last executing test programs: 3m18.489010865s ago: executing program 2 (id=876): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3m18.40742689s ago: executing program 2 (id=878): socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 3m18.361226363s ago: executing program 2 (id=880): ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0xffffe000) r0 = io_uring_setup(0x6ad5, &(0x7f0000000680)={0x0, 0x92e4, 0x8, 0x4, 0x348}) close_range(r0, 0xffffffffffffffff, 0x0) io_setup(0xb, &(0x7f0000000180)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f00000005c0)=[{}], 0x0) 3m17.435355456s ago: executing program 2 (id=886): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x1000802, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 3m17.19445444s ago: executing program 2 (id=887): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000200)={0x0, 0x1, 0x1006, 0xffffffffffffffff, r0}) r1 = syz_io_uring_setup(0x749, &(0x7f0000000100)={0x0, 0xef9d, 0x0, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3m16.618158794s ago: executing program 2 (id=896): fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffffff", 0x58}], 0x1) 3m16.614837404s ago: executing program 32 (id=896): fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffffff", 0x58}], 0x1) 2m43.988788027s ago: executing program 0 (id=1342): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8000000000000006}, 0x1682c, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 2m43.851252165s ago: executing program 0 (id=1348): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setresuid(0xee00, 0xee00, 0x0) capset(&(0x7f0000000080)={0x19980330}, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000000)={0x14, 0x14, 0x105, 0x70bd2c, 0x25dfdb7b, {0x28, 0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x14800) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0x0) 2m43.575767221s ago: executing program 0 (id=1354): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$eJzs3M1rHPUbAPBnJtmkL/n9NoLgy0GEFloonSTNpT01XrwVCgWvNSSTEDLJhuymdmPB1rNQm4uCIOrZo1eh1D/AmxQUvAuiNR7Ey8psXkpjNt02TVbazwcm+3xnZ+Z5nuzwzQ5kJoAX1pvljyRiKCIuR0R1c30aEQPt6EjEzY3t1h/cmCqXJFqtK78l5W6x3qpuHyvZfD0e7V3i1Yi4V4k48+G/89abq/OTRZEvb45HGgtLI/Xm6tm5hcnZfDZfHBu/MHp+fPz86Phje3ily15PvnPh6J3v315b++Gbxu03+s8mMdHuOzZ76/IwT2Tjd1KJiR3rFw8iWQ8lvS4AAICulN/z+yKiv/0ttRp97QgAAAB4nrQGWwAAAMBzL4leVwAAAAAcrK3/A9i6t/eg7oPt5Ne3ImJ4t/z97XuII45EJSKOrSeP3JmQbOwG+3LzVkTcndh5/n1VnmE393ns0R3jR++RHtjn0XkW7pbzz8Ru80+6Pf/ELvNP/9azE/ap8/z3MH9fh/nvcpc5vv38tUrH/LciXu/fLX+ynT/pkP/dLvPfXvvoTjvYpYrWlxGndv37kzySa4/nQ0zMzBV7Pn7g3t+n7+/V/7FO+ZO9+1/qsv/31/+Y7zSXlPlPn9j7898tf3lOfLxZRxoRdzZfy/HajhwnFn78bq/+pyNaT/P5f9Fl/z9/PXi9y00BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgLY2IoUjSbDtO0yyLOB4RL8extKjVG2dmaiuL0+V7EcNRSWfminw0Iqob46Qcj7Xjh+NzO8bjEfHST0c3ks4VeTZVK6Z73TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbjkfEUCRpFhFpRPxZTdMsi+jvYt/BQ6gPAAAAeEaGe10AAAAAcOC6uP4fOIw6AAAAgINTXv/3PcV+yQHUAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy3Ll+6VC6t9Qc3psrx9LXmynzt2tnpvD6fLaxMZVO15aVstlabLfJsqrbwuOMVtdrS2IVYuT7SyOuNkXpz9epCbWWxcXVuYXI2v5pXDqUrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntRQe0nSLCLSdpymWRbxv4gYjkoyM1fkoxHx/4i4X60MluOxXhcNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM1dvrs5PFkW+LBAIDi34ICL+A2XsEfR6ZgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoBfqzdX5yaLIl+u9rgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDeSn9JIqJcTlVPDu18dyD5q9p+jYj3PrvyyfXJRmN5rFz/+/b6xqeb68/1on4AAAB4IVx8ko23rtO3ruMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6VW+uzk8WRb68v+BiNFdbSYdtet0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwdP4JAAD//2T7x0Y=") chdir(&(0x7f0000000040)='./file0\x00') open(&(0x7f0000000240)='./bus\x00', 0x145142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 2m42.693501812s ago: executing program 0 (id=1365): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) ptrace$setregset(0x4205, 0x0, 0x200, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') 2m42.464020545s ago: executing program 0 (id=1369): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 2m41.70019386s ago: executing program 0 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m41.654414532s ago: executing program 33 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000001300c000b40000000000000000614000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.583454013s ago: executing program 5 (id=3012): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) keyctl$revoke(0x3, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x100, 0x0, {0x0, 0x0, 0x74, r4, {0x1, 0x4}, {}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044051}, 0x0) 7.654747726s ago: executing program 5 (id=3009): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigtimedwait(&(0x7f00000000c0)={[0x40]}, 0x0, 0x0, 0x8) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e80)=@newtaction={0x48, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@nobh}, {@debug_want_extra_isize}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") 6.745503669s ago: executing program 5 (id=3022): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x4, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x90000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={0x0}, 0x104, 0x100002, 0x3, 0x3, 0xfff, 0xffffffff, 0x0, 0x0, 0x400003ea}, 0x0, 0xffffffeffffffffe, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x19, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@generic={0x3, 0x9, 0xe, 0x9, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff60f7}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x5b, &(0x7f0000000580)=""/91, 0x41100, 0x30, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xf, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff], 0x0, 0x10, 0x5d}, 0x94) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6.615450537s ago: executing program 5 (id=3023): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, 0x0, 0x40000) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = add_key$keyring(&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x2c, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_pidfd_open(0x0, 0x0) 5.742968797s ago: executing program 5 (id=3035): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.913152106s ago: executing program 5 (id=3040): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) 4.893400467s ago: executing program 34 (id=3040): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) 4.777788374s ago: executing program 3 (id=3043): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) close(0x3) 4.536730278s ago: executing program 3 (id=3044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.082345874s ago: executing program 4 (id=3048): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0xfffffffffffffe03, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 3.943533192s ago: executing program 6 (id=3051): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x730, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003f80000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.863494137s ago: executing program 4 (id=3052): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.846376568s ago: executing program 3 (id=3054): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092dd17d39ed975", 'LP3F', "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, &(0x7f0000000040), 0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x8000, 0x8, 0x111, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x14, @remote, @mcast2={0xff, 0x5}, 0x0, 0x7800, 0x0, 0x5}}) syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 3.746626153s ago: executing program 6 (id=3055): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="170000000000000006000000ff"], 0x50) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xc}, 0x80f12, 0x0, 0x0, 0x9, 0x1000, 0x0, 0x107, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2c, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 3.746029013s ago: executing program 1 (id=3056): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.648763529s ago: executing program 6 (id=3057): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.717495103s ago: executing program 1 (id=3058): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000200), 0x4) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x400455c8, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, 0x0) ioperm(0x0, 0x7, 0x80006) getpgid(0x0) 2.709969863s ago: executing program 6 (id=3059): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x3bf, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x800) getresgid(&(0x7f0000003640), &(0x7f0000003680), &(0x7f00000036c0)) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x1, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) 1.857225653s ago: executing program 7 (id=3042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) 1.853559013s ago: executing program 6 (id=3069): unshare(0x20040400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$xdp(0x2c, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x7, 0x77}, {@remote, 0x4e20, 0x4, 0x3}}, 0x44) 1.852489403s ago: executing program 1 (id=3070): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@nodioread_nolock}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@errors_remount}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48c, &(0x7f00000002c0)="$eJzs3MtrXNUfAPDvvXm0/fWR/Gp9tFaNFiH4SJq0ahduFAUXFQVd1GVMpiV02kgTxZZiU5G6EaSga3Ep+Be4EEQQdSW41Y0rKRTtptVV5N65N52ZzrSNnWRi5vOByZwz99yc873Pc8+ZJICeNZL9SCK2RcQvETFUyzYWGKm9XbtydvqvK2enk1haeu2PJC939crZ6bJoud7WIjOaRqQfJEUlmxvqnT995vhUtVo5VeTHF068NT5/+syT75yYOlY5Vjk5eejQwQMTzzw9+VRH4sziurrnvbm9u1964+LL00cuvvnDl1l7txXL6+PolJEs8D+Xcs3LHu10ZV22vS6d9HexIaxIX0Rku2sgP/+Hoi+u77yhePH9rjYOWFXZvWlT+8WLS8AGlkS3WwB0R3mjz55/81fS+efg9ezyc7UHoCz2a8WrtqQ/0qLMQNPzbSeNRMSRxb8/y16xSuMQAAD1Ppr+9HA8Udf/W+5/pHFP/v5b/nNHMYcyHBH/j4idEXFXROyKiLsj8rL3RsR9K6x/pCl/Y/8nvfSvg7sNWf/v2WJuq7H/V/b+YrivyG3P4x9Ijs5WK/uLbTIaA5uy/MRN6vjmhZ8/bresvv+XvbL6y75g0Y5L/U0DdDNTC1N5p7QDLp+P2NPfKv5keSYgiYjdEbGnxfpft//VO8rE7GNf7G1X6Nbx30QH5pmWPs/CW8ziX4ym+EtJ/fzk7A3zk+Obo1rZP14eFTf68acLr7ar/47i74DLldp73f5vLjKc1M/Xzq+8jgu/ftj2meZ6/FvaH/9J4zozUwvpYPJ6Ps88WHz27tTCwqmJiMHkcJ5v+Hzy+rplviyfHf+j+1qf/zuLdbLq74+I7CB+ICIejIiHirY/HBGPRMS+m8T//fPtl5XxR9ql/X8+Yqbl9W95ozft/5Un+o5/91W7+m/v+ncwT40Wn+TXv1to1ZzsctHcwDvZdgAAAPBfkebfgU/SseV0mo6N1b7Dvyv+l1bn5hcePzr39smZ2nflh2MgLUe6horx0OpstTKRLBa/sTY+OlmMFZfjpQeKceNP+rbk+bHpuepMl2OHXre1zfmf+b2v260DVtmWlp9ODq55Q4AuaJ5HTxuz514JFwPYqPy9NvSuW5z/6Vq1A1h77v/Qu1qd/+ea8uYCYGNy/4fe5fyHHpV+2+0WAF3k/g896U7+rn8VE5vXRzMa/lPA4lptsfW6U/JERJlI10V7JFYp0e0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQGf8EwAA///cRegb") 1.846208944s ago: executing program 3 (id=3071): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x10, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xce67, 0x1f480, 0x0, 0xca}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x71b59d74}}, 0x0}, 0x94) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1.845238053s ago: executing program 4 (id=3072): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x22020600) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_bridge\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200048d5) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) 937.673826ms ago: executing program 7 (id=3060): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 937.481446ms ago: executing program 3 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 937.116207ms ago: executing program 4 (id=3062): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 935.619677ms ago: executing program 6 (id=3074): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) close(0x3) ftruncate(0xffffffffffffffff, 0x2007ffc) 934.883987ms ago: executing program 1 (id=3063): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0xa, 0x3, 0x87) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c044}, 0x881) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x6fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 763.717406ms ago: executing program 4 (id=3064): syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) syz_open_procfs(0x0, 0x0) unshare(0x26020480) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req={0x0, 0x7, 0xfff, 0x5}, 0x10) 762.969016ms ago: executing program 1 (id=3065): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 752.006427ms ago: executing program 3 (id=3066): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40000}}], 0x1, 0x20000000) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xec}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 432.729606ms ago: executing program 4 (id=3067): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x40}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = open(0x0, 0x60840, 0x2) syz_open_pts(r4, 0x400000) setns(r4, 0x4000000) 1.218851ms ago: executing program 7 (id=3068): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x200001, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 1 (id=3083): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000001c0)={0x79c, r1, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) setrlimit(0x7, 0x0) kernel console output (not intermixed with test programs): x7ffc0000 [ 169.160776][ T28] audit: type=1326 audit(1770968710.203:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.185143][ T28] audit: type=1326 audit(1770968710.203:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.185271][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.208713][ T28] audit: type=1326 audit(1770968710.203:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.241336][ T28] audit: type=1326 audit(1770968710.203:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.265150][ T28] audit: type=1326 audit(1770968710.223:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.288911][ T28] audit: type=1326 