001470.876:8808): avc: denied { getattr } for pid=17197 comm="syz.9.16558" name="[io_uring]" dev="anon_inodefs" ino=217782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 890.134106][T17174] loop1: detected capacity change from 0 to 1024 [ 890.334681][T17174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.424599][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.503867][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16562'. [ 891.241949][T17244] loop1: detected capacity change from 0 to 1024 [ 891.251433][T17244] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 891.270616][T17244] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 891.290874][T17244] EXT4-fs error (device loop1): ext4_get_journal_inode:5863: comm syz.1.16576: inode #4294967295: comm syz.1.16576: iget: illegal inode # [ 891.330429][T17244] loop1: lost filesystem error report for type 5 error -117 [ 891.330621][T17244] EXT4-fs (loop1): no journal found [ 891.343711][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 891.343741][ C1] EXT4-fs (loop1): initial error at time 2000001472: ext4_get_journal_inode:5863 [ 891.343775][ C1] EXT4-fs (loop1): last error at time 2000001472: ext4_get_journal_inode:5863 [ 891.401580][T17244] EXT4-fs (loop1): can't get journal size [ 891.450729][T17244] EXT4-fs (loop1): failed to initialize system zone (-22) [ 891.458019][T17244] EXT4-fs (loop1): mount failed [ 891.597649][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16579'. [ 892.105860][T17270] loop1: detected capacity change from 0 to 1024 [ 892.189598][T17270] EXT4-fs: Ignoring removed bh option [ 892.234794][T17270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.264384][T17278] netlink: 'syz.9.16588': attribute type 4 has an invalid length. [ 892.289889][T17270] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.343003][T17279] netlink: 'syz.9.16588': attribute type 4 has an invalid length. [ 892.408583][T17281] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 4: comm syz.1.16586: lblock 4 mapped to illegal pblock 4 (length 2) [ 892.438640][T17278] hsr0: left promiscuous mode [ 892.448957][T17281] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 892.451333][T17278] bond1: left promiscuous mode [ 892.478450][T17281] EXT4-fs (loop1): This should not happen!! Data will be lost [ 892.478450][T17281] [ 892.514557][T17282] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.16586: lblock 0 mapped to illegal pblock 0 (length 4) [ 892.541023][T17282] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 892.550861][T17278] ip6erspan0: left promiscuous mode [ 892.562574][T17278] bond7: left promiscuous mode [ 892.567843][T17278] bridge4: left promiscuous mode [ 892.573684][T17278] geneve4: left promiscuous mode [ 892.578810][T17278] geneve4: left allmulticast mode [ 892.584455][T17278] bridge0: left promiscuous mode [ 892.591424][T17278] bridge0: left allmulticast mode [ 892.596670][T17278] team1: left promiscuous mode [ 892.601731][T17278] team1: left allmulticast mode [ 892.602272][T17282] EXT4-fs (loop1): This should not happen!! Data will be lost [ 892.602272][T17282] [ 892.607260][T17278] team2: left promiscuous mode [ 892.623604][T17278] team2: left allmulticast mode [ 892.628888][T17278] bridge6: left promiscuous mode [ 892.638431][T17278] bridge6: left allmulticast mode [ 892.656215][T17281] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm syz.1.16586: lblock 8 mapped to illegal pblock 8 (length 8) [ 892.684581][T17281] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 892.710757][T17278] bond10: left promiscuous mode [ 892.721526][T17278] bond11: left promiscuous mode [ 892.745967][T17281] EXT4-fs (loop1): This should not happen!! Data will be lost [ 892.745967][T17281] [ 892.758813][T17278] bridge14: left promiscuous mode [ 892.796542][T17282] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 7: comm syz.1.16586: lblock 7 mapped to illegal pblock 7 (length 1) [ 892.839331][T17282] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 892.858493][T17282] EXT4-fs (loop1): This should not happen!! Data will be lost [ 892.858493][T17282] [ 893.072010][ T9550] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:46: bg 0: block 112: padding at end of block bitmap is not set [ 893.110025][ T9550] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 385 with error 117 [ 893.899168][T17301] loop0: detected capacity change from 0 to 764 [ 894.302156][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16597'. [ 894.360228][T17315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16597'. [ 895.920750][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16608'. [ 895.939943][T17343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16608'. [ 895.997491][ T28] audit: type=1400 audit(2000001477.006:8809): avc: denied { watch watch_reads } for pid=17350 comm="syz.4.16612" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 896.064697][T17358] loop0: detected capacity change from 0 to 512 [ 896.092624][T17358] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.16614: corrupted xattr block 95: invalid header [ 896.116895][T17358] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 896.117285][T17358] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.16614: bg 0: block 7: invalid block