last executing test programs: 2.827327148s ago: executing program 3 (id=2026): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe77, 0x7400}, 0x20044880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b", 0x10}], 0x1}, 0x4040014) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 2.674069094s ago: executing program 3 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x200, 0x0, 0xfffd}}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}}, 0x4000000) 1.916000212s ago: executing program 2 (id=2041): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) timer_create(0x8, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") renameat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="48000000200001002dbd7000f9dbdf2502"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x44046084) 1.910475443s ago: executing program 4 (id=2042): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, 0x0) pread64(r2, 0x0, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) 1.83708943s ago: executing program 4 (id=2043): mprotect(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x300001b) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'trusted.', '%+(:,\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) syz_open_dev$evdev(0x0, 0x3, 0x40) pipe(&(0x7f0000000880)={0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, 0x0) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.750429309s ago: executing program 3 (id=2044): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x70, 0x10, 0x403, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_LOCAL={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 1.680061076s ago: executing program 4 (id=2045): open(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x200000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1.267015679s ago: executing program 1 (id=2048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) 1.228416653s ago: executing program 4 (id=2050): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r2) socket$caif_stream(0x25, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x9000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 1.202398566s ago: executing program 1 (id=2051): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1.144787272s ago: executing program 3 (id=2052): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000140), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x7, 0x8, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x11) getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1.050290422s ago: executing program 1 (id=2053): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB], 0x9e4}, 0x1, 0x0, 0x0, 0xc005}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x98}, 0x1, 0x7}, 0x8890) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000403, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 979.730569ms ago: executing program 1 (id=2054): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x7800, 0x700, 0x385, 0x6, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x66, 0x0, 0xe, 0x29, 0x0, @remote, @private=0xa010100, {[@timestamp_addr={0x44, 0x4, 0x37, 0x1, 0xf}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x400c0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') 938.347303ms ago: executing program 2 (id=2055): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 921.735365ms ago: executing program 1 (id=2056): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) eventfd2(0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r4, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100"], 0x2ac}}, 0x0) 879.744209ms ago: executing program 0 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x40) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 822.578025ms ago: executing program 4 (id=2058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x3, 0x0, {0x2, 0x20, 0xa, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x480d0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}}, 0x0) 616.171146ms ago: executing program 1 (id=2059): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "43a500000c8b36"}, 0x12) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 615.774106ms ago: executing program 2 (id=2060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bind$can_j1939(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x2a, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0d"}}, 0x38) 615.520166ms ago: executing program 0 (id=2061): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 614.215426ms ago: executing program 4 (id=2062): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007", @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 538.460084ms ago: executing program 0 (id=2063): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r3}, 0x10) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x9) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 537.707344ms ago: executing program 0 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x4004001) unshare(0x64000600) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={r1}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xa}, 0x10) close(r3) 507.212838ms ago: executing program 2 (id=2065): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000180)={[{@errors_continue}, {@init_itable_val}, {@minixdf}, {@jqfmt_vfsv0}, {@prjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@barrier_val={'barrier', 0x3d, 0xb}}, {@errors_remount}, {@auto_da_alloc}, {@noblock_validity}, {@nodiscard}]}, 0x1, 0x475, &(0x7f0000000780)="$eJzs289vFFUcAPDvTLeAgGxFREGQKpo0/mhpQeVgYjSaeNDERA94rG0hyEINrYmQRqsxeDQk3o1HE/8CT56MejLxikcTQ0KUmIheXDO7M6VddssubNna/XySoe/NvHk/dubNvn2PCaBvDWf/JBHbI+JSRJTr0ZUJhut/rl1dmPr76sJUEtXqG78ntXR/XV2YquaK87bleY6kEeknSV5IDC7Pdu7c+VOTlcrM2Tw+Nn/63bG5c+efOnl68sTMiZkzE0ePHjk8/uwzE083qfWvFztq5ED+d+8Hs/v2vPLWxdemjl18+4evs/ru3l8/lLWjozzbMJw1/I/6Z9N47LFuF9Zj/1avtzMp9bo2tCvrGqW8c16KcgzE9YtXjpc/7mnlgDWVPbM3tz68WAU2sCR6XQOgN4ov+uz3b7HdoaHHunDlhfoPoKzd1/KtfqQUaZ5mcA3LH46IY4v/fJFt0TAPUW0ybwAAcLu+zcY/TzYb/6Wxe1m6Hfna0FBE3BMROyPi3ojYFRH3RdTS3h8RD3RY/nBD/MbxZ3r5lhrWpmz891y+trVy/FeM/mJoII/dXWv/YHL8ZGXmUP6ZjMTg5iw+3izzIouXfv6sVfnLx3/ZlpVfjAXzTC6X6hN0W4o905Pzk90alF75KGJvqVn7k6WVgCQi9kTE3s6y3lEETj7+1b5WiW7e/lV0YZ2p+mWRycJiNLS/kKy+Pjm2JSozh8aKu+JGP/504fVW5d9W+7sgu/5bV97/DSnKfybL12vnlg48324ZF375tOVvylL79/+S7P7flLxZW7PelO97f3J+/ux4xKbk1Vp8xf6J6+cW8SJ91v6Rg837/878nKz9D0ZEdhPvj4iHIuJAfu0ejohHIuLgKu3//sVH32l1bD1c/+mmz7+l+39o5fXvPDBw6rtvWpXf3vPvSC00ku+pPf9uonV1isdotufY3K1+bgAAAPB/kkbE9kjS0aVwmo6O1v8P/67YmlZm5+afOD773pnp+jsCQzGYFjNd5WXzoePJYp5jPT6RzxUXxw/n88afD9xVi49OzVame9x26HfbWvT/zG8Dva4dsOa8rwX9q7H/pz2qB3Dn+f6H/qX/Q/+6of97IEDfaNbdP2yIWwuAjaha7vgUE4SwYRjuQ//S/6F/6f/Ql27nvf61CpRWeXtfoMeBrRFRC0S6LuqzbgIH1lFvKnWhd/f4wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAl/wUAAP//xgL2dQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000001080)={0x7, 0xfff, 0x3, 0x50d, 0xfffffffb}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002f80)=@newtfilter={0x4a0, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x470, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0xd}, @TCA_FLOW_POLICE={0x44c, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0xc, 0x0, 0x9, 0x0, 0x1ff, 0x3, 0x2, 0x5, 0x5, 0x8, 0x8, 0x8001, 0x0, 0x10000, 0xffffff92, 0xfffffffb, 0x2, 0x9569, 0x2, 0x7b9d, 0x0, 0x401, 0x4, 0x0, 0x100, 0x4, 0xa0, 0x3, 0x91, 0x9, 0x0, 0x0, 0x1000, 0xfd81, 0xf35, 0x4, 0x9, 0xfff, 0x40, 0xfffffffa, 0x80, 0x7, 0xfffffffb, 0x0, 0x1, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x0, 0x7, 0x1000, 0x258b, 0x8000, 0xffffa30c, 0x4, 0x3, 0x144, 0x0, 0x2, 0x77, 0x347, 0x7ff, 0x2, 0x5, 0x101, 0x400, 0xffff, 0x1f2, 0x800000, 0x5, 0x3fa6, 0xc, 0x8, 0x100, 0x2, 0x530, 0x7fff, 0x2142, 0x7, 0x200, 0x3, 0x3, 0x1, 0xf5e, 0xe5, 0x2, 0x394, 0x2de, 0x9b, 0x2, 0x7, 0x1b, 0xa1c, 0x4, 0x40, 0x9, 0x0, 0x1, 0x4, 0x100, 0xad2, 0x1, 0x8, 0x7, 0xd, 0x4, 0x9, 0x4, 0x9, 0xfffffff8, 0x5, 0x4, 0x4, 0x4, 0x4, 0x1, 0x2, 0x53, 0x7fff, 0x9, 0xffffff5a, 0x7, 0x8, 0x2a, 0x1, 0x80000001, 0x1d, 0x9, 0x5, 0x9, 0x2, 0x8, 0xfffffffc, 0x4, 0xd, 0x4, 0x3, 0x81, 0x0, 0x5, 0x4b, 0x7, 0x4, 0x2, 0x4, 0x0, 0x9, 0x2, 0x4, 0xf, 0x8, 0x3, 0x9, 0x10001, 0x8, 0x79d, 0xffffffff, 0x9, 0x3ff, 0x8, 0xf, 0xfffffff7, 0x1a, 0x6, 0x3, 0x5, 0x7, 0x2, 0x2, 0x2, 0x7, 0x1, 0xb, 0xf, 0x3, 0x2, 0x89, 0x3f8bbc88, 0xe2, 0x8, 0x4, 0x1, 0x15b1, 0x8, 0x3ff, 0x53, 0x4, 0x7, 0x9, 0x4, 0x1, 0x1000, 0x4, 0x6, 0x5, 0x0, 0x6, 0xffff, 0x6, 0x5, 0xff, 0x0, 0x9, 0x1, 0x6, 0x80, 0x0, 0xef, 0x10000000, 0xfafa6e94, 0x200, 0x4, 0x3, 0x6, 0x0, 0x101, 0xfff, 0x80000000, 0x4, 0xd, 0x2, 0x75, 0x0, 0x8001, 0xa0000, 0x200, 0x7, 0x7, 0x6, 0x2, 0x1, 0x6, 0x6, 0x9c6, 0x1, 0x0, 0x9, 0xfffff77d, 0x2, 0x5, 0x13, 0x0, 0x1, 0x2, 0x7, 0x71, 0xe1, 0x6af9, 0x80000001, 0x9, 0x3, 0x9e4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x20000000, 0x8, 0x60180f18, 0x2, {0x0, 0x0, 0x1, 0x4, 0x9, 0x80000000}, {0xb4, 0x1, 0x1, 0x2, 0xffff, 0xfffffff9}, 0xffff, 0x0, 0x8}}]}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_XOR={0x8, 0x7, 0x6}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16084}]}}]}, 0x4a0}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 357.147043ms ago: executing program 0 (id=2066): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x9, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0xff28) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_init() 320.990997ms ago: executing program 0 (id=2067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=ANY=[@ANYBLOB="240000001800010000000000010000001d01000008000900", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00@~'], 0x24}}, 0x20008030) r3 = io_uring_setup(0x19be, &(0x7f0000000500)={0x0, 0x709f, 0x8, 0x2, 0xef}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) socket(0x10, 0x3, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1) 265.280083ms ago: executing program 2 (id=2068): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 264.166452ms ago: executing program 3 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x62040200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 75.072502ms ago: executing program 2 (id=2070): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x20000000) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 0s ago: executing program 3 (id=2071): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = getuid() quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000201, r4, &(0x7f0000000240)='./file0\x00') sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 108.341853][ T1884] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.555777][ T6268] lo speed is unknown, defaulting to 1000 [ 108.648080][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 108.663973][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1014'. [ 108.770586][ T31] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 109.013708][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 109.927292][ T6337] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.052565][ T5634] Bluetooth: hci0: command 0x1003 tx timeout [ 111.052498][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 111.503248][ T6359] loop3: detected capacity change from 0 to 2048 [ 111.745981][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 111.836426][ T6373] Set syz0 is full, maxelem 0 reached [ 111.910321][ T29] kauditd_printk_skb: 1348 callbacks suppressed [ 111.910396][ T29] audit: type=1326 audit(1763153229.657:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 111.940187][ T29] audit: type=1326 audit(1763153229.657:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.016799][ T29] audit: type=1326 audit(1763153229.697:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.040327][ T29] audit: type=1326 audit(1763153229.697:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.063800][ T29] audit: type=1326 audit(1763153229.697:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.087286][ T29] audit: type=1326 audit(1763153229.697:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.089848][ T6375] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.110823][ T29] audit: type=1326 audit(1763153229.697:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.110854][ T29] audit: type=1326 audit(1763153229.697:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.152931][ T6375] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1480 with error 28 [ 112.172633][ T29] audit: type=1326 audit(1763153229.697:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 112.172673][ T29] audit: type=1326 audit(1763153229.697:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6357 comm="syz.3.