audit(1770968710.223:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.312613][ T28] audit: type=1326 audit(1770968710.223:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.336064][ T28] audit: type=1326 audit(1770968710.223:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 169.359658][ T28] audit: type=1326 audit(1770968710.223:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8863 comm="syz.5.1734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 170.571034][ T8903] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1752'. [ 171.633856][ T8940] loop5: detected capacity change from 0 to 512 [ 171.646228][ T8940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.659389][ T8940] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.712333][ T8940] mmap: syz.5.1766 (8940) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.744482][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.932551][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1770'. [ 172.406369][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 172.756071][ T8971] syz.4.1779 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 172.817824][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.4.1779 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.817918][ T8971] Tainted: [W]=WARN [ 172.817926][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.817938][ T8971] Call Trace: [ 172.817945][ T8971] [ 172.817952][ T8971] __dump_stack+0x1d/0x30 [ 172.817983][ T8971] dump_stack_lvl+0x95/0xd0 [ 172.818011][ T8971] dump_stack+0x15/0x1b [ 172.818095][ T8971] dump_header+0x80/0x240 [ 172.818122][ T8971] oom_kill_process+0x295/0x350 [ 172.818165][ T8971] out_of_memory+0x97d/0xb80 [ 172.818223][ T8971] try_charge_memcg+0x62e/0xa10 [ 172.818284][ T8971] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 172.818323][ T8971] __read_swap_cache_async+0x17b/0x2d0 [ 172.818418][ T8971] swap_cluster_readahead+0x262/0x3c0 [ 172.818446][ T8971] swapin_readahead+0xde/0x840 [ 172.818522][ T8971] ? __rcu_read_unlock+0x33/0x70 [ 172.818564][ T8971] ? __rcu_read_unlock+0x4e/0x70 [ 172.818602][ T8971] ? swap_cache_get_folio+0x26f/0x280 [ 172.818630][ T8971] do_swap_page+0x59b/0x2a50 [ 172.818674][ T8971] ? mas_state_walk+0x526/0x650 [ 172.818702][ T8971] ? __rcu_read_lock+0x36/0x50 [ 172.818775][ T8971] ? __pfx_default_wake_function+0x10/0x10 [ 172.818903][ T8971] handle_mm_fault+0xb40/0x3030 [ 172.818937][ T8971] ? vma_start_read+0x1c7/0x2c0 [ 172.819046][ T8971] do_user_addr_fault+0x62f/0x1050 [ 172.819236][ T8971] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 172.819257][ T8971] ? irqentry_exit+0x3c/0x520 [ 172.819278][ T8971] exc_page_fault+0x62/0xa0 [ 172.819297][ T8971] asm_exc_page_fault+0x26/0x30 [ 172.819322][ T8971] RIP: 0033:0x7f9f05a4717e [ 172.819337][ T8971] Code: 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 <59> 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 [ 172.819357][ T8971] RSP: 002b:00007ffcdb3ce9e0 EFLAGS: 00010246 [ 172.819378][ T8971] RAX: 0000000000000000 RBX: 0000555568c5a500 RCX: 00007f9f05a4c84e [ 172.819395][ T8971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 172.819412][ T8971] RBP: 00007f9f05d07da0 R08: 0000000000000000 R09: 0000000000000000 [ 172.819502][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002a49d [ 172.819519][ T8971] R13: 00007f9f05d0609c R14: 000000000002a240 R15: 00007f9f05d06090 [ 172.819545][ T8971] [ 172.819554][ T8971] memory: usage 297580kB, limit 307200kB, failcnt 615 [ 173.056593][ T8971] memory+swap: usage 242880kB, limit 9007199254740988kB, failcnt 0 [ 173.064600][ T8971] kmem: usage 240804kB, limit 9007199254740988kB, failcnt 0 [ 173.072056][ T8971] Memory cgroup stats for /syz4: [ 173.072431][ T8971] cache 4096 [ 173.080641][ T8971] rss 12288 [ 173.083886][ T8971] shmem 0 [ 173.086946][ T8971] mapped_file 4096 [ 173.090712][ T8971] dirty 0 [ 173.093800][ T8971] writeback 4096 [ 173.097474][ T8971] workingset_refault_anon 102 [ 173.102294][ T8971] workingset_refault_file 9 [ 173.106829][ T8971] swap 163840 [ 173.110212][ T8971] swapcached 24576 [ 173.115498][ T8971] pgpgin 127465 [ 173.119053][ T8971] pgpgout 127455 [ 173.122793][ T8971] pgfault 141374 [ 173.126485][ T8971] pgmajfault 23 [ 173.130012][ T8971] inactive_anon 8192 [ 173.134553][ T8971] active_anon 24576 [ 173.138522][ T8971] inactive_file 8192 [ 173.182544][ T8971] active_file 0 [ 173.190068][ T8971] unevictable 0 [ 173.198206][ T8971] hierarchical_memory_limit 314572800 [ 173.213357][ T8971] hierarchical_memsw_limit 9223372036854771712 [ 173.227091][ T8971] total_cache 4096 [ 173.235546][ T8971] total_rss 12288 [ 173.245440][ T8971] total_shmem 0 [ 173.253681][ T8971] total_mapped_file 4096 [ 173.262606][ T8971] total_dirty 0 [ 173.270822][ T8971] total_writeback 4096 [ 173.280608][ T8971] total_workingset_refault_anon 102 [ 173.294479][ T8971] total_workingset_refault_file 9 [ 173.306414][ T8971] total_swap 163840 [ 173.313935][ T8971] total_swapcached 24576 [ 173.325272][ T8971] total_pgpgin 127465 [ 173.336209][ T8971] total_pgpgout 127455 [ 173.349285][ T8971] total_pgfault 141374 [ 173.364020][ T8971] total_pgmajfault 23 [ 173.377925][ T8971] total_inactive_anon 8192 [ 173.391789][ T8971] total_active_anon 24576 [ 173.402061][ T8971] total_inactive_file 8192 [ 173.411672][ T8971] total_active_file 0 [ 173.425949][ T8971] total_unevictable 0 [ 173.438055][ T8971] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1779,pid=8971,uid=0 [ 173.472242][ T8971] Memory cgroup out of memory: Killed process 8971 (syz.4.1779) total-vm:96204kB, anon-rss:1220kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 174.071443][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1791'. [ 174.099368][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 174.138567][ T9004] syzkaller0: entered promiscuous mode [ 174.144281][ T9004] syzkaller0: entered allmulticast mode [ 175.200376][ T9032] SET target dimension over the limit! [ 175.767719][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 175.767739][ T28] audit: type=1400 audit(1770968716.843:882): avc: denied { ioctl } for pid=9048 comm="syz.4.1807" path="socket:[26281]" dev="sockfs" ino=26281 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.509530][ T28] audit: type=1400 audit(1770968717.573:883): avc: denied { connect } for pid=9063 comm="syz.4.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 176.845295][ T9074] loop4: detected capacity change from 0 to 8192 [ 177.635019][ T28] audit: type=1326 audit(1770968718.713:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.693256][ T28] audit: type=1326 audit(1770968718.733:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.753679][ T9102] loop4: detected capacity change from 0 to 512 [ 177.819009][ T28] audit: type=1326 audit(1770968718.733:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.878266][ T28] audit: type=1326 audit(1770968718.733:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.901958][ T28] audit: type=1326 audit(1770968718.733:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.925485][ T28] audit: type=1326 audit(1770968718.733:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.949202][ T28] audit: type=1326 audit(1770968718.733:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.972781][ T28] audit: type=1326 audit(1770968718.733:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9099 comm="syz.3.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 177.976610][ T9102] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.071460][ T9102] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.295284][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.524002][ T9170] ip6gre1: entered allmulticast mode [ 181.650865][ T9167] loop1: detected capacity change from 0 to 512 [ 181.681045][ T9167] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 181.701320][ T9167] EXT4-fs (loop1): orphan cleanup on readonly fs [ 181.722340][ T9167] EXT4-fs warning (device loop1): ext4_enable_quotas:7233: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 181.751395][ T9167] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 181.773993][ T9167] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #13: comm syz.1.1854: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 181.834379][ T9167] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.835435][ T9167] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1854: couldn't read orphan inode 13 (err -117) [ 181.915061][ T9167] loop1: lost filesystem error report for type 5 error -117 [ 181.923691][ T9167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.985336][ T9167] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 182.012080][ T9167] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 182.034707][ T9167] EXT4-fs warning (device loop1): ext4_enable_quotas:7233: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 182.132594][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.389420][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 182.389435][ T28] audit: type=1326 audit(1770968723.463:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9207 comm="syz.4.1867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x0 [ 182.446466][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1869'. [ 182.467403][ T9214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.474675][ T9214] IPv6: NLM_F_CREATE should be set when creating new route [ 182.483468][ T9214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.490711][ T9214] IPv6: NLM_F_CREATE should be set when creating new route [ 182.561569][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 182.570491][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1870'. [ 182.602080][ T9219] loop5: detected capacity change from 0 to 512 [ 182.611357][ T9219] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.670810][ T9223] bond3: entered allmulticast mode [ 182.681602][ T9219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.711194][ T9223] bridge0: entered promiscuous mode [ 182.723438][ T9223] bridge0: entered allmulticast mode [ 182.743583][ T9223] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 182.827941][ T28] audit: type=1400 audit(1770968723.903:900): avc: denied { bind } for pid=9231 comm="syz.6.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.882984][ T28] audit: type=1326 audit(1770968723.963:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9235 comm="syz.6.1879" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f484f93bf79 code=0x0 [ 183.151649][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.220587][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1881'. [ 183.442375][ T57] bond1: (slave ip6gretap1): link status up again after 0 ms [ 183.461652][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 183.545249][ T9255] loop1: detected capacity change from 0 to 512 [ 183.586212][ T9255] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 183.601828][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 183.615947][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1886'. [ 183.731314][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 183.749016][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1888'. [ 183.851374][ T6404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 183.971264][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 183.984562][ T28] audit: type=1400 audit(1770968725.063:902): avc: denied { read } for pid=9269 comm="syz.4.1893" path="socket:[27739]" dev="sockfs" ino=27739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 184.123770][ T6404] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.205981][ T28] audit: type=1400 audit(1770968725.283:903): avc: denied { mount } for pid=9281 comm="syz.6.1897" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 184.242337][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.352768][ T50] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.471340][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 184.795604][ T9311] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1908'. [ 185.236355][ T9323] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1914'. [ 185.319161][ T9329] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.358817][ T9329] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.414534][ T9329] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.476437][ T9329] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.591301][ T1701] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.628075][ T1701] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.875347][ T1701] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.899521][ T1701] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.059648][ T9362] loop1: detected capacity change from 0 to 256 [ 186.277944][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1933'. [ 186.376531][ T9372] loop5: detected capacity change from 0 to 512 [ 186.401639][ T9372] EXT4-fs: Ignoring removed i_version option [ 186.411427][ T9372] EXT4-fs: Ignoring removed bh option [ 186.449260][ T9372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.471634][ T9372] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.505756][ T28] audit: type=1400 audit(1770968727.583:904): avc: denied { ioctl } for pid=9371 comm="syz.5.1935" path="/186/bus/file1" dev="loop5" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.545875][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.577599][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1941'. [ 186.634286][ T9392] loop5: detected capacity change from 0 to 1024 [ 186.641075][ T9392] EXT4-fs: Ignoring removed orlov option [ 186.673694][ T9392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.750625][ T28] audit: type=1400 audit(1770968727.823:905): avc: denied { map } for pid=9391 comm="syz.5.1940" path="/187/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.847974][ T28] audit: type=1400 