bitmap [ 896.126975][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 896.127003][ C0] EXT4-fs (loop0): initial error at time 2000001477: ext4_expand_extra_isize_ea:2808: inode 11 [ 896.127049][ C0] EXT4-fs (loop0): last error at time 2000001477: ext4_expand_extra_isize_ea:2808: inode 11 [ 896.195347][T17358] loop0: lost filesystem error report for type 5 error -117 [ 896.195862][T17358] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 896.217942][T17358] loop0: lost filesystem error report for type 5 error -117 [ 896.218139][T17358] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #11: comm syz.0.16614: corrupted xattr block 95: invalid header [ 896.255537][T17358] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 896.257352][T17358] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 896.281786][T17368] bridge0: Device is already in use. [ 896.289909][T17358] EXT4-fs (loop0): 1 orphan inode deleted [ 896.296375][T17358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 896.420392][T14243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.448493][ T28] audit: type=1400 audit(2000001477.446:8810): avc: denied { read } for pid=17383 comm="syz.1.16620" path="socket:[217973]" dev="sockfs" ino=217973 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 896.631140][T17395] loop1: detected capacity change from 0 to 128 [ 896.656024][T17395] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 896.889342][T17407] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16628'. [ 896.942328][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16630'. [ 896.958283][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16630'. [ 897.023736][T17415] loop0: detected capacity change from 0 to 256 [ 897.071335][T17418] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 897.086403][ T28] audit: type=1326 audit(2000001478.096:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.113134][ T28] audit: type=1326 audit(2000001478.096:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.140355][ T28] audit: type=1326 audit(2000001478.096:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.167089][ T28] audit: type=1326 audit(2000001478.096:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.193764][ T28] audit: type=1326 audit(2000001478.096:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.219375][ T28] audit: type=1326 audit(2000001478.096:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.244543][ T28] audit: type=1326 audit(2000001478.096:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.294010][ T28] audit: type=1326 audit(2000001478.096:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17419 comm="syz.6.16634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 897.360283][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16638'. [ 897.369765][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16638'. [ 897.512371][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.512371][ T9550] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 897.528031][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.528031][ T9550] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 897.542763][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.542763][ T9550] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 897.558572][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.558572][ T9550] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 897.573490][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.573490][ T9550] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 897.635447][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.635447][ T9550] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 897.651378][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.651378][ T9550] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 897.665871][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.665871][ T9550] loop1: rw=1, sector=257, nr_sectors = 16 limit=128 [ 897.681610][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.681610][ T9550] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 897.696594][ T9550] kworker/u8:46: attempt to access beyond end of device [ 897.696594][ T9550] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 897.713578][ T9550] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 897.796436][T17444] lo speed is unknown, defaulting to 1000 [ 898.678029][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16653'. [ 898.697576][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16653'. [ 900.084793][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16683'. [ 900.156873][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.344749][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 902.344768][ T28] audit: type=1400 audit(2000001483.356:8923): avc: denied { write } for pid=17607 comm="syz.1.16707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 902.779936][T17628] __nla_validate_parse: 4 callbacks suppressed [ 902.779953][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16715'. [ 902.797208][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16715'. [ 902.811291][T17628] loop0: detected capacity change from 0 to 512 [ 902.848376][T17628] ext4: Unknown parameter 'noacl' [ 902.905891][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16717'. [ 