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab272d6567 code=0x7ffc0000 [ 112.216877][ T6379] loop1: detected capacity change from 0 to 512 [ 112.232079][ T6375] EXT4-fs (loop3): This should not happen!! Data will be lost [ 112.232079][ T6375] [ 112.248014][ T6375] EXT4-fs (loop3): Total free blocks count 0 [ 112.254067][ T6375] EXT4-fs (loop3): Free/Dirty block details [ 112.259985][ T6375] EXT4-fs (loop3): free_blocks=2415919104 [ 112.265770][ T6375] EXT4-fs (loop3): dirty_blocks=1488 [ 112.265921][ T6379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.271063][ T6375] EXT4-fs (loop3): Block reservation details [ 112.271080][ T6375] EXT4-fs (loop3): i_reserved_data_blocks=93 [ 112.289144][ T6379] ext4 filesystem being mounted at /210/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.363847][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.385429][ T6383] syzkaller0: entered promiscuous mode [ 112.390955][ T6383] syzkaller0: entered allmulticast mode [ 112.452899][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 112.514234][ T6391] siw: device registration error -23 [ 112.690254][ T6415] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 112.727305][ T6415] bond0: (slave dummy0): Releasing backup interface [ 112.756192][ T6415] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.770819][ T6420] netlink: 'syz.2.1068': attribute type 27 has an invalid length. [ 112.782186][ T6415] team0: Failed to send options change via netlink (err -105) [ 112.782654][ T6423] netlink: 'syz.3.1066': attribute type 10 has an invalid length. [ 112.789747][ T6415] team0: Port device dummy0 added [ 112.806730][ T6423] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.845142][ T6423] team0: Failed to send options change via netlink (err -105) [ 112.861687][ T6423] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 112.871730][ T6423] team0: Port device dummy0 removed [ 112.879449][ T6428] __nla_validate_parse: 3 callbacks suppressed [ 112.879513][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 112.879878][ T6423] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 112.909837][ T6420] veth2: left promiscuous mode [ 112.914851][ T6420] veth2: left allmulticast mode [ 112.920358][ T6420] veth6: left promiscuous mode [ 112.925187][ T6420] veth6: left allmulticast mode [ 112.978107][ T6437] siw: device registration error -23 [ 112.986308][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.002001][ T6426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.019537][ T6440] netlink: 'syz.1.1081': attribute type 3 has an invalid length. [ 113.028186][ T6440] netlink: 'syz.1.1081': attribute type 3 has an invalid length. [ 113.070380][ T6447] loop1: detected capacity change from 0 to 128 [ 113.114261][ T6447] syz.1.1076: attempt to access beyond end of device [ 113.114261][ T6447] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 113.150261][ T6447] syz.1.1076: attempt to access beyond end of device [ 113.150261][ T6447] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 113.190713][ T6451] lo speed is unknown, defaulting to 1000 [ 113.224239][ T6447] syz.1.1076: attempt to access beyond end of device [ 113.224239][ T6447] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 113.271221][ T6447] syz.1.1076: attempt to access beyond end of device [ 113.271221][ T6447] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 113.272521][ T6459] syz.1.1076: attempt to access beyond end of device [ 113.272521][ T6459] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 113.284906][ T6447] syz.1.1076: attempt to access beyond end of device [ 113.284906][ T6447] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 113.304263][ T6459] syz.1.1076: attempt to access beyond end of device [ 113.304263][ T6459] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 113.353426][ T6459] syz.1.1076: attempt to access beyond end of device [ 113.353426][ T6459] loop1: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 113.386039][ T6459] syz.1.1076: attempt to access beyond end of device [ 113.386039][ T6459] loop1: rw=2049, sector=425, nr_sectors = 8 limit=128 [ 113.410111][ T6447] syz.1.1076: attempt to access beyond end of device [ 113.410111][ T6447] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 113.431863][ T6453] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1079'. [ 113.522730][ T57] buffer_io_error: 142 callbacks suppressed [ 113.522786][ T57] Buffer I/O error on dev loop1, logical block 305, lost async page write [ 113.847738][ T6478] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 113.872832][ T6478] bond0: (slave dummy0): Releasing backup interface [ 113.882280][ T6478] team0: Failed to send options change via netlink (err -105) [ 113.889895][ T6478] team0: Port device dummy0 added [ 113.908045][ T6478] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 113.928834][ T6478] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.959820][ T6478] team0: Failed to send options change via netlink (err -105) [ 113.973383][ T6478] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.001252][ T6478] team0: Port device dummy0 removed [ 114.018469][ T6478] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.208998][ T6487] loop2: detected capacity change from 0 to 2048 [ 114.271702][ T6493] netlink: 'syz.1.1093': attribute type 1 has an invalid length. [ 114.295086][ T6487] loop2: p1 < > p4 [ 114.298114][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1094'. [ 114.300215][ T6487] loop2: p4 size 8388608 extends beyond EOD, truncated [ 114.332040][ T6495] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6495 comm=syz.0.1094 [ 114.346109][ T3004] loop2: p1 < > p4 [ 114.350584][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated [ 114.412346][ T6500] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 114.490141][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 114.507429][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 114.560919][ T6509] loop2: detected capacity change from 0 to 512 [ 114.660650][ T6509] EXT4-fs (loop2): 1 orphan inode deleted [ 114.669094][ T6509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.695499][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.837711][ T6516] loop2: detected capacity change from 0 to 2048 [ 114.868111][ T6516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 115.068497][ T6519] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.085063][ T6519] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 556 with error 28 [ 115.097496][ T6519] EXT4-fs (loop2): This should not happen!! Data will be lost [ 115.097496][ T6519] [ 115.107187][ T6519] EXT4-fs (loop2): Total free blocks count 0 [ 115.113227][ T6519] EXT4-fs (loop2): Free/Dirty block details [ 115.119147][ T6519] EXT4-fs (loop2): free_blocks=2415919104 [ 115.124928][ T6519] EXT4-fs (loop2): dirty_blocks=560 [ 115.130160][ T6519] EXT4-fs (loop2): Block reservation details [ 115.136177][ T6519] EXT4-fs (loop2): i_reserved_data_blocks=35 [ 115.234789][ T57] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 115.258365][ T6523] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1101'. [ 115.340601][ T6535] loop1: detected capacity change from 0 to 512 [ 115.348166][ T6535] EXT4-fs: Ignoring removed nobh option [ 115.446101][ T6535] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1106: corrupted inode contents [ 115.512660][ T6535] EXT4-fs (loop1): Remounting filesystem read-only [ 115.559371][ T6535] EXT4-fs (loop1): 1 truncate cleaned up [ 115.577944][ T6535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.626542][ T6535] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.637934][ T6544] loop2: detected capacity change from 0 to 128 [ 115.678325][ T6544] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.811607][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.846465][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.857018][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.867281][ T57] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.883340][ T1884] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 115.893443][ T1884] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 116.179511][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.211921][ T6555] loop1: detected capacity change from 0 to 2048 [ 116.244737][ T6555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.257842][ T6555] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.331392][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.360692][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.372420][ T1884] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 116.392889][ T1884] EXT4-fs (loop1): Remounting filesystem read-only [ 116.451721][ T3320] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 116.462701][ T3320] CPU: 1 UID: 0 PID: 3320 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.462737][ T3320] Tainted: [W]=WARN [ 116.462744][ T3320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.462757][ T3320] Call Trace: [ 116.462763][ T3320] [ 116.462771][ T3320] __dump_stack+0x1d/0x30 [ 116.462795][ T3320] dump_stack_lvl+0xe8/0x140 [ 116.462820][ T3320] dump_stack+0x15/0x1b [ 116.462839][ T3320] dump_header+0x81/0x220 [ 116.462857][ T3320] oom_kill_process+0x342/0x400 [ 116.462891][ T3320] out_of_memory+0x979/0xb80 [ 116.462990][ T3320] try_charge_memcg+0x610/0xa10 [ 116.463077][ T3320] charge_memcg+0x51/0xc0 [ 116.463128][ T3320] __mem_cgroup_charge+0x28/0xb0 [ 116.463153][ T3320] filemap_add_folio+0x111/0x360 [ 116.463185][ T3320] __filemap_get_folio+0x31e/0x650 [ 116.463219][ T3320] filemap_fault+0x447/0xb60 [ 116.463291][ T3320] __do_fault+0xbc/0x200 [ 116.463318][ T3320] handle_mm_fault+0xf78/0x2be0 [ 116.463400][ T3320] ? vma_start_read+0x141/0x1f0 [ 116.463525][ T3320] do_user_addr_fault+0x630/0x1080 [ 116.463557][ T3320] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 116.463586][ T3320] exc_page_fault+0x62/0xa0 [ 116.463624][ T3320] asm_exc_page_fault+0x26/0x30 [ 116.463685][ T3320] RIP: 0033:0x7f6601965f34 [ 116.463704][ T3320] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 68 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 f7 ea 00 48 01 d1 [ 116.463726][ T3320] RSP: 002b:00007ffc61300cd0 EFLAGS: 00010202 [ 116.463741][ T3320] RAX: 0000001b33a24000 RBX: 0000000000000214 RCX: 000000000001c520 [ 116.463753][ T3320] RDX: 00000000065a8a2d RSI: 00007ffc61300d60 RDI: 0000000000000001 [ 116.463764][ T3320] RBP: 00007ffc61300d0c R08: 00000000183cc1bb R09: 7fffffffffffffff [ 116.463776][ T3320] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 116.463864][ T3320] R13: 00000000000927c0 R14: 000000000001c4fe R15: 00007ffc61300d60 [ 116.463887][ T3320] [ 116.463926][ T3320] memory: usage 307200kB, limit 307200kB, failcnt 295 [ 116.484921][ T6558] EXT4-fs (loop1): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -30 [ 116.489357][ T3320] memory+swap: usage 307468kB, limit 9007199254740988kB, failcnt 0 [ 116.489373][ T3320] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 116.691549][ T3320] Memory cgroup stats for /syz2: [ 116.691816][ T3320] cache 0 [ 116.699836][ T3320] rss 4096 [ 116.703112][ T3320] shmem 0 [ 116.706067][ T3320] mapped_file 0 [ 116.709576][ T3320] dirty 0 [ 116.712574][ T3320] writeback 0 [ 116.716021][ T3320] workingset_refault_anon 43 [ 116.720677][ T3320] workingset_refault_file 370 [ 116.725419][ T3320] swap 274432 [ 116.728718][ T3320] swapcached 4096 [ 116.731841][ T6560] bridge0: port 1(gretap0) entered blocking state [ 116.732584][ T3320] pgpgin 90385 [ 116.738939][ T6560] bridge0: port 1(gretap0) entered disabled state [ 116.742267][ T3320] pgpgout 90382 [ 116.742275][ T3320] pgfault 105148 [ 116.742306][ T3320] pgmajfault 42 [ 116.748942][ T6560] gretap0: entered allmulticast mode [ 116.752211][ T3320] inactive_anon 4096 [ 116.752222][ T3320] active_anon 0 [ 116.756335][ T6560] gretap0: entered promiscuous mode [ 116.759348][ T3320] inactive_file 8192 [ 116.759359][ T3320] active_file 0 [ 116.765337][ T6560] bridge0: port 1(gretap0) entered blocking state [ 116.768556][ T3320] unevictable 0 [ 116.768566][ T3320] hierarchical_memory_limit 314572800 [ 116.768575][ T3320] hierarchical_memsw_limit 9223372036854771712 [ 116.772044][ T6560] bridge0: port 1(gretap0) entered forwarding state [ 116.777254][ T3320] total_cache 0 [ 116.797037][ T6560] gretap0: left allmulticast mode [ 116.800004][ T3320] total_rss 4096 [ 116.800015][ T3320] total_shmem 0 [ 116.800024][ T3320] total_mapped_file 0 [ 116.800034][ T3320] total_dirty 0 [ 116.806287][ T6560] gretap0: left promiscuous mode [ 116.812904][ T3320] total_writeback 0 [ 116.816451][ T6560] bridge0: port 1(gretap0) entered disabled state [ 116.821362][ T3320] total_workingset_refault_anon 43 [ 116.821377][ T3320] total_workingset_refault_file 370 [ 116.861560][ T3320] total_swap 274432 [ 116.865464][ T3320] total_swapcached 4096 [ 116.869689][ T3320] total_pgpgin 90385 [ 116.873610][ T3320] total_pgpgout 90382 [ 116.877601][ T3320] total_pgfault 105148 [ 116.881659][ T3320] total_pgmajfault 42 [ 116.885657][ T3320] total_inactive_anon 4096 [ 116.890078][ T3320] total_active_anon 0 [ 116.894088][ T3320] total_inactive_file 8192 [ 116.898509][ T3320] total_active_file 0 [ 116.902562][ T3320] total_unevictable 0 [ 116.906581][ T3320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1108,pid=6541,uid=0 [ 116.921235][ T3320] Memory cgroup out of memory: Killed process 6541 (syz.2.1108) total-vm:96004kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 116.938587][ T29] kauditd_printk_skb: 1224 callbacks suppressed [ 116.938603][ T29] audit: type=1326 audit(1763153234.687:7061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1005ed1f85 code=0x7ffc0000 [ 117.038833][ T29] audit: type=1326 audit(1763153234.787:7062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1005ed1f85 code=0x7ffc0000 [ 117.092453][ T29] audit: type=1326 audit(1763153234.797:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.093236][ T6569] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1117'. [ 117.115926][ T29] audit: type=1326 audit(1763153234.797:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.145450][ T6569] netlink: zone id is out of range [ 117.148579][ T29] audit: type=1326 audit(1763153234.797:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.153677][ T6569] netlink: zone id is out of range [ 117.176936][ T29] audit: type=1326 audit(1763153234.797:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.176972][ T29] audit: type=1326 audit(1763153234.797:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.212872][ T6569] netlink: zone id is out of range [ 117.228840][ T29] audit: type=1326 audit(1763153234.797:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.228898][ T29] audit: type=1326 audit(1763153234.797:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.255555][ T6569] netlink: zone id is out of range [ 117.257484][ T29] audit: type=1326 audit(1763153234.797:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6565 comm="syz.4.1116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 117.280848][ T6569] netlink: zone id is out of range [ 117.314582][ T6569] netlink: zone id is out of range [ 117.319782][ T6569] netlink: zone id is out of range [ 117.324950][ T6569] netlink: zone id is out of range [ 117.330096][ T6569] netlink: zone id is out of range [ 117.402958][ T6574] syzkaller0: entered promiscuous mode [ 117.408499][ T6574] syzkaller0: entered allmulticast mode [ 117.418217][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.470480][ T6575] syzkaller0: entered promiscuous mode [ 117.476029][ T6575] syzkaller0: entered allmulticast mode [ 117.667973][ T6593] netlink: 'syz.1.1129': attribute type 1 has an invalid length. [ 117.694191][ T6593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.709768][ T6595] netlink: 'syz.3.1128': attribute type 8 has an invalid length. [ 117.717740][ T6595] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.840790][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 117.914879][ T6593] bond3 (unregistering): Released all slaves [ 118.095879][ T6613] veth4: entered promiscuous mode [ 118.100951][ T6613] veth4: entered allmulticast mode [ 118.141184][ T6617] tipc: New replicast peer: 255.255.255.255 [ 118.147428][ T6617] tipc: Enabled bearer , priority 10 [ 118.276762][ T6623] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1138'. [ 118.286263][ T6623] unsupported nlmsg_type 40 [ 118.426015][ T6627] syzkaller0: entered promiscuous mode [ 118.431559][ T6627] syzkaller0: entered allmulticast mode [ 118.503704][ T6631] syz_tun: entered allmulticast mode [ 118.530538][ T6634] dvmrp8: entered allmulticast mode [ 118.578268][ T6622] syz_tun: left allmulticast mode [ 118.759481][ T57] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.891935][ T6657] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1150'. [ 118.911940][ T6659] bridge: RTM_NEWNEIGH with invalid ether address [ 119.509936][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 120.079446][ T6693] bridge0: port 1(gretap0) entered blocking state [ 120.086005][ T6693] bridge0: port 1(gretap0) entered disabled state [ 120.093162][ T6693] gretap0: entered allmulticast mode [ 120.099257][ T6693] gretap0: entered promiscuous mode [ 120.107373][ T6693] gretap0: left allmulticast mode [ 120.112694][ T6693] gretap0: left promiscuous mode [ 120.117985][ T6693] bridge0: port 1(gretap0) entered disabled state [ 120.251361][ T6700] loop1: detected capacity change from 0 to 2048 [ 120.273997][ T6700] EXT4-fs (loop1): failed to initialize system zone (-117) [ 120.281529][ T6700] EXT4-fs (loop1): mount failed [ 120.541401][ T6716] syzkaller0: entered promiscuous mode [ 120.547026][ T6716] syzkaller0: entered allmulticast mode [ 120.583492][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 120.812484][ T3628] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.812717][ T5634] Bluetooth: hci0: command 0x1003 tx timeout [ 120.921282][ T6728] lo speed is unknown, defaulting to 1000 [ 120.984212][ T6738] netlink: 'syz.4.1181': attribute type 1 has an invalid length. [ 121.016789][ T6738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1181'. [ 121.028094][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.052461][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 121.076045][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.092223][ T6738] bond0: (slave geneve2): making interface the new active one [ 121.100746][ T6738] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 121.112446][ T57] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.132629][ T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.141009][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.185129][ T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 121.927971][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1203'. [ 121.953129][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 121.953143][ T29] audit: type=1400 audit(1763153239.707:7447): avc: denied { read } for pid=6794 comm="syz.1.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.956381][ T6792] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 121.987742][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 121.990784][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 121.996431][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.013273][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.023275][ T6792] bond0 (unregistering): (slave geneve3): Releasing backup interface [ 122.041047][ T6792] bond0 (unregistering): Released all slaves [ 122.050737][ T37] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.059303][ T37] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.068120][ T37] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.218813][ T6803] syzkaller0: entered promiscuous mode [ 122.224536][ T6803] syzkaller0: entered allmulticast mode [ 122.235630][ T6814] loop2: detected capacity change from 0 to 512 [ 122.238950][ T6807] loop1: detected capacity change from 0 to 128 [ 122.278821][ T6807] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 122.454990][ T1884] bio_check_eod: 164 callbacks suppressed [ 122.455010][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.455010][ T1884] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 122.492657][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.492657][ T1884] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 122.559140][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.559140][ T1884] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 122.598795][ T6814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.634031][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.634031][ T1884] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 122.757554][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.757554][ T1884] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 122.771191][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.771191][ T1884] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 122.784821][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.784821][ T1884] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 122.798323][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.798323][ T1884] loop1: rw=1, sector=313, nr_sectors = 8 limit=128 [ 122.811821][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.811821][ T1884] loop1: rw=1, sector=329, nr_sectors = 8 limit=128 [ 122.825466][ T1884] kworker/u8:6: attempt to access beyond end of device [ 122.825466][ T1884] loop1: rw=1, sector=345, nr_sectors = 8 limit=128 [ 122.843846][ T1884] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 122.854640][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.213224][ T29] audit: type=1400 audit(1763153240.937:7448): avc: denied { mount } for pid=6828 comm="syz.4.1215" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.244953][ T6831] bridge0: port 3(gretap0) entered blocking state [ 123.251452][ T6831] bridge0: port 3(gretap0) entered disabled state [ 123.283911][ T6831] gretap0: entered allmulticast mode [ 123.305426][ T6831] gretap0: entered promiscuous mode [ 123.326310][ T6834] gretap0: left allmulticast mode [ 123.331413][ T6834] gretap0: left promiscuous mode [ 123.336489][ T6834] bridge0: port 3(gretap0) entered disabled state [ 123.438252][ T6836] tipc: Started in network mode [ 123.443322][ T6836] tipc: Node identity ac14140f, cluster identity 4711 [ 123.476044][ T6836] tipc: New replicast peer: 255.255.255.255 [ 123.482129][ T6836] tipc: Enabled bearer , priority 10 [ 123.811614][ T29] audit: type=1326 audit(1763153241.557:7449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 123.844918][ T29] audit: type=1326 audit(1763153241.587:7450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 123.868527][ T29] audit: type=1326 audit(1763153241.587:7451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6856 comm="syz.2.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 123.875768][ T6862] netlink: 'syz.4.1227': attribute type 1 has an invalid length. [ 123.903012][ T29] audit: type=1326 audit(1763153241.657:7452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 123.927660][ T29] audit: type=1326 audit(1763153241.657:7453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 123.931638][ T6862] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.951343][ T29] audit: type=1326 audit(1763153241.657:7454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 123.988567][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1227'. [ 123.997939][ T6862] bond1: entered promiscuous mode [ 124.003115][ T6862] bond1: entered allmulticast mode [ 124.015221][ T6862] bond1: (slave dummy0): making interface the new active one [ 124.023817][ T6862] dummy0: entered promiscuous mode [ 124.029034][ T6862] dummy0: entered allmulticast mode [ 124.035796][ T6862] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 124.045890][ T6863] lo speed is unknown, defaulting to 1000 [ 124.074832][ T29] audit: type=1326 audit(1763153241.827:7455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6601ac1f85 code=0x7ffc0000 [ 124.098359][ T29] audit: type=1326 audit(1763153241.827:7456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6860 comm="syz.2.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 124.171392][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 124.313799][ T6882] tipc: Enabled bearer , priority 0 [ 124.321863][ T6881] tipc: Resetting bearer [ 124.344208][ T6881] tipc: Disabling bearer [ 124.504282][ T6897] netlink: 'syz.3.1241': attribute type 10 has an invalid length. [ 124.525010][ T6897] team0 (unregistering): Port device team_slave_1 removed [ 124.566134][ T6901] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 124.574952][ T6901] ref_ctr increment failed for inode: 0x544 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104586d40 [ 124.588615][ T6901] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 124.597382][ T6901] ref_ctr decrement failed for inode: 0x544 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104586d40 [ 124.608485][ T10] tipc: Node number set to 2886997007 [ 124.620232][ T6901] uprobe: syz.0.1243:6901 failed to unregister, leaking uprobe [ 125.051785][ T6932] tipc: Enabling of bearer rejected, failed to enable media [ 125.135713][ T6938] loop7: detected capacity change from 0 to 16384 [ 125.237191][ T6946] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.274203][ T6946] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.324113][ T6946] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.383788][ T6946] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 125.444852][ T1884] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.456459][ T1884] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.465011][ T6950] lo speed is unknown, defaulting to 1000 [ 125.474173][ T1884] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.488188][ T1884] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 125.709579][ T6956] loop3: detected capacity change from 0 to 164 [ 125.838878][ T6967] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 125.862849][ T5501] lo speed is unknown, defaulting to 1000 [ 125.868707][ T5501] syz2: Port: 1 Link DOWN [ 125.882877][ T6967] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 125.904923][ T6973] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 125.912070][ T5501] lo speed is unknown, defaulting to 1000 [ 125.918485][ T5501] syz2: Port: 1 Link ACTIVE [ 125.933344][ T6973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.962708][ T6973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 125.974469][ T6973] bond1: entered promiscuous mode [ 125.979634][ T6973] bond1: entered allmulticast mode [ 126.036103][ T6979] bond0: (slave dummy0): Releasing backup interface [ 126.068983][ T6979] bond1: (slave dummy0): making interface the new active one [ 126.087162][ T6979] dummy0: entered promiscuous mode [ 126.098369][ T6979] dummy0: entered allmulticast mode [ 126.112256][ T6979] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 126.338922][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1276'. [ 126.347938][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1276'. [ 126.384880][ T6996] @: renamed from vlan0 [ 126.562133][ T7010] net_ratelimit: 80 callbacks suppressed [ 126.562151][ T7010] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 126.599282][ T7012] syz.3.1283 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 126.651517][ T7016] netlink: 'syz.0.1284': attribute type 1 has an invalid length. [ 126.676013][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.692164][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1284'. [ 126.701776][ T7016] bond0: entered promiscuous mode [ 126.706987][ T7016] bond0: entered allmulticast mode [ 126.723712][ T7023] ref_ctr increment failed for inode: 0x4d7 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811e7305c0 [ 126.738411][ T7016] bond0: (slave dummy0): making interface the new active one [ 126.777397][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1286'. [ 126.797512][ T7016] dummy0: entered promiscuous mode [ 126.811662][ T7016] dummy0: entered allmulticast mode [ 126.826986][ T7016] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.876056][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 127.006024][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 127.006038][ T29] audit: type=1326 audit(1763153244.757:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 127.039149][ T29] audit: type=1326 audit(1763153244.787:7812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 127.224723][ T29] audit: type=1326 audit(1763153244.977:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 127.290642][ T7049] loop1: detected capacity change from 0 to 164 [ 127.481837][ T29] audit: type=1326 audit(1763153245.227:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 127.505406][ T29] audit: type=1326 audit(1763153245.227:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7024 comm="syz.3.