audit(1770968727.823:906): avc: denied { execute } for pid=9391 comm="syz.5.1940" path="/187/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 186.887903][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.518809][ T9413] loop1: detected capacity change from 0 to 1024 [ 187.543622][ T9413] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.617167][ T9413] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e019, mo2=0000] [ 187.626608][ T9413] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1949: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.648885][ T9413] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 187.649050][ T9413] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 187.666439][ T9413] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1949: lblock 0 mapped to illegal pblock 48 (length 1) [ 187.680659][ T9413] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 187.804465][ T9413] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 187.855381][ T9413] EXT4-fs error (device loop1): ext4_acquire_dquot:6998: comm syz.1.1949: Failed to acquire dquot type 0 [ 187.901773][ T9413] loop1: lost filesystem error report for type 5 error -117 [ 187.976166][ T9413] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 188.064662][ T9413] loop1: lost filesystem error report for type 5 error -117 [ 188.065328][ T9413] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1949: mark_inode_dirty error [ 188.190016][ T9413] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 188.190448][ T9413] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 188.295969][ T9413] EXT4-fs (loop1): 1 orphan inode deleted [ 188.319177][ T9413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.636036][ T12] net_ratelimit: 27 callbacks suppressed [ 188.636057][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 188.801318][ T30] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 188.809197][ T1788] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.860906][ T1788] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 188.879764][ T1788] EXT4-fs error (device loop1): ext4_release_dquot:7034: comm kworker/u8:6: Failed to release dquot type 0 [ 188.902191][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.920042][ T3311] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 188.946510][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 188.946614][ T3311] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 188.963579][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 188.989417][ T3311] loop1: lost filesystem error report for type 5 error -117 [ 188.989591][ T3311] EXT4-fs error (device loop1): ext4_quota_off:7282: inode #3: comm syz-executor: mark_inode_dirty error [ 189.027272][ T3311] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 189.081315][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.212539][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.332567][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.461297][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.572256][ T1788] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.691310][ T1788] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 189.765877][ T9443] tipc: Failed to remove unknown binding: 66,0,0/0:4028209182/4028209183 [ 189.776848][ T9443] tipc: Failed to remove unknown binding: 66,0,0/0:4028209182/4028209183 [ 189.821352][ T36] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 190.286733][ T9488] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.366251][ T9488] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.473683][ T9488] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.532534][ T9488] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.595709][ T9493] __nla_validate_parse: 1 callbacks suppressed [ 190.595741][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 190.612441][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 190.647330][ T30] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.669778][ T30] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.685848][ T30] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.765022][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1980'. [ 190.769227][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.774130][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1980'. [ 190.885007][ T9506] netlink: 'syz.5.1982': attribute type 1 has an invalid length. [ 190.909225][ T9506] bond2: (slave gretap1): making interface the new active one [ 190.917927][ T9506] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 191.092284][ T9516] bond1: entered allmulticast mode [ 191.280152][ T9530] loop1: detected capacity change from 0 to 512 [ 191.308728][ T9530] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.363169][ T9530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.758501][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.918701][ T28] audit: type=1400 audit(1770968988.988:907): avc: denied { read } for pid=9560 comm="syz.5.2005" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 191.973367][ T28] audit: type=1400 audit(1770968988.988:908): avc: denied { open } for pid=9560 comm="syz.5.2005" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 192.174551][ T28] audit: type=1400 audit(1770968989.018:909): avc: denied { ioctl } for pid=9560 comm="syz.5.2005" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 192.747284][ T28] audit: type=1400 audit(1770968989.818:910): avc: denied { read } for pid=9582 comm="syz.4.2011" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 192.873940][ T28] audit: type=1400 audit(1770968989.948:911): avc: denied { create } for pid=9589 comm="syz.4.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.964424][ T28] audit: type=1400 audit(1770968990.038:912): avc: denied { sys_module } for pid=9595 comm="syz.1.2015" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 193.031398][ T28] audit: type=1400 audit(1770968990.078:913): avc: denied { connect } for pid=9598 comm="syz.3.2018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 193.554932][ T9640] loop4: detected capacity change from 0 to 512 [ 193.585547][ T9640] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.633871][ T9640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.665001][ T57] net_ratelimit: 31 callbacks suppressed [ 193.665028][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 193.791307][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 193.941515][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 193.942875][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.051280][ T6402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.156145][ T9660] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 194.168370][ T9660] ref_ctr increment failed for inode: 0x2c6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881045721c0 [ 194.179435][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.201803][ T9653] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 194.210623][ T9653] ref_ctr decrement failed for inode: 0x2c6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881045721c0 [ 194.303300][ T6402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.351418][ T9653] uprobe: syz.6.2038:9653 failed to unregister, leaking uprobe [ 194.400284][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2040'. [ 194.431267][ T6402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.513080][ T9662] loop4: detected capacity change from 0 to 1024 [ 194.541303][ T6402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.651400][ T6402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.771265][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 194.797095][ T9662] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 194.832470][ T9662] System zones: 0-1, 3-36 [ 194.873860][ T9662] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2037: bad orphan inode 134217728 [ 194.897792][ T9662] loop4: lost filesystem error report for type 5 error -117 [ 194.910371][ T9662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.399339][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.107993][ T28] audit: type=1400 audit(1770968993.218:914): avc: denied { ioctl } for pid=9701 comm="syz.4.2054" path="socket:[29975]" dev="sockfs" ino=29975 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 197.193994][ T9716] tunl0: Caught tx_queue_len zero misconfig [ 197.200024][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2059'. [ 197.263621][ T28] audit: type=1400 audit(1770968994.338:915): avc: denied { listen } for pid=9720 comm="syz.3.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 197.955806][ T28] audit: type=1400 audit(1770968994.368:916): avc: denied { create } for pid=9722 comm="syz.1.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 197.976070][ T28] audit: type=1400 audit(1770968994.378:917): avc: denied { bind } for pid=9722 comm="syz.1.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 198.640949][ T9749] tunl0: Caught tx_queue_len zero misconfig [ 198.647210][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2072'. [ 198.671523][ T6402] net_ratelimit: 31 callbacks suppressed [ 198.671539][ T6402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.724052][ T28] audit: type=1326 audit(1770968995.798:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.5.2075" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc3e67bf79 code=0x0 [ 198.765040][ T9752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2073'. [ 198.804138][ T50] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 198.828492][ T9763] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 198.893740][ T28] audit: type=1400 audit(1770968995.968:919): avc: denied { create } for pid=9767 comm="syz.1.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.917623][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2081'. [ 198.921834][ T50] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.041640][ T6402] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.151449][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.261321][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.371380][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.439229][ T9788] ref_ctr increment failed for inode: 0x85f offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881241486c0 [ 199.491491][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.601359][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 199.607376][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2094'. [ 199.637351][ T9797] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2094'. [ 199.711297][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 200.044297][ T9821] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2100'. [ 200.062931][ T9821] ip6gre1: entered promiscuous mode [ 200.068411][ T9821] ip6gre1: entered allmulticast mode [ 200.077877][ T9821] netlink: 'syz.6.2100': attribute type 6 has an invalid length. [ 200.086103][ T9821] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2100'. [ 200.984408][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2105'. [ 201.222580][ T9838] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2107'. [ 202.299694][ T9882] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2123'. [ 202.362505][ T9884] loop5: detected capacity change from 0 to 512 [ 202.364969][ T9882] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 202.377165][ T9884] EXT4-fs: inline encryption not supported [ 202.413808][ T9884] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 202.419140][ T9882] team0 (unregistering): Port device team_slave_0 removed [ 202.440694][ T9882] team0 (unregistering): Failed to send options change via netlink (err -105) [ 202.491548][ T9882] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 202.530816][ T9882] team0 (unregistering): Port device team_slave_1 removed [ 202.554241][ T9891] loop5: detected capacity change from 0 to 128 [ 202.589176][ T9891] FAT-fs (loop5): IO charset cp855 not found [ 202.604826][ T9891] loop5: detected capacity change from 0 to 2048 [ 202.643100][ T9891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.680110][ T9891] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #12: block 2: comm syz.5.2127: lblock 0 mapped to illegal pblock 2 (length 1) [ 202.700699][ T28] audit: type=1400 audit(1770968999.748:920): avc: denied { read } for pid=9890 comm="syz.5.2127" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 202.710671][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'. [ 202.778689][ T28] audit: type=1400 audit(1770968999.778:921): avc: denied { ioctl } for pid=9899 comm="syz.1.2130" path="socket:[30349]" dev="sockfs" ino=30349 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 202.804433][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.804841][ T28] audit: type=1400 audit(1770968999.838:922): avc: denied { ioctl } for pid=9903 comm="syz.6.2132" path="socket:[30742]" dev="sockfs" ino=30742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.838148][ T28] audit: type=1400 audit(1770968999.848:923): avc: denied { bind } for pid=9903 comm="syz.6.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 202.857682][ T28] audit: type=1400 audit(1770968999.848:924): avc: denied { write } for pid=9903 comm="syz.6.