902.915839][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16717'. [ 902.927880][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16717'. [ 902.937441][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16717'. [ 902.962180][ T28] audit: type=1400 audit(2000001483.976:8924): avc: denied { bind } for pid=17635 comm="syz.0.16718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 904.161615][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16729'. [ 904.180837][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16729'. [ 904.239860][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16729'. [ 904.249691][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16729'. [ 904.885116][T17677] netlink: 'syz.1.16736': attribute type 22 has an invalid length. [ 904.929526][T17677] netlink: 'syz.1.16736': attribute type 22 has an invalid length. [ 904.931817][ T9559] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.960613][ T9559] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.973703][ T9559] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 904.991505][ T9559] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 905.365240][T17696] loop0: detected capacity change from 0 to 512 [ 905.436491][T17696] EXT4-fs (loop0): 1 orphan inode deleted [ 905.443224][T17696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.456928][ T7891] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 905.477925][ T7891] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:29: Failed to release dquot type 1 [ 905.491548][ T7891] loop0: lost filesystem error report for type 5 error -117 [ 905.492572][T17696] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.709416][T14243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 905.793597][ T28] audit: type=1326 audit(2000001486.806:8925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.16747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 905.851238][ T28] audit: type=1326 audit(2000001486.806:8926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.16747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 905.886388][ T28] audit: type=1326 audit(2000001486.836:8927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.16747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 905.949330][ T28] audit: type=1326 audit(2000001486.836:8928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.16747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 906.000374][ T28] audit: type=1326 audit(2000001486.836:8929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.16747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 906.035207][ T28] audit: type=1326 audit(2000001486.836:8930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17710 comm="syz.0.16747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f55e5d9cfce code=0x7ffc0000 [ 906.075865][ T28] audit: type=1326 audit(2000001486.846:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17708 comm="syz.0.16747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f55e5ddc799 code=0x7ffc0000 [ 906.774996][T17777] netlink: 'syz.0.16775': attribute type 1 has an invalid length. [ 906.799934][T17777] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 906.810817][T17777] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 906.824214][T17777] bond1: (slave ip6gre2): making interface the new active one [ 906.833049][T17777] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 907.006575][T17791] loop1: detected capacity change from 0 to 1024 [ 907.037945][T17791] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 907.058050][T17791] System zones: 0-1, 3-36 [ 907.070452][T17791] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.16781: bad orphan inode 134217728 [ 907.157735][T17791] loop1: lost filesystem error report for type 5 error -117 [ 907.158412][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 907.173094][ C1] EXT4-fs (loop1): initial error at time 2000001488: ext4_orphan_get:1417 [ 907.181953][ C1] EXT4-fs (loop1): last error at time 2000001488: ext4_orphan_get:1417 [ 907.193432][T17791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.433366][T17799] vlan1: entered allmulticast mode [ 907.440443][T17799] bridge_slave_0: entered allmulticast mode [ 907.689829][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 907.689847][ T28] audit: type=1400 audit(2000001488.706:8944): avc: denied { accept } for pid=17802 comm="syz.4.16785" path="socket:[219590]" dev="sockfs" ino=219590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 907.757357][ T28] audit: type=1326 audit(2000001488.766:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.4.16788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 907.794383][ T28] audit: type=1326 audit(2000001488.766:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.4.16788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 907.890287][ T28] audit: type=1326 audit(2000001488.766:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.4.16788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 907.960588][ T28] audit: type=1326 audit(2000001488.766:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.4.16788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 908.026970][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.037926][ T28] audit: type=1326 audit(2000001488.766:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.4.16788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 909.066529][T17846] lo speed is unknown, defaulting to 1000 [ 909.912539][ T28] audit: type=1400 audit(2000001490.926:8950): avc: denied { bind } for pid=17855 comm="syz.4.16805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 909.963667][T17860] __nla_validate_parse: 7 callbacks suppressed [ 909.963757][T17860] netlink: 1472 bytes leftover after parsing attributes in process `syz.9.16807'. [ 910.003296][T17860] netlink: 1472 bytes leftover after parsing attributes in process `syz.9.16807'. [ 910.553827][T17887] erspan0: entered promiscuous mode [ 910.568127][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16819'. [ 910.658269][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16821'. [ 910.681339][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16821'. [ 911.728326][T17948] loop1: detected capacity change from 0 to 1024 [ 912.397231][T17948] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 912.565270][T17948] System zones: 0-1, 3-36 [ 913.005736][T17948] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.16839: bad orphan inode 134217728 [ 913.027808][T17948] loop1: lost filesystem error report for type 5 error -117 [ 913.338038][T17948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.617592][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16857'. [ 913.706419][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.780129][T18008] veth0: Caught tx_queue_len zero misconfig [ 913.802794][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16863'. [ 913.839317][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16863'. [ 913.840200][T18010] loop1: detected capacity change from 0 to 1024 [ 913.871766][T18010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.994682][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.306395][T18029] bond2: entered promiscuous mode [ 915.091932][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16875'. [ 915.780498][ T28] audit: type=1326 audit(2000001496.796:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18068 comm="syz.9.16886" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad0c05c799 code=0x0 [ 915.844553][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16888'. [ 915.854735][T18073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16888'. [ 915.979503][ T28] audit: type=1400 audit(2000001496.996:8952): avc: denied { read } for pid=18079 comm="syz.6.16891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 916.365950][T18040] lo speed is unknown, defaulting to 1000 [ 917.603076][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16904'. [ 917.660282][T18114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16904'. [ 919.476129][ T28] audit: type=1326 audit(2000001500.486:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 919.588328][ T28] audit: type=1326 audit(2000001500.486:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 919.702554][ T28] audit: type=1326 audit(2000001500.486:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 919.800176][ T28] audit: type=1326 audit(2000001500.486:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 919.868438][ T28] audit: type=1326 audit(2000001500.516:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 919.958429][ T28] audit: type=1326 audit(2000001500.516:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 920.029780][ T28] audit: type=1326 audit(2000001500.556:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 920.054595][ T28] audit: type=1326 audit(2000001500.566:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18142 comm="syz.4.16916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae509bc799 code=0x7ffc0000 [ 920.522776][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16928'. [ 921.850728][T18224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16949'. [ 921.926485][T18229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16951'. [ 922.191422][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 922.191513][ T28] audit: type=1326 audit(2000001503.206:9028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.261336][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16956'. [ 922.272512][T18243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16956'. [ 922.309638][ T28] audit: type=1326 audit(2000001503.256:9029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.335372][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16957'. [ 922.335400][T18245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16957'. [ 922.367970][T18245] loop1: detected capacity change from 0 to 1024 [ 922.409553][ T28] audit: type=1326 audit(2000001503.256:9030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.430455][T18245] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 922.466585][T18245] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 922.478957][ T28] audit: type=1326 audit(2000001503.256:9031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.494201][T18245] EXT4-fs (loop1): invalid journal inode [ 922.528495][T18245] EXT4-fs (loop1): can't get journal size [ 922.549745][T18245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 