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 127.638311][ T29] audit: type=1326 audit(1763153245.377:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 127.661821][ T29] audit: type=1326 audit(1763153245.377:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 127.685214][ T29] audit: type=1326 audit(1763153245.377:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 127.708640][ T29] audit: type=1326 audit(1763153245.377:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 127.732076][ T29] audit: type=1326 audit(1763153245.377:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7057 comm="syz.0.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 127.775577][ T7062] ref_ctr increment failed for inode: 0x59c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104584500 [ 127.800367][ T7066] loop3: detected capacity change from 0 to 2048 [ 127.836204][ T7066] loop3: p2 p3 p7 [ 127.894286][ T4931] udevd[4931]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 127.894554][ T3507] udevd[3507]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 127.910283][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 128.141725][ T7076] wg2: left promiscuous mode [ 128.277310][ T31] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.286193][ T31] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.295102][ T31] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.295953][ T7101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1312'. [ 128.304297][ T31] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.542176][ T7120] veth8: entered promiscuous mode [ 128.547411][ T7120] veth8: entered allmulticast mode [ 128.893468][ T7149] tipc: Enabled bearer , priority 0 [ 128.901523][ T7148] tipc: Resetting bearer [ 128.927812][ T7148] tipc: Disabling bearer [ 129.218894][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1339'. [ 129.228021][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1339'. [ 129.240361][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1339'. [ 129.249444][ T7167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1339'. [ 129.259372][ T7165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1338'. [ 129.514017][ T7178] loop2: detected capacity change from 0 to 1024 [ 129.520809][ T7178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.534304][ T7178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.051067][ T7190] syzkaller0: entered promiscuous mode [ 130.056630][ T7190] syzkaller0: entered allmulticast mode [ 130.619177][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.769818][ T7234] loop3: detected capacity change from 0 to 8192 [ 131.029667][ T7240] vlan0: entered promiscuous mode [ 131.034895][ T7240] bond0: entered promiscuous mode [ 131.039949][ T7240] bond_slave_0: entered promiscuous mode [ 131.052518][ T7240] dummy0: entered promiscuous mode [ 131.092226][ T7238] lo speed is unknown, defaulting to 1000 [ 131.231227][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1363'. [ 131.407146][ T7254] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: 1 [ 131.415829][ T7254] ref_ctr increment failed for inode: 0x5d5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811e734500 [ 131.430256][ T7254] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -2360, delta: -1 [ 131.439059][ T7254] ref_ctr decrement failed for inode: 0x5d5 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811e734500 [ 131.452048][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1366'. [ 131.461150][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1366'. [ 131.470533][ T7254] uprobe: syz.1.1365:7254 failed to unregister, leaking uprobe [ 131.548529][ T7261] syzkaller0: entered allmulticast mode [ 131.561891][ T7261] syzkaller0: entered promiscuous mode [ 131.628958][ T7261] syzkaller0 (unregistering): left allmulticast mode [ 131.635830][ T7261] syzkaller0 (unregistering): left promiscuous mode [ 131.755222][ T7266] netlink: 'syz.0.1371': attribute type 12 has an invalid length. [ 131.770651][ T7269] dvmrp8: entered allmulticast mode [ 131.874643][ T7277] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1376'. [ 131.884811][ T7277] 0X: renamed from caif0 [ 131.891889][ T7277] 0X: entered allmulticast mode [ 131.897197][ T7277] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 132.021040][ T29] kauditd_printk_skb: 794 callbacks suppressed [ 132.021056][ T29] audit: type=1326 audit(1763153249.767:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2e8576567 code=0x7ffc0000 [ 132.051009][ T29] audit: type=1326 audit(1763153249.767:8616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2e851b789 code=0x7ffc0000 [ 132.074415][ T29] audit: type=1326 audit(1763153249.767:8617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 132.098006][ T29] audit: type=1326 audit(1763153249.797:8618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2e8576567 code=0x7ffc0000 [ 132.121616][ T29] audit: type=1326 audit(1763153249.797:8619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2e851b789 code=0x7ffc0000 [ 132.147560][ T29] audit: type=1326 audit(1763153249.797:8620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2e8576567 code=0x7ffc0000 [ 132.170977][ T29] audit: type=1326 audit(1763153249.797:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2e851b789 code=0x7ffc0000 [ 132.194531][ T29] audit: type=1326 audit(1763153249.797:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 132.218014][ T29] audit: type=1326 audit(1763153249.827:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff2e8576567 code=0x7ffc0000 [ 132.241385][ T29] audit: type=1326 audit(1763153249.827:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7249 comm="syz.4.1364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff2e851b789 code=0x7ffc0000 [ 132.424942][ T7302] syzkaller0: entered allmulticast mode [ 132.571619][ T7312] veth10: entered promiscuous mode [ 132.576941][ T7312] veth10: entered allmulticast mode [ 132.676072][ T7317] lo speed is unknown, defaulting to 1000 [ 132.990678][ T7324] sctp: [Deprecated]: syz.0.1404 (pid 7324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.990678][ T7324] Use struct sctp_sack_info instead [ 133.513085][ T7341] vlan0: entered promiscuous mode [ 133.518184][ T7341] bond0: entered promiscuous mode [ 133.601821][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 133.734111][ T7347] loop2: detected capacity change from 0 to 1024 [ 133.756860][ T7347] EXT4-fs: Ignoring removed bh option [ 133.762316][ T7347] EXT4-fs: inline encryption not supported [ 133.784734][ T7347] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.811940][ T7347] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 133.843222][ T7347] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1400: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.888515][ T7347] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1400: lblock 0 mapped to illegal pblock 48 (length 1) [ 133.930534][ T7347] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1400: Failed to acquire dquot type 0 [ 133.990520][ T7347] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 134.026628][ T7347] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1400: mark_inode_dirty error [ 134.050264][ T7347] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 134.071074][ T7347] EXT4-fs (loop2): 1 orphan inode deleted [ 134.077566][ T7347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.090163][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.110439][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 134.132467][ T7347] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1400: lblock 0 mapped to illegal pblock 48 (length 1) [ 134.244981][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.245331][ T7363] lo speed is unknown, defaulting to 1000 [ 134.323896][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 134.333012][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 134.356823][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 134.406005][ T7366] lo speed is unknown, defaulting to 1000 [ 134.863188][ T7399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7399 comm=syz.1.1420 [ 134.934144][ T7407] netlink: 'syz.4.1423': attribute type 16 has an invalid length. [ 134.942145][ T7407] netlink: 'syz.4.1423': attribute type 17 has an invalid length. [ 135.018593][ T7411] loop3: detected capacity change from 0 to 1024 [ 135.034948][ T7411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.309554][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.348509][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1428'. [ 135.381697][ T7428] loop3: detected capacity change from 0 to 2048 [ 135.411064][ T7428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.455716][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.582103][ T7440] lo speed is unknown, defaulting to 1000 [ 136.058993][ T7450] lo speed is unknown, defaulting to 1000 [ 136.646088][ T7465] lo speed is unknown, defaulting to 1000 [ 137.052850][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 137.052888][ T29] audit: type=1326 audit(1763153254.747:9288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6601a86567 code=0x7ffc0000 [ 137.082635][ T29] audit: type=1326 audit(1763153254.747:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6601a2b789 code=0x7ffc0000 [ 137.105972][ T29] audit: type=1326 audit(1763153254.747:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 137.129432][ T29] audit: type=1326 audit(1763153254.747:9291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6601a86567 code=0x7ffc0000 [ 137.152772][ T29] audit: type=1326 audit(1763153254.757:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6601a2b789 code=0x7ffc0000 [ 137.176122][ T29] audit: type=1326 audit(1763153254.757:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 137.199661][ T29] audit: type=1326 audit(1763153254.767:9294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6601a86567 code=0x7ffc0000 [ 137.223032][ T29] audit: type=1326 audit(1763153254.767:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6601a2b789 code=0x7ffc0000 [ 137.246656][ T29] audit: type=1326 audit(1763153254.767:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 137.270248][ T29] audit: type=1326 audit(1763153254.767:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7456 comm="syz.2.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6601a86567 code=0x7ffc0000 [ 137.541125][ T7488] lo speed is unknown, defaulting to 1000 [ 137.588889][ T7494] netlink: 'syz.3.1451': attribute type 1 has an invalid length. [ 137.621125][ T7496] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.655086][ T7494] bond2: entered promiscuous mode [ 137.668709][ T7494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.698061][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1451'. [ 137.746848][ T7498] bond2: entered allmulticast mode [ 137.775118][ T7502] netlink: 'syz.4.1453': attribute type 1 has an invalid length. [ 137.789597][ T7502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.828316][ T7494] bond2: (slave bridge1): making interface the new active one [ 137.835930][ T7494] bridge1: entered promiscuous mode [ 137.841317][ T7494] bridge1: entered allmulticast mode [ 137.943969][ T7494] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 137.972599][ T7502] bond2: entered allmulticast mode [ 138.009442][ T7502] bond2: (slave ip6gretap1): making interface the new active one [ 138.017234][ T7502] ip6gretap1: entered allmulticast mode [ 138.063141][ T7502] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 138.397824][ T7523] lo speed is unknown, defaulting to 1000 [ 138.472551][ T7528] netlink: 'syz.0.1460': attribute type 4 has an invalid length. [ 138.483258][ T7528] netlink: 'syz.0.1460': attribute type 4 has an invalid length. [ 138.519546][ T7531] veth8: entered promiscuous mode [ 138.524879][ T7531] veth8: entered allmulticast mode [ 138.814578][ T7547] lo speed is unknown, defaulting to 1000 [ 138.939007][ T7551] tipc: Enabled bearer , priority 0 [ 138.946558][ T7551] syzkaller0: entered promiscuous mode [ 138.952074][ T7551] syzkaller0: entered allmulticast mode [ 138.961193][ T7551] tipc: Resetting bearer [ 138.968523][ T7550] tipc: Resetting bearer [ 138.975470][ T7550] tipc: Disabling bearer [ 139.074984][ T7559] tipc: Enabled bearer , priority 0 [ 139.082050][ T7559] syzkaller0: entered promiscuous mode [ 139.087634][ T7559] syzkaller0: entered allmulticast mode [ 139.095404][ T7559] tipc: Resetting bearer [ 139.101147][ T7559] syzkaller0: tun_net_xmit 90 [ 139.106631][ T7558] tipc: Resetting bearer [ 139.113573][ T7558] tipc: Disabling bearer [ 139.232983][ T7564] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 139.232983][ T7564] program syz.2.1473 not setting count and/or reply_len properly [ 139.413714][ T7566] lo speed is unknown, defaulting to 1000 [ 139.506886][ T7570] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7570 comm=syz.4.1475 [ 