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 203.705259][ T9923] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.2138'. [ 203.719728][ T9923] net_ratelimit: 32 callbacks suppressed [ 203.719980][ T9923] netlink: zone id is out of range [ 203.731749][ T9923] netlink: zone id is out of range [ 203.737668][ T9923] netlink: zone id is out of range [ 203.745530][ T9923] netlink: zone id is out of range [ 203.754154][ T9923] netlink: zone id is out of range [ 203.761097][ T9923] netlink: zone id is out of range [ 203.767084][ T9923] netlink: zone id is out of range [ 203.774454][ T9923] netlink: zone id is out of range [ 203.781179][ T9923] netlink: del zone limit has 8 unknown bytes [ 203.783093][ T30] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 203.814746][ T9932] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 203.863687][ T9938] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 203.880429][ T9938] syzkaller0: entered promiscuous mode [ 203.896659][ T9938] syzkaller0: entered allmulticast mode [ 204.197342][ T9966] netlink: 'syz.6.2151': attribute type 13 has an invalid length. [ 204.457734][ T28] audit: type=1326 audit(1770969001.528:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 204.506946][ T28] audit: type=1326 audit(1770969001.528:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9967 comm="syz.3.2152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 204.568638][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.575997][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.016240][ T9966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.027156][ T9966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.132465][ T50] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.151561][ T50] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.172554][ T50] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.198391][ T1701] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.213170][ T9988] loop5: detected capacity change from 0 to 512 [ 205.223713][ T9988] EXT4-fs: Ignoring removed oldalloc option [ 205.238987][ T9988] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 205.252536][ T9988] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #11: comm syz.5.2159: corrupted in-inode xattr: invalid ea_ino [ 205.266450][ T9988] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 205.266938][ T9988] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2159: couldn't read orphan inode 11 (err -117) [ 205.288609][ T9988] loop5: lost filesystem error report for type 5 error -117 [ 205.291796][ T9988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.318609][ T28] audit: type=1400 audit(1770969002.388:927): avc: denied { mounton } for pid=9987 comm="syz.5.2159" path="/227/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.382180][ T28] audit: type=1326 audit(1770969002.458:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9989 comm="syz.6.2158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f484f93bf79 code=0x0 [ 205.690587][T10014] netlink: 'syz.1.2166': attribute type 11 has an invalid length. [ 205.954124][T10032] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.2173'. [ 206.165713][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.487280][T10063] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.2186'. [ 207.018062][T10082] ------------[ cut here ]------------ [ 207.023909][T10082] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 207.040203][T10082] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#0: syz.1.2191/10082 [ 207.051560][T10082] Modules linked in: [ 207.055598][T10082] CPU: 0 UID: 0 PID: 10082 Comm: syz.1.2191 Tainted: G W syzkaller #0 PREEMPT(full) [ 207.066710][T10082] Tainted: [W]=WARN [ 207.070597][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 207.081362][T10082] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 207.088179][T10082] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 207.108339][T10082] RSP: 0018:ffffc900001e3368 EFLAGS: 00010246 [ 207.114544][T10082] RAX: ffff88811b27aae8 RBX: 0000000000000000 RCX: 0000000000000002 [ 207.122681][T10082] RDX: ffffffff867fc05d RSI: ffffffff867d078d RDI: ffffffff86fbe710 [ 207.130744][T10082] RBP: ffff88812a56e350 R08: 0000000000000000 R09: 0000000000000002 [ 207.138900][T10082] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88812a56e310 [ 207.147012][T10082] R13: 0000000000000000 R14: ffff88812a56e35c R15: ffff88812a56e348 [ 207.155198][T10082] FS: 00007f04915876c0(0000) GS:ffff8882aeb3c000(0000) knlGS:0000000000000000 [ 207.164454][T10082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.171130][T10082] CR2: 0000001b3381fff8 CR3: 000000012c67c000 CR4: 00000000003506f0 [ 207.179292][T10082] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 207.187475][T10082] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 207.195632][T10082] Call Trace: [ 207.199024][T10082] [ 207.202198][T10082] reg_set_min_max+0x21c/0x260 [ 207.207070][T10082] check_cond_jmp_op+0x1355/0x1ab0 [ 207.208951][T10084] loop4: detected capacity change from 0 to 512 [ 207.212375][T10082] do_check+0x4a9b/0x9860 [ 207.223240][T10082] do_check_common+0xd0b/0x1630 [ 207.228195][T10082] bpf_check+0x2f6d/0xcc10 [ 207.232825][T10082] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 207.237501][T10084] EXT4-fs: Ignoring removed oldalloc option [ 207.244875][T10082] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 207.250699][T10082] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 207.256758][T10082] ? pcpu_block_refresh_hint+0x10b/0x170 [ 207.262627][T10082] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 207.268873][T10082] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 207.275147][T10082] ? pcpu_chunk_relocate+0x17a/0x2a0 [ 207.280518][T10082] ? pcpu_alloc_area+0x4ad/0x4d0 [ 207.285625][T10082] ? __rcu_read_unlock+0x4e/0x70 [ 207.290915][T10082] ? avc_has_perm_noaudit+0xab/0x130 [ 207.291951][T10084] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 207.296652][T10082] ? avc_has_perm+0x101/0x190 [ 207.311028][T10082] ? selinux_bpf_prog_load+0x197/0x1c0 [ 207.316785][T10082] ? security_bpf_prog_load+0x9e/0x140 [ 207.322509][T10082] bpf_prog_load+0xf76/0x1140 [ 207.327346][T10082] ? security_bpf+0x2b/0x90 [ 207.332019][T10082] __sys_bpf+0x505/0x7e0 [ 207.336416][T10082] __x64_sys_bpf+0x41/0x50 [ 207.340944][T10082] x64_sys_call+0x10cb/0x3020 [ 207.345794][T10082] do_syscall_64+0x12c/0x370 [ 207.350605][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.356643][T10082] RIP: 0033:0x7f0492b2bf79 [ 207.361153][T10082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.381028][T10082] RSP: 002b:00007f0491587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.389595][T10082] RAX: ffffffffffffffda RBX: 00007f0492da5fa0 RCX: 00007f0492b2bf79 [ 207.397743][T10082] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 207.405935][T10082] RBP: 00007f0492bc27e0 R08: 0000000000000000 R09: 0000000000000000 [ 207.414114][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.422200][T10082] R13: 00007f0492da6038 R14: 00007f0492da5fa0 R15: 00007fffd13cf938 [ 207.430297][T10082] [ 207.433539][T10082] ---[ end trace 0000000000000000 ]--- [ 207.485806][T10084] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #11: comm syz.4.2192: corrupted in-inode xattr: invalid ea_ino [ 207.513115][T10084] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 207.531307][T10084] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2192: couldn't read orphan inode 11 (err -117) [ 207.552665][T10084] loop4: lost filesystem error report for type 5 error -117 [ 207.562304][T10084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.563034][T10086] loop5: detected capacity change from 0 to 512 [ 208.363773][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.794129][ T1701] net_ratelimit: 52 callbacks suppressed [ 208.794203][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 208.931295][ T30] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.041321][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.067905][T10116] xt_l2tp: v2 tid > 0xffff: 37482740 [ 209.171719][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.281596][ T30] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.401348][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.521858][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.661459][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.755905][ T28] audit: type=1326 audit(1770969006.828:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 209.779492][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 209.830041][ T28] audit: type=1326 audit(1770969006.828:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 209.901706][T10154] ªªªªªª: renamed from vlan0 [ 209.910782][ T28] audit: type=1326 audit(1770969006.828:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 209.993120][ T1701] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 210.028773][ T28] audit: type=1326 audit(1770969006.828:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 210.084566][T10163] loop4: detected capacity change from 0 to 1024 [ 210.101158][ T28] audit: type=1326 audit(1770969006.828:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 210.135646][ T28] audit: type=1326 audit(1770969006.828:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 210.159102][ T28] audit: type=1326 audit(1770969006.828:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 210.165665][T10163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.182548][ T28] audit: type=1326 audit(1770969006.828:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 210.182617][ T28] audit: type=1326 audit(1770969006.828:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 210.241553][ T28] audit: type=1326 audit(1770969006.828:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10149 comm="syz.3.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 210.311427][T10163] EXT4-fs (loop4): shut down requested (0) [ 210.344083][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.423351][T10205] xt_hashlimit: size too large, truncated to 1048576 [ 213.808144][ T57] net_ratelimit: 27 callbacks suppressed [ 213.808164][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 213.940449][T10235] bond1: option mode: unable to set because the bond device has slaves [ 214.017324][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.025330][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.033162][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.050132][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.060933][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.091395][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.105430][T10239] pimreg: entered allmulticast mode [ 214.105869][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.115552][T10239] pimreg: left allmulticast mode [ 214.127461][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.135894][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.143473][ T4365] hid-generic 0103:0004:0000.0002: unknown main item tag 0x0 [ 214.158029][ T4365] hid-generic 0103:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 214.213322][T10248] fido_id[10248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.339495][T10278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2256'. [ 215.366060][T10277] bond4: (slave ip6gretap1): making interface the new active one [ 215.374428][T10277] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 215.408999][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 215.409018][ T28] audit: type=1400 audit(1770969012.478:949): avc: denied { create } for pid=10280 comm="syz.3.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.461170][T10274] loop4: detected capacity change from 0 to 512 [ 215.595926][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2262'. [ 215.703804][T10292] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10292 comm=syz.3.2262 [ 216.181390][ T28] audit: type=1326 audit(1770969013.248:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.186506][T10303] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2267'. [ 216.234845][ T28] audit: type=1326 audit(1770969013.248:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.242354][T10306] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2267'. [ 216.334080][ T28] audit: type=1326 audit(1770969013.258:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.385774][ T28] audit: type=1326 audit(1770969013.258:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.425142][ T28] audit: type=1326 audit(1770969013.258:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.456872][ T28] audit: type=1326 audit(1770969013.258:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.627361][ T28] audit: type=1326 audit(1770969013.258:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.671502][ T28] audit: type=1326 audit(1770969013.258:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 216.853159][ T28] audit: type=1326 audit(1770969013.258:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.4.