922.552450][ T28] audit: type=1326 audit(2000001503.256:9032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.591617][T18245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16957'. [ 922.608758][ T28] audit: type=1326 audit(2000001503.256:9033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.640622][ T28] audit: type=1326 audit(2000001503.266:9034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.668325][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.678100][ T28] audit: type=1326 audit(2000001503.266:9035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.703882][ T28] audit: type=1326 audit(2000001503.266:9036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.730255][ T28] audit: type=1326 audit(2000001503.266:9037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18237 comm="syz.6.16954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f23f8c799 code=0x7ffc0000 [ 922.924304][T18257] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16961'. [ 923.866059][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16978'. [ 925.107629][T18326] lo speed is unknown, defaulting to 1000 [ 925.192808][T18352] netlink: 'syz.0.17000': attribute type 13 has an invalid length. [ 925.737865][T18373] __nla_validate_parse: 1 callbacks suppressed [ 925.737886][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17007'. [ 925.863471][T18373] vlan1: entered allmulticast mode [ 926.002885][T18373] bridge_slave_0: entered allmulticast mode [ 926.550218][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.9.17015'. [ 926.731055][T18371] lo speed is unknown, defaulting to 1000 [ 928.609660][T18412] lo speed is unknown, defaulting to 1000 [ 929.346349][T18443] loop1: detected capacity change from 0 to 512 [ 929.360511][T18443] EXT4-fs: Ignoring removed nobh option [ 929.379231][T18443] EXT4-fs (loop1): orphan cleanup on readonly fs [ 929.385902][T18443] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.17033: EA inode hash validation failed [ 929.407093][T18443] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 929.446304][T18443] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.17033: corrupted inode contents [ 929.487219][T18443] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 929.488401][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 929.504323][ C0] EXT4-fs (loop1): initial error at time 2000001510: ext4_do_update_inode:5569: inode 15 [ 929.514476][ C0] EXT4-fs (loop1): last error at time 2000001510: ext4_do_update_inode:5569: inode 15 [ 929.525504][T18443] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.17033: mark_inode_dirty error [ 929.537397][T18443] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 929.538620][T18443] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.17033: corrupted inode contents [ 929.568539][T18443] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 929.568822][T18443] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.17033: mark_inode_dirty error [ 929.619147][T18443] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 929.619479][T18443] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.17033: mark inode dirty (error -117) [ 929.642960][T18443] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 929.643147][T18443] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 929.662664][T18443] EXT4-fs (loop1): 1 orphan inode deleted [ 929.673185][T18443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 929.823903][T13393] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 930.347895][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17042'. [ 930.367768][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17042'. [ 930.372200][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17043'. [ 930.413479][T18466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17043'. [ 930.493501][T18474] netlink: 'syz.0.17047': attribute type 1 has an invalid length. [ 930.570470][T18482] loop1: detected capacity change from 0 to 256 [ 930.646896][T18474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 930.696180][T18481] bond3: (slave veth5): Enslaving as an active interface with a down link [ 930.748810][T18484] bond3: (slave dummy0): making interface the new active one [ 930.790027][T18484] dummy0: entered promiscuous mode [ 930.795710][T18484] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 930.832495][T18486] bond3 (unregistering): (slave veth5): Releasing active interface [ 930.856307][T18486] bond3 (unregistering): (slave dummy0): Releasing active interface [ 930.876316][T18486] bond3 (unregistering): Released all slaves [ 932.161401][T18525] lo speed is unknown, defaulting to 1000 [ 932.209471][ T3384] IPVS: starting estimator thread 0... [ 932.299204][T18528] IPVS: using max 1680 ests per chain, 84000 per kthread [ 932.573703][T18539] lo speed is unknown, defaulting to 1000 [ 932.601393][T18542] geneve1: entered promiscuous mode [ 933.397719][T18541] lo speed is unknown, defaulting to 1000 [ 934.594334][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 934.594387][ T28] audit: type=1400 audit(2000001515.606:9128): avc: denied { write } for pid=18613 comm="syz.1.17093" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 935.568829][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 