last executing test programs: 1.920998731s ago: executing program 4 (id=5272): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x2, [@ptr, @func, @int, @int, @volatile={0xe}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, [{}, {}, {0x1}]}]}}, 0x0, 0x8e}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000100), 0x0}, 0x20) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x1a0, 0x3d0, 0x1a0, 0x300, 0x1a0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [0x0, 0x0, 0xff000000], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) getpid() lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {}, [], {0x10, 0x3}}, 0x24, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086d0415c240000102030109022400010105a022889c120d953fe999105a33cd9883ef00090400c0010301020309bc"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 1.497227663s ago: executing program 2 (id=5279): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3d, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mlockall(0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_setup(0x2, &(0x7f0000002400)) 1.4201347s ago: executing program 4 (id=5280): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 1.41927597s ago: executing program 2 (id=5282): acct(&(0x7f0000000280)='./file1\x00') getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x111, 0x0, &(0x7f0000000140), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x8081) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.396985522s ago: executing program 2 (id=5284): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, 0x0, 0x0) 1.337046318s ago: executing program 4 (id=5285): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 1.109070511s ago: executing program 2 (id=5289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "000000000200", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e0003f100000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0/file0'}, 0x11) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 1.048324477s ago: executing program 2 (id=5291): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x2, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r5, 0x3}, 0x8) 1.02038662s ago: executing program 2 (id=5293): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.02001647s ago: executing program 4 (id=5294): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x8, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x20004}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20000814) 969.289445ms ago: executing program 3 (id=5295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x8, @void}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) creat(0x0, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 879.129783ms ago: executing program 4 (id=5299): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x6}]}) setuid(0xee01) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.u,']) 792.971892ms ago: executing program 1 (id=5300): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x401, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r1}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x47e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000"], 0x48) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000940)=[{&(0x7f0000000200)='\f7', 0x2}], 0x1) 693.021362ms ago: executing