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 217.111173][T10330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.391014][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 217.442340][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2283'. [ 218.229696][T10343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.317920][T10359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2288'. [ 218.341836][T10355] tipc: Failed to remove unknown binding: 66,0,0/0:4025535565/4025535566 [ 218.380608][T10355] tipc: Failed to remove unknown binding: 66,0,0/0:4025535565/4025535566 [ 218.461113][T10362] loop4: detected capacity change from 0 to 8192 [ 219.292451][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2291'. [ 219.498798][T10386] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.870703][T10384] Set syz1 is full, maxelem 65536 reached [ 220.254061][T10404] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 221.574477][T10440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2314'. [ 221.616135][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2315'. [ 221.642140][T10443] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2314'. [ 221.677034][T10442] x_tables: duplicate underflow at hook 2 [ 221.720072][T10446] tipc: Failed to remove unknown binding: 66,0,0/0:3655452554/3655452556 [ 221.739676][T10446] tipc: Failed to remove unknown binding: 66,0,0/0:3655452554/3655452555 [ 221.748724][T10446] tipc: Failed to remove unknown binding: 66,0,0/0:3655452554/3655452556 [ 221.764091][T10446] tipc: Failed to remove unknown binding: 66,0,0/0:3655452554/3655452555 [ 221.834712][T10448] netlink: 'syz.3.2317': attribute type 4 has an invalid length. [ 221.878607][T10448] netlink: 'syz.3.2317': attribute type 4 has an invalid length. [ 221.937198][T10452] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.221024][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 222.221041][ T28] audit: type=1400 audit(1770969019.288:1122): avc: denied { write } for pid=10459 comm="syz.5.2322" name="@" dev="tmpfs" ino=1340 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 222.363590][T10452] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.414198][T10452] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.441165][T10476] netlink: 'syz.6.2328': attribute type 16 has an invalid length. [ 222.449352][T10476] netlink: 'syz.6.2328': attribute type 17 has an invalid length. [ 222.486063][T10476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.497928][T10476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.515738][T10452] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.580902][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.594822][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.619989][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.639671][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.982836][T10511] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=10511 comm=syz.1.2342 [ 223.018474][T10511] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2342'. [ 223.028829][ T28] audit: type=1400 audit(1770969020.088:1123): avc: denied { write } for pid=10510 comm="syz.1.2342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.787724][ T28] audit: type=1400 audit(1770969020.688:1124): avc: denied { bind } for pid=10542 comm="syz.6.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 223.843173][T10551] tipc: Failed to remove unknown binding: 66,0,0/0:644806469/644806471 [ 223.851559][T10551] tipc: Failed to remove unknown binding: 66,0,0/0:644806469/644806470 [ 223.862527][T10551] tipc: Failed to remove unknown binding: 66,0,0/0:644806469/644806471 [ 223.870817][T10551] tipc: Failed to remove unknown binding: 66,0,0/0:644806469/644806470 [ 223.922747][T10553] netlink: 'syz.1.2361': attribute type 30 has an invalid length. [ 223.954679][T10555] lo: Caught tx_queue_len zero misconfig [ 224.793439][ T28] audit: type=1400 audit(1770969021.868:1125): avc: denied { watch } for pid=10571 comm="syz.4.2367" path="/454/file0" dev="tmpfs" ino=2382 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 225.016521][T10581] netlink: 'syz.3.2371': attribute type 16 has an invalid length. [ 225.192204][T10581] netlink: 'syz.3.2371': attribute type 17 has an invalid length. [ 225.724431][T10586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.773482][T10581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 225.827009][T10561] syz.6.2364 (10561) used greatest stack depth: 6136 bytes left [ 225.906771][ T28] audit: type=1400 audit(1770969022.978:1126): avc: denied { getopt } for pid=10597 comm="syz.1.2378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.948092][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2375'. [ 226.000722][T10599] loop4: detected capacity change from 0 to 8192 [ 227.025084][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2388'. [ 227.162805][T10635] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10635 comm=syz.3.2388 [ 227.301836][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.344146][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.406136][T10631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.338792][T10666] sd 0:0:1:0: device reset [ 228.351309][ T28] audit: type=1400 audit(1770969025.398:1127): avc: denied { read } for pid=10665 comm="syz.5.2400" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.401003][ T28] audit: type=1400 audit(1770969025.408:1128): avc: denied { ioctl } for pid=10665 comm="syz.5.2400" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 228.465646][T10672] syzkaller0: entered promiscuous mode [ 228.473153][T10672] syzkaller0: entered allmulticast mode [ 228.662087][T10677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.836346][T10674] loop5: detected capacity change from 0 to 1024 [ 228.913126][T10674] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 228.932632][T10674] System zones: 0-1, 3-36 [ 228.964797][T10674] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2404: bad orphan inode 134217728 [ 228.976649][T10674] loop5: lost filesystem error report for type 5 error -117 [ 228.985434][T10674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.523576][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.915417][T10711] batadv_slave_1: entered promiscuous mode [ 231.964355][T10710] batadv_slave_1: left promiscuous mode [ 231.970481][T10713] netlink: 'syz.5.2411': attribute type 1 has an invalid length. [ 231.987014][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2411'. [ 231.996704][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 232.013997][T10716] team0: entered promiscuous mode [ 232.019359][T10716] team0: entered allmulticast mode [ 232.126449][ T28] audit: type=1326 audit(1770969029.198:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.181371][ T28] audit: type=1326 audit(1770969029.198:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.240983][ T28] audit: type=1326 audit(1770969029.208:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.291375][ T28] audit: type=1326 audit(1770969029.208:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.324086][ T28] audit: type=1326 audit(1770969029.208:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.348249][ T28] audit: type=1326 audit(1770969029.208:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.371856][ T28] audit: type=1326 audit(1770969029.208:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.394482][T10730] loop4: detected capacity change from 0 to 1024 [ 232.400704][ T28] audit: type=1326 audit(1770969029.228:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10727 comm="syz.3.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 232.461712][T10730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 232.470430][T10730] System zones: 0-1, 3-36 [ 232.484453][T10730] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2421: bad orphan inode 134217728 [ 232.498006][T10730] loop4: lost filesystem error report for type 5 error -117 [ 232.516335][T10730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.565410][T10742] xt_TPROXY: Can be used only with -p tcp or -p udp [ 233.099530][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.147089][T10755] loop5: detected capacity change from 0 to 164 [ 233.177056][T10755] rock: directory entry would overflow storage [ 233.243543][T10755] rock: sig=0x5053, size=7, remaining=4 [ 233.280383][T10755] isofs_fill_super: root inode is not a directory. Corrupted media? [ 233.478199][T10762] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10762 comm=syz.6.2433 [ 233.533794][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 233.533809][ T28] audit: type=1400 audit(1770969286.601:1147): avc: denied { getopt } for pid=10766 comm="syz.4.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.562164][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2431'. [ 233.589386][T10767] loop4: detected capacity change from 0 to 1024 [ 233.607648][T10767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.632587][T10767] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.284425][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 234.425220][ T28] audit: type=1400 audit(1770969287.501:1148): avc: denied { unmount } for pid=10783 comm="syz.3.2442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 234.795095][T10792] loop5: detected capacity change from 0 to 512 [ 236.581865][ T28] audit: type=1326 audit(1770969289.661:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 236.621661][ T28] audit: type=1326 audit(1770969289.661:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 236.674265][ T28] audit: type=1326 audit(1770969289.661:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 236.723191][ T28] audit: type=1326 audit(1770969289.661:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 236.783499][ T28] audit: type=1326 audit(1770969289.661:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 236.835319][ T28] audit: type=1326 audit(1770969289.661:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 236.889523][ T28] audit: type=1326 audit(1770969289.661:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 236.937173][ T28] audit: type=1326 audit(1770969289.661:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10842 comm="syz.3.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 237.232068][T10858] loop5: detected capacity change from 0 to 1024 [ 237.252591][T10858] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 237.281584][T10858] System zones: 0-1, 3-36 [ 237.303460][T10858] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2468: bad orphan inode 134217728 [ 237.333613][T10858] loop5: lost filesystem error report for type 5 error -117 [ 237.334265][T10858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.407148][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.090369][T10901] loop5: detected capacity change from 0 to 1024 [ 238.126260][T10901] ext4: Bad value for 'journal' [ 238.216992][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2483'. [ 238.271597][T10907] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10907 comm=syz.1.2483 [ 239.063812][T10929] syzkaller0: entered promiscuous mode [ 239.069529][T10929] syzkaller0: entered allmulticast mode [ 241.059059][T10959] loop4: detected capacity change from 0 to 512 [ 241.106277][T10959] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 241.696158][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 241.696173][ T28] audit: type=1326 audit(1770969294.771:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11038 comm="syz.4.2511" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f05a8bf79 code=0x0 [ 242.396725][ T28] audit: type=1400 audit(1770969295.471:1169): avc: denied { bind } for pid=11057 comm="syz.3.2517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 242.452087][T11064] tipc: Failed to remove unknown binding: 66,0,0/0:3384849446/3384849447 [ 242.473658][T11064] tipc: Failed to remove unknown binding: 66,0,0/0:3384849446/3384849447 [ 242.657807][T11083] tipc: Can't bind to reserved service type 1 [ 242.672875][T11083] loop4: detected capacity change from 0 to 128 [ 242.693652][T11083] syz.4.2528: attempt to access beyond end of device [ 242.693652][T11083] loop4: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 242.732071][T11083] syz.4.2528: attempt to access beyond end of device [ 242.732071][T11083] loop4: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 242.781272][T11083] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 242.790261][T11083] syz.4.2528: attempt to access beyond end of device [ 242.790261][T11083] loop4: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 242.816129][T11083] syz.4.2528: attempt to access beyond end of device [ 242.816129][T11083] loop4: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 242.843485][T11083] Buffer I/O error on dev loop4, logical block 84, lost async page write [ 242.862765][T11083] syz.4.2528: attempt to access beyond end of device [ 242.862765][T11083] loop4: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 242.877969][T11083] syz.4.2528: attempt to access beyond end of device [ 242.877969][T11083] loop4: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 242.897746][T11083] Buffer I/O error on dev loop4, logical block 96, lost async page write [ 242.910010][T11083] syz.4.2528: attempt to access beyond end of device [ 242.910010][T11083] loop4: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 242.929175][T11083] syz.4.2528: attempt to access beyond end of device [ 242.929175][T11083] loop4: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 242.951699][T11083] Buffer I/O error on dev loop4, logical block 100, lost async page write [ 242.961406][T11083] syz.4.2528: attempt to access beyond end of device [ 242.961406][T11083] loop4: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 242.983944][T11083] syz.4.2528: attempt to access beyond end of device [ 242.983944][T11083] loop4: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 243.002304][T11083] Buffer I/O error on dev loop4, logical block 112, lost async page write [ 243.016629][T11083] Buffer I/O error on dev loop4, logical block 116, lost async page write [ 243.034837][T11083] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 243.046231][T11083] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 243.059974][T11083] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 243.076340][T11083] Buffer I/O error on dev loop4, logical block 124, lost async page write [ 244.221814][T11127] loop5: detected capacity change from 0 to 8192 [ 244.578799][T11137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2546'. [ 244.609448][T11137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11137 comm=syz.1.2546 [ 244.864060][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2550'. [ 244.966301][ T28] audit: type=1326 audit(1770969298.011:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.041320][ T28] audit: type=1326 audit(1770969298.031:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.113979][ T28] audit: type=1326 audit(1770969298.031:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.191265][ T28] audit: type=1326 audit(1770969298.021:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.244282][ T28] audit: type=1326 audit(1770969298.071:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.294946][ T28] audit: type=1326 audit(1770969298.081:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.348963][ T28] audit: type=1326 audit(1770969298.081:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.429907][ T28] audit: type=1326 audit(1770969298.141:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11151 comm="syz.4.