936.454875][T18650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17109'. [ 936.499947][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17109'. [ 936.874448][ T28] audit: type=1400 audit(2000001517.886:9129): avc: denied { append } for pid=18667 comm="syz.1.17117" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 936.909112][T18670] netlink: 'syz.4.17116': attribute type 4 has an invalid length. [ 936.926838][T18670] netlink: 'syz.4.17116': attribute type 4 has an invalid length. [ 936.950115][ T3395] lo speed is unknown, defaulting to 1000 [ 936.955924][ T3395] syz2: Port: 1 Link ACTIVE [ 936.968495][T26520] lo speed is unknown, defaulting to 1000 [ 936.989125][T18672] macvlan0: left allmulticast mode [ 937.005696][T18672] ip6erspan0: left promiscuous mode [ 937.017983][T18672] bond4: left promiscuous mode [ 937.033757][T18672] bridge6: left promiscuous mode [ 937.044476][T18672] macvtap1: left promiscuous mode [ 937.084869][T18672] macvtap1: left allmulticast mode [ 937.105451][T18672] team1: left promiscuous mode [ 937.123393][T18672] team1: left allmulticast mode [ 937.134826][T18672] team2: left promiscuous mode [ 937.164092][T18672] team2: left allmulticast mode [ 937.185177][T18672] bridge9: left promiscuous mode [ 937.206864][T18672] bridge9: left allmulticast mode [ 937.228192][T18672] bond6: left promiscuous mode [ 937.256471][T18672] bridge11: left promiscuous mode [ 937.282097][T18672] bond7: left promiscuous mode [ 937.303906][T18672] vti0: left promiscuous mode [ 937.346304][T18672] bridge0: left promiscuous mode [ 937.357724][T18672] macvlan2: left promiscuous mode [ 937.382684][T26520] lo speed is unknown, defaulting to 1000 [ 937.409443][T26520] syz2: Port: 1 Link DOWN [ 937.419254][ T28] audit: type=1400 audit(2000001518.436:9130): avc: denied { nlmsg_write } for pid=18673 comm="syz.6.17118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 937.454004][T26520] lo speed is unknown, defaulting to 1000 [ 937.526635][T18674] lo speed is unknown, defaulting to 1000 [ 937.581224][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17122'. [ 938.412697][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17129'. [ 938.962925][T18716] netlink: 'syz.1.17133': attribute type 4 has an invalid length. [ 938.999259][T18716] netlink: 'syz.1.17133': attribute type 4 has an invalid length. [ 939.069285][T18716] bond1: left promiscuous mode [ 939.101962][T18716] macvlan2: left promiscuous mode [ 939.171986][ T9559] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.201337][ T9559] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.238575][ T9559] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.279307][ T9559] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.321464][T18719] loop1: detected capacity change from 0 to 128 [ 939.351882][T18719] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 939.386230][T18719] ext4 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 940.156270][T13393] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 941.219181][T18737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17138'. [ 941.420316][T18750] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17144'. [ 941.505932][T18750] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 943.204244][ T28] audit: type=1326 audit(2000001524.216:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18829 comm="syz.1.17174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x0 [ 943.282736][T18834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17176'. [ 944.256403][T18838] syz.4.17177 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 944.317300][T18838] CPU: 0 UID: 0 PID: 18838 Comm: syz.4.17177 Tainted: G W syzkaller #0 PREEMPT(full) [ 944.317345][T18838] Tainted: [W]=WARN [ 944.317370][T18838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 944.317389][T18838] Call Trace: [ 944.317397][T18838] [ 944.317407][T18838] __dump_stack+0x1d/0x30 [ 944.317442][T18838] dump_stack_lvl+0x95/0xd0 [ 944.317475][T18838] dump_stack+0x15/0x1b [ 944.317575][T18838] dump_header+0x80/0x240 [ 944.317665][T18838] oom_kill_process+0x295/0x350 [ 944.317695][T18838] out_of_memory+0x97d/0xb80 [ 944.317789][T18838] try_charge_memcg+0x62e/0xa10 [ 944.317842][T18838] obj_cgroup_charge_pages+0x23/0xc0 [ 944.317880][T18838] __memcg_kmem_charge_page+0x9e/0x170 [ 944.317933][T18838] __alloc_frozen_pages_noprof+0x18a/0x360 [ 944.317972][T18838] alloc_pages_mpol+0xb3/0x260 [ 944.318040][T18838] alloc_pages_noprof+0x8f/0x130 [ 944.318105][T18838] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 944.318159][T18838] __kvmalloc_node_noprof+0x3d4/0x650 [ 944.318226][T18838] ? futex_hash_allocate+0x190/0x9d0 [ 944.318269][T18838] ? futex_hash_allocate+0x190/0x9d0 [ 944.318311][T18838] futex_hash_allocate+0x190/0x9d0 [ 944.318400][T18838] ? cap_task_prctl+0x13f/0x6e0 [ 944.318453][T18838] futex_hash_prctl+0xd8/0xf0 [ 944.318550][T18838] __se_sys_prctl+0xa3d/0x13f0 [ 944.318591][T18838] __x64_sys_prctl+0x67/0x80 [ 944.318627][T18838] x64_sys_call+0x2533/0x3020 [ 944.318708][T18838] do_syscall_64+0x12c/0x370 [ 944.318809][T18838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.318837][T18838] RIP: 0033:0x7fae509bc799 [ 944.318913][T18838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.319016][T18838] RSP: 