program 1 (id=5302): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) 593.088002ms ago: executing program 0 (id=5303): mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 386.280272ms ago: executing program 3 (id=5304): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x5f, 0x27, 0x5, 0xff}}, 0x40) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 384.034202ms ago: executing program 0 (id=5314): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x100000001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x1, 0x80, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x80, 0x7, 0xe, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000a40)={'batadv_slave_0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r0, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x0, 0xe5, &(0x7f0000000b80)=[{}, {}], 0x10, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000e00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x7fe35ea787de4398}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000f80)=@newtfilter={0x1474, 0x2c, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffe0}, {0xd, 0xfff3}, {0xb, 0xa}}, [@f_tcindex={{0xc}, {0x30, 0x2, [@TCA_TCINDEX_ACT={0x4}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5196}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xb}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5f4f}]}}, @f_tcindex={{0xc}, {0xec, 0x2, [@TCA_TCINDEX_POLICE={0x50, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x867}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0xffff, 0x8fe, 0x2, {0x6, 0x0, 0x8, 0xd29, 0x52d, 0x7}, {0x7f, 0x2, 0x2c6b, 0x3ff, 0xb437, 0x5}, 0x9, 0xc, 0x4}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xdf}]}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0x78, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x0, 0x1f, 0x6, {0x7, 0x2, 0x4, 0x1, 0xfe11, 0x8}, {0x9, 0x1, 0xca4, 0x9, 0xb, 0x4}, 0x101, 0x80000000, 0xff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0x3}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x5e3d}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x971}]}}, @f_rsvp6={{0xa}, {0x20, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private0}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x4, 0xfff2}}]}}, @f_rsvp={{0x9}, {0xa50, 0x2, [@TCA_RSVP_ACT={0xe8, 0x6, [@m_mirred={0xe4, 0x19, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x20000000, 0x6, 0x2}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x9, 0x1, 0x10001, 0x1000}, 0x3, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffff00, 0x4d95fb94, 0x6, 0xa4c, 0xa5f}, 0x2, r4}}]}, {0x55, 0x6, "230b62825879bc21e9ed425087e8ba42a29204680f0b182d24db88196a5c45e35ed1ce2c3398be7cf2c540ee09dc33e944a720bdfee094572a515219b74ae99e91136a24bdad1199d794bcc1bf05d4874f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_RSVP_POLICE={0x474, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x81}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x6, 0x7, 0x0, 0x40, 0x1, 0x0, 0x7, 0x3, 0x5, 0xffffffff, 0x6, 0x6, 0xe0a, 0x1000, 0x100, 0x2, 0xffffffff, 0x0, 0x8, 0x7, 0x7, 0x8, 0x2, 0x612a, 0xffff, 0x87c, 0x3452fc1a, 0x9, 0x1000, 0xee6d, 0x2, 0xefd7, 0x8000, 0x3, 0x20, 0x2, 0xfffff801, 0x3, 0xba, 0x4, 0x10, 0x9, 0x40, 0x7f, 0xb78, 0x100, 0x59, 0x7e7, 0xfffffffc, 0x100, 0x7, 0xa8, 0x38, 0x2, 0x2, 0x0, 