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 245.518421][T11166] loop5: detected capacity change from 0 to 128 [ 245.595824][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 245.653712][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 245.705807][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2559'. [ 245.770348][T11165] bridge6: left allmulticast mode [ 245.784212][T11165] geneve2: left promiscuous mode [ 245.820526][T11003] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 43500 - 0 [ 245.829330][T11003] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 43500 - 0 [ 246.347733][T11003] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 43500 - 0 [ 246.356410][T11003] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 43500 - 0 [ 246.456840][T11186] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2563'. [ 246.622826][T11186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11186 comm=syz.4.2563 [ 247.569217][T11211] loop5: detected capacity change from 0 to 256 [ 247.590709][T11211] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.625618][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 247.625634][ T28] audit: type=1400 audit(1770969300.701:1281): avc: denied { ioctl } for pid=11212 comm="syz.1.2573" path="/539/file2" dev="tmpfs" ino=2815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.656623][T11213] block device autoloading is deprecated and will be removed. [ 247.717289][T11215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2575'. [ 247.749231][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2575'. [ 247.847472][ T28] audit: type=1326 audit(1770969300.921:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11223 comm="syz.4.2578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x0 [ 247.950289][T11233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 247.996586][T11233] team0: Mode changed to "loadbalance" [ 248.008657][T11234] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 248.028614][ T28] audit: type=1400 audit(1770969301.081:1283): avc: denied { load_policy } for pid=11231 comm="syz.5.2582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 248.054748][T11234] SELinux: failed to load policy [ 248.251557][T11238] loop5: detected capacity change from 0 to 512 [ 248.281712][T11238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.327713][T11238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.357184][T11238] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.372779][T11240] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 248.389855][T11238] EXT4-fs (loop5): shut down requested (0) [ 248.398375][T11238] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 248.417431][T11238] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 248.443904][T11238] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=15 [ 248.452878][ T28] audit: type=1400 audit(1770969301.521:1284): avc: denied { read } for pid=11237 comm="syz.5.2584" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.509098][ T28] audit: type=1400 audit(1770969301.571:1285): avc: denied { open } for pid=11237 comm="syz.5.2584" path="/305/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.562466][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.009661][T11264] loop4: detected capacity change from 0 to 128 [ 249.025692][T11264] vfat: Unknown parameter 'shortn±ô½¥ame' [ 251.045324][T11310] loop4: detected capacity change from 0 to 512 [ 251.076840][T11310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.101472][T11310] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.285428][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.638224][T11330] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 251.819778][T11337] loop4: detected capacity change from 0 to 512 [ 251.839807][T11337] EXT4-fs: Ignoring removed mblk_io_submit option [ 251.846593][T11330] SELinux: failed to load policy [ 251.925915][T11337] EXT4-fs: journaled quota format not specified [ 252.662357][T11371] loop4: detected capacity change from 0 to 128 [ 252.677344][T11365] loop5: detected capacity change from 0 to 512 [ 252.720029][T11365] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 252.941067][T11365] EXT4-fs (loop5): 1 truncate cleaned up [ 252.973494][T11365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.071597][T11381] bio_check_eod: 20 callbacks suppressed [ 253.071613][T11381] syz.4.2623: attempt to access beyond end of device [ 253.071613][T11381] loop4: rw=2049, sector=145, nr_sectors = 424 limit=128 [ 253.519382][T11354] syz.4.2623: attempt to access beyond end of device [ 253.519382][T11354] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 253.538326][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.616510][T11003] kworker/u8:33: attempt to access beyond end of device [ 253.616510][T11003] loop4: rw=1, sector=569, nr_sectors = 8 limit=128 [ 256.464347][ T28] audit: type=1326 audit(1770969565.538:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 256.529666][ T28] audit: type=1326 audit(1770969565.558:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 256.573920][ T28] audit: type=1326 audit(1770969565.558:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f05a8d807 code=0x7ffc0000 [ 256.656408][ T28] audit: type=1326 audit(1770969565.558:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9f05a4c84e code=0x7ffc0000 [ 256.690107][ T28] audit: type=1326 audit(1770969565.558:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9f05a4c84e code=0x7ffc0000 [ 256.726863][ T28] audit: type=1326 audit(1770969565.558:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f9f05a4c84e code=0x7ffc0000 [ 256.800828][ T28] audit: type=1326 audit(1770969565.558:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9f05a4c84e code=0x7ffc0000 [ 256.832727][T11469] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 256.861268][ T28] audit: type=1326 audit(1770969565.558:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 256.888312][T11469] team0: Mode changed to "loadbalance" [ 256.894821][ T28] audit: type=1326 audit(1770969565.568:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 257.034840][ T28] audit: type=1326 audit(1770969565.568:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11459 comm="syz.4.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f05a8bf79 code=0x7ffc0000 [ 259.176574][T11513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2672'. [ 260.682425][T11615] syzkaller0: entered promiscuous mode [ 260.688622][T11618] netlink: 'syz.5.2687': attribute type 13 has an invalid length. [ 260.701564][T11615] syzkaller0: entered allmulticast mode [ 260.704449][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 260.741290][T11618] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 261.011751][T11633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2694'. [ 261.071609][T11633] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11633 comm=syz.4.2694 [ 261.156848][T11637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2695'. [ 261.192620][T11637] IPVS: Error connecting to the multicast addr [ 261.564081][T11644] loop4: detected capacity change from 0 to 32768 [ 261.610209][ T3298] loop4: p1 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 262.272640][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 262.272657][ T28] audit: type=1400 audit(1770969571.348:1358): avc: denied { map } for pid=11656 comm="syz.5.2702" path="pipe:[37174]" dev="pipefs" ino=37174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 262.396864][T11657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.404277][T11657] IPv6: NLM_F_CREATE should be set when creating new route [ 262.734977][T11664] netlink: 'syz.3.2705': attribute type 1 has an invalid length. [ 262.797897][T11664] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.842850][T11664] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 262.866034][T11644] loop4: p1 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 [ 262.892973][T11664] bond5: (slave vxcan3): making interface the new active one [ 263.012085][T11664] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 263.262163][T11671] netlink: 'syz.3.2707': attribute type 1 has an invalid length. [ 263.341918][T11675] netlink: 'syz.4.2709': attribute type 29 has an invalid length. [ 263.351436][T11675] netlink: 'syz.4.2709': attribute type 29 has an invalid length. [ 263.373617][T11675] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2709'. [ 263.402286][T11674] delete_channel: no stack [ 263.964322][T11690] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11690 comm=syz.1.2716 [ 263.997496][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 263.999573][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 264.017230][ T9681] udevd[9681]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 264.019471][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 264.030310][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 264.103203][T11697] netlink: 'syz.3.2717': attribute type 1 has an invalid length. [ 264.110974][T11697] netlink: 'syz.3.2717': attribute type 4 has an invalid length. [ 264.150671][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop4p15, 10) failed: No such file or directory [ 264.162979][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p17, 10) failed: No such file or directory [ 264.174371][ T9681] udevd[9681]: inotify_add_watch(7, /dev/loop4p16, 10) failed: No such file or directory [ 264.191578][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop4p18, 10) failed: No such file or directory [ 264.203988][T11702] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2718'. [ 264.213488][T11697] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.2717'. [ 264.229944][T11695] udevd[11695]: inotify_add_watch(7, /dev/loop4p11, 10) failed: No such file or directory [ 264.271868][T11702] netlink: 3074 bytes leftover after parsing attributes in process `syz.1.2718'. [ 265.752729][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2729'. [ 267.409095][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2740'. [ 267.419424][ T28] audit: type=1400 audit(1770969576.488:1359): avc: denied { setattr } for pid=11756 comm="syz.3.2739" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 267.480114][T11762] netlink: 'syz.4.2740': attribute type 5 has an invalid length. [ 267.508141][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2740'. [ 268.265834][ T28] audit: type=1326 audit(1770969577.338:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.326177][ T28] audit: type=1326 audit(1770969577.338:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.377555][ T28] audit: type=1326 audit(1770969577.338:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.428765][ T28] audit: type=1326 audit(1770969577.338:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.503703][ T28] audit: type=1326 audit(1770969577.338:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.557045][ T28] audit: type=1326 audit(1770969577.338:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.565477][T11791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2748'. [ 268.581618][ T28] audit: type=1326 audit(1770969577.338:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.616323][T11796] loop5: detected capacity change from 0 to 512 [ 268.622987][ T28] audit: type=1326 audit(1770969577.338:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 268.647636][T11798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11798 comm=syz.4.2748 [ 268.671143][T11796] EXT4-fs: Ignoring removed oldalloc option [ 268.682001][ T28] audit: type=1326 audit(1770969577.338:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.3.