last executing test programs: 4.246514907s ago: executing program 2 (id=1558): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 4.03118469s ago: executing program 3 (id=1565): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000040)='\xd0\xb4\'') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 3.907776282s ago: executing program 0 (id=1567): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)="4baa9f6869f100") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 3.877909132s ago: executing program 3 (id=1568): personality(0x500006) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f000073f000/0x3000)=nil, 0x3000, 0x1, 0x8010, r0, 0xe91ef000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004001b000800010401000095f0"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r3}, 0x18) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="b94d7202ac6a21", 0x7, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0x2}, 0x1c) write$selinux_user(r4, &(0x7f00000017c0)=ANY=[@ANYBLOB='system_u:object_r:netutils_'], 0x2d) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000002c0)=@req={0x3, 0x9, 0xf, 0x6}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 3.817224083s ago: executing program 4 (id=1570): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) capset(0x0, 0x0) ptrace(0x10, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, r0, 0x4007) socket(0x15, 0x5, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r3, &(0x7f00000000c0), 0x0, 0x0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.298550541s ago: executing program 4 (id=1573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 3.106892494s ago: executing program 2 (id=1576): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x10012, &(0x7f0000002340)={[{@release_agent={'release_agent', 0x3d, './file0'}}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x2}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r2, &(0x7f0000000480)="7eeb99b6f78ca44054798fa8d0e9", 0xe, 0x85, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) 2.64558835s ago: executing program 2 (id=1577): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x112, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, &(0x7f0000000280)=ANY=[@ANYBLOB="2c0500"], 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_socket_connect_nvme_tcp() madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.185280748s ago: executing program 4 (id=1579): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket(0x1f, 0x2, 0x200000) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2.099254199s ago: executing program 4 (id=1580): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000040)='\xd0\xb4\'') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 2.098992739s ago: executing program 0 (id=1581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 2.096922949s ago: executing program 1 (id=1590): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 2.096171509s ago: executing program 3 (id=1591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.046646939s ago: executing program 4 (id=1582): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) close(r0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") msgsnd(0x0, &(0x7f0000000d40)=ANY=[], 0x0, 0x0) 2.00695296s ago: executing program 2 (id=1583): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c00)="d8000000180081054e81f782db4cb904021d080006407c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c8c000461c1d67f6f95001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d96f54f6f7848b66ea00a24843d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9e", 0xc7}], 0x1}, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x25, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000128000/0x3000)=nil, 0x3000, 0x800002, 0x50, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80), 0x0, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) 1.910733981s ago: executing program 0 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.910144832s ago: executing program 1 (id=1585): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @random="b842351ec964"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) unlink(&(0x7f0000000180)='./file1\x00') ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd90, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.114944773s ago: executing program 3 (id=1586): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 784.910388ms ago: executing program 1 (id=1587): socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000001020300000000000000000002000008300002802c00018014000300fc010000000000000000000000ea3c07be09f7fea88800000000000000000000000001018deac83e20e87de1853548523c50ee69aff5df0ed3b15b0a98125c8266739fafc6248727b3663a8d3f0d3ab9e5fd1d039fa9b7e497de2e5ba4571ed3eb6c4449b4bac714916c5b0a3a"], 0x44}}, 0x0) msgsnd(0x0, 0x0, 0x401, 0x0) msgget(0x1, 0xb6) msgctl$IPC_RMID(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) set_mempolicy(0x8006, 0x0, 0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 778.352208ms ago: executing program 3 (id=1588): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) write$P9_RGETLOCK(r1, &(0x7f0000000380)={0x22, 0x37, 0x1, {0x1, 0x3, 0x1, r2, 0x4, '!@\x9b$'}}, 0x22) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 683.10751ms ago: executing program 3 (id=1589): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000), 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000003000/0x4000)=nil) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 681.21031ms ago: executing program 2 (id=1601): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, &(0x7f0000002900)=0x0, &(0x7f0000002940)) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 662.27746ms ago: executing program 0 (id=1592): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, 0x0) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030007e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 644.1497ms ago: executing program 4 (id=1593): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) 582.759391ms ago: executing program 1 (id=1594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xe) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x1300, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 87.363408ms ago: executing program 2 (id=1595): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000040)='\xd0\xb4\'') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = dup(r1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 85.202229ms ago: executing program 0 (id=1606): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) open(0x0, 0x14927e, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x3, 0xfff3}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xc, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x78}}, 0x200400d4) 84.603839ms ago: executing program 1 (id=1596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r0, 0x0, 0xd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x25603) 410.15µs ago: executing program 1 (id=1597): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xb6f8000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40082, 0x2, @perf_bp={0x0, 0x1}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000080)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 0 (id=1598): socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020400090c00000000070000fedbdf250200090018000000e9255b000000000003000600000000000200000000000000000000000000000002000100000000000000000d0000000003"], 0x60}, 0x1, 0x7}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0xffff}, {0x1}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.1.735'. [ 92.430442][ T5656] loop1: detected capacity change from 0 to 512 [ 92.476978][ T5656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.497560][ T5656] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.517695][ T5656] EXT4-fs error (device loop1): ext4_get_first_dir_block:3547: inode #12: comm syz.1.730: directory missing '..' [ 92.539171][ T5664] openvswitch: netlink: Message has 6 unknown bytes. [ 92.576810][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.634743][ T5671] loop1: detected capacity change from 0 to 1024 [ 92.675249][ T5671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.708939][ T5671] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.728863][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.927164][ T5690] loop1: detected capacity change from 0 to 512 [ 92.934931][ T5690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.948009][ T5690] EXT4-fs (loop1): 1 truncate cleaned up [ 92.954349][ T5690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.126728][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 93.126743][ T29] audit: type=1400 audit(1752051126.547:3613): avc: denied { create } for pid=5699 comm="syz.2.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 93.327459][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.350829][ T5721] netlink: 'syz.2.747': attribute type 3 has an invalid length. [ 93.353833][ T29] audit: type=1326 audit(1752051126.767:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 93.359607][ T5721] netlink: 'syz.2.747': attribute type 3 has an invalid length. [ 93.382772][ T29] audit: type=1326 audit(1752051126.767:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 93.431038][ T29] audit: type=1326 audit(1752051126.837:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 93.454476][ T29] audit: type=1326 audit(1752051126.837:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 93.477928][ T29] audit: type=1326 audit(1752051126.837:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5723 comm="syz.1.746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 93.587130][ T5731] loop0: detected capacity change from 0 to 2048 [ 93.624035][ T5731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.640425][ T5731] EXT4-fs (loop0): shut down requested (0) [ 93.664131][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.815350][ T5756] loop1: detected capacity change from 0 to 512 [ 93.828450][ T5756] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 93.903877][ T5756] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.752: bg 0: block 435: padding at end of block bitmap is not set [ 93.919954][ T5756] EXT4-fs (loop1): 1 truncate cleaned up [ 93.927275][ T5756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.081158][ T5764] loop2: detected capacity change from 0 to 2048 [ 94.106060][ T5764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.833720][ T5770] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 94.845464][ T5780] netlink: 'syz.0.764': attribute type 3 has an invalid length. [ 94.865775][ T5780] netlink: 'syz.0.764': attribute type 3 has an invalid length. [ 94.923452][ T5764] netlink: 'syz.2.758': attribute type 10 has an invalid length. [ 94.953543][ T5784] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 94.970631][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.991985][ T5764] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 95.021000][ T5789] loop4: detected capacity change from 0 to 1024 [ 95.051679][ T5784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.072281][ T5796] loop0: detected capacity change from 0 to 512 [ 95.111414][ T5794] gretap1: entered promiscuous mode [ 95.129387][ T5794] bond1: (slave gretap1): making interface the new active one [ 95.138317][ T5794] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 95.159577][ T5796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.211725][ T5796] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.224969][ T5789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.246948][ T5784] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 95.274151][ T5796] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.769: corrupted inode contents [ 95.287786][ T5789] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.292907][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.303816][ T5796] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.769: mark_inode_dirty error [ 95.318595][ T5789] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 95.318881][ T29] audit: type=1400 audit(1752051128.727:3619): avc: denied { write } for pid=5788 comm="syz.4.768" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.355849][ T5796] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.769: corrupted inode contents [ 95.371255][ T5801] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.769: corrupted inode contents [ 95.384028][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.393567][ T5801] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.769: mark_inode_dirty error [ 95.409516][ T5801] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.769: corrupted inode contents [ 95.429368][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.438763][ T5801] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.769: mark_inode_dirty error [ 