0xff, 0x69, 0x9, 0x8, 0xe, 0xff, 0x6, 0x8, 0x4, 0x0, 0x200, 0x10000, 0x10001, 0x4, 0x0, 0x1, 0x9, 0x4, 0xffffffff, 0xfff, 0x5, 0x6, 0xeed, 0x7, 0x9, 0x1, 0x9, 0x4, 0x1, 0x101, 0x7fffffff, 0x1, 0x9, 0xfffff588, 0x61, 0x9, 0x2, 0x7, 0xd30, 0x9, 0x8, 0xfffffff9, 0x7, 0x4, 0x4, 0x1, 0x10001, 0x2, 0x401, 0xffff, 0x446765a1, 0x7, 0x7361, 0x1ff, 0x1, 0x9, 0x400, 0x10000, 0xb526, 0x41, 0xe, 0xc6, 0xdc1, 0x400, 0x7f, 0xfffff001, 0x3, 0x5, 0x0, 0x9, 0x5, 0x0, 0x0, 0x5, 0x400, 0x1, 0x9, 0x0, 0x8, 0x0, 0xf, 0x0, 0xa35, 0x5, 0x1, 0x1dcf, 0x800, 0x7fffffff, 0xf, 0x4, 0x7, 0x1, 0x2020, 0x8, 0x3800000, 0x3, 0xd, 0x2, 0x0, 0x9, 0x800, 0x40, 0x1c, 0x9, 0x6, 0xd6, 0x8c, 0x2, 0x2, 0x5, 0x101, 0x0, 0x6, 0xfffffffe, 0x7ff, 0x0, 0x4, 0x3, 0x9, 0xac, 0x8, 0xb6, 0xfffffff8, 0x7d0, 0x7, 0x8965, 0x100, 0xc0fa, 0x5, 0xfffffffd, 0x0, 0x2b2, 0x8000, 0x8, 0x80000000, 0x1, 0x9, 0x4cb, 0x2, 0x8, 0x8, 0x5, 0x80, 0x3, 0xfffffff8, 0xc18c, 0x1, 0x1, 0xccc, 0xf97, 0x3, 0x5, 0x9, 0x5, 0x50, 0x3, 0x5, 0x4, 0x8, 0x80000000, 0xa, 0x3, 0x100, 0x0, 0x9, 0x8, 0x9, 0xff, 0x161, 0x5, 0x27, 0xfff, 0xcb00000, 0x6, 0x5, 0x58f, 0x9d, 0x5d8, 0x1, 0x9, 0x7f, 0x8, 0xb4c, 0x10, 0x800, 0x4, 0x7, 0xe, 0x1, 0x9, 0x1000, 0x0, 0x0, 0x9, 0x3800, 0x9ef7, 0x0, 0x7fff, 0xffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6b4f}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3b4f7025, 0x6, 0x2, 0x2, 0x9, {0x5, 0x1, 0xf3, 0x9, 0x0, 0x4}, {0x6, 0x1, 0x1e65, 0x0, 0x3, 0xffff31b0}, 0x800, 0x5, 0xd}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xac96}]}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_POLICE={0x428, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xcf4714c, 0xfffffffe, 0x6, 0x100, 0x1, 0x40, 0x3, 0x380, 0x4, 0x3, 0xa, 0x9, 0x1, 0x2, 0x5, 0x8, 0xffff, 0x2, 0x0, 0x2, 0x3, 0x2, 0xa49c, 0x0, 0x9, 0x9231, 0x7fffffff, 0x9, 0x4, 0xd, 0x5, 0x1, 0x4, 0xc1f, 0x13, 0x9, 0x8000, 0x8, 0xfffffffa, 0x1, 0xc1d, 0x3, 0x4, 0x4, 0x0, 0x8, 0x1, 0x1, 0x80, 0x4, 0x0, 0x7ff, 0x200, 0x0, 0x5, 0x0, 0xe, 0x0, 0xfffffff9, 0x2, 0x7, 0x12, 0x9, 0xffff0000, 0x6, 0x1b, 0x8, 0x32ec, 0xe, 0x1, 0x1000, 0x1, 0x2, 0x1, 0x7af8, 0x9a4, 0x8, 0x8, 0x180, 0x7, 0x2, 0x5, 0x2, 0x46, 0x80000000, 0xee, 0x2a, 0x5, 0x6, 0x3, 0xd6, 0x34, 0x1ad, 0x5e, 0x787, 0xffffff39, 0x5, 0x6, 0x3, 0xe2, 0x0, 0xf, 0x2, 0xf9b, 0x1169, 0xfffffff8, 0x5, 0x0, 0x1, 0xfffffffa, 0xd1, 0x100, 0x4, 0x1, 0x7, 0x9, 0x5, 0x10c, 0xffffffff, 0xeac, 0x3, 0xe93, 0x1, 0x0, 0x6, 0x8, 0x5, 0x10001, 0x21a, 0x9, 0x3, 0x78a, 0x9, 0x3, 0x93, 0x4, 0xc26, 0x3, 0x9, 0x1, 0x7fffffff, 0x0, 0x4, 0x3, 0xe67, 0x8, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffdd35, 0xff, 0x3, 0x2, 0xd5e2, 0xa6e4, 0x4, 0x3ff, 0x4f2, 0x2, 0x1000, 0x6, 0xffffffc1, 0x0, 0x9, 0xebb9, 0xc, 0x7ff, 0x5, 0x5, 0x99c, 0x5, 0x8, 0x101, 0x9, 0xfff, 0x6, 0x1, 0x7, 0x1, 0xfffffffc, 0x697809f, 0x4, 0xc16, 0x0, 0xd, 0x7, 0xd0d5, 0x0, 0xa, 0x6, 0xfff, 0x6, 0x2, 0x5, 0x57b, 0x2, 0x80, 0x8, 0x6, 0xffffffc8, 0x0, 0x0, 0x3, 0x0, 0x9, 0x4, 0x18fc, 0xef1, 0xfffffffa, 0x5, 0x1000, 0x340, 0xa9, 0xd92, 0x10001, 0x8f7, 0x0, 0xc206cda, 0x9, 0x4, 0x3ff, 0x6, 0x5, 0x2, 0x1, 0x3, 0x2, 0x7e7c9019, 0x7, 0x3, 0x4, 0x1, 0x0, 0x2, 0x7, 0x2, 0x4a41dd06, 0x80000000, 0xc15a, 0x6, 0x1, 0xab3, 0x8, 0x5, 0x0, 0x9, 0x5, 0x1, 0x2, 0x9, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xdffb}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_RSVP_ACT={0xa4, 