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f21e65bbce2 code=0x7ffc0000 [ 268.745902][T11796] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2749: Parent and EA inode have the same ino 15 [ 268.768518][T11796] loop5: lost filesystem error report for type 5 error -117 [ 268.772879][T11796] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.2749: Parent and EA inode have the same ino 15 [ 268.824971][T11796] loop5: lost filesystem error report for type 5 error -117 [ 268.828298][T11796] EXT4-fs (loop5): 1 orphan inode deleted [ 268.844200][T11796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.858453][T11796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.677495][T11834] netlink: 'syz.6.2761': attribute type 10 has an invalid length. [ 269.712079][T11834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.756995][T11834] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 270.497481][T11851] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.553874][T11851] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.637263][T11851] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.724770][T11851] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.820689][T11013] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.835421][T11013] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.852432][T11013] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.880206][T11013] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.067145][T11909] loop4: detected capacity change from 0 to 1024 [ 272.117856][T11909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.225109][T11909] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 272.279679][T11909] EXT4-fs (loop4): Remounting filesystem read-only [ 272.362190][T11920] netlink: 'syz.3.2791': attribute type 1 has an invalid length. [ 272.408722][T11920] 8021q: adding VLAN 0 to HW filter on device bond6 [ 272.434559][T11922] bond6: entered allmulticast mode [ 272.465343][T11920] bond6: (slave ip6gretap2): making interface the new active one [ 272.522043][T11920] ip6gretap2: entered allmulticast mode [ 272.537044][T11920] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 272.652524][T11927] veth0_to_team: entered promiscuous mode [ 272.679392][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.874665][T11907] Set syz1 is full, maxelem 65536 reached [ 272.985225][T11947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11947 comm=syz.6.2798 [ 273.023184][T11947] dummy0: entered promiscuous mode [ 273.038753][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2798'. [ 273.057483][T11947] dummy0 (unregistering): left promiscuous mode [ 273.094443][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 273.094460][ T28] audit: type=1326 audit(1770969582.168:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.161289][ T28] audit: type=1326 audit(1770969582.168:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.186402][ T28] audit: type=1326 audit(1770969582.168:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.241375][ T28] audit: type=1326 audit(1770969582.168:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.285626][ T28] audit: type=1326 audit(1770969582.168:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.339795][ T28] audit: type=1326 audit(1770969582.168:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.411216][ T28] audit: type=1326 audit(1770969582.168:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.491334][ T28] audit: type=1326 audit(1770969582.168:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.577405][ T28] audit: type=1326 audit(1770969582.178:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 273.641305][ T28] audit: type=1326 audit(1770969582.178:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11953 comm="syz.3.2802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x7ffc0000 [ 276.326949][T11981] tipc: Failed to remove unknown binding: 66,0,0/0:1534874304/1534874306 [ 276.335517][T11981] tipc: Failed to remove unknown binding: 66,0,0/0:1534874304/1534874305 [ 276.345627][T11980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2813'. [ 276.395214][T11980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11980 comm=syz.3.2813 [ 276.483686][T11994] netlink: 'syz.3.2818': attribute type 10 has an invalid length. [ 276.537985][T11997] netlink: 'syz.5.2820': attribute type 4 has an invalid length. [ 276.569358][T11997] netlink: 'syz.5.2820': attribute type 4 has an invalid length. [ 276.676985][T12006] loop5: detected capacity change from 0 to 512 [ 276.728817][T12006] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2823: inode has both inline data and extents flags [ 276.751293][T12006] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 276.751526][T12006] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2823: couldn't read orphan inode 15 (err -117) [ 276.819956][T12006] loop5: lost filesystem error report for type 5 error -117 [ 276.820410][T12006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.842092][T12015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2826'. [ 276.883479][T12015] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12015 comm=syz.3.2826 [ 277.038053][T12006] bridge0: entered promiscuous mode [ 277.046399][T12006] macvtap1: entered promiscuous mode [ 277.056226][T12006] macvtap1: entered allmulticast mode [ 277.058495][T12022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2828'. [ 277.064285][T12006] bridge0: entered allmulticast mode [ 277.100752][T12006] bridge0: port 3(macvtap1) entered blocking state [ 277.113786][T12006] bridge0: port 3(macvtap1) entered disabled state [ 277.158855][T12006] bridge0: left allmulticast mode [ 277.189281][T12006] bridge0: left promiscuous mode [ 277.203548][T12027] netlink: 'syz.6.2831': attribute type 10 has an invalid length. [ 277.409916][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.558937][T11986] Set syz1 is full, maxelem 65536 reached [ 277.663138][T12016] Set syz1 is full, maxelem 65536 reached [ 277.857639][T12061] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 277.857639][T12061] The task syz.5.2843 (12061) triggered the difference, watch for misbehavior. [ 278.639776][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 278.666333][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2845'. [ 278.699194][T12080] loop5: detected capacity change from 0 to 2048 [ 278.744196][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2853'. [ 278.754992][T12080] loop5: p2 < > p3 < p5 > p4 [ 278.759721][T12080] loop5: partition table partially beyond EOD, truncated [ 278.776865][T12080] loop5: p2 start 4278190080 is beyond EOD, truncated [ 278.807887][T12080] loop5: p4 size 8192 extends beyond EOD, truncated [ 278.823791][T12080] loop5: p5 size 8192 extends beyond EOD, truncated [ 278.992339][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 278.992353][ T28] audit: type=1400 audit(1770969588.068:1426): avc: denied { nlmsg_read } for pid=12102 comm="syz.3.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 279.019400][T12103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2861'. [ 279.340048][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 279.754164][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2869'. [ 279.872896][T12128] loop5: detected capacity change from 0 to 2048 [ 279.938921][T12128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.988040][ T28] audit: type=1400 audit(1770969589.058:1427): avc: denied { read } for pid=12127 comm="syz.5.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 280.058181][ T28] audit: type=1326 audit(1770969589.118:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.234992][ T28] audit: type=1326 audit(1770969589.118:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.271964][ T28] audit: type=1326 audit(1770969589.118:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.319501][ T28] audit: type=1326 audit(1770969589.118:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.369875][ T28] audit: type=1326 audit(1770969589.118:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.394788][ T28] audit: type=1326 audit(1770969589.118:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.418868][T12144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2874'. [ 280.437106][T12144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12144 comm=syz.4.2874 [ 280.460768][ T28] audit: type=1326 audit(1770969589.118:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.529579][ T28] audit: type=1326 audit(1770969589.118:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12137 comm="syz.6.2872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f484f93bf79 code=0x7ffc0000 [ 280.535566][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.685714][T12152] loop5: detected capacity change from 0 to 1024 [ 280.724393][T12152] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 280.748749][T12152] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 280.781408][T12152] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 280.803542][T12152] EXT4-fs error (device loop5): ext4_get_journal_inode:5861: inode #32: comm syz.5.2878: iget: special inode unallocated [ 280.841117][T12152] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 280.842498][T12152] EXT4-fs (loop5): no journal found [ 280.869763][T12152] EXT4-fs (loop5): can't get journal size [ 280.896680][ T4393] Process accounting resumed [ 280.905206][T12152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 281.026088][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.289847][T12166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.585221][ T4393] IPVS: starting estimator thread 0... [ 281.702055][T12168] IPVS: using max 2256 ests per chain, 112800 per kthread [ 282.072894][T12183] netlink: 'syz.6.2886': attribute type 13 has an invalid length. [ 282.353267][T12199] veth0_to_bond: Caught tx_queue_len zero misconfig [ 282.745269][T12223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 283.080655][T12221] netlink: 'syz.6.2900': attribute type 3 has an invalid length. [ 283.784136][T12243] Set syz1 is full, maxelem 65536 reached [ 284.630576][T12266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2915'. [ 285.606748][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 285.606772][ T28] audit: type=1400 audit(1770969594.678:1441): avc: denied { read } for pid=12303 comm="syz.4.2937" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 285.832006][ T28] audit: type=1400 audit(1770969594.678:1442): avc: denied { open } for pid=12303 comm="syz.4.2937" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 286.303896][T12324] syzkaller0: entered promiscuous mode [ 286.310809][T12324] syzkaller0: entered allmulticast mode [ 286.886131][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.901169][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.965134][T12341] tipc: Enabling of bearer rejected, failed to enable media [ 286.981302][ T28] audit: type=1400 audit(1770969596.018:1443): avc: denied { remount } for pid=12345 comm="syz.5.2941" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 287.111924][T12351] syzkaller0: entered promiscuous mode [ 287.128359][T12351] syzkaller0: entered allmulticast mode [ 288.470645][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2957'. [ 288.522539][T12405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2956'. [ 288.537156][T12413] loop5: detected capacity change from 0 to 512 [ 288.581315][T12413] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 288.645159][T12413] EXT4-fs (loop5): 1 truncate cleaned up [ 288.653035][T12413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.124309][T12478] veth0_to_team: Caught tx_queue_len zero misconfig [ 289.619021][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.112682][T12503] netlink: 'syz.4.2974': attribute type 3 has an invalid length. [ 290.120554][T12503] netlink: 'syz.4.2974': attribute type 3 has an invalid length. [ 290.218638][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 290.238724][T12509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2976'. [ 290.575254][T12523] netlink: 'syz.3.2980': attribute type 1 has an invalid length. [ 290.613470][T12523] Unknown options in mask 20 [ 290.635513][T12515] netlink: 'syz.4.2978': attribute type 3 has an invalid length. [ 290.782378][T12515] loop4: detected capacity change from 0 to 512 [ 290.803145][T12515] EXT4-fs: Ignoring removed nobh option [ 290.810005][T12515] EXT4-fs: Invalid want_extra_isize 0 [ 290.850726][T12525] macsec0: entered allmulticast mode [ 290.886595][T12525] veth1_macvtap: entered allmulticast mode [ 290.893753][T12525] macsec0: entered promiscuous mode [ 291.243385][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2983'. [ 291.269618][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2983'. [ 291.298327][ T28] audit: type=1326 audit(1770969600.368:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12538 comm="syz.3.2986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21e65bbf79 code=0x0 [ 291.477827][T12544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2988'. [ 291.543773][T12547] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2987'. [ 291.719768][T12544] loop4: detected capacity change from 0 to 1024 [ 291.904400][T12544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.993892][T12559] bridge0: entered promiscuous mode [ 292.117605][T12559] macvlan2: entered promiscuous mode [ 292.124444][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.221207][T12568] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2993'. [ 292.230654][T12568] netlink: zone id is out of range [ 292.235827][T12568] netlink: zone id is out of range [ 292.258897][T12568] netlink: set zone limit has 8 unknown bytes [ 292.964144][ T28] audit: type=1400 audit(1770969602.039:1445): avc: denied { wake_alarm } for pid=12574 comm="syz.3.2996" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 293.156697][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2998'. [ 293.172460][T12577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.174269][ T28] audit: type=1400 audit(1770969602.249:1446): avc: denied { getopt } for pid=12579 comm="syz.3.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.244803][T12577] macvlan2: entered promiscuous mode [ 293.250742][T12577] macvlan2: entered allmulticast mode [ 293.343202][ T28] audit: type=1326 audit(1770969602.419:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 293.372979][T12585] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3001'. [ 293.389358][ T28] audit: type=1326 audit(1770969602.419:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 293.444227][ T28] audit: type=1326 audit(1770969602.419:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 293.487759][ T4367] IPVS: starting estimator thread 0... [ 293.503744][ T28] audit: type=1326 audit(1770969602.419:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 293.557899][ T28] audit: type=1326 audit(1770969602.419:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 293.611023][T12587] IPVS: using max 1728 ests per chain, 86400 per kthread [ 293.622350][ T28] audit: type=1326 audit(1770969602.419:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 293.770959][ T28] audit: type=1326 audit(1770969602.419:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12582 comm="syz.5.