95.452177][ T5801] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.769: corrupted inode contents [ 95.473271][ T5805] loop2: detected capacity change from 0 to 512 [ 95.486746][ T5807] loop4: detected capacity change from 0 to 128 [ 95.492313][ T5801] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.769: mark_inode_dirty error [ 95.495347][ T5805] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.771: corrupted in-inode xattr: invalid ea_ino [ 95.506745][ T5807] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.533313][ T5807] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.549940][ T5805] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.771: couldn't read orphan inode 15 (err -117) [ 95.566551][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.592789][ T3317] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.594706][ T5805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.625491][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 95.646066][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 95.651031][ T29] audit: type=1400 audit(1752051129.057:3620): avc: denied { mount } for pid=5815 comm="syz.1.776" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 95.661117][ T5805] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.771: invalid indirect mapped block 234881024 (level 0) [ 95.677323][ T29] audit: type=1400 audit(1752051129.057:3621): avc: denied { mount } for pid=5815 comm="syz.1.776" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.725846][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.773242][ T5827] loop1: detected capacity change from 0 to 1024 [ 95.780373][ T5827] EXT4-fs: Ignoring removed orlov option [ 95.791104][ T5827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.049199][ T5835] siw: device registration error -23 [ 96.126356][ T5838] loop0: detected capacity change from 0 to 512 [ 96.142581][ T5838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 96.165733][ T29] audit: type=1326 audit(1752051129.497:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5836 comm="syz.2.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 96.239593][ T5838] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.782: bg 0: block 435: padding at end of block bitmap is not set [ 96.257118][ T5838] EXT4-fs (loop0): 1 truncate cleaned up [ 96.946438][ T5845] netlink: 'syz.2.787': attribute type 1 has an invalid length. [ 96.962857][ T5845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.980350][ T5845] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.989112][ T5845] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 97.003626][ T5845] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 97.019308][ T3387] page_pool_release_retry() stalled pool shutdown: id 24, 1 inflight 60 sec [ 97.030862][ T5847] gretap2: entered promiscuous mode [ 97.044261][ T5847] bond2: (slave gretap2): making interface the new active one [ 97.053319][ T5847] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 97.070636][ T5847] bond2: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 97.126717][ T5852] loop4: detected capacity change from 0 to 512 [ 97.141175][ T5854] loop1: detected capacity change from 0 to 512 [ 97.158545][ T5852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.175518][ T5854] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.189075][ T5852] EXT4-fs (loop4): 1 truncate cleaned up [ 97.198034][ T5854] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.788: corrupted inode contents [ 97.219071][ T5854] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.788: mark_inode_dirty error [ 97.233231][ T5854] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.788: corrupted inode contents [ 97.247019][ T5854] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.788: corrupted inode contents [ 97.295422][ T5854] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.788: mark_inode_dirty error [ 97.316909][ T3387] kernel write not supported for file bpf-map (pid: 3387 comm: kworker/1:3) [ 97.426835][ T5854] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.788: corrupted inode contents [ 97.481458][ T5854] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.788: mark_inode_dirty error [ 97.502423][ T5854] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.788: corrupted inode contents [ 97.709347][ T5854] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.788: mark_inode_dirty error [ 97.970495][ T5869] vlan0: entered allmulticast mode [ 98.286047][ T5881] tipc: New replicast peer: 255.255.255.255 [ 98.292469][ T5881] tipc: Enabled bearer , priority 10 [ 98.892412][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 98.892430][ T29] audit: type=1326 audit(1752051132.317:3908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 98.941752][ T29] audit: type=1326 audit(1752051132.317:3909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 98.965850][ T29] audit: type=1326 audit(1752051132.317:3910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 98.989280][ T29] audit: type=1326 audit(1752051132.317:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 99.013349][ T29] audit: type=1326 audit(1752051132.317:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 99.036777][ T29] audit: type=1326 audit(1752051132.317:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 99.060841][ T29] audit: type=1326 audit(1752051132.317:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 99.084944][ T29] audit: type=1326 audit(1752051132.317:3915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 99.108250][ T29] audit: type=1326 audit(1752051132.317:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 99.132295][ T29] audit: type=1326 audit(1752051132.317:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 99.173905][ T5912] loop1: detected capacity change from 0 to 2048 [ 99.247577][ T5912] EXT4-fs mount: 7 callbacks suppressed [ 99.247596][ T5912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.381099][ T5931] lo: left allmulticast mode [ 99.386036][ T5931] tunl0: left allmulticast mode [ 99.391048][ T5931] gre0: left allmulticast mode [ 99.396693][ T5931] gretap0: left allmulticast mode [ 99.401802][ T5931] erspan0: left allmulticast mode [ 99.406910][ T5931] ip_vti0: left allmulticast mode [ 99.412237][ T5931] ip6_vti0: left allmulticast mode [ 99.417500][ T5931] sit0: left allmulticast mode [ 99.423126][ T5931] ip6tnl0: left allmulticast mode [ 99.428314][ T5931] ip6gre0: left allmulticast mode [ 99.433598][ T5931] syz_tun: left allmulticast mode [ 99.438815][ T5931] ip6gretap0: left allmulticast mode [ 99.444221][ T5931] bridge0: left allmulticast mode [ 99.449340][ T5931] vcan0: left allmulticast mode [ 99.454953][ T5931] bond0: left allmulticast mode [ 99.463104][ T5931] team0: left allmulticast mode [ 99.468056][ T5931] team0: left promiscuous mode [ 99.473029][ T5931] team_slave_0: left promiscuous mode [ 99.478502][ T5931] team_slave_1: left promiscuous mode [ 99.485027][ T5931] bridge0: port 3(team0) entered disabled state [ 99.492316][ T5931] dummy0: left allmulticast mode [ 99.497424][ T5931] nlmon0: left allmulticast mode [ 99.502550][ T5931] caif0: left allmulticast mode [ 99.507683][ T5931] batadv0: left allmulticast mode [ 99.513564][ T5931] vxcan0: left allmulticast mode [ 99.518602][ T5931] vxcan1: left allmulticast mode [ 99.523716][ T5931] veth0: left allmulticast mode [ 99.528717][ T5931] veth1: left allmulticast mode [ 99.533662][ T5931] wg0: left allmulticast mode [ 99.538438][ T5931] wg1: left allmulticast mode [ 99.544795][ T5931] wg2: left promiscuous mode [ 99.549425][ T5931] wg2: left allmulticast mode [ 99.555432][ T5931] veth0_to_bridge: left allmulticast mode [ 99.561632][ T5931] bridge_slave_0: left promiscuous mode [ 99.567445][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.585437][ T5931] veth1_to_bridge: left allmulticast mode [ 99.591566][ T5931] bridge_slave_1: left allmulticast mode [ 99.597280][ T5931] bridge_slave_1: left promiscuous mode [ 99.603724][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.612353][ T5931] veth0_to_bond: left allmulticast mode [ 99.618044][ T5931] bond_slave_0: left allmulticast mode [ 99.624450][ T5931] bond0: (slave bond_slave_0): Releasing backup interface [ 99.638507][ T5931] veth1_to_bond: left allmulticast mode [ 99.644210][ T5931] bond_slave_1: left allmulticast mode [ 99.651314][ T5931] bond0: (slave bond_slave_1): Releasing backup interface [ 99.659859][ T5931] veth0_to_team: left allmulticast mode [ 99.666242][ T5931] team_slave_0: left allmulticast mode [ 99.672869][ T5931] team0: Port device team_slave_0 removed [ 99.679059][ T5931] veth1_to_team: left allmulticast mode [ 99.684758][ T5931] team_slave_1: left allmulticast mode [ 99.691509][ T5931] team0: Port device team_slave_1 removed [ 99.698385][ T5931] veth0_to_batadv: left allmulticast mode [ 99.704267][ T5931] batadv_slave_0: left allmulticast mode [ 99.710120][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.717891][ T5931] veth1_to_batadv: left allmulticast mode [ 99.724431][ T5931] batadv_slave_1: left allmulticast mode [ 99.730263][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.747871][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.752419][ T5931] xfrm0: left allmulticast mode [ 99.761915][ T5931] veth0_to_hsr: left allmulticast mode [ 99.767537][ T5931] veth1_to_hsr: left allmulticast mode [ 99.773261][ T5931] veth1_virt_wifi: left allmulticast mode [ 99.779164][ T5931] veth0_virt_wifi: left allmulticast mode [ 99.785057][ T5931] veth1_vlan: left allmulticast mode [ 99.790428][ T5931] @: left allmulticast mode [ 99.795032][ T5931] vlan1: left allmulticast mode [ 99.799985][ T5931] macvlan0: left allmulticast mode [ 99.805263][ T5931] macvlan1: left allmulticast mode [ 99.810502][ T5931] ipvlan0: left allmulticast mode [ 99.815665][ T5931] ipvlan1: left allmulticast mode [ 99.820863][ T5931] veth0_vlan: left allmulticast mode [ 99.826351][ T5931] geneve0: left allmulticast mode [ 99.831478][ T5931] geneve1: left allmulticast mode [ 99.836706][ T5931] syztnl1: left allmulticast mode [ 99.843166][ T5931] gretap1: left promiscuous mode [ 99.848839][ T5931] bond1: (slave gretap1): Releasing active interface [ 99.995447][ T5956] loop1: detected capacity change from 0 to 256 [ 100.017003][ T5956] FAT-fs (loop1): Directory bread(block 64) failed [ 100.023590][ T5956] FAT-fs (loop1): Directory bread(block 65) failed [ 100.030211][ T5956] FAT-fs (loop1): Directory bread(block 66) failed [ 100.061814][ T5956] FAT-fs (loop1): Directory bread(block 67) failed [ 100.068384][ T5956] FAT-fs (loop1): Directory bread(block 68) failed [ 100.078413][ T5956] FAT-fs (loop1): Directory bread(block 69) failed [ 100.085083][ T5956] FAT-fs (loop1): Directory bread(block 70) failed [ 100.091728][ T5956] FAT-fs (loop1): Directory bread(block 71) failed [ 100.098354][ T5956] FAT-fs (loop1): Directory bread(block 72) failed [ 100.105143][ T5956] FAT-fs (loop1): Directory bread(block 73) failed [ 100.607555][ T5963] Set syz1 is full, maxelem 65536 reached [ 100.694407][ T5986] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 100.729588][ T5986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.752178][ T5986] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.769471][ T5980] loop0: detected capacity change from 0 to 2048 [ 100.779737][ T5986] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 100.795765][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.809417][ T5986] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 100.960051][ T5993] gretap2: entered promiscuous mode [ 100.991548][ T5993] bond3: (slave gretap2): making interface the new active one [ 101.035444][ T5993] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 101.077347][ T5994] bond3: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 101.320906][ T5997] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.350010][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.836'. [ 101.625424][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.027770][ T6014] bond0: (slave batadv0): Releasing backup interface [ 102.049883][ T6014] gretap2: left promiscuous mode [ 102.064165][ T6014] bond2: (slave gretap2): Releasing active interface [ 102.427279][ T6025] loop2: detected capacity change from 0 to 8192 [ 102.438854][ T6025] syz.2.846: attempt to access beyond end of device [ 102.438854][ T6025] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 102.472580][ T6025] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 102.480441][ T6025] FAT-fs (loop2): Filesystem has been set read-only [ 102.502602][ T6025] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 102.511197][ T6025] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 102.598981][ T6037] pim6reg: entered allmulticast mode [ 102.639081][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.851'. [ 102.648828][ T6041] netlink: 312 bytes leftover