0x6, [@m_nat={0xa0, 0x5, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x121, 0x4, 0x1, 0x7, 0x3}, @empty, @remote, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0x1, 0xfffffff0, 0x800000}, @local, @loopback, 0xffffff00}}]}, {0x28, 0x6, "fddda8fc11e8d062eaea34e615ae0da721718f55dd99028f67131b39bf22c607bb8e988e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8001, 0x1, 0x7}, {0x6, 0x2, 0x5}, 0x2, 0x2, 0x2}}]}}, @f_tcindex={{0xc}, {0x888, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xca1f}, @TCA_TCINDEX_POLICE={0x874, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x770}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xffffffff, 0x10001, 0x2, 0x1e9b, 0xf, 0x1, 0xffffffff, 0x5, 0x4, 0x6, 0x1, 0x18, 0xfffffc00, 0x2, 0x3, 0x16d, 0x9, 0x4000, 0x40, 0x7, 0x2, 0x42, 0x2fec, 0x200, 0xff, 0x4, 0x3, 0x4, 0x4, 0x2, 0x1, 0x5, 0xe, 0x5, 0x4, 0xffffffff, 0xffffffff, 0x1, 0x0, 0x2, 0x1, 0x1, 0x9, 0x9, 0x7, 0x8000, 0x80, 0xc, 0x3, 0xa0, 0x4, 0x2, 0x20, 0x7f, 0x0, 0x8, 0x9, 0x1, 0x8000, 0x0, 0xfffeffff, 0x2, 0x50cb, 0x3, 0xbc8, 0x9, 0x2, 0x7fff, 0xd83, 0xfffffffb, 0x6, 0x3ff, 0x3, 0x3, 0x6d21, 0x6, 0xffffffff, 0x9, 0x8, 0x5, 0x5, 0x5, 0x0, 0x3, 0x9, 0x3ff, 0x10000, 0xfff, 0x800, 0x19, 0x4, 0x81d, 0x0, 0x2a6, 0xfffffffa, 0x80000001, 0xf9, 0x3, 0x4, 0x9, 0x70fd, 0xc, 0x7, 0x8, 0xd, 0x0, 0x2, 0x400, 0x7, 0x4, 0x0, 0x5, 0x5, 0x9, 0xb, 0x6, 0x1, 0x167, 0x1, 0x4, 0x0, 0x4, 0x8, 0x1d47b21a, 0x22e, 0x800, 0x7, 0x1000, 0x3, 0xda, 0x9, 0x4, 0xa76, 0x10001, 0xdf, 0x401, 0x8250, 0x1, 0xfffffff9, 0x6, 0x7, 0x0, 0x401, 0x3, 0x2, 0xb01, 0x6, 0x4, 0x101, 0x7f, 0x2, 0x3, 0x0, 0x0, 0x3, 0x101, 0x80000000, 0x8, 0x400, 0x3, 0x2, 0x400, 0xffff1d3f, 0x10000, 0x2, 0x6, 0x3, 0x0, 0x4, 0x8, 0x4, 0x9, 0x8, 0xc, 0x5, 0xfffffffe, 0x2, 0x69c, 0x7, 0x4, 0x5, 0x2, 0x5, 0x6, 0xfcb0, 0x7fffffff, 0x7, 0x5f, 0x8, 0x400, 0x8, 0xa4af, 0x1, 0x9, 0xf, 0x6, 0x3, 0xc80, 0x7aa8, 0x9, 0x7, 0x1, 0x6, 0x1, 0x8, 0x0, 0x8, 0x4, 0x7, 0x246a, 0xc05, 0x6, 0x1, 0xf, 0x1, 0x0, 0x7, 0xb4, 0x4, 0x44, 0x14, 0x0, 0x2, 0x3, 0x7, 0xb0, 0x4e, 0x10001, 0x5, 0x3, 0x3, 0xfffffff8, 0x552f846c, 0x7fffffff, 0xe, 0x8000, 0x1, 0x44b, 0x1, 0x7fc519c1, 0x0, 0x8, 0x2c, 0x6, 0x9, 0x1, 0xb, 0x3, 0x7, 0x8000, 0x10d4, 0x2, 0x0, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8e1b}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x12, 0x4, 0x2, 0x7, 0x9, 0x6, 0x6, 0x80000000, 0x800, 0x9, 0x3ff, 0xd78e, 0x1, 0x43, 0x0, 0x6, 0x7, 0x85, 0xa3, 0x8, 0x6, 0x0, 0x3, 0xf, 0x5, 0x8, 0x400, 0x7, 0x0, 0x200, 0xa5f6, 0x0, 0x0, 0x7, 0xa1, 0x1, 0x9, 0xc, 0x7, 0x1, 0x9, 0x3, 0xa8, 0x100, 0x4, 0xffffae58, 0x7, 0x2, 0x9, 0x6d6, 0x4, 0x2f5d, 0x450e, 0x3, 0x34, 0x2, 0x1, 0x9, 0x400, 0x9, 0x9, 0x0, 0x6, 0x5, 0xc93, 0x40000000, 0x4, 0xdf, 0x8, 0xd, 0x7, 0x1fd5538f, 0x5, 0xf, 0xb2b0, 0x5, 0xf, 0x7, 0x8, 0x10000, 0x1, 0xc, 0x7, 0x2, 0x10000, 0x4340, 0x1, 0x6, 0x1000, 0x4, 0x7fffffff, 0x8000, 0x80000000, 0x8, 0x7, 0x88000000, 0x7, 0x0, 0x1, 0x8, 0x0, 0xa4, 0x10, 0x108e, 0x3, 0x9, 0x7, 0xb9, 0x80000001, 0x1, 0xf, 0xff, 0x2, 0x3a9d, 0x8, 0x3ff, 0x4, 0xf, 0x35, 0x5, 0x9, 0x1, 0x8, 0x4, 0xd, 0xec, 0x1, 0x3e, 0x4, 0x101, 0x5, 0x7fff, 0x400, 0x11a, 0x7, 0x8001, 0xfffff740, 0x4, 0x6, 0x865c, 0x8, 0xc0000000, 0x9c9, 0x1, 0xffff, 0xa8, 0x8, 0x3, 0x9, 0xffff0001, 0x80000000, 0xc0000, 0x2, 0x5b, 0xa572, 0x7, 0x1, 