002b:00007fae4f40f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 944.319043][T18838] RAX: ffffffffffffffda RBX: 00007fae50c35fa0 RCX: 00007fae509bc799 [ 944.319062][T18838] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 944.319149][T18838] RBP: 00007fae50a52c99 R08: 0000000000000000 R09: 0000000000000000 [ 944.319167][T18838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.319183][T18838] R13: 00007fae50c36038 R14: 00007fae50c35fa0 R15: 00007fffbb08d3b8 [ 944.319211][T18838] [ 944.653945][T18838] memory: usage 307200kB, limit 307200kB, failcnt 771 [ 944.664774][T18838] memory+swap: usage 308480kB, limit 9007199254740988kB, failcnt 0 [ 944.687228][T18838] kmem: usage 306940kB, limit 9007199254740988kB, failcnt 0 [ 944.696102][T18838] Memory cgroup stats for /syz4: [ 944.696368][T18838] cache 0 [ 944.706184][T18838] rss 0 [ 944.710250][T18838] shmem 0 [ 944.713518][T18838] mapped_file 0 [ 944.717347][T18838] dirty 0 [ 944.721739][T18838] writeback 0 [ 944.725137][T18838] workingset_refault_anon 2919 [ 944.730590][T18838] workingset_refault_file 602 [ 944.735763][T18838] swap 1310720 [ 944.739532][T18838] swapcached 53776384 [ 944.743999][T18838] pgpgin 918643 [ 944.748118][T18838] pgpgout 918619 [ 944.752774][T18838] pgfault 731129 [ 944.756807][T18838] pgmajfault 571 [ 944.760787][T18838] inactive_anon 86016 [ 944.765083][T18838] active_anon 8192 [ 944.769487][T18838] inactive_file 4096 [ 944.773525][T18838] active_file 0 [ 944.777241][T18838] unevictable 0 [ 944.781922][T18838] hierarchical_memory_limit 314572800 [ 944.787975][T18838] hierarchical_memsw_limit 9223372036854771712 [ 944.795121][T18838] total_cache 0 [ 944.799124][T18838] total_rss 0 [ 944.802435][T18838] total_shmem 0 [ 944.806945][T18838] total_mapped_file 0 [ 944.812894][T18838] total_dirty 0 [ 944.816680][T18838] total_writeback 0 [ 944.825190][T18838] total_workingset_refault_anon 2919 [ 944.830869][T18838] total_workingset_refault_file 602 [ 944.836390][T18838] total_swap 1310720 [ 944.841547][T18838] total_swapcached 53776384 [ 944.846222][T18838] total_pgpgin 918643 [ 944.851696][T18838] total_pgpgout 918619 [ 944.856800][T18838] total_pgfault 731129 [ 944.861362][T18838] total_pgmajfault 571 [ 944.865596][T18838] total_inactive_anon 86016 [ 944.871225][T18838] total_active_anon 8192 [ 944.875866][T18838] total_inactive_file 4096 [ 944.880523][T18838] total_active_file 0 [ 944.884566][T18838] total_unevictable 0 [ 944.888951][T18838] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.17177,pid=18837,uid=0 [ 944.906320][T18838] Memory cgroup out of memory: Killed process 18837 (syz.4.17177) total-vm:96212kB, anon-rss:1224kB, file-rss:22408kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 945.965941][ T28] audit: type=1400 audit(2000001526.976:9132): avc: denied { setattr } for pid=18876 comm="syz.0.17191" name="file0" dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 946.559279][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.17194'. [ 947.496730][ T28] audit: type=1326 audit(2000001528.506:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 947.577655][ T28] audit: type=1326 audit(2000001528.506:9134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 947.642444][T18915] 9p: Bad value for 'rfdno' [ 947.659475][ T28] audit: type=1326 audit(2000001528.506:9135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 947.734364][ T28] audit: type=1326 audit(2000001528.506:9136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 947.794075][ T28] audit: type=1326 audit(2000001528.506:9137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 947.873913][ T28] audit: type=1326 audit(2000001528.506:9138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 947.935695][ T28] audit: type=1326 audit(2000001528.506:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 947.992498][ T28] audit: type=1326 audit(2000001528.506:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18904 comm="syz.1.17203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a221c799 code=0x7ffc0000 [ 948.039915][T18927] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17211'. [ 950.293857][T18992] 9p: Bad value for 'rfdno' [ 951.815572][T19056] pimreg: entered allmulticast mode [ 951.859798][T19056] pimreg: left allmulticast mode [ 951.969253][T19064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17256'. [ 952.060070][T19068] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 952.079125][T19068] netlink: 'syz.9.17258': attribute type 3 has an invalid length. [ 952.087260][T19068] netlink: 24 bytes leftover after parsing attributes in process `syz.9.17258'. [ 952.096805][T19068] ------------[ cut here ]------------ [ 952.103524][T19068] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 952.116069][T19068] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.9.17258/19068 [ 952.127033][T19068] Modules linked in: [ 952.132205][T19068] CPU: 0 UID: 0 PID: 19068 Comm: syz.9.17258 Tainted: G W syzkaller #0 PREEMPT(full) [ 952.143679][T19068] Tainted: [W]=WARN [ 952.147519][T19068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.158296][T19068] RIP: 0010:u32_change+0x1463/0x14d0 [ 952.164695][T19068] Code: 31 ed e9 96 fe ff ff e8 1b 05 c2 fc 48 8d 3d 24 3a 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 30 61 