after parsing attributes in process `syz.3.851'. [ 102.661186][ T6040] loop1: detected capacity change from 0 to 8192 [ 102.675452][ T6040] syz.1.862: attempt to access beyond end of device [ 102.675452][ T6040] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 102.689101][ T6037] pim6reg: left allmulticast mode [ 102.692532][ T6040] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 102.702787][ T6040] FAT-fs (loop1): Filesystem has been set read-only [ 102.710360][ T6040] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 102.718519][ T6040] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 102.769672][ T6049] lo: left allmulticast mode [ 102.776339][ T6049] tunl0: left allmulticast mode [ 102.781425][ T6049] gre0: left allmulticast mode [ 102.786426][ T6049] gretap0: left allmulticast mode [ 102.791663][ T6049] erspan0: left allmulticast mode [ 102.796902][ T6049] ip_vti0: left allmulticast mode [ 102.802756][ T6049] ip6_vti0: left allmulticast mode [ 102.808020][ T6049] sit0: left allmulticast mode [ 102.813029][ T6049] ip6tnl0: left allmulticast mode [ 102.818197][ T6049] ip6gre0: left allmulticast mode [ 102.823330][ T6049] syz_tun: left allmulticast mode [ 102.828407][ T6049] ip6gretap0: left allmulticast mode [ 102.834751][ T6049] bond0: left allmulticast mode [ 102.839637][ T6049] bond0: left promiscuous mode [ 102.844604][ T6049] bond_slave_0: left promiscuous mode [ 102.850119][ T6049] bond_slave_1: left promiscuous mode [ 102.855879][ T6049] bridge0: port 3(bond0) entered disabled state [ 102.865868][ T6049] team0: left allmulticast mode [ 102.870998][ T6049] dummy0: left allmulticast mode [ 102.876084][ T6049] nlmon0: left allmulticast mode [ 102.881106][ T6049] caif0: left allmulticast mode [ 102.886146][ T6049] batadv0: left allmulticast mode [ 102.891298][ T6049] vxcan0: left allmulticast mode [ 102.896374][ T6049] vxcan1: left allmulticast mode [ 102.901348][ T6049] veth0: left allmulticast mode [ 102.906340][ T6049] veth1: left allmulticast mode [ 102.911260][ T6049] wg0: left allmulticast mode [ 102.916241][ T6049] wg1: left allmulticast mode [ 102.920985][ T6049] veth0_to_bridge: left allmulticast mode [ 102.927390][ T6049] bridge_slave_0: left allmulticast mode [ 102.933201][ T6049] bridge_slave_0: left promiscuous mode [ 102.938914][ T6049] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.946982][ T6049] veth1_to_bridge: left allmulticast mode [ 102.953008][ T6049] bridge_slave_1: left allmulticast mode [ 102.958718][ T6049] bridge_slave_1: left promiscuous mode [ 102.964592][ T6049] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.972569][ T6049] veth0_to_bond: left allmulticast mode [ 102.978201][ T6049] bond_slave_0: left allmulticast mode [ 102.984852][ T6049] bond0: (slave bond_slave_0): Releasing backup interface [ 102.992977][ T6049] veth1_to_bond: left allmulticast mode [ 102.998757][ T6049] bond_slave_1: left allmulticast mode [ 103.005611][ T6049] bond0: (slave bond_slave_1): Releasing backup interface [ 103.013585][ T6049] veth0_to_team: left allmulticast mode [ 103.019267][ T6049] team_slave_0: left allmulticast mode [ 103.025540][ T6049] team0: Port device team_slave_0 removed [ 103.031382][ T6049] veth1_to_team: left allmulticast mode [ 103.037155][ T6049] team_slave_1: left allmulticast mode [ 103.043582][ T6049] team0: Port device team_slave_1 removed [ 103.049480][ T6049] veth0_to_batadv: left allmulticast mode [ 103.055414][ T6049] batadv_slave_0: left allmulticast mode [ 103.061165][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.068959][ T6049] veth1_to_batadv: left allmulticast mode [ 103.074832][ T6049] batadv_slave_1: left allmulticast mode [ 103.080613][ T6049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.088303][ T6049] xfrm0: left allmulticast mode [ 103.093449][ T6049] veth0_to_hsr: left allmulticast mode [ 103.099016][ T6049] veth1_to_hsr: left allmulticast mode [ 103.104707][ T6049] : left allmulticast mode [ 103.109285][ T6049] hsr_slave_0: left allmulticast mode [ 103.114732][ T6049] hsr_slave_1: left allmulticast mode [ 103.120204][ T6049] veth1_virt_wifi: left allmulticast mode [ 103.126201][ T6049] veth0_virt_wifi: left allmulticast mode [ 103.132044][ T6049] veth1_vlan: left allmulticast mode [ 103.137445][ T6049] vlan1: left allmulticast mode [ 103.142386][ T6049] macvlan0: left allmulticast mode [ 103.147651][ T6049] macvlan1: left allmulticast mode [ 103.153002][ T6049] ipvlan0: left allmulticast mode [ 103.158079][ T6049] ipvlan1: left allmulticast mode [ 103.163186][ T6049] veth0_vlan: left allmulticast mode [ 103.168510][ T6049] veth1_macvtap: left allmulticast mode [ 103.174154][ T6049] veth0_macvtap: left allmulticast mode [ 103.179803][ T6049] macvtap0: left allmulticast mode [ 103.185001][ T6049] macsec0: left allmulticast mode [ 103.190065][ T6049] geneve0: left allmulticast mode [ 103.195187][ T6049] geneve1: left allmulticast mode [ 103.200393][ T6049] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 103.207715][ T6049] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 103.214994][ T6049] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 103.222335][ T6049] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 103.231939][ T6049] bond1: (slave bond2): Releasing backup interface [ 103.238546][ T6049] bond1: (slave bond2): the permanent HWaddr of slave - a2:81:e2:04:b3:b8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 103.255318][ T6049] bond1: (slave gretap1): making interface the new active one [ 103.273905][ T6049] bond1: (slave gretap1): Releasing backup interface [ 103.284033][ T6049] gretap2: left promiscuous mode [ 103.390949][ T6049] bond3: (slave gretap2): Releasing active interface [ 103.535071][ T6070] loop4: detected capacity change from 0 to 512 [ 103.622285][ T6070] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.713518][ T6070] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.857: bg 0: block 435: padding at end of block bitmap is not set [ 103.731246][ T6070] EXT4-fs (loop4): 1 truncate cleaned up [ 103.738337][ T6070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.434281][ T6078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.448879][ T6074] tipc: Started in network mode [ 104.462074][ T6074] tipc: Node identity 5a34ca3823b7, cluster identity 4711 [ 104.469228][ T6074] tipc: Enabled bearer , priority 0 [ 104.486640][ T31] tipc: Resetting bearer [ 104.603880][ T6073] tipc: Resetting bearer [ 104.640767][ T6073] tipc: Disabling bearer [ 104.754095][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 104.754111][ T29] audit: type=1326 audit(1752051138.177:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 104.844339][ T29] audit: type=1326 audit(1752051138.207:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 104.867771][ T29] audit: type=1326 audit(1752051138.207:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 104.891453][ T29] audit: type=1326 audit(1752051138.217:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6087 comm="syz.1.868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 104.915105][ T29] audit: type=1326 audit(1752051138.227:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 104.938550][ T29] audit: type=1326 audit(1752051138.227:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 104.962037][ T29] audit: type=1326 audit(1752051138.227:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 104.985489][ T29] audit: type=1326 audit(1752051138.237:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 105.008878][ T29] audit: type=1326 audit(1752051138.237:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 105.032281][ T29] audit: type=1326 audit(1752051138.237:3983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6089 comm="syz.3.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f358a8258e7 code=0x7ffc0000 [ 105.057343][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.091620][ T6099] openvswitch: netlink: Message has 6 unknown bytes. [ 105.102425][ T6100] netlink: 156 bytes leftover after parsing attributes in process `syz.3.871'. [ 105.127850][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 106.240289][ T6114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.886'. [ 106.251985][ T6114] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 106.261356][ T6116] lo: left allmulticast mode [ 106.266146][ T6116] tunl0: left allmulticast mode [ 106.271145][ T6116] gre0: left allmulticast mode [ 106.276275][ T6116] gretap0: left allmulticast mode [ 106.281510][ T6116] erspan0: left allmulticast mode [ 106.286694][ T6116] ip_vti0: left allmulticast mode [ 106.292002][ T6116] ip6_vti0: left allmulticast mode [ 106.297238][ T6116] sit0: left allmulticast mode [ 106.302261][ T6116] ip6tnl0: left allmulticast mode [ 106.307344][ T6116] ip6gre0: left allmulticast mode [ 106.312461][ T6116] ip6gretap0: left allmulticast mode [ 106.317876][ T6116] bond0: left allmulticast mode [ 106.323006][ T6116] team0: left allmulticast mode [ 106.328034][ T6116] dummy0: left allmulticast mode [ 106.334324][ T6116] team0: Port device dummy0 removed [ 106.342479][ T6116] nlmon0: left allmulticast mode [ 106.347598][ T6116] caif0: left allmulticast mode [ 106.352714][ T6116] batadv0: left allmulticast mode [ 106.357852][ T6116] veth0: left allmulticast mode [ 106.362884][ T6116] veth1: left allmulticast mode [ 106.367782][ T6116] wg0: left allmulticast mode [ 106.372727][ T6116] wg1: left allmulticast mode [ 106.377546][ T6116] wg2: left allmulticast mode [ 106.382354][ T6116] veth0_to_bridge: left allmulticast mode [ 106.388196][ T6116] veth1_to_bridge: left allmulticast mode [ 106.394056][ T6116] bridge_slave_1: left allmulticast mode [ 106.399776][ T6116] veth0_to_bond: left allmulticast mode [ 106.405526][ T6116] bond_slave_0: left allmulticast mode [ 106.413597][ T6116] bond0: (slave bond_slave_0): Releasing backup interface [ 106.421350][ T6116] veth1_to_bond: left allmulticast mode [ 106.427074][ T6116] bond_slave_1: left allmulticast mode [ 106.433774][ T6116] bond0: (slave bond_slave_1): Releasing backup interface [ 106.441522][ T6116] veth0_to_team: left allmulticast mode [ 106.447394][ T6116] team_slave_0: left allmulticast mode [ 106.454158][ T6116] team0: Port device team_slave_0 removed [ 106.460017][ T6116] veth1_to_team: left allmulticast mode [ 106.465787][ T6116] team_slave_1: left allmulticast mode [ 106.472291][ T6116] team0: Port device team_slave_1 removed [ 106.478295][ T6116] veth0_to_batadv: left allmulticast mode [ 106.484224][ T6116] batadv_slave_0: left allmulticast mode [ 106.489952][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.497732][ T6116] veth1_to_batadv: left allmulticast mode [ 106.503626][ T6116] batadv_slave_1: left allmulticast mode [ 106.509406][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.517092][ T6116] xfrm0: left allmulticast mode [ 106.522202][ T6116] veth0_to_hsr: left allmulticast mode [ 106.528399][ T6116] bond0: (slave veth0_to_hsr): Releasing backup interface [ 106.536365][ T6116] veth1_to_hsr: left allmulticast mode [ 106.542129][ T6116] veth1_virt_wifi: left allmulticast mode [ 106.547974][ T6116] veth0_virt_wifi: left allmulticast mode [ 106.553887][ T6116] veth1_macvtap: left allmulticast mode [ 106.559529][ T6116] veth0_macvtap: left allmulticast mode [ 106.565230][ T6116] macvtap0: left allmulticast mode [ 106.570394][ T6116] macsec0: left allmulticast mode [ 106.575504][ T6116] geneve1: left allmulticast mode [ 106.580695][ T6116] ip6_vti1: left allmulticast mode [ 106.585898][ T6116] ip6_vti2: left allmulticast mode [ 106.591153][ T6116] : left allmulticast mode [ 106.595782][ T6116] macvlan2: left allmulticast mode [ 106.600956][ T6116] syzkaller0: left allmulticast mode [ 106.606485][ T6116] ip6_vti3: left allmulticast mode [ 106.611792][ T6116] ûÿÿÿÿÿÿÿ: left allmulticast mode [ 106.617107][ T6116] netdevsim netdevsim0 eth0: left allmulticast mode [ 106.624132][ T6116] netdevsim netdevsim0 eth1: left allmulticast mode [ 106.630822][ T6116] netdevsim netdevsim0 eth2: left allmulticast mode [ 106.637806][ T6116] netdevsim netdevsim0 eth3: left allmulticast mode [ 106.755413][ T6131] tipc: Enabling of bearer rejected, failed to enable media [ 107.020674][ T6147] loop0: detected capacity change from 0 to 2048 [ 107.033974][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.127431][ T6151] loop2: detected capacity change from 0 to 512 [ 107.143090][ T6151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.192073][ T6157] tipc: Failed to remove unknown binding: 66,1,1/0:3645638918/3645638920 [ 107.335558][ T6157] tipc: Failed to remove unknown binding: 66,1,1/0:3645638918/3645638920 [ 107.344142][ T6157] tipc: Failed to remove unknown binding: 66,1,1/0:3645638918/3645638920 [ 107.601479][ T6147] netlink: 'syz.0.882': attribute type 10 has an invalid length. [ 107.612941][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.622536][ T6147] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 107.737903][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.915291][ T6151] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.881: bg 0: block 435: padding at end of block bitmap is not set [ 107.932041][ T6151] EXT4-fs (loop2): 1 truncate cleaned up [ 107.938879][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.045027][ T6176] loop0: detected capacity change from 0 to 128 [ 108.254849][ T6176] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 108.262795][ T6176] FAT-fs (loop0): Filesystem has been set read-only [ 108.288658][ T6176] syz.0.889: attempt to access beyond end of device [ 108.288658][ T6176] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 108.321717][ T6176] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 108.329878][ T6176] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 108.948875][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.963273][ T6185] xt_CT: No such helper "snmp_trap" [ 109.034305][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 109.043256][ T6188] netlink: 'syz.3.898': attribute type 30 has an invalid length. [ 109.056476][ T6188] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.064800][ T6188] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.073025][ T6188] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.081547][ T6188] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.093123][ T6190] loop2: detected capacity change from 0 to 512 [ 109.104194][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.898'. [ 109.113201][ T6188] netlink: 'syz.3.898': attribute type 30 has an invalid length. [ 109.940960][ T6199] loop2: detected capacity change from 0 to 512 [ 109.948610][ T6201] loop0: detected capacity change from 0 to 256 [ 109.963947][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 109.964008][ T29] audit: type=1326 audit(1752051143.377:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 109.994389][ T29] audit: type=1326 audit(1752051143.377:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.017814][ T29] audit: type=1326 audit(1752051143.377:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.041866][ T29] audit: type=1326 audit(1752051143.377:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.065230][ T29] audit: type=1326 audit(1752051143.377:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.077460][ T6201] FAT-fs (loop0): codepage cp950 not found [ 110.089536][ T29] audit: type=1326 audit(1752051143.377:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.102328][ T6199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.118669][ T29] audit: type=1326 audit(1752051143.377:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.132220][ T6199] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.154423][ T29] audit: type=1326 audit(1752051143.377:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.188239][ T29] audit: type=1326 audit(1752051143.377:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.211644][ T29] audit: type=1326 audit(1752051143.377:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.4.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcea0bbe929 code=0x7ffc0000 [ 110.363806][ T6213] loop0: detected capacity change from 0 to 8192 [ 110.810049][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 110.823562][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.011591][ T6214] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 111.023714][ T6214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.093895][ T6214] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 111.420509][ T6239] loop4: detected capacity change from 0 to 512 [ 111.451618][ T6239] journal_path: Lookup failure for './file0/../file0' [ 111.458541][ T6239] EXT4-fs: error: could not find journal device path [ 111.485758][ T6239] veth0: entered promiscuous mode [ 111.523687][ T6246] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.542110][ T6238] veth0: left promiscuous mode [ 111.587496][ T6246] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.749880][ T6246] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.852958][ T6246] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.930717][ T6246] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.972504][ T6246] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.997555][ T6246] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.041296][ T6246] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.117138][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.0.924'. [ 112.444751][ T6283] syzkaller0: entered allmulticast mode [ 112.450454][ T6283] syzkaller0: entered promiscuous mode [ 112.458464][ T6283] syzkaller0 (unregistering): left allmulticast mode [ 112.465327][ T6283] syzkaller0 (unregistering): left promiscuous mode [ 112.472042][ T6283] tipc: Disabling bearer [ 112.593974][ T6290] loop0: detected capacity change from 0 to 1024 [ 112.622330][ T6290] loop0: detected capacity change from 0 to 512 [ 112.642495][ T6290] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.665591][ T6290] EXT4-fs (loop0): orphan cleanup on readonly fs [ 112.669971][ T6294] random: crng reseeded on system resumption [ 112.672751][ T6290] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.932: bad orphan inode 458763 [ 112.693094][ T6290] EXT4-fs (loop0): Remounting filesystem read-only [ 112.705260][ T6290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.748696][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.779904][ T6303] loop2: detected capacity change from 0 to 512 [ 112.798563][ T6303] EXT4-fs (loop2): 1 orphan inode deleted [ 112.806710][ T6303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.819307][ T343] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 112.821716][ T6303] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.843852][ T6303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.500034][ T6321] loop1: detected capacity change from 0 to 512 [ 113.524993][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 113.752683][ T6321] EXT4-fs (loop1): 1 orphan inode deleted [ 113.758930][ T6321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.773781][ T366] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 113.773990][ T6321] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.813835][ T6321] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 113.844256][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.004260][ T6338] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 114.202095][ T6354] siw: device registration error -23 [ 114.745164][ T6359] loop0: detected capacity change from 0 to 128 [ 114.784811][ T6367] xt_hashlimit: size too large, truncated to 1048576 [ 114.796285][ T6359] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.930321][ T6359] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.981963][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 115.026774][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 115.026789][ T29] audit: type=1326 audit(1752051148.447:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bd004d290 code=0x7ffc0000 [ 115.057271][ T29] audit: type=1326 audit(1752051148.447:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0bd004d677 code=0x7ffc0000 [ 115.081358][ T29] audit: type=1326 audit(1752051148.447:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bd004d290 code=0x7ffc0000 [ 115.105370][ T29] audit: type=1326 audit(1752051148.447:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 115.128776][ T29] audit: type=1326 audit(1752051148.447:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 115.157956][ T29] audit: type=1326 audit(1752051148.547:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 115.181373][ T29] audit: type=1326 audit(1752051148.547:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 115.205573][ T29] audit: type=1326 audit(1752051148.547:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 115.261031][ T29] audit: type=1326 audit(1752051148.577:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 115.285009][ T29] audit: type=1326 audit(1752051148.577:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6358 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 115.329774][ T3315] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.496773][ T6384] loop1: detected capacity change from 0 to 1024 [ 115.511563][ T6384] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 115.662103][ T6394] netlink: 192 bytes leftover after parsing attributes in process `syz.1.968'. [ 115.734940][ T6399] netlink: 'GPL': attribute type 10 has an invalid length. [ 115.750544][ T6401] netlink: 60 bytes leftover after parsing attributes in process `syz.1.971'. [ 116.072619][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.975'. [ 116.158340][ T6417] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.289572][ T6417] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.343631][ T6417] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.357576][ T6421] loop4: detected capacity change from 0 to 1764 [ 116.466749][ T6417] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.559945][ T6417] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.574069][ T6417] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.591352][ T6417] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.604077][ T6417] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.829627][ T6434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.985'. [ 116.843995][ T6436] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6436 comm=syz.3.988 [ 116.865559][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 116.953194][ T6455] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 116.968421][ T6455] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 117.072245][ T6465] tipc: Enabled bearer , priority 0 [ 117.079654][ T6464] tipc: Resetting bearer [ 117.101364][ T6464] tipc: Disabling bearer [ 118.195418][ T6512] x_tables: ip_tables: osf match: only valid for protocol 6 [ 118.234090][ T6514] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 118.470905][ T6520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6520 comm=syz.1.1019 [ 118.553302][ T6522] tipc: Enabled bearer , priority 0 [ 118.560755][ T6521] tipc: Resetting bearer [ 118.574584][ T6521] tipc: Disabling bearer [ 118.847726][ T6526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1022'. [ 118.899479][ T6534] loop2: detected capacity change from 0 to 2048 [ 118.943159][ T6534] loop2: p1 < > p4 [ 118.948539][ T6534] loop2: p4 size 8388608 extends beyond EOD, truncated [ 118.959174][ T6542] netlink: 'syz.0.1030': attribute type 4 has an invalid length. [ 118.984119][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 118.994480][ T6546] bond_slave_1: entered promiscuous mode [ 119.001670][ T6546] bond_slave_1 (unregistering): left promiscuous mode [ 119.183231][ T6558] loop4: detected capacity change from 0 to 2048 [ 119.218105][ T6564] nfs4: Bad value for 'source' [ 119.232382][ T6558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.334306][ T6575] 9pnet_fd: Insufficient options for proto=fd [ 120.235182][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 120.235201][ T29] audit: type=1326 audit(1752051153.657:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.274254][ T29] audit: type=1326 audit(1752051153.687:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.299125][ T29] audit: type=1326 audit(1752051153.687:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.323857][ T29] audit: type=1326 audit(1752051153.687:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.347328][ T29] audit: type=1326 audit(1752051153.687:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.372140][ T29] audit: type=1326 audit(1752051153.687:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.396398][ T29] audit: type=1326 audit(1752051153.687:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.420584][ T29] audit: type=1326 audit(1752051153.687:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.445351][ T29] audit: type=1326 audit(1752051153.687:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.468674][ T29] audit: type=1326 audit(1752051153.687:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6585 comm="syz.1.1044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 120.521274][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.689480][ T6603] syzkaller0: entered promiscuous mode [ 120.695151][ T6603] syzkaller0: entered allmulticast mode [ 120.851649][ T6617] tipc: Enabling of bearer rejected, already enabled [ 121.678443][ T6629] xt_hashlimit: max too large, truncated to 1048576 [ 121.755484][ T6632] __nla_validate_parse: 2 callbacks suppressed [ 121.755504][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 122.041542][ T6642] random: crng reseeded on system resumption [ 122.049599][ T6645] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1065'. [ 