139.605273][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 139.614356][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'. [ 139.886126][ T7594] xt_connbytes: Forcing CT accounting to be enabled [ 139.910918][ T7591] lo speed is unknown, defaulting to 1000 [ 139.918099][ T7594] Cannot find set identified by id 0 to match [ 140.037629][ T7596] lo speed is unknown, defaulting to 1000 [ 140.103023][ T7607] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 140.161301][ T7605] lo speed is unknown, defaulting to 1000 [ 140.194042][ T7607] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 140.284308][ T7607] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 140.343954][ T7607] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 140.379133][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 140.391159][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 140.403375][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 140.416191][ T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 140.464378][ T7618] random: crng reseeded on system resumption [ 141.003317][ T7688] wg2: entered promiscuous mode [ 141.008234][ T7688] wg2: entered allmulticast mode [ 141.044984][ T7696] loop2: detected capacity change from 0 to 1024 [ 141.294243][ T7736] loop2: detected capacity change from 0 to 1024 [ 141.301439][ T7736] EXT4-fs: Ignoring removed orlov option [ 141.309457][ T7736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.548496][ T7777] netlink: 'syz.4.1510': attribute type 4 has an invalid length. [ 141.586134][ T7779] loop1: detected capacity change from 0 to 2048 [ 141.598144][ T7780] vlan2: entered allmulticast mode [ 141.603456][ T7780] bridge_slave_0: entered allmulticast mode [ 141.643411][ T3306] Alternate GPT is invalid, using primary GPT. [ 141.649725][ T3306] loop1: p1 p2 p3 [ 141.656606][ T7787] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 141.672934][ T7779] Alternate GPT is invalid, using primary GPT. [ 141.679279][ T7779] loop1: p1 p2 p3 [ 141.704404][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'. [ 141.713513][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 141.750014][ T7790] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'. [ 141.759057][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 141.780618][ T7787] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 141.894445][ T7787] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 142.123723][ T7787] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 142.164448][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 142.164463][ T29] audit: type=1400 audit(1763153259.917:9805): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 142.192331][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.229433][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.242277][ T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.261584][ T57] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.278430][ T7820] loop1: detected capacity change from 0 to 1024 [ 142.281836][ T57] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 142.504522][ T29] audit: type=1400 audit(1763153260.217:9806): avc: denied { create } for pid=7851 comm="syz.0.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.524236][ T29] audit: type=1400 audit(1763153260.247:9807): avc: denied { bind } for pid=7859 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.543659][ T29] audit: type=1400 audit(1763153260.247:9808): avc: denied { write } for pid=7859 comm="syz.4.1519" path="socket:[25207]" dev="sockfs" ino=25207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.567193][ T29] audit: type=1400 audit(1763153260.247:9809): avc: denied { kexec_image_load } for pid=7851 comm="syz.0.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 142.688894][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1522'. [ 142.735214][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 142.744924][ T29] audit: type=1400 audit(1763153260.347:9810): avc: denied { listen } for pid=7859 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.764594][ T29] audit: type=1400 audit(1763153260.367:9811): avc: denied { setopt } for pid=7859 comm="syz.4.1519" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 142.785110][ T29] audit: type=1400 audit(1763153260.427:9812): avc: denied { execute_no_trans } for pid=7878 comm="syz.3.1521" path="/283/file1" dev="tmpfs" ino=1500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.810177][ T7890] xt_time: unknown flags 0xf4 [ 142.846007][ T29] audit: type=1400 audit(1763153260.597:9813): avc: denied { tracepoint } for pid=7888 comm="syz.0.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.910286][ T7903] netlink: 'syz.1.1525': attribute type 1 has an invalid length. [ 142.925328][ T7903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.943153][ T29] audit: type=1400 audit(1763153260.697:9814): avc: denied { create } for pid=7905 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 142.967655][ T7903] veth7: entered promiscuous mode [ 142.989146][ T7903] bond3: (slave veth7): Enslaving as an active interface with a down link [ 143.003616][ T7908] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.015579][ T7910] veth9: entered promiscuous mode [ 143.022808][ T7910] bond3: (slave veth9): Enslaving as an active interface with a down link [ 143.206562][ T7930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1536'. [ 143.216035][ T7930] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1536'. [ 143.776512][ T7963] xt_connbytes: Forcing CT accounting to be enabled [ 143.790934][ T7963] set match dimension is over the limit! [ 143.806618][ T7962] lo speed is unknown, defaulting to 1000 [ 143.911781][ T7966] netlink: 'syz.3.1550': attribute type 16 has an invalid length. [ 143.919714][ T7966] netlink: 'syz.3.1550': attribute type 17 has an invalid length. [ 143.944089][ T7970] loop1: detected capacity change from 0 to 128 [ 143.977761][ T7970] bio_check_eod: 100 callbacks suppressed [ 143.977779][ T7970] syz.1.1552: attempt to access beyond end of device [ 143.977779][ T7970] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 144.004960][ T7970] syz.1.1552: attempt to access beyond end of device [ 144.004960][ T7970] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 144.032468][ T7970] syz.1.1552: attempt to access beyond end of device [ 144.032468][ T7970] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 144.077416][ T7970] syz.1.1552: attempt to access beyond end of device [ 144.077416][ T7970] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 144.151467][ T7973] syz.1.1552: attempt to access beyond end of device [ 144.151467][ T7973] loop1: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 144.212737][ T7970] syz.1.1552: attempt to access beyond end of device [ 144.212737][ T7970] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 144.253231][ T7973] syz.1.1552: attempt to access beyond end of device [ 144.253231][ T7973] loop1: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 144.279510][ T7985] netlink: 'syz.0.1558': attribute type 12 has an invalid length. [ 144.300496][ T7970] syz.1.1552: attempt to access beyond end of device [ 144.300496][ T7970] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 144.457570][ T7970] syz.1.1552: attempt to access beyond end of device [ 144.457570][ T7970] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 144.475651][ T7993] netlink: 'syz.0.1560': attribute type 4 has an invalid length. [ 144.492530][ T7970] syz.1.1552: attempt to access beyond end of device [ 144.492530][ T7970] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 144.520133][ T7993] netlink: 'syz.0.1560': attribute type 4 has an invalid length. [ 144.581294][ T31] Buffer I/O error on dev loop1, logical block 305, lost async page write [ 144.658780][ T8002] xt_socket: unknown flags 0x40 [ 145.209281][ T8022] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1570'. [ 145.778512][ T8045] vlan0: entered allmulticast mode [ 145.783729][ T8045] bridge_slave_0: entered allmulticast mode [ 145.863166][ T8047] IPv6: sit1: Disabled Multicast RS [ 145.910143][ T8049] loop2: detected capacity change from 0 to 2048 [ 145.934928][ T8049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.061186][ T8049] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.072928][ T8048] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 146.116919][ T8055] netlink: 'syz.1.1581': attribute type 16 has an invalid length. [ 146.124818][ T8055] netlink: 'syz.1.1581': attribute type 17 has an invalid length. [ 146.141088][ T8048] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 12 with error 28 [ 146.153658][ T8048] EXT4-fs (loop2): This should not happen!! Data will be lost [ 146.153658][ T8048] [ 146.163348][ T8048] EXT4-fs (loop2): Total free blocks count 0 [ 146.169392][ T8048] EXT4-fs (loop2): Free/Dirty block details [ 146.175364][ T8048] EXT4-fs (loop2): free_blocks=2415919504 [ 146.181140][ T8048] EXT4-fs (loop2): dirty_blocks=16 [ 146.186324][ T8048] EXT4-fs (loop2): Block reservation details [ 146.192309][ T8048] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 146.197351][ T8057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1582'. [ 146.221315][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.268917][ T8063] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1583'. [ 146.380551][ T8075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 146.399724][ T8075] xt_time: unknown flags 0xf4 [ 146.557832][ T8077] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 146.594943][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 146.601115][ T8077] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.641608][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 146.663063][ T8077] bond1 (unregistering): Released all slaves [ 146.847566][ T8093] loop1: detected capacity change from 0 to 1024 [ 146.856840][ T8093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.086479][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.149513][ T8100] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1599'. [ 147.158624][ T8100] netlink: 'syz.1.1599': attribute type 1 has an invalid length. [ 147.166476][ T8100] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1599'. [ 147.179230][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 147.179243][ T29] audit: type=1326 audit(1763153264.927:10046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9936567 code=0x7ffc0000 [ 147.213608][ T29] audit: type=1326 audit(1763153264.947:10047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc98db789 code=0x7ffc0000 [ 147.237100][ T29] audit: type=1326 audit(1763153264.947:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 147.260772][ T29] audit: type=1326 audit(1763153264.957:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9936567 code=0x7ffc0000 [ 147.284743][ T29] audit: type=1326 audit(1763153264.957:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc98db789 code=0x7ffc0000 [ 147.308269][ T29] audit: type=1326 audit(1763153264.957:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 147.331845][ T29] audit: type=1326 audit(1763153264.967:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9936567 code=0x7ffc0000 [ 147.355373][ T29] audit: type=1326 audit(1763153264.967:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5dc98db789 code=0x7ffc0000 [ 147.378954][ T29] audit: type=1326 audit(1763153264.967:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 147.402463][ T29] audit: type=1326 audit(1763153264.977:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.0.1596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5dc9936567 code=0x7ffc0000 [ 147.426273][ T8104] geneve3: entered promiscuous mode [ 147.431525][ T8104] geneve3: entered allmulticast mode [ 147.501818][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1603'. [ 147.520655][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 147.691968][ T8120] smc: net device bond0 applied user defined pnetid SYZ0 [ 147.840850][ T8124] lo speed is unknown, defaulting to 1000 [ 147.864814][ T8131] hsr_slave_0: left promiscuous mode [ 147.871028][ T8131] hsr_slave_1: left promiscuous mode [ 147.983374][ T8129] lo speed is unknown, defaulting to 1000 [ 148.156326][ T8144] validate_nla: 3 callbacks suppressed [ 148.156345][ T8144] netlink: 'syz.2.1617': attribute type 4 has an invalid length. [ 148.179079][ T8140] loop1: detected capacity change from 0 to 512 [ 148.203508][ T8140] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.206195][ T8144] netlink: 'syz.2.1617': attribute type 4 has an invalid length. [ 148.234789][ T8147] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 148.273500][ T8147] vlan2: entered allmulticast mode [ 148.577949][ T8164] tipc: Enabled bearer , priority 0 [ 148.599134][ T8160] tipc: Resetting bearer [ 148.612093][ T8160] tipc: Disabling bearer [ 148.887614][ T8152] loop2: detected capacity change from 0 to 128 [ 149.177967][ T8175] lo speed is unknown, defaulting to 1000 [ 149.194144][ T8182] netlink: 'syz.0.1630': attribute type 13 has an invalid length. [ 149.355083][ T8180] lo speed is unknown, defaulting to 1000 [ 149.385061][ T8188] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 149.456474][ T8188] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.474311][ T8188] bond1: (slave bond2): making interface the new active one [ 149.496920][ T8188] bond1: (slave bond2): Enslaving as an active interface with an up link [ 149.533969][ T8204] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 149.544884][ T8188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.227118][ T8226] loop1: detected capacity change from 0 to 512 [ 150.236181][ T8226] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 150.258883][ T8226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.311508][ T8231] __nla_validate_parse: 6 callbacks suppressed [ 150.311528][ T8231] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1644'. [ 150.394596][ T8233] loop3: detected capacity change from 0 to 1024 [ 150.401708][ T8233] EXT4-fs: Ignoring removed bh option [ 150.413063][ T8233] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 150.503453][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.613383][ T8249] netlink: 'syz.4.1654': attribute type 13 has an invalid length. [ 150.770027][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 150.802594][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 150.846554][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 150.855093][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 151.276010][ T8263] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.416914][ T8275] lo speed is unknown, defaulting to 1000 [ 151.620014][ T8281] loop2: detected capacity change from 0 to 1024 [ 151.635292][ T8281] EXT4-fs: Ignoring removed bh option [ 151.684440][ T8281] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 152.138558][ T8302] loop1: detected capacity change from 0 to 2048 [ 152.195311][ T8302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.622831][ T8302] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.704425][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.828989][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 152.829007][ T29] audit: type=1400 audit(1763153270.577:10178): avc: denied { mount } for pid=8321 comm="syz.2.1677" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 152.955742][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 152.966825][ T29] audit: type=1400 audit(1763153270.677:10179): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 153.022962][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1679'. [ 153.266676][ T8334] tipc: Enabling of bearer rejected, failed to enable media [ 153.314095][ T29] audit: type=1400 audit(1763153271.067:10180): avc: denied { execute } for pid=8336 comm="syz.2.1681" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 153.699351][ T8354] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1688'. [ 153.794677][ T8356] loop1: detected capacity change from 0 to 512 [ 153.814414][ T29] audit: type=1400 audit(1763153271.557:10181): avc: denied { write } for pid=8357 comm="syz.0.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.872351][ T8356] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 153.882830][ T8356] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 153.892212][ T8356] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1689: Failed to acquire dquot type 1 [ 153.930440][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1692'. [ 153.940369][ T8356] EXT4-fs (loop1): 1 truncate cleaned up [ 153.953761][ T8356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.043545][ T8356] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.090979][ T8371] xt_connbytes: Forcing CT accounting to be enabled [ 154.158040][ T8371] set match dimension is over the limit! [ 154.272882][ T8367] lo speed is unknown, defaulting to 1000 [ 154.377828][ T29] audit: type=1400 audit(1763153272.127:10182): avc: denied { cmd } for pid=8377 comm="syz.2.1696" path="socket:[28422]" dev="sockfs" ino=28422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.448627][ T8381] netlink: 'syz.2.1697': attribute type 16 has an invalid length. [ 154.456513][ T8381] netlink: 'syz.2.1697': attribute type 17 has an invalid length. [ 154.483952][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.565489][ T8383] loop3: detected capacity change from 0 to 2048 [ 154.603775][ T8383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.643433][ T8389] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 154.643433][ T8389] program syz.1.1699 not setting count and/or reply_len properly [ 154.695241][ T8389] random: crng reseeded on system resumption [ 154.716012][ T29] audit: type=1400 audit(1763153272.467:10183): avc: denied { ioctl } for pid=8388 comm="syz.1.1699" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 154.814649][ T29] audit: type=1400 audit(1763153272.567:10184): avc: denied { bind } for pid=8392 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.822744][ T8383] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.858360][ T8382] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 154.884222][ T8382] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 12 with error 28 [ 154.896663][ T8382] EXT4-fs (loop3): This should not happen!! Data will be lost [ 154.896663][ T8382] [ 154.906379][ T8382] EXT4-fs (loop3): Total free blocks count 0 [ 154.912409][ T8382] EXT4-fs (loop3): Free/Dirty block details [ 154.918321][ T8382] EXT4-fs (loop3): free_blocks=2415919504 [ 154.924141][ T8382] EXT4-fs (loop3): dirty_blocks=16 [ 154.924222][ T8382] EXT4-fs (loop3): Block reservation details [ 154.924258][ T8382] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 154.937247][ T8398] netlink: 'syz.1.1702': attribute type 16 has an invalid length. [ 154.952726][ T8398] netlink: 'syz.1.1702': attribute type 17 has an invalid length. [ 154.964693][ T29] audit: type=1400 audit(1763153272.717:10185): avc: denied { read } for pid=8399 comm="syz.0.1704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 154.985472][ T8403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 155.000765][ T8398] ip6tnl0: left promiscuous mode [ 155.005805][ T8398] ip6tnl0: left allmulticast mode [ 155.018872][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.028289][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.040851][ T8398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.059083][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.104955][ T8408] netlink: 'syz.4.1706': attribute type 12 has an invalid length. [ 155.163865][ T8416] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1711'. [ 155.184533][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.194561][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.618987][ T8435] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 155.648929][ T8435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.714525][ T8435] veth3: entered promiscuous mode [ 155.734750][ T8435] bond3: (slave veth3): Enslaving as an active interface with a down link [ 155.762549][ T8442] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 155.859574][ T8440] erspan0: entered allmulticast mode [ 155.974098][ T8438] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.035792][ T8440] bond3: (slave erspan0): making interface the new active one [ 156.134018][ T8440] erspan0: entered promiscuous mode [ 156.168467][ T8440] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 156.293287][ T8462] netlink: 'syz.3.1727': attribute type 13 has an invalid length. [ 156.813955][ T8471] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 156.937235][ T8471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 156.977505][ T8471] bond2: (slave bond3): making interface the new active one [ 156.994895][ T8471] bond2: (slave bond3): Enslaving as an active interface with an up link [ 157.003876][ T8480] syz_tun: entered allmulticast mode [ 157.010647][ T8477] syz_tun: left allmulticast mode [ 157.022632][ T8481] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 157.041877][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1729'. [ 157.053298][ T8471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.173989][ T8486] loop3: detected capacity change from 0 to 2048 [ 157.214496][ T8486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.233323][ T8488] loop1: detected capacity change from 0 to 1024 [ 157.245044][ T8488] EXT4-fs: Ignoring removed orlov option [ 157.299771][ T8488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.457038][ T8485] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 157.473918][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1736'. [ 157.488423][ T8497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.516946][ T8485] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 10 with error 28 [ 157.529388][ T8485] EXT4-fs (loop3): This should not happen!! Data will be lost [ 157.529388][ T8485] [ 157.539140][ T8485] EXT4-fs (loop3): Total free blocks count 0 [ 157.545163][ T8485] EXT4-fs (loop3): Free/Dirty block details [ 157.551110][ T8485] EXT4-fs (loop3): free_blocks=2415919504 [ 157.556892][ T8485] EXT4-fs (loop3): dirty_blocks=16 [ 157.562013][ T8485] EXT4-fs (loop3): Block reservation details [ 157.568028][ T8485] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 157.617966][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.751883][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.116840][ T8515] syzkaller0: entered promiscuous mode [ 158.122471][ T8515] syzkaller0: entered allmulticast mode [ 158.277947][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 158.277963][ T29] audit: type=1326 audit(1763153276.027:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.349261][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 158.368076][ T29] audit: type=1326 audit(1763153276.067:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.392194][ T29] audit: type=1326 audit(1763153276.067:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.415830][ T29] audit: type=1326 audit(1763153276.067:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.439353][ T29] audit: type=1326 audit(1763153276.067:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.463155][ T29] audit: type=1326 audit(1763153276.067:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.486741][ T29] audit: type=1326 audit(1763153276.067:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.510302][ T29] audit: type=1326 audit(1763153276.067:10202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.533894][ T29] audit: type=1326 audit(1763153276.067:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.557669][ T29] audit: type=1326 audit(1763153276.067:10204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8522 comm="syz.2.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 158.602476][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1746'. [ 159.268878][ T8544] tipc: Enabled bearer , priority 0 [ 159.300063][ T8556] loop1: detected capacity change from 0 to 2048 [ 159.308825][ T8543] tipc: Resetting bearer [ 159.333078][ T8543] tipc: Disabling bearer [ 159.350958][ T8556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.379324][ T8561] netlink: 64 bytes leftover after parsing attributes in process `gtp'. [ 159.397725][ T8563] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1756'. [ 159.416769][ T8563] syz_tun: entered allmulticast mode [ 159.432908][ T8562] syz_tun: left allmulticast mode [ 159.443648][ T3321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 159.458940][ T3321] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 159.497063][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.701974][ T8589] macsec0: entered promiscuous mode [ 159.731870][ T8591] loop3: detected capacity change from 0 to 128 [ 159.797696][ T8591] bio_check_eod: 2 callbacks suppressed [ 159.797714][ T8591] syz.3.1765: attempt to access beyond end of device [ 159.797714][ T8591] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 159.827238][ T8591] syz.3.1765: attempt to access beyond end of device [ 159.827238][ T8591] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 159.889218][ T8591] syz.3.1765: attempt to access beyond end of device [ 159.889218][ T8591] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 159.937318][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 159.937966][ T8591] syz.3.1765: attempt to access beyond end of device [ 159.937966][ T8591] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 159.962851][ T8591] syz.3.1765: attempt to access beyond end of device [ 159.962851][ T8591] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 159.976455][ T8605] hsr_slave_1 (unregistering): left promiscuous mode [ 159.977090][ T8591] syz.3.1765: attempt to access beyond end of device [ 159.977090][ T8591] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 159.997352][ T8591] syz.3.1765: attempt to access beyond end of device [ 159.997352][ T8591] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 160.012061][ T8606] syz.3.1765: attempt to access beyond end of device [ 160.012061][ T8606] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 160.024199][ T8591] syz.3.1765: attempt to access beyond end of device [ 160.024199][ T8591] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 160.039722][ T8591] syz.3.1765: attempt to access beyond end of device [ 160.039722][ T8591] loop3: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 160.093320][ T8590] Buffer I/O error on dev loop3, logical block 305, async page read [ 160.101667][ T8590] Buffer I/O error on dev loop3, logical block 306, async page read [ 160.142429][ T8590] Buffer I/O error on dev loop3, logical block 307, async page read [ 160.158157][ T8590] Buffer I/O error on dev loop3, logical block 308, async page read [ 160.174991][ T8590] Buffer I/O error on dev loop3, logical block 309, async page read [ 160.190054][ T8590] Buffer I/O error on dev loop3, logical block 310, async page read [ 160.199961][ T8590] Buffer I/O error on dev loop3, logical block 311, async page read [ 160.212125][ T8590] Buffer I/O error on dev loop3, logical block 312, async page read [ 160.214567][ T8618] lo speed is unknown, defaulting to 1000 [ 160.220726][ T8590] Buffer I/O error on dev loop3, logical block 305, async page read [ 160.234313][ T8590] Buffer I/O error on dev loop3, logical block 306, async page read [ 160.329429][ T8628] loop3: detected capacity change from 0 to 1024 [ 160.336615][ T8628] EXT4-fs: inline encryption not supported [ 160.374194][ T8628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.413344][ T8628] usb usb8: usbfs: process 8628 (syz.3.1776) did not claim interface 0 before use [ 160.534544][ T8628] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.1776: Allocating blocks 385-513 which overlap fs metadata [ 160.681058][ T8627] EXT4-fs (loop3): pa ffff888106ab67e0: logic 16, phys. 129, len 24 [ 160.689153][ T8627] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 160.894005][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.428856][ T8662] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1785'. [ 161.466265][ T8662] syz_tun: entered allmulticast mode [ 161.510849][ T8662] dvmrp8: entered allmulticast mode [ 161.518261][ T8668] loop2: detected capacity change from 0 to 128 [ 161.559114][ T8661] syz_tun: left allmulticast mode [ 161.922833][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1791'. [ 161.944772][ T8679] netlink: 'syz.2.1792': attribute type 7 has an invalid length. [ 161.952744][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 162.918822][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1798'. [ 163.150935][ T8695] bond1: (slave dummy0): Releasing active interface [ 163.158561][ T8706] smc: net device bond0 erased user defined pnetid SYZ0 [ 163.178593][ T8695] dummy0 (unregistering): left promiscuous mode [ 163.196537][ T8695] dummy0 (unregistering): left allmulticast mode [ 163.230901][ T8709] netlink: 'syz.3.1800': attribute type 16 has an invalid length. [ 163.238884][ T8709] netlink: 'syz.3.1800': attribute type 17 has an invalid length. [ 163.319216][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 163.319230][ T29] audit: type=1326 audit(1763153281.067:10251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.352166][ T8709] erspan0: left allmulticast mode [ 163.410490][ T8709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.442025][ T29] audit: type=1326 audit(1763153281.107:10252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.465724][ T29] audit: type=1326 audit(1763153281.107:10253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.489262][ T29] audit: type=1326 audit(1763153281.107:10254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.512903][ T29] audit: type=1326 audit(1763153281.107:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.536421][ T29] audit: type=1326 audit(1763153281.107:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.559948][ T29] audit: type=1326 audit(1763153281.107:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.583466][ T29] audit: type=1326 audit(1763153281.107:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.607319][ T29] audit: type=1326 audit(1763153281.107:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.630879][ T29] audit: type=1326 audit(1763153281.107:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8714 comm="syz.2.1802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6601a8f6c9 code=0x7ffc0000 [ 163.656578][ T8709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.677371][ T8713] veth4: left promiscuous mode [ 163.682239][ T8713] veth4: left allmulticast mode [ 163.692256][ T8713] bond1: left promiscuous mode [ 163.697138][ T8713] bond1: left allmulticast mode [ 163.702686][ T8713] bond2: left allmulticast mode [ 163.707566][ T8713] ip6gretap1: left allmulticast mode [ 163.713157][ T8713] veth8: left promiscuous mode [ 163.717931][ T8713] veth8: left allmulticast mode [ 164.323731][ T8739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1813'. [ 164.352522][ T8727] xt_CT: No such helper "pptp" [ 164.367823][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 164.444261][ T8729] set match dimension is over the limit! [ 164.613327][ T8756] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 164.690874][ T8758] netlink: 'syz.3.1819': attribute type 83 has an invalid length. [ 164.759037][ T8765] loop3: detected capacity change from 0 to 512 [ 164.784209][ T8765] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.1822: corrupted in-inode xattr: e_value size too large [ 164.826069][ T8765] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1822: couldn't read orphan inode 15 (err -117) [ 164.838846][ T8765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.868825][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.937379][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'. [ 164.977714][ T8777] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.053567][ T8782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1827'. [ 165.108162][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 165.204446][ T8780] set match dimension is over the limit! [ 165.640744][ T8805] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1833'. [ 165.745257][ T8811] loop2: detected capacity change from 0 to 512 [ 165.796091][ T8811] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.1835: corrupted in-inode xattr: e_value size too large [ 165.823129][ T8811] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1835: couldn't read orphan inode 15 (err -117) [ 165.906604][ T8811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.032446][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.744766][ T8836] veth12: entered promiscuous mode [ 166.750014][ T8836] veth12: entered allmulticast mode [ 167.793534][ T8823] loop3: detected capacity change from 0 to 128 [ 167.900884][ T8866] lo speed is unknown, defaulting to 1000 [ 168.051625][ T8878] loop1: detected capacity change from 0 to 512 [ 168.059669][ T8878] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.515510][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 168.515528][ T29] audit: type=1400 audit(1763153286.267:10350): avc: denied { create } for pid=8883 comm="syz.2.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 168.553899][ T8884] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1860'. [ 168.622300][ T8889] loop2: detected capacity change from 0 to 1024 [ 168.640538][ T8889] EXT4-fs: inline encryption not supported [ 168.734724][ T8889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.772274][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1864'. [ 168.789603][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 168.801996][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1865'. [ 168.815354][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1865'. [ 168.833467][ T8889] usb usb8: usbfs: process 8889 (syz.2.1861) did not claim interface 0 before use [ 168.874074][ T8889] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.1861: Allocating blocks 385-513 which overlap fs metadata [ 168.917667][ T8888] EXT4-fs (loop2): pa ffff888106ab6770: logic 16, phys. 129, len 24 [ 168.925873][ T8888] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 168.963533][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.135722][ T8920] vlan0: entered allmulticast mode [ 169.187993][ T8922] loop2: detected capacity change from 0 to 512 [ 169.204239][ T29] audit: type=1400 audit(1763153286.957:10351): avc: denied { mounton } for pid=8919 comm="syz.2.1874" path="/343/file0" dev="tmpfs" ino=1824 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 169.227352][ T8922] EXT4-fs: Ignoring removed nobh option [ 169.232703][ T8923] loop1: detected capacity change from 0 to 1024 [ 169.245789][ T8923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.277189][ T8922] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.1874: corrupted inode contents [ 169.308878][ T8922] EXT4-fs (loop2): Remounting filesystem read-only [ 169.337380][ T8922] Quota error (device loop2): write_blk: dquota write failed [ 169.355160][ T8922] Quota error (device loop2): qtree_write_dquot: Error -30 occurred while creating quota [ 169.372685][ T8922] EXT4-fs (loop2): 1 truncate cleaned up [ 169.386792][ T8922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.412506][ T8922] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.433754][ T8922] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.600649][ T8929] Y4`ҘDʆ5: renamed from lo (while UP) [ 169.789849][ T29] audit: type=1326 audit(1763153287.537:10352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 169.813418][ T29] audit: type=1326 audit(1763153287.537:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 169.836983][ T29] audit: type=1326 audit(1763153287.537:10354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 169.860623][ T29] audit: type=1326 audit(1763153287.537:10355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 169.884156][ T29] audit: type=1326 audit(1763153287.537:10356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 169.907680][ T29] audit: type=1326 audit(1763153287.537:10357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8935 comm="syz.3.1878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 170.435076][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.466163][ T8953] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1884'. [ 170.486936][ T8951] loop2: detected capacity change from 0 to 1024 [ 170.496869][ T8951] EXT4-fs: Ignoring removed orlov option [ 170.550791][ T8951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.637215][ T8955] loop3: detected capacity change from 0 to 512 [ 170.797575][ T8955] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1879: inode #0: comm syz.3.1879: iget: illegal inode # [ 170.831620][ T8964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.842601][ T8955] EXT4-fs (loop3): get orphan inode failed [ 170.848673][ T8955] EXT4-fs (loop3): mount failed [ 171.195228][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.761194][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 171.952661][ T8999] lo speed is unknown, defaulting to 1000 [ 172.079069][ T9008] netlink: 'syz.4.1901': attribute type 10 has an invalid length. [ 172.618767][ T9017] lo speed is unknown, defaulting to 1000 [ 172.880218][ T9033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'. [ 172.955473][ T9033] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9033 comm=syz.3.1911 [ 173.031406][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'. [ 173.053462][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1915'. [ 173.186682][ T9047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.261235][ T9048] syzkaller0: entered promiscuous mode [ 173.266790][ T9048] syzkaller0: entered allmulticast mode [ 173.721066][ T9054] wg2: left allmulticast mode [ 173.727548][ T9053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1920'. [ 173.962571][ T9054] wg2: entered promiscuous mode [ 173.967506][ T9054] wg2: entered allmulticast mode [ 174.542692][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 174.542706][ T29] audit: type=1326 audit(1763153292.287:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.572651][ T29] audit: type=1326 audit(1763153292.287:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.596213][ T29] audit: type=1326 audit(1763153292.287:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.619797][ T29] audit: type=1326 audit(1763153292.287:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.643337][ T29] audit: type=1326 audit(1763153292.287:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.667028][ T29] audit: type=1326 audit(1763153292.287:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.690600][ T29] audit: type=1326 audit(1763153292.287:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.714182][ T29] audit: type=1326 audit(1763153292.287:10555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.737812][ T29] audit: type=1326 audit(1763153292.287:10556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.761376][ T29] audit: type=1326 audit(1763153292.287:10557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.0.