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 952.185493][T19068] RSP: 0018:ffffc900018f75e0 EFLAGS: 00010283 [ 952.185936][ T2989] ================================================================== [ 952.193931][T19068] RAX: ffffffff84975a05 RBX: ffffc900018f77f0 RCX: 0000000000000010 [ 952.200642][ T2989] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 952.209803][T19068] RDX: ffffffff867e6130 RSI: 0000000000000020 RDI: ffffffff87209430 [ 952.216809][ T2989] [ 952.216820][ T2989] write to 0xffffffff86c80ae0 of 8 bytes by task 19068 on cpu 0: [ 952.227701][T19068] RBP: ffffc900018f76e8 R08: 0001888125024287 R09: 0000000000000000 [ 952.228628][ T2989] data_alloc+0x310/0x390 [ 952.228674][ T2989] prb_reserve+0x8d7/0xae0 [ 952.236672][T19068] R10: ffff888125024200 R11: 0001c900018f7357 R12: ffff888103013f00 [ 952.245108][ T2989] vprintk_store+0x54a/0x910 [ 952.245140][ T2989] vprintk_emit+0x1a4/0x600 [ 952.245162][ T2989] vprintk_default+0x26/0x30 [ 952.251396][T19068] R13: 0000000000000001 R14: 0000000000000020 R15: ffff888103013fc0 [ 952.254306][ T2989] vprintk+0x1d/0x30 [ 952.262889][T19068] FS: 00007fad0aaaf6c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 952.267460][ T2989] _printk+0x79/0xa0 [ 952.272352][T19068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 952.276959][ T2989] __show_regs+0x2a/0x420 [ 952.276994][ T2989] show_regs+0x36/0x60 [ 952.277010][ T2989] __warn+0x159/0x360 [ 952.286853][T19068] CR2: 0000001b2f21fff8 CR3: 000000018f0ec000 CR4: 00000000003506f0 [ 952.289364][ T2989] __report_bug+0x241/0x490 [ 952.289395][ T2989] report_bug_entry+0xb2/0x100 [ 952.289420][ T2989] handle_bug+0xce/0x200 [ 952.289447][ T2989] exc_invalid_op+0x1a/0x50 [ 952.298973][T19068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 952.302828][ T2989] asm_exc_invalid_op+0x1a/0x20 [ 952.302854][ T2989] u32_change+0x1463/0x14d0 [ 952.302876][ T2989] tc_new_tfilter+0xfc0/0x1200 [ 952.311310][T19068] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 952.314098][ T2989] rtnetlink_rcv_msg+0x64b/0x720 [ 952.318198][T19068] Call Trace: [ 952.318210][T19068] [ 952.322370][ T2989] netlink_rcv_skb+0x123/0x220 [ 952.322409][ T2989] rtnetlink_rcv+0x1c/0x30 [ 952.331033][T19068] tc_new_tfilter+0xfc0/0x1200 [ 952.335649][ T2989] netlink_unicast+0x5c0/0x690 [ 952.342489][T19068] ? ns_capable+0x7c/0xb0 [ 952.345275][ T2989] netlink_sendmsg+0x5c8/0x6f0 [ 952.345312][ T2989] ____sys_sendmsg+0x563/0x5b0 [ 952.345341][ T2989] ___sys_sendmsg+0x195/0x1e0 [ 952.350037][T19068] ? __pfx_tc_new_tfilter+0x10/0x10 [ 952.358021][ T2989] __sys_sendmmsg+0x185/0x320 [ 952.363127][T19068] rtnetlink_rcv_msg+0x64b/0x720 [ 952.367504][ T2989] __x64_sys_sendmmsg+0x57/0x70 [ 952.374258][T19068] ? avc_has_perm_noaudit+0xab/0x130 [ 952.380674][ T2989] x64_sys_call+0x27aa/0x3020 [ 952.380716][ T2989] do_syscall_64+0x12c/0x370 [ 952.385780][T19068] netlink_rcv_skb+0x123/0x220 [ 952.389157][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.389191][ T2989] [ 952.389200][ T2989] read to 0xffffffff86c80ae0 of 16 bytes by task 2989 on cpu 1: [ 952.392261][T19068] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 952.397050][ T2989] _prb_read_valid+0x1bc/0x950 [ 952.403435][T19068] rtnetlink_rcv+0x1c/0x30 [ 952.406621][ T2989] prb_read_valid+0x3c/0x60 [ 952.411651][T19068] netlink_unicast+0x5c0/0x690 [ 952.415948][ T2989] syslog_print+0x109/0x560 [ 952.420921][T19068] netlink_sendmsg+0x5c8/0x6f0 [ 952.425768][ T2989] do_syslog+0x52b/0x7f0 [ 952.425789][ T2989] __x64_sys_syslog+0x41/0x50 [ 952.425808][ T2989] x64_sys_call+0x2b9e/0x3020 [ 952.433300][T19068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.437095][ T2989] do_syscall_64+0x12c/0x370 [ 952.442222][T19068] ____sys_sendmsg+0x563/0x5b0 [ 952.447219][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.452756][T19068] ___sys_sendmsg+0x195/0x1e0 [ 952.457560][ T2989] [ 952.457570][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 952.464465][T19068] __sys_sendmmsg+0x185/0x320 [ 952.467486][ T2989] CPU: 1 UID: 0 PID: 2989 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 952.472942][T19068] __x64_sys_sendmmsg+0x57/0x70 [ 952.478916][ T2989] Tainted: [W]=WARN [ 952.478927][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.478944][ T2989] ================================================================== [ 952.621953][T19068] x64_sys_call+0x27aa/0x3020 [ 952.627320][T19068] do_syscall_64+0x12c/0x370 [ 952.633113][T19068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.640194][T19068] RIP: 0033:0x7fad0c05c799 [ 952.645412][T19068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.665960][T19068] RSP: 002b:00007fad0aaaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 952.675383][T19068] RAX: ffffffffffffffda RBX: 00007fad0c2d5fa0 RCX: 00007fad0c05c799 [ 952.683591][T19068] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 952.692718][T19068] RBP: 00007fad0c0f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 952.702131][T19068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.710953][T19068] R13: 00007fad0c2d6038 R14: 00007fad0c2d5fa0 R15: 00007fff14a6c3a8 [ 952.719500][T19068] [ 952.722752][T19068] ---[ end trace 0000000000000000 ]--- [ 952.959784][T19068] netlink: 2 bytes leftover after parsing attributes in process `syz.9.17258'.