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc3e67bf79 code=0x7ffc0000 [ 293.816954][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3012'. [ 293.826502][T12592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.836425][T12592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.884713][T12592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.895044][T12592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.820650][T12622] loop4: detected capacity change from 0 to 2048 [ 294.879852][T12622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.900996][T12622] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.932508][T12615] netlink: 'syz.5.3009': attribute type 3 has an invalid length. [ 295.012715][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.070338][T12638] tipc: Started in network mode [ 295.090387][T12638] tipc: Node identity 4, cluster identity 4711 [ 295.099863][T12615] loop5: detected capacity change from 0 to 512 [ 295.113733][T12615] EXT4-fs: Ignoring removed nobh option [ 295.120137][T12615] EXT4-fs: Invalid want_extra_isize 0 [ 295.120911][T12638] tipc: Node number set to 4 [ 295.227445][T12641] loop4: detected capacity change from 0 to 1024 [ 295.235256][T12641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.247364][T12641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 295.264644][T12641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 295.302980][T12641] System zones: 0-1, 3-36 [ 295.314787][T12641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.360596][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.123390][T12661] netlink: 'syz.1.3025': attribute type 39 has an invalid length. [ 296.144359][T12656] loop5: detected capacity change from 0 to 512 [ 296.191188][T12656] EXT4-fs: Ignoring removed i_version option [ 296.232893][T12656] EXT4-fs (loop5): 1 truncate cleaned up [ 296.268149][T12656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.357661][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 296.376878][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3029'. [ 296.407173][T12672] ip6tnl0: Caught tx_queue_len zero misconfig [ 296.486541][ T6049] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /381/bus: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=196732, size=1024 fake=0 [ 296.519634][ T6049] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz-executor: bg 0: block 7: invalid block bitmap [ 296.532567][ T6049] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 296.542475][ T6049] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 296.555005][ T6049] EXT4-fs error (device loop5): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 296.621564][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 296.621583][ T28] audit: type=1400 audit(1770969605.589:1457): avc: denied { remove_name } for pid=6049 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.697963][T12690] loop4: detected capacity change from 0 to 512 [ 296.705140][ T28] audit: type=1400 audit(1770969605.589:1458): avc: denied { rmdir } for pid=6049 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.729949][ T28] audit: type=1400 audit(1770969605.619:1459): avc: denied { unlink } for pid=6049 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 296.759276][T12690] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 296.837509][T12693] netlink: 'syz.1.3038': attribute type 1 has an invalid length. [ 296.880491][T12693] 8021q: adding VLAN 0 to HW filter on device bond5 [ 297.059900][T12693] bond5: (slave bridge10): making interface the new active one [ 297.071188][T12693] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 297.167136][T12690] EXT4-fs (loop4): 1 truncate cleaned up [ 297.176702][ T6049] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.193533][T12690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.948187][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.001254][T12719] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3045'. [ 298.046775][T12719] hsr_slave_0: left promiscuous mode [ 298.071969][T12719] hsr_slave_1: left promiscuous mode [ 298.215861][T12735] netlink: 'syz.4.3048': attribute type 4 has an invalid length. [ 298.242176][T12731] netlink: 'syz.4.3048': attribute type 4 has an invalid length. [ 298.400924][T12742] uprobe: syz.1.3053:12742 failed to unregister, leaking uprobe [ 298.407919][T12708] chnl_net:caif_netlink_parms(): no params data found [ 298.584053][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.630740][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.663973][T12708] bridge_slave_0: entered allmulticast mode [ 298.693221][T12708] bridge_slave_0: entered promiscuous mode [ 298.720972][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.751395][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.780143][T12708] bridge_slave_1: entered allmulticast mode [ 298.807602][T12708] bridge_slave_1: entered promiscuous mode [ 298.877817][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.914128][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.995888][T12708] team0: Port device team_slave_0 added [ 299.017036][T12708] team0: Port device team_slave_1 added [ 299.178832][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.188203][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.214529][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.251389][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.268565][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.314423][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.386091][T12708] hsr_slave_0: entered promiscuous mode [ 299.401256][T12708] hsr_slave_1: entered promiscuous mode [ 299.427710][T12708] debugfs: 'hsr0' already exists in 'hsr' [ 299.439721][T12708] Cannot create hsr debugfs directory [ 299.533489][ T28] audit: type=1326 audit(1770969608.599:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0492b2bf79 code=0x7ffc0000 [ 299.636123][ T28] audit: type=1326 audit(1770969608.599:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0492b2bf79 code=0x7ffc0000 [ 299.714881][ T28] audit: type=1326 audit(1770969608.619:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0492b2bf79 code=0x7ffc0000 [ 299.767658][ T28] audit: type=1326 audit(1770969608.639:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0492b2bf79 code=0x7ffc0000 [ 299.825884][ T28] audit: type=1326 audit(1770969608.639:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0492b2bf79 code=0x7ffc0000 [ 299.882075][T12708] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.888897][ T28] audit: type=1326 audit(1770969608.639:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0492b2bf79 code=0x7ffc0000 [ 299.917101][ T28] audit: type=1326 audit(1770969608.639:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12840 comm="syz.1.3058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0492b2bf79 code=0x7ffc0000 [ 299.917904][T12708] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.952985][T12708] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 299.962340][T12708] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 300.003117][T12708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.014961][T12708] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.025871][T10985] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.033085][T10985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.046565][T11006] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.053677][T11006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.124706][T12708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.233780][T12708] veth0_vlan: entered promiscuous mode [ 300.242079][T12708] veth1_vlan: entered promiscuous mode [ 300.259324][T12708] veth0_macvtap: entered promiscuous mode [ 300.268017][T12708] veth1_macvtap: entered promiscuous mode [ 300.282019][T12708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.294613][T12708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.306497][T11031] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.315691][T11031] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.325331][T11031] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.334458][T11031] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.601283][T12929] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3065'. [ 302.023489][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3067'. [ 302.408488][T12922] ================================================================== [ 302.416648][T12922] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 302.425279][T12922] [ 302.427630][T12922] write to 0xffff88811b7d6528 of 8 bytes by task 12924 on cpu 1: [ 302.435369][T12922] shmem_file_splice_read+0x470/0x600 [ 302.440780][T12922] splice_direct_to_actor+0x26e/0x670 [ 302.446188][T12922] do_splice_direct+0x119/0x1a0 [ 302.451086][T12922] do_sendfile+0x382/0x650 [ 302.455544][T12922] __x64_sys_sendfile64+0x105/0x150 [ 302.460791][T12922] x64_sys_call+0x2dc4/0x3020 [ 302.465539][T12922] do_syscall_64+0x12c/0x370 [ 302.470171][T12922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.476096][T12922] [ 302.478444][T12922] write to 0xffff88811b7d6528 of 8 bytes by task 12922 on cpu 0: [ 302.486189][T12922] shmem_file_splice_read+0x470/0x600 [ 302.491605][T12922] splice_direct_to_actor+0x26e/0x670 [ 302.497035][T12922] do_splice_direct+0x119/0x1a0 [ 302.501932][T12922] do_sendfile+0x382/0x650 [ 302.506394][T12922] __x64_sys_sendfile64+0x105/0x150 [ 302.511633][T12922] x64_sys_call+0x2dc4/0x3020 [ 302.516344][T12922] do_syscall_64+0x12c/0x370 [ 302.520963][T12922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.526883][T12922] [ 302.529255][T12922] value changed: 0x0000000000004986 -> 0x0000000000004987 [ 302.536377][T12922] [ 302.538727][T12922] Reported by Kernel Concurrency Sanitizer on: [ 302.544901][T12922] CPU: 0 UID: 0 PID: 12922 Comm: syz.6.3074 Tainted: G W syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 302.555866][T12922] Tainted: [W]=WARN [ 302.559687][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 302.569762][T12922] ================================================================== [ 303.471326][T10975] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.524999][T10975] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.591381][T10975] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.652331][T10975] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.971557][T10975] bond4 (unregistering): (slave bridge5): Removing an active aggregator [ 303.980223][T10975] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 303.988897][T10975] bridge5 (unregistering): left promiscuous mode [ 303.995522][T10975] bridge5 (unregistering): left allmulticast mode [ 304.211850][T10975] bond5 (unregistering): (slave bridge10): Releasing active interface [ 304.251908][T10975] bond0 (unregistering): Released all slaves [ 304.259484][T10975] bond1 (unregistering): left allmulticast mode [ 304.266335][T10975] bond1 (unregistering): Released all slaves [ 304.274723][T10975] bond2 (unregistering): Released all slaves [ 304.283760][T10975] bond3 (unregistering): Released all slaves [ 304.292453][T10975] bond4 (unregistering): Released all slaves [ 304.300902][T10975] bond5 (unregistering): Released all slaves [ 304.351587][T10975] hsr_slave_0: left promiscuous mode [ 304.360364][T10975] hsr_slave_1: left promiscuous mode [ 304.366771][T10975] veth1_macvtap: left allmulticast mode [ 304.611913][T10975] IPVS: stop unused estimator thread 0... [ 304.681910][T10975] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.734232][T10975] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.799248][T10975] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.883447][T10975] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.150049][T10975] bridge_slave_1: left allmulticast mode [ 305.156194][T10975] bridge_slave_1: left promiscuous mode [ 305.161921][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.170130][T10975] bridge_slave_0: left allmulticast mode [ 305.176039][T10975] bridge_slave_0: left promiscuous mode [ 305.182056][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.293055][T10975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.303404][T10975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.313536][T10975] bond0 (unregistering): Released all slaves [ 305.324179][T10975] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 305.334392][T10975] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 305.342802][T10975] ip6gretap2 (unregistering): left allmulticast mode [ 305.461907][T10975] bond3 (unregistering): (slave bridge0): Releasing backup interface [ 305.661608][T10975] smc: removing net device bond0 with user defined pnetid SYZ2 [ 305.669536][T10975] bond0 (unregistering): Released all slaves [ 305.678360][T10975] bond1 (unregistering): Released all slaves [ 305.687031][T10975] bond2 (unregistering): Released all slaves [ 305.695453][T10975] bond3 (unregistering): Released all slaves [ 305.704008][T10975] bond4 (unregistering): Released all slaves [ 305.712717][T10975] bond5 (unregistering): (slave vxcan3): Releasing backup interface [ 305.721594][T10975] bond5 (unregistering): Released all slaves [ 305.730008][T10975] bond6 (unregistering): Released all slaves [ 305.786659][T10975] tipc: Left network mode [ 305.796743][T10975] hsr_slave_0: left promiscuous mode [ 305.803293][T10975] hsr_slave_1: left promiscuous mode [ 305.809048][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.817258][T10975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.825159][T10975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.833768][T10975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.847350][T10975] veth1_macvtap: left promiscuous mode [ 305.853096][T10975] veth0_macvtap: left promiscuous mode [ 305.858712][T10975] veth1_vlan: left promiscuous mode [ 305.864241][T10975] veth0_vlan: left promiscuous mode [ 305.939563][T10975] team0 (unregistering): Port device team_slave_1 removed [ 305.949982][T10975] team0 (unregistering): Port device team_slave_0 removed [ 306.394728][T10975] IPVS: stop unused estimator thread 0...