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dc993f6c9 code=0x7ffc0000 [ 174.786329][ T9067] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1926'. [ 174.786569][ T9061] xt_CT: No such helper "pptp" [ 174.817822][ T9067] 0X: renamed from caif0 [ 174.829086][ T9067] 0X: entered allmulticast mode [ 174.834590][ T9067] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 174.873106][ T9076] loop2: detected capacity change from 0 to 512 [ 174.925784][ T9079] veth6: entered promiscuous mode [ 174.931065][ T9079] veth6: entered allmulticast mode [ 174.945377][ T9076] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.987955][ T9083] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.1931'. [ 175.022734][ T9087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.051851][ T9076] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 175.068658][ T9076] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1929: bg 0: block 248: padding at end of block bitmap is not set [ 175.083160][ T9083] netlink: zone id is out of range [ 175.083207][ T9083] netlink: zone id is out of range [ 175.083226][ T9083] netlink: zone id is out of range [ 175.083233][ T9083] netlink: zone id is out of range [ 175.083262][ T9083] netlink: del zone limit has 8 unknown bytes [ 175.093905][ T9076] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1929: Failed to acquire dquot type 1 [ 175.121825][ T9076] EXT4-fs (loop2): 1 truncate cleaned up [ 175.127948][ T9076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 175.157440][ T9076] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1929: Failed to acquire dquot type 1 [ 175.176065][ T9076] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1929: Failed to acquire dquot type 1 [ 175.194390][ T9095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.225719][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 175.258512][ T9097] loop1: detected capacity change from 0 to 128 [ 175.267064][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 175.294438][ T9097] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.337463][ T9097] ext4 filesystem being mounted at /385/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.472748][ T9099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 175.528417][ T3321] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.943628][ T9121] syzkaller0: entered promiscuous mode [ 175.949164][ T9121] syzkaller0: entered allmulticast mode [ 176.100277][ T9135] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 177.533276][ T9162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.102873][ T9167] lo speed is unknown, defaulting to 1000 [ 178.384409][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 178.487491][ T9182] lo speed is unknown, defaulting to 1000 [ 178.688454][ T9182] netlink: 'syz.0.1966': attribute type 2 has an invalid length. [ 178.750613][ T9182] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1966'. [ 178.823474][ T9194] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 178.897705][ T9198] tipc: New replicast peer: 255.255.255.255 [ 178.903901][ T9198] tipc: Enabled bearer , priority 10 [ 179.103487][ T9204] syzkaller0: entered promiscuous mode [ 179.109062][ T9204] syzkaller0: entered allmulticast mode [ 179.234320][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'. [ 179.509138][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 179.514822][ T9228] vlan0: entered allmulticast mode [ 179.523222][ T9228] bridge_slave_0: entered allmulticast mode [ 179.538433][ T9225] bond1: (slave dummy0): Releasing active interface [ 179.545282][ T9225] dummy0 (unregistering): left promiscuous mode [ 179.551561][ T9225] dummy0 (unregistering): left allmulticast mode [ 179.559964][ T9229] loop1: detected capacity change from 0 to 512 [ 179.567321][ T9229] EXT4-fs: Ignoring removed nobh option [ 179.594414][ T9229] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #3: comm syz.1.1986: corrupted inode contents [ 179.606416][ T9229] EXT4-fs (loop1): Remounting filesystem read-only [ 179.613607][ T9229] __quota_error: 133 callbacks suppressed [ 179.613622][ T9229] Quota error (device loop1): write_blk: dquota write failed [ 179.626836][ T9229] Quota error (device loop1): qtree_write_dquot: Error -30 occurred while creating quota [ 179.636952][ T9229] EXT4-fs (loop1): 1 truncate cleaned up [ 179.643799][ T9229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.656432][ T9229] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.667618][ T9229] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.870462][ T9239] loop1: detected capacity change from 0 to 512 [ 179.878008][ T9239] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.003811][ T9239] EXT4-fs (loop1): 1 truncate cleaned up [ 180.010986][ T9239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.495198][ T7098] tipc: Node number set to 3170910749 [ 180.695301][ T9248] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 180.785744][ T29] audit: type=1400 audit(1763153298.537:10685): avc: denied { connect } for pid=9247 comm="syz.3.1991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 180.811715][ T9248] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1991'. [ 180.831145][ T9253] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1993'. [ 180.860094][ T9248] 0X: renamed from caif0 [ 180.879625][ T9248] 0X: entered allmulticast mode [ 180.885350][ T9248] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 181.007354][ T9261] sch_fq: defrate 4294967295 ignored. [ 181.067835][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1998'. [ 181.091348][ T9266] bond0: (slave dummy0): Releasing backup interface [ 181.104227][ T9266] dummy0 (unregistering): left promiscuous mode [ 181.195168][ T29] audit: type=1400 audit(1763153298.947:10686): avc: denied { create } for pid=9273 comm="syz.3.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 181.221562][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 181.231071][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2003'. [ 181.274601][ T9274] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2002'. [ 181.352804][ T29] audit: type=1400 audit(1763153299.027:10687): avc: denied { write } for pid=9273 comm="syz.3.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 181.521287][ T29] audit: type=1326 audit(1763153299.267:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 181.544987][ T29] audit: type=1326 audit(1763153299.267:10689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 181.587293][ T9282] loop3: detected capacity change from 0 to 1024 [ 181.597250][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 181.677846][ T29] audit: type=1326 audit(1763153299.327:10690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 181.701730][ T29] audit: type=1326 audit(1763153299.327:10691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 181.725452][ T29] audit: type=1326 audit(1763153299.327:10692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9280 comm="syz.3.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab272df6c9 code=0x7ffc0000 [ 181.764649][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.861643][ T9293] tipc: Enabled bearer , priority 0 [ 181.870156][ T9293] syzkaller0: entered promiscuous mode [ 181.875874][ T9293] syzkaller0: entered allmulticast mode [ 181.893012][ T9293] tipc: Resetting bearer [ 181.900133][ T9292] tipc: Resetting bearer [ 181.918973][ T9292] tipc: Disabling bearer [ 182.150644][ T9308] lo speed is unknown, defaulting to 1000 [ 182.658444][ T9319] loop3: detected capacity change from 0 to 1024 [ 182.672993][ T9319] EXT4-fs: Ignoring removed orlov option [ 182.693037][ T9319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.720613][ T9317] lo speed is unknown, defaulting to 1000 [ 182.926846][ T9331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.071626][ T9335] lo speed is unknown, defaulting to 1000 [ 183.395023][ T9338] loop1: detected capacity change from 0 to 128 [ 183.448161][ T9317] netlink: 'syz.4.2019': attribute type 2 has an invalid length. [ 183.657009][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.723076][ T9345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9345 comm=syz.3.2026 [ 183.735589][ T9345] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9345 comm=syz.3.2026 [ 183.765289][ T9351] tipc: Enabling of bearer rejected, already enabled [ 183.908674][ T9359] loop1: detected capacity change from 0 to 1024 [ 183.936634][ T9359] EXT4-fs: Ignoring removed bh option [ 183.954202][ T9359] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 184.118434][ T9364] lo speed is unknown, defaulting to 1000 [ 184.163468][ T9359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.289480][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.657897][ T9377] lo speed is unknown, defaulting to 1000 [ 184.715801][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 184.715819][ T29] audit: type=1326 audit(1763153302.467:10769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.734449][ T9384] netlink: 'syz.3.2044': attribute type 1 has an invalid length. [ 184.807465][ T9386] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 184.808235][ T29] audit: type=1326 audit(1763153302.497:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.841051][ T29] audit: type=1326 audit(1763153302.497:10771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.862315][ T9386] ip6erspan0: entered promiscuous mode [ 184.864648][ T29] audit: type=1326 audit(1763153302.497:10772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.893604][ T29] audit: type=1326 audit(1763153302.497:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.917151][ T29] audit: type=1326 audit(1763153302.497:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.940705][ T29] audit: type=1326 audit(1763153302.497:10775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.964266][ T29] audit: type=1326 audit(1763153302.497:10776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 184.987795][ T29] audit: type=1326 audit(1763153302.497:10777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 185.011317][ T29] audit: type=1326 audit(1763153302.497:10778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9381 comm="syz.4.2043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2e857f6c9 code=0x7ffc0000 [ 185.071585][ T9376] netlink: 'syz.1.2038': attribute type 16 has an invalid length. [ 185.079517][ T9376] __nla_validate_parse: 3 callbacks suppressed [ 185.079570][ T9376] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2038'. [ 185.124925][ T9384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 185.134100][ T9377] netlink: 'syz.2.2041': attribute type 2 has an invalid length. [ 185.157741][ T9390] macvlan0: entered promiscuous mode [ 185.164309][ T9390] bond4: entered promiscuous mode [ 185.172552][ T9390] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 185.184095][ T9390] bond4: left promiscuous mode [ 185.197800][ T9397] veth10: entered promiscuous mode [ 185.203038][ T9397] veth10: entered allmulticast mode [ 185.220139][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2049'. [ 185.249667][ T9399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.266537][ T9377] loop2: detected capacity change from 0 to 8192 [ 185.300238][ T9405] wg2: entered promiscuous mode [ 185.305258][ T9405] wg2: entered allmulticast mode [ 185.314993][ T9377] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2041'. [ 185.338550][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2049'. [ 185.373741][ T9399] bond3: entered promiscuous mode [ 185.378862][ T9399] bond3: entered allmulticast mode [ 185.427482][ T9406] bond0: (slave dummy0): Releasing active interface [ 185.438345][ T9406] dummy0: left promiscuous mode [ 185.446464][ T9406] dummy0: entered promiscuous mode [ 185.452751][ T9406] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 185.463995][ T9399] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 185.472689][ T9399] dummy0: left promiscuous mode [ 185.492606][ T9399] bond3 (unregistering): Released all slaves [ 185.504936][ T9414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2054'. [ 185.590234][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 185.611119][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2057'. [ 185.682681][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2055'. [ 185.732919][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'. [ 185.750739][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2058'. [ 185.855588][ T9425] syzkaller1: entered promiscuous mode [ 185.861134][ T9425] syzkaller1: entered allmulticast mode [ 185.984133][ T9439] loop2: detected capacity change from 0 to 512 [ 186.009178][ T9439] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.016395][ T9436] lo speed is unknown, defaulting to 1000 [ 186.033436][ T9442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.117928][ T9445] xt_CT: You must specify a L4 protocol and not use inversions on it [ 186.170436][ T3320] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 186.320871][ T9451] lo speed is unknown, defaulting to 1000 [ 186.462542][ T9437] ================================================================== [ 186.470686][ T9437] BUG: KCSAN: data-race in touch_atime / touch_atime [ 186.477416][ T9437] [ 186.479776][ T9437] write to 0xffff888120ad9830 of 4 bytes by task 9431 on cpu 1: [ 186.487429][ T9437] touch_atime+0x1e8/0x340 [ 186.491890][ T9437] shmem_file_read_iter+0x477/0x540 [ 186.497118][ T9437] copy_splice_read+0x442/0x660 [ 186.501979][ T9437] splice_direct_to_actor+0x290/0x680 [ 186.507381][ T9437] do_splice_direct+0xda/0x150 [ 186.512176][ T9437] do_sendfile+0x380/0x650 [ 186.516619][ T9437] __x64_sys_sendfile64+0x105/0x150 [ 186.521836][ T9437] x64_sys_call+0x2bb4/0x3000 [ 186.526535][ T9437] do_syscall_64+0xd2/0x200 [ 186.531047][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.536978][ T9437] [ 186.539302][ T9437] read to 0xffff888120ad9830 of 4 bytes by task 9437 on cpu 0: [ 186.546840][ T9437] touch_atime+0x194/0x340 [ 186.551273][ T9437] shmem_file_read_iter+0x477/0x540 [ 186.556481][ T9437] copy_splice_read+0x442/0x660 [ 186.561338][ T9437] splice_direct_to_actor+0x290/0x680 [ 186.566727][ T9437] do_splice_direct+0xda/0x150 [ 186.571498][ T9437] do_sendfile+0x380/0x650 [ 186.575930][ T9437] __x64_sys_sendfile64+0x105/0x150 [ 186.581142][ T9437] x64_sys_call+0x2bb4/0x3000 [ 186.585824][ T9437] do_syscall_64+0xd2/0x200 [ 186.590328][ T9437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.596224][ T9437] [ 186.598545][ T9437] value changed: 0x0c5dad42 -> 0x0cf643c2 [ 186.604258][ T9437] [ 186.606580][ T9437] Reported by Kernel Concurrency Sanitizer on: [ 186.612756][ T9437] CPU: 0 UID: 0 PID: 9437 Comm: syz.4.2062 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 186.624064][ T9437] Tainted: [W]=WARN [ 186.627870][ T9437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 186.637936][ T9437] ================================================================== [ 186.652734][ T9457] 1X: renamed from 60X [ 186.664227][ T9457] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 186.753531][ T9460] netlink: 'syz.3.2071': attribute type 1 has an invalid length. [ 186.802821][ T9460] 8021q: adding VLAN 0 to HW filter on device bond5