122.060802][ T6645] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1065'. [ 122.295856][ T6657] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1070'. [ 122.324242][ T6657] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 122.769810][ T6673] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1077'. [ 123.149016][ T6696] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1084'. [ 123.289226][ T6703] random: crng reseeded on system resumption [ 123.457884][ T6711] loop4: detected capacity change from 0 to 2048 [ 123.595757][ T6711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.073352][ T6723] tipc: Enabled bearer , priority 0 [ 124.087577][ T6723] syzkaller0: entered promiscuous mode [ 124.093209][ T6723] syzkaller0: entered allmulticast mode [ 124.336097][ T6723] tipc: Resetting bearer [ 124.357429][ T6722] tipc: Resetting bearer [ 124.377405][ T6722] tipc: Disabling bearer [ 124.681279][ T6735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6735 comm=syz.0.1097 [ 124.784737][ T6739] nfs4: Bad value for 'source' [ 124.892128][ T6742] 9pnet_fd: Insufficient options for proto=fd [ 125.179520][ T6744] loop2: detected capacity change from 0 to 128 [ 125.197232][ T6744] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.224303][ T6744] ext4 filesystem being mounted at /201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.290561][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 125.290628][ T29] audit: type=1326 audit(1752051158.707:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f438640d290 code=0x7ffc0000 [ 125.369842][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.384807][ T29] audit: type=1326 audit(1752051158.747:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f438640d677 code=0x7ffc0000 [ 125.408486][ T29] audit: type=1326 audit(1752051158.747:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f438640d290 code=0x7ffc0000 [ 125.432141][ T29] audit: type=1326 audit(1752051158.747:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 125.455629][ T29] audit: type=1326 audit(1752051158.747:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 125.479522][ T29] audit: type=1326 audit(1752051158.757:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 125.503035][ T29] audit: type=1326 audit(1752051158.757:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 125.526677][ T29] audit: type=1326 audit(1752051158.757:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 125.550239][ T29] audit: type=1326 audit(1752051158.757:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 125.574091][ T29] audit: type=1326 audit(1752051158.757:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6743 comm="syz.2.1100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 126.313755][ T6775] ÿÿÿÿÿÿ: renamed from vlan1 [ 127.960159][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.037536][ T6787] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1116'. [ 128.087667][ T6787] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 128.299534][ T6802] loop2: detected capacity change from 0 to 1024 [ 128.336763][ T6802] EXT4-fs: Ignoring removed orlov option [ 128.376749][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.543615][ T6808] xt_hashlimit: max too large, truncated to 1048576 [ 128.654622][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 128.667958][ T6804] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 128.846399][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.420356][ T6855] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 130.440806][ T6852] loop4: detected capacity change from 0 to 1024 [ 130.467758][ T6855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.475055][ T6852] EXT4-fs: Ignoring removed nobh option [ 130.480631][ T6852] EXT4-fs: Ignoring removed bh option [ 130.508202][ T6858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.525082][ T6858] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 130.542740][ T6852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.573424][ T6858] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 130.608799][ T6855] gretap1: entered promiscuous mode [ 130.625116][ T6855] bond1: (slave gretap1): making interface the new active one [ 130.643052][ T6855] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 130.682710][ T6866] bond1: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 131.278247][ T6874] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 131.400902][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.407211][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 131.407232][ T29] audit: type=1326 audit(1752051164.827:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.412922][ T6868] Set syz1 is full, maxelem 65536 reached [ 131.438248][ T29] audit: type=1326 audit(1752051164.837:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.470028][ T29] audit: type=1326 audit(1752051164.837:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.494733][ T29] audit: type=1326 audit(1752051164.837:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.518192][ T29] audit: type=1326 audit(1752051164.837:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.543055][ T29] audit: type=1326 audit(1752051164.837:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.566523][ T29] audit: type=1326 audit(1752051164.837:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.591378][ T29] audit: type=1326 audit(1752051164.837:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.616088][ T29] audit: type=1326 audit(1752051164.837:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.639597][ T29] audit: type=1326 audit(1752051164.837:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6875 comm="syz.2.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 131.680378][ T6878] loop4: detected capacity change from 0 to 512 [ 131.697233][ T6878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.730253][ T6878] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.844797][ T3395] kernel write not supported for file [eventfd] (pid: 3395 comm: kworker/1:5) [ 131.998415][ T6889] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 132.260611][ T6899] netlink: 'syz.3.1151': attribute type 13 has an invalid length. [ 132.283176][ T6901] xt_hashlimit: size too large, truncated to 1048576 [ 132.283810][ T6903] block device autoloading is deprecated and will be removed. [ 132.334410][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'. [ 132.410149][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1164'. [ 132.472222][ T6913] nfs4: Bad value for 'source' [ 132.521341][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.535927][ T6915] 9pnet_fd: Insufficient options for proto=fd [ 132.657941][ T6923] tipc: Enabled bearer , priority 0 [ 132.666571][ T6923] syzkaller0: entered promiscuous mode [ 132.672216][ T6923] syzkaller0: entered allmulticast mode [ 132.680971][ T6923] tipc: Resetting bearer [ 132.688472][ T6920] tipc: Resetting bearer [ 132.691219][ T6925] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1160'. [ 132.933892][ T6920] tipc: Disabling bearer [ 132.948116][ T6925] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 133.204439][ T6933] xt_hashlimit: max too large, truncated to 1048576 [ 133.727222][ T6942] loop4: detected capacity change from 0 to 1024 [ 133.807603][ T6942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.836121][ T6942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6942 comm=syz.4.1167 [ 133.888831][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.948929][ T6951] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 134.499134][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 134.705213][ T6973] loop4: detected capacity change from 0 to 512 [ 134.714124][ T6973] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.735433][ T6973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.766666][ T6973] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.783708][ T6973] xt_hashlimit: size too large, truncated to 1048576 [ 134.819032][ T6978] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1178'. [ 134.834372][ T6978] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 134.873071][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1168'. [ 134.936907][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.424771][ T6988] netlink: 'syz.1.1183': attribute type 1 has an invalid length. [ 135.459711][ T6988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.493570][ T6993] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6993 comm=syz.3.1181 [ 135.513661][ T6988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.525579][ T6988] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.547585][ T6988] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 135.694417][ T7007] smc: net device bond0 applied user defined pnetid SYZ0 [ 136.400363][ T7015] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.465727][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 136.465742][ T29] audit: type=1326 audit(1752051169.887:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 136.803361][ T7015] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.840569][ T29] audit: type=1326 audit(1752051169.917:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 136.865819][ T29] audit: type=1326 audit(1752051169.917:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 136.889318][ T29] audit: type=1326 audit(1752051169.917:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 136.914192][ T29] audit: type=1326 audit(1752051169.917:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 136.937873][ T29] audit: type=1326 audit(1752051169.917:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 136.962760][ T29] audit: type=1326 audit(1752051169.917:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 136.986263][ T29] audit: type=1326 audit(1752051169.917:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 137.011105][ T29] audit: type=1326 audit(1752051169.917:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 137.035872][ T29] audit: type=1326 audit(1752051169.917:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7016 comm="syz.0.1187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bd004e929 code=0x7ffc0000 [ 137.220085][ T7015] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.258565][ T7029] lo: left allmulticast mode [ 137.263377][ T7029] tunl0: left allmulticast mode [ 137.268353][ T7029] gre0: left allmulticast mode [ 137.273317][ T7029] gretap0: left allmulticast mode [ 137.278534][ T7029] erspan0: left allmulticast mode [ 137.283696][ T7029] ip_vti0: left allmulticast mode [ 137.288921][ T7029] ip6_vti0: left allmulticast mode [ 137.294148][ T7029] sit0: left allmulticast mode [ 137.299024][ T7029] ip6tnl0: left allmulticast mode [ 137.304163][ T7029] ip6gre0: left allmulticast mode [ 137.309274][ T7029] syz_tun: left allmulticast mode [ 137.314595][ T7029] bridge0: left allmulticast mode [ 137.319732][ T7029] vcan0: left allmulticast mode [ 137.327744][ T7029] bond0: left allmulticast mode [ 137.332709][ T7029] bond0: left promiscuous mode [ 137.337675][ T7029] bridge0: port 1(bond0) entered disabled state [ 137.347732][ T7029] team0: left allmulticast mode [ 137.357614][ T7029] team0: left promiscuous mode [ 137.363088][ T7029] bridge0: port 2(team0) entered disabled state [ 137.374206][ T7029] dummy0: left allmulticast mode [ 137.379255][ T7029] nlmon0: left allmulticast mode [ 137.384350][ T7029] caif0: left allmulticast mode [ 137.389468][ T7029] veth0: left allmulticast mode [ 137.394541][ T7029] veth1: left allmulticast mode [ 137.399461][ T7029] wg0: left allmulticast mode [ 137.405730][ T7029] wg1: left allmulticast mode [ 137.410533][ T7029] wg2: left allmulticast mode [ 137.415401][ T7029] veth0_to_bridge: left allmulticast mode [ 137.421313][ T7029] bridge_slave_0: left allmulticast mode [ 137.427103][ T7029] veth1_to_bridge: left allmulticast mode [ 137.434277][ T7029] bridge_slave_1: left allmulticast mode [ 137.440094][ T7029] veth0_to_bond: left allmulticast mode [ 137.445841][ T7029] bond_slave_0: left allmulticast mode [ 137.451427][ T7029] veth1_to_bond: left allmulticast mode [ 137.457208][ T7029] bond_slave_1: left allmulticast mode [ 137.464074][ T7029] veth0_to_team: left allmulticast mode [ 137.469751][ T7029] team_slave_0: left allmulticast mode [ 137.475426][ T7029] veth1_to_team: left allmulticast mode [ 137.481104][ T7029] team_slave_1: left allmulticast mode [ 137.486667][ T7029] veth1_to_batadv: left allmulticast mode [ 137.493866][ T7029] batadv_slave_1: left allmulticast mode [ 137.499694][ T7029] xfrm0: left allmulticast mode [ 137.504696][ T7029] veth1_to_hsr: left allmulticast mode [ 137.510313][ T7029] hsr_slave_1: left allmulticast mode [ 137.515904][ T7029] veth1_virt_wifi: left allmulticast mode [ 137.523112][ T7029] veth0_virt_wifi: left allmulticast mode [ 137.528927][ T7029] veth1_macvtap: left allmulticast mode [ 137.534624][ T7029] veth0_macvtap: left allmulticast mode [ 137.540365][ T7029] macvtap0: left allmulticast mode [ 137.545781][ T7029] macsec0: left allmulticast mode [ 137.550917][ T7029] geneve0: left allmulticast mode [ 137.557406][ T7029] geneve1: left allmulticast mode [ 137.562674][ T7029] bridge1: left allmulticast mode [ 137.567883][ T7029] bond1: left allmulticast mode [ 137.572887][ T7029] gretap1: left allmulticast mode [ 137.578159][ T7029] batadv0.5: left allmulticast mode [ 137.584728][ T7029] batadv0: left allmulticast mode [ 137.589892][ T7029] macsec1: left allmulticast mode [ 137.596471][ T7015] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.639705][ T7037] blktrace: Concurrent blktraces are not allowed on loop1 [ 137.668299][ T7015] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.752789][ T7015] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.775106][ T7015] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.805103][ T7015] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.211583][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1200'. [ 138.869783][ T7062] loop4: detected capacity change from 0 to 512 [ 138.891136][ T7062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.911980][ T7062] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.970160][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 139.097030][ T7078] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 139.116878][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1219'. [ 139.177611][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 139.223751][ T7094] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1214'. [ 139.383803][ T7101] tipc: Enabling of bearer rejected, failed to enable media [ 139.438423][ T7103] netlink: 'syz.3.1218': attribute type 27 has an invalid length. [ 139.463350][ T7103] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.471951][ T7103] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.480353][ T7103] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.488869][ T7103] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 139.570826][ T7104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.593564][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 139.603643][ T7104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.672057][ T343] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 139.721506][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.135753][ T7127] netlink: 'syz.2.1227': attribute type 4 has an invalid length. [ 140.145689][ T7127] netlink: 'syz.2.1227': attribute type 4 has an invalid length. [ 140.203691][ T7130] netlink: 'syz.0.1229': attribute type 13 has an invalid length. [ 140.278236][ T7138] loop1: detected capacity change from 0 to 1024 [ 140.287868][ T7138] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.304615][ T7138] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 140.326989][ T7138] EXT4-fs (loop1): mount failed [ 140.393545][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 140.674859][ T7209] netlink: 'syz.3.1237': attribute type 27 has an invalid length. [ 140.701950][ T7156] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 140.709893][ T7156] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 140.981444][ T7219] netlink: 'syz.3.1239': attribute type 39 has an invalid length. [ 141.017675][ T7221] SELinux: Context system_u:object_r:hald_mac_exec_t:s0 is not valid (left unmapped). [ 141.057478][ T7221] loop4: detected capacity change from 0 to 512 [ 141.083132][ T7221] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 141.103592][ T7221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 141.149037][ T7221] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.1240: corrupted in-inode xattr: e_value size too large [ 141.208618][ T7221] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1240: couldn't read orphan inode 15 (err -117) [ 141.246472][ T7221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.286538][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.409672][ T7234] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 141.505967][ T7239] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 141.535129][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 141.535143][ T29] audit: type=1400 audit(1752051174.957:6195): avc: denied { remove_name } for pid=3316 comm="syz-executor" name="memory.events" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 141.583189][ T29] audit: type=1400 audit(1752051174.957:6196): avc: denied { unlink } for pid=3316 comm="syz-executor" name="memory.events" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 141.606314][ T29] audit: type=1400 audit(1752051174.957:6197): avc: denied { rmdir } for pid=3316 comm="syz-executor" name="231" dev="tmpfs" ino=1244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 141.632478][ T29] audit: type=1400 audit(1752051174.997:6198): avc: denied { create } for pid=7242 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.652247][ T29] audit: type=1400 audit(1752051175.007:6199): avc: denied { getopt } for pid=7242 comm="syz.0.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.693553][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1248'. [ 141.715776][ T29] audit: type=1326 audit(1752051175.137:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 141.739331][ T29] audit: type=1326 audit(1752051175.137:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 141.763459][ T29] audit: type=1326 audit(1752051175.187:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 141.794899][ T29] audit: type=1326 audit(1752051175.217:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 141.852917][ T29] audit: type=1326 audit(1752051175.237:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7250 comm="syz.2.1250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 142.217732][ T7271] loop1: detected capacity change from 0 to 512 [ 142.728107][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1263'. [ 142.818044][ T7288] tipc: Enabling of bearer rejected, failed to enable media [ 142.964012][ T7283] Set syz1 is full, maxelem 65536 reached [ 142.990219][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1266'. [ 143.002995][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 143.208534][ T7312] loop1: detected capacity change from 0 to 512 [ 143.217341][ T7312] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.445428][ T7315] netlink: 'syz.4.1272': attribute type 27 has an invalid length. [ 143.521260][ T7318] netlink: 'syz.0.1273': attribute type 1 has an invalid length. [ 143.575568][ T7320] netlink: 'syz.0.1273': attribute type 21 has an invalid length. [ 143.593836][ T7318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.675659][ T7321] veth5: entered promiscuous mode [ 143.693822][ T7320] netlink: 'syz.0.1273': attribute type 1 has an invalid length. [ 143.701730][ T7320] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1273'. [ 143.803264][ T7318] vlan0: entered allmulticast mode [ 143.808505][ T7318] bond2: entered allmulticast mode [ 144.113014][ T7325] netlink: 'syz.0.1275': attribute type 27 has an invalid length. [ 144.139369][ T7325] gretap1: left promiscuous mode [ 144.145922][ T7325] veth5: left promiscuous mode [ 144.156325][ T7312] EXT4-fs (loop1): 1 truncate cleaned up [ 144.166193][ T7312] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.186461][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.204078][ T7312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.218490][ T7325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.451590][ T7334] loop1: detected capacity change from 0 to 1024 [ 144.468921][ T7334] EXT4-fs: Ignoring removed orlov option [ 144.478775][ T7334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.868949][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.029472][ T7349] loop4: detected capacity change from 0 to 1024 [ 145.045989][ T7349] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.070299][ T7349] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 145.101846][ T7349] EXT4-fs (loop4): mount failed [ 145.210038][ T7352] SELinux: Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped). [ 145.423150][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 146.105355][ T7386] loop1: detected capacity change from 0 to 1024 [ 146.159574][ T7389] loop4: detected capacity change from 0 to 512 [ 146.169836][ T7386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.184393][ T7389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 146.198974][ T7389] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1297: invalid indirect mapped block 4294967295 (level 0) [ 146.391355][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.792763][ T7389] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.1297: invalid indirect mapped block 4294967295 (level 1) [ 146.833246][ T7389] EXT4-fs (loop4): 1 orphan inode deleted [ 146.839174][ T7389] EXT4-fs (loop4): 1 truncate cleaned up [ 146.868681][ T7389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.911877][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 146.911906][ T29] audit: type=1400 audit(1752051180.327:6546): avc: denied { setopt } for pid=7394 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 146.989038][ T29] audit: type=1400 audit(1752051180.377:6547): avc: denied { create } for pid=7384 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.010018][ T29] audit: type=1400 audit(1752051180.377:6548): avc: denied { connect } for pid=7384 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.029745][ T29] audit: type=1400 audit(1752051180.387:6549): avc: denied { write } for pid=7384 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.050614][ T29] audit: type=1400 audit(1752051180.397:6550): avc: denied { read } for pid=7384 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.070105][ T29] audit: type=1400 audit(1752051180.397:6551): avc: denied { bind } for pid=7384 comm="syz.4.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 147.094507][ T29] audit: type=1400 audit(1752051180.507:6552): avc: denied { ioctl } for pid=7394 comm="syz.2.1301" path="socket:[17305]" dev="sockfs" ino=17305 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.169916][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.202415][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 147.225194][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 147.274955][ T29] audit: type=1326 audit(1752051180.697:6553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7403 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 147.311004][ T29] audit: type=1326 audit(1752051180.697:6554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7403 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 147.335812][ T29] audit: type=1326 audit(1752051180.727:6555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7403 comm="syz.2.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 148.444388][ T7430] 9pnet: p9_errstr2errno: server reported unknown error [ 148.504295][ T7434] sch_tbf: burst 4393 is lower than device lo mtu (11337746) ! [ 148.586488][ T7440] loop1: detected capacity change from 0 to 512 [ 148.620623][ T7440] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.639577][ T7440] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.713147][ T7452] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.855023][ T7457] netlink: '¬í': attribute type 10 has an invalid length. [ 148.865461][ T7457] team0: Port device dummy0 added [ 148.872688][ T7457] netlink: '¬í': attribute type 10 has an invalid length. [ 148.880574][ T7457] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 148.893009][ T7457] team0: Failed to send options change via netlink (err -105) [ 148.900629][ T7457] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 148.910228][ T7457] team0: Port device dummy0 removed [ 148.917290][ T7457] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.046639][ T7465] blkio.reset_stats is deprecated [ 149.303558][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1335'. [ 149.314034][ T7470] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1335'. [ 149.323057][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1335'. [ 149.390470][ T7470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1335'. [ 149.469457][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.608371][ T7475] wg2: entered promiscuous mode [ 149.614601][ T7475] wg2: entered allmulticast mode [ 149.667375][ T7477] 9pnet: p9_errstr2errno: server reported unknown error [ 149.833778][ T7487] loop1: detected capacity change from 0 to 512 [ 149.852653][ T7487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.947984][ T7487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.961369][ T7487] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.976885][ T7487] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1332: corrupted xattr block 19: overlapping e_value [ 150.011977][ T7487] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 150.021168][ T7487] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1332: corrupted xattr block 19: overlapping e_value [ 150.043860][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1332'. [ 150.054912][ T7487] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 150.075271][ T7487] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.1332: corrupted xattr block 19: overlapping e_value [ 150.095062][ T7501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.104500][ T7501] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.122029][ T7501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.138205][ T3395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.139649][ T7503] netlink: 'syz.4.1337': attribute type 4 has an invalid length. [ 150.188450][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.216907][ T7510] loop4: detected capacity change from 0 to 128 [ 150.221124][ T7508] loop1: detected capacity change from 0 to 1024 [ 150.231185][ T7508] EXT4-fs: Ignoring removed nobh option [ 150.236845][ T7508] EXT4-fs: Ignoring removed bh option [ 150.249472][ T7510] netlink: zone id is out of range [ 150.254757][ T7510] netlink: set zone limit has 4 unknown bytes [ 150.264341][ T7508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.316721][ T7522] 9pnet_fd: Insufficient options for proto=fd [ 150.317319][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.364023][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1346'. [ 150.399284][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1347'. [ 150.426177][ T7532] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 150.428044][ T7533] 9pnet_fd: Insufficient options for proto=fd [ 150.448177][ T7532] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.462082][ T7532] netlink: 'syz.4.1348': attribute type 21 has an invalid length. [ 150.470139][ T7532] netlink: 'syz.4.1348': attribute type 1 has an invalid length. [ 150.477961][ T7532] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1348'. [ 150.487186][ T3395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.501444][ T7532] veth3: entered promiscuous mode [ 150.517348][ T7532] vlan0: entered allmulticast mode [ 150.522612][ T7532] bond2: entered allmulticast mode [ 150.633381][ T7541] loop4: detected capacity change from 0 to 512 [ 150.648383][ T7541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 150.687647][ T7541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.700559][ T7541] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.733677][ T7541] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1350: corrupted xattr block 19: overlapping e_value [ 150.747736][ T7541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 150.756950][ T7541] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1350: corrupted xattr block 19: overlapping e_value [ 150.771585][ T7541] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 150.780913][ T7541] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.1350: corrupted xattr block 19: overlapping e_value [ 150.815601][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.834836][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.875230][ T7551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.895020][ T7151] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 150.928414][ T7561] 9pnet_fd: Insufficient options for proto=fd [ 150.959544][ T7560] block device autoloading is deprecated and will be removed. [ 150.976702][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.387208][ T7574] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 151.574405][ T7576] netlink: 'syz.3.1362': attribute type 21 has an invalid length. [ 151.646270][ T7574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.665364][ T7576] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 151.739509][ T7577] veth5: entered promiscuous mode [ 151.771586][ T7574] vlan0: entered allmulticast mode [ 151.776847][ T7574] bond2: entered allmulticast mode [ 151.903678][ T7151] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 151.911573][ T7151] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 151.924328][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 151.924343][ T29] audit: type=1400 audit(1752051185.347:6695): avc: denied { create } for pid=7587 comm="syz.3.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 151.957687][ T29] audit: type=1400 audit(1752051185.377:6696): avc: denied { create } for pid=7587 comm="syz.3.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.163575][ T29] audit: type=1326 audit(1752051185.587:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 152.187098][ T29] audit: type=1326 audit(1752051185.587:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 152.342370][ T29] audit: type=1400 audit(1752051185.607:6699): avc: denied { watch watch_reads } for pid=7600 comm="syz.0.1369" path="/303/file0" dev="tmpfs" ino=1632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 152.366096][ T29] audit: type=1400 audit(1752051185.607:6700): avc: denied { write } for pid=7600 comm="syz.0.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.385547][ T29] audit: type=1326 audit(1752051185.637:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 152.409220][ T29] audit: type=1326 audit(1752051185.637:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 152.432980][ T29] audit: type=1326 audit(1752051185.637:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 152.456542][ T29] audit: type=1326 audit(1752051185.637:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.1.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbc2741e929 code=0x7ffc0000 [ 152.485433][ T7613] 9pnet_fd: Insufficient options for proto=fd [ 152.491778][ T3395] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 153.078324][ T7637] syz.4.1374 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 153.675346][ T7673] loop4: detected capacity change from 0 to 128 [ 153.708665][ T7671] netlink: zone id is out of range [ 153.713844][ T7673] vfat: Unknown parameter 'xœìÝÍk3EÀñ_b’&)mrEA:Ø‹^–6zƒ´ ' [ 153.721456][ T7671] netlink: set zone limit has 4 unknown bytes [ 153.789321][ T7684] netlink: 'syz.4.1382': attribute type 1 has an invalid length. [ 153.833692][ T7684] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.862550][ T7689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.879704][ T7689] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 153.930423][ T7689] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 153.945981][ T7694] __nla_validate_parse: 13 callbacks suppressed [ 153.945997][ T7694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1382'. [ 153.999535][ T7684] veth5: entered promiscuous mode [ 154.021781][ T7684] bond3: (slave veth5): Enslaving as an active interface with a down link [ 154.030780][ T7694] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.106666][ T7697] loop4: detected capacity change from 0 to 1024 [ 154.132131][ T7697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.260414][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.897855][ T7680] syz.0.1380 (7680) used greatest stack depth: 7160 bytes left [ 154.962516][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'. [ 155.000013][ T7705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.146172][ T7712] loop4: detected capacity change from 0 to 512 [ 155.181941][ T7712] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 155.204852][ T7717] binfmt_misc: register: failed to install interpreter file ./file0 [ 155.221893][ T7712] EXT4-fs (loop4): invalid journal inode [ 155.228757][ T7712] EXT4-fs (loop4): can't get journal size [ 155.274841][ T7712] EXT4-fs (loop4): 1 truncate cleaned up [ 155.316100][ T7712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.409601][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.504390][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 156.061753][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 156.201533][ T7741] geneve1: entered promiscuous mode [ 156.246880][ T7741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 156.288596][ T7741] geneve1 (unregistering): left promiscuous mode [ 156.394560][ T7746] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 156.416707][ T7746] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.446053][ T7746] netlink: 'syz.1.1403': attribute type 21 has an invalid length. [ 156.455803][ T7746] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 156.464939][ T7746] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1403'. [ 156.485888][ T7746] veth3: entered promiscuous mode [ 156.509334][ T7746] vlan0: entered allmulticast mode [ 156.514588][ T7746] bond5: entered allmulticast mode [ 156.863343][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 156.880915][ T7756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 156.928256][ T7759] loop1: detected capacity change from 0 to 512 [ 156.956026][ T7759] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.970812][ T7762] tipc: Bearer : already 2 bearers with priority 10 [ 156.978295][ T7762] tipc: Bearer : trying with adjusted priority [ 156.987057][ T7762] tipc: New replicast peer: 255.255.255.83 [ 156.993022][ T7762] tipc: Enabled bearer , priority 9 [ 157.005167][ T7759] EXT4-fs (loop1): 1 truncate cleaned up [ 157.025426][ T7759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.091765][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 157.091864][ T29] audit: type=1326 audit(1752051190.477:7197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.121907][ T29] audit: type=1326 audit(1752051190.477:7198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.145670][ T29] audit: type=1326 audit(1752051190.477:7199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.169180][ T29] audit: type=1326 audit(1752051190.477:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.192941][ T29] audit: type=1326 audit(1752051190.477:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.216489][ T29] audit: type=1326 audit(1752051190.477:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.239959][ T29] audit: type=1326 audit(1752051190.477:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.263499][ T29] audit: type=1326 audit(1752051190.477:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.286934][ T29] audit: type=1326 audit(1752051190.477:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.310458][ T29] audit: type=1326 audit(1752051190.477:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7764 comm="syz.2.1410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 157.993926][ T7759] syz.1.1408 (7759) used greatest stack depth: 7000 bytes left [ 158.005335][ T7782] loop4: detected capacity change from 0 to 128 [ 158.013719][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.028916][ T7782] FAT-fs (loop4): Directory bread(block 11554) failed [ 158.049678][ T7782] FAT-fs (loop4): Directory bread(block 11555) failed [ 158.080838][ T7782] FAT-fs (loop4): Directory bread(block 11556) failed [ 158.110322][ T7782] FAT-fs (loop4): Directory bread(block 11557) failed [ 158.129398][ T7782] FAT-fs (loop4): Directory bread(block 11558) failed [ 158.141984][ T7782] FAT-fs (loop4): Directory bread(block 11559) failed [ 158.149259][ T7782] FAT-fs (loop4): Directory bread(block 11560) failed [ 158.157743][ T7782] FAT-fs (loop4): Directory bread(block 11561) failed [ 158.166419][ T7782] FAT-fs (loop4): Directory bread(block 11562) failed [ 158.174879][ T7782] FAT-fs (loop4): Directory bread(block 11563) failed [ 158.253827][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 158.286682][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 158.310449][ T7792] random: crng reseeded on system resumption [ 160.059747][ T7822] netlink: 'syz.2.1427': attribute type 21 has an invalid length. [ 160.078148][ T7822] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 160.085967][ T7822] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1427'. [ 160.087303][ T7817] netlink: 'syz.2.1427': attribute type 21 has an invalid length. [ 160.121732][ T7817] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 160.129508][ T7817] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1427'. [ 160.153142][ T7825] veth3: entered promiscuous mode [ 160.401106][ T7819] C: renamed from team_slave_0 [ 160.449894][ T7819] netlink: 'syz.3.1428': attribute type 3 has an invalid length. [ 160.476975][ T7819] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1428'. [ 160.486715][ T7819] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 160.674804][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 160.690828][ T7830] bond0: (slave veth0_to_hsr): Releasing backup interface [ 160.710959][ T7830] hsr_slave_0 (unregistering): left promiscuous mode [ 161.899180][ T7873] tipc: Enabling of bearer rejected, already enabled [ 162.103835][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 162.103852][ T29] audit: type=1326 audit(1752051195.527:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcea0bbe9b7 code=0x7ffc0000 [ 162.135876][ T7875] loop4: detected capacity change from 0 to 1024 [ 162.166110][ T7882] netlink: zone id is out of range [ 162.171321][ T7882] netlink: zone id is out of range [ 162.178161][ T7882] netlink: zone id is out of range [ 162.183362][ T7882] netlink: zone id is out of range [ 162.188592][ T29] audit: type=1326 audit(1752051195.557:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcea0bbd290 code=0x7ffc0000 [ 162.213377][ T29] audit: type=1326 audit(1752051195.557:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7874 comm="syz.4.1448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcea0bbe52b code=0x7ffc0000 [ 162.245320][ T7882] netlink: zone id is out of range [ 162.250677][ T7882] netlink: zone id is out of range [ 162.257398][ T7882] netlink: zone id is out of range [ 162.263705][ T7882] netlink: zone id is out of range [ 162.269235][ T7882] netlink: zone id is out of range [ 162.407164][ T29] audit: type=1326 audit(1752051195.827:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 162.432094][ T29] audit: type=1326 audit(1752051195.827:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 162.456115][ T29] audit: type=1326 audit(1752051195.827:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 162.499989][ T7886] loop1: detected capacity change from 0 to 2048 [ 162.508037][ T7886] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.617001][ T29] audit: type=1326 audit(1752051195.907:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 162.642013][ T29] audit: type=1326 audit(1752051195.907:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 162.666189][ T29] audit: type=1326 audit(1752051195.987:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 162.684267][ T7875] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 162.689653][ T29] audit: type=1326 audit(1752051195.987:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7887 comm="syz.3.1452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 162.732780][ T7886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.749795][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 162.754864][ T7875] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal [ 162.809683][ T7898] netlink: 'syz.3.1454': attribute type 1 has an invalid length. [ 162.826237][ T7898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.855261][ T7898] vlan0: entered allmulticast mode [ 162.860435][ T7898] bond3: entered allmulticast mode [ 162.874544][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.886314][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 162.907502][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 163.010589][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 163.041198][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1458'. [ 164.045692][ T7947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1473'. [ 164.278102][ T7957] dummy0: entered promiscuous mode [ 164.861751][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 165.223837][ T7956] dummy0: left promiscuous mode [ 165.355050][ T7980] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 166.984883][ T8043] xt_CT: No such helper "netbios-ns" [ 167.710095][ T29] kauditd_printk_skb: 775 callbacks suppressed [ 167.710109][ T29] audit: type=1400 audit(1752051201.127:8260): avc: denied { setopt } for pid=8047 comm="syz.2.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 167.786495][ T29] audit: type=1400 audit(1752051201.197:8261): avc: denied { create } for pid=8050 comm="syz.1.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.823207][ T8051] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 167.849996][ T29] audit: type=1400 audit(1752051201.267:8262): avc: denied { tracepoint } for pid=8053 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.871856][ T29] audit: type=1400 audit(1752051201.267:8263): avc: denied { create } for pid=8055 comm="syz.3.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.899013][ T29] audit: type=1400 audit(1752051201.317:8264): avc: denied { create } for pid=8053 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.921799][ T29] audit: type=1400 audit(1752051201.317:8265): avc: denied { setopt } for pid=8055 comm="syz.3.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 167.944991][ T29] audit: type=1400 audit(1752051201.327:8266): avc: denied { write } for pid=8053 comm="syz.2.1504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.968531][ T8052] __nla_validate_parse: 4 callbacks suppressed [ 167.968548][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 167.994776][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 168.023193][ T29] audit: type=1400 audit(1752051201.447:8267): avc: denied { bind } for pid=8055 comm="syz.3.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 168.319165][ T29] audit: type=1326 audit(1752051201.737:8268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 168.386336][ T29] audit: type=1326 audit(1752051201.737:8269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 168.698203][ T8081] loop1: detected capacity change from 0 to 2048 [ 168.752937][ T8081] Alternate GPT is invalid, using primary GPT. [ 168.759327][ T8081] loop1: p1 p2 p3 [ 169.825948][ T8075] syz.0.1511 (8075) used greatest stack depth: 6952 bytes left [ 169.959766][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 169.978310][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1518'. [ 170.541607][ T8113] loop4: detected capacity change from 0 to 512 [ 170.557929][ T8114] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 170.570252][ T8113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.587651][ T8114] netlink: 'syz.0.1534': attribute type 4 has an invalid length. [ 170.598372][ T8113] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.877493][ T3370] kernel write not supported for file /snd/seq (pid: 3370 comm: kworker/0:2) [ 171.356594][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.818337][ T8149] loop8: detected capacity change from 0 to 16384 [ 172.785872][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 172.785891][ T29] audit: type=1326 audit(1752051206.187:8400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.816535][ T29] audit: type=1326 audit(1752051206.187:8401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.840064][ T29] audit: type=1326 audit(1752051206.187:8402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.864520][ T29] audit: type=1326 audit(1752051206.187:8403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.888205][ T29] audit: type=1326 audit(1752051206.187:8404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.894344][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1543'. [ 172.911681][ T29] audit: type=1326 audit(1752051206.197:8405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.911751][ T29] audit: type=1326 audit(1752051206.197:8406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.911784][ T29] audit: type=1326 audit(1752051206.197:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 172.997382][ T29] audit: type=1326 audit(1752051206.357:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 173.020903][ T29] audit: type=1326 audit(1752051206.357:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.3.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f358a82e929 code=0x7ffc0000 [ 173.247569][ T8188] 9pnet_fd: Insufficient options for proto=fd [ 173.401562][ T8192] SET target dimension over the limit! [ 174.524753][ T8227] netlink: 'syz.3.1563': attribute type 10 has an invalid length. [ 174.585615][ T8236] 9pnet_fd: Insufficient options for proto=fd [ 174.768138][ T8245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 175.248414][ T8260] netlink: 'syz.1.1571': attribute type 8 has an invalid length. [ 175.522267][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1576'. [ 176.437957][ T8278] netlink: 'syz.4.1579': attribute type 4 has an invalid length. [ 176.534874][ T3370] kernel write not supported for file /snd/seq (pid: 3370 comm: kworker/0:2) [ 176.577877][ T8289] loop4: detected capacity change from 0 to 2048 [ 176.621627][ T8285] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 176.963536][ T8289] Alternate GPT is invalid, using primary GPT. [ 176.969851][ T8289] loop4: p1 p2 p3 [ 177.667974][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 177.855499][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 177.855517][ T29] audit: type=1400 audit(1752051211.277:8493): avc: denied { cpu } for pid=8311 comm="syz.1.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 177.900868][ T8314] ref_ctr increment failed for inode: 0x65c offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88811080f380 [ 177.929209][ T8311] uprobe: syz.1.1587:8311 failed to unregister, leaking uprobe [ 178.047257][ T8322] loop4: detected capacity change from 0 to 8192 [ 178.064210][ T29] audit: type=1400 audit(1752051211.487:8494): avc: denied { mount } for pid=8321 comm="syz.4.1593" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 178.087819][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 178.109761][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 178.239217][ T29] audit: type=1326 audit(1752051211.657:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.262857][ T29] audit: type=1326 audit(1752051211.657:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.318892][ T29] audit: type=1326 audit(1752051211.707:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.342434][ T29] audit: type=1326 audit(1752051211.707:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.365981][ T29] audit: type=1326 audit(1752051211.707:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.389447][ T29] audit: type=1326 audit(1752051211.707:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.412940][ T29] audit: type=1326 audit(1752051211.707:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.436360][ T29] audit: type=1326 audit(1752051211.707:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8319 comm="syz.2.1601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438640e929 code=0x7ffc0000 [ 178.554377][ T8330] 9pnet_fd: Insufficient options for proto=fd [ 178.616660][ T7185] ================================================================== [ 178.619101][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1598'. [ 178.624778][ T7185] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 178.641915][ T7185] [ 178.644257][ T7185] write to 0xffff88811a73d902 of 2 bytes by task 8322 on cpu 1: [ 178.651906][ T7185] fat16_ent_put+0x28/0x60 [ 178.654122][ T8339] netlink: 'syz.0.1598': attribute type 13 has an invalid length. [ 178.656339][ T7185] fat_alloc_clusters+0x4ce/0xa80 [ 178.669195][ T7185] fat_get_block+0x258/0x5e0 [ 178.673826][ T7185] __block_write_begin_int+0x3fd/0xf90 [ 178.679332][ T7185] cont_write_begin+0x5fc/0x970 [ 178.684206][ T7185] fat_write_begin+0x4f/0xe0 [ 178.688807][ T7185] generic_perform_write+0x181/0x490 [ 178.694099][ T7185] __generic_file_write_iter+0x9e/0x120 [ 178.699659][ T7185] generic_file_write_iter+0x8d/0x2f0 [ 178.705045][ T7185] vfs_write+0x4a0/0x8e0 [ 178.709304][ T7185] ksys_write+0xda/0x1a0 [ 178.713581][ T7185] __x64_sys_write+0x40/0x50 [ 178.718199][ T7185] x64_sys_call+0x2cdd/0x2fb0 [ 178.722914][ T7185] do_syscall_64+0xd2/0x200 [ 178.727447][ T7185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.733357][ T7185] [ 178.735698][ T7185] read to 0xffff88811a73d800 of 512 bytes by task 7185 on cpu 0: [ 178.743417][ T7185] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 178.749329][ T7185] generic_perform_write+0x2c2/0x490 [ 178.754646][ T7185] shmem_file_write_iter+0xc5/0xf0 [ 178.759776][ T7185] lo_rw_aio+0x6ea/0x7a0 [ 178.764036][ T7185] loop_process_work+0x52d/0xa60 [ 178.768997][ T7185] loop_workfn+0x31/0x40 [ 178.773253][ T7185] process_scheduled_works+0x4cb/0x9d0 [ 178.778724][ T7185] worker_thread+0x582/0x770 [ 178.783331][ T7185] kthread+0x489/0x510 [ 178.787414][ T7185] ret_from_fork+0xda/0x150 [ 178.791927][ T7185] ret_from_fork_asm+0x1a/0x30 [ 178.796699][ T7185] [ 178.799028][ T7185] Reported by Kernel Concurrency Sanitizer on: [ 178.805194][ T7185] CPU: 0 UID: 0 PID: 7185 Comm: kworker/u8:46 Not tainted 6.16.0-rc5-syzkaller-00038-g733923397fd9 #0 PREEMPT(voluntary) [ 178.817872][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.827945][ T7185] Workqueue: loop4 loop_workfn [ 178.832739][ T7185] ================================================================== [ 178.881883][ T8341] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 178.889682][ T8341] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1597'. [ 182.141759][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!