0x7, 0xfc7, 0x10000, 0x0, 0x4, 0x3ff, 0xfffffffe, 0x9, 0x4, 0x81, 0x9, 0x3, 0x3, 0x9, 0x5, 0x3, 0x2d4a, 0x6, 0x6, 0x7fff, 0x3, 0x3, 0xfff, 0x7, 0x1, 0x3440, 0x6, 0x5, 0xf, 0x3c, 0xc4, 0x1, 0x91e, 0x5, 0x5, 0x6, 0xc, 0x3, 0x6, 0x6, 0x8001, 0x8001, 0xfffffff8, 0xf, 0xa400, 0x4, 0x6, 0xae9b, 0xad, 0x15e, 0x5, 0xe, 0xfb, 0xffff, 0x7ff, 0x80, 0x6, 0x9, 0x0, 0xd, 0x3, 0x5b1b6819, 0x6, 0xe, 0x1, 0x1000, 0x3, 0x9, 0x1, 0x7ff, 0x7, 0x6, 0x7, 0x2, 0x3, 0x1, 0x800, 0x4daf, 0x7, 0xff, 0x57, 0x9, 0x7, 0xfffffc73, 0x9, 0x6c84, 0x6, 0x9, 0xf, 0x5, 0x3, 0x5, 0x2, 0x58ca, 0x16a, 0x4, 0x8, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0xf, 0x4, 0x5b3e, {0x1, 0x1, 0x8000, 0x101, 0x9, 0x3b1}, {0x3, 0x1, 0x1000, 0xc9, 0x5, 0xff}, 0x3, 0x7, 0x400}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xc}]}}]}, 0x1474}, 0x1, 0x0, 0x0, 0x24040806}, 0x20008000) 362.306364ms ago: executing program 3 (id=5305): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(0x0, 0x1050c1, 0x170) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) utime(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 346.401336ms ago: executing program 0 (id=5306): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5dc5fbad44733d06, 0x3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x50000000, r1, 0x4}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r0, &(0x7f0000000080)=""/58, 0x3a, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, 0x0, 0x25, 0x4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @NFULA_CFG_MODE={0xa, 0x2, {0x7f}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffa}, @NFULA_CFG_MODE={0xa, 0x2, {0x40}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0xc894) 323.868118ms ago: executing program 1 (id=5307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1c, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}}, &(0x7f00000008c0)='GPL\x00', 0x3, 0x3a, &(0x7f0000000900)=""/58, 0x41100, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000b40), &(0x7f0000000b80), 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket(0x25, 0x1, 0x40) sendmsg$nl_netfilter(r2, 0x0, 0x4000003) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ef0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 249.682765ms ago: executing program 3 (id=5310): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r4) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', r5, 0x0, 0xd, 0x9, 0x4, 0x5b, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @loopback, 0x700, 0x10, 0x5, 0xd942}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 184.821282ms ago: executing program 1 (id=5311): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 142.894566ms ago: executing program 0 (id=5312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) pread64(r0, &(0x7f0000002200)=""/89, 0x59, 0x10000) syz_clone3(&(0x7f00000002c0)={0x0, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x1b}, &(0x7f00000000c0)=""/236, 0xec, &(0x7f00000001c0)=""/159, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) r4 = getpgrp(r3) r5 = syz_pidfd_open(r4, 0x0) fsetxattr$trusted_overlay_nlink(r5, &(0x7f00000018c0), 0x0, 0x0, 0x3) 102.02775ms ago: executing program 3 (id=5313): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 99.97169ms ago: executing program 1 (id=5324): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xa) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0xfe, 0x2) getdents64(r4, 0x0, 0x4f) 55.890364ms ago: executing program 1 (id=5315): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10) close(r0) 27.659928ms ago: executing program 4 (id=5316): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x200) syz_usb_disconnect(r1) mkdir(0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x83c0550b, 0x0) link(0x0, 0x0) 0s ago: executing program 0 (id=5317): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4c5, &(0x7f0000010100)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKs1mkEpI3FDi1FHslCbqIoUN6oIFAoGEWLDnL2BDV1RIiDXsEQtUBCVIgIRkdK/tNnVi10Aa097fT7rNuQ/7O6fWd3TP8b2+AWTWyeSfXMRoRHwQEQcbq/cfcLLxZ/POtblkyUW9fv7zXHpcst46tPW6AxGxERFDEfHff0Y8ldset7q2vjhbLpdWmuvF2tJysbq2fubS0uxCaaF0eWL67MzM9PjU5MwPaM0Ogba48eIzN869/e/Bt75+/vatl959Jzl6tLlvazt2U6NGA3F4y7Z9EfH3hxGsDwrN9gz3uyL8KMnn96uIOJXm/8EopJ8mkAX1er3+XX1/p90bdeCxlU/PgXP5sYholPP5sbHGOfyvYyRfrlRrf75YWb083zhXPhQD+YuXyqXx5ljhUAzkkvWJtHxvfbJtfSoiPQd+uTCcro/NVcrze9vVAW0OtOX/V4VG/nfXfZwNPEIM+SG75D9kl/yH7JL/kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/IdM+s+5c8lSb93/Pn9lbXWxcuXMfKm6OLa0Ojc2V1lZHluoVBbSe3aWHvR+5UpleeIvsXq1WCtVa8Xq2vqFZHPtQnpf/4XSwF40CujJ4RM3P8pFxMZfh9MlMdjcJ1fh8Vav56Lf9yAD/VHodwcE9I2pP8guY3yg/Rd92s8Lhjq9cPnefCHwaMn3uwJA35w+5vs/yCrz/5Bd5v8hu5zjAw/6Rf9u8//Ao8n8P2TXaIfnf/1iy7O7xiPilxHxYWFg/8UX+l1jYPfkP801z/9PH/z9aPvewdw36VcEgxHx7OvnX706W6utTCTbv7i7vfZac/vklhd2HDAA/dLK01YeAwDZtXnn2lxr2cu4n/2jcRHC9vj7mnOTQ+l3lCObufuuVcjt0rULG9cj4uhO8XPN5503BjIjm4Vt8Y80/+Yab5HWd1/63PS9iX9sS/zfbYl//Cf/r0A23Ez6n/Gd8i+f5nTczb/7+5/RXbp2onP/l7/b/xU69H8neozx9BvPfdIx/vWI4zvGb8UbSmO1x0/qdrrH+Lef+N9vOu2rv9l4n53itySlYm1puVhdWz+T/o7cQunyxPTZmZnp8anJmWI6R11szVRv97ej79/q1v6RDvG7tT/Z9sce2//tb9/7/8ku8f9waufP/0iX+MMR8ace4385+fGTnfYl8ec7tD/fJX6ybarH+NVX/rW/x0MBgD1QXVtfnC2XSysKCgp9KVz/eVSjrdDvngl42KprydA8Sfp+1wQAAAAAAAAAAADo1V5cTtzvNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA6+DwAA//8rFNIw") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) kernel console output (not intermixed with test programs): ][T14086] loop3: detected capacity change from 0 to 1024 [ 242.981073][T14086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 242.993725][T14086] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.007659][T14086] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.3511: inode has both inline data and extents flags [ 243.057871][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 243.646556][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3529'. [ 243.697364][T14146] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3531'. [ 244.117376][T14155] lo speed is unknown, defaulting to 1000 [ 244.443700][T14166] lo speed is unknown, defaulting to 1000 [ 245.307374][ T29] kauditd_printk_skb: 379 callbacks suppressed [ 245.307395][ T29] audit: type=1326 audit(2000000333.321:26121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.341436][ T29] audit: type=1326 audit(2000000333.321:26122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.365276][ T29] audit: type=1326 audit(2000000333.321:26123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.389164][ T29] audit: type=1326 audit(2000000333.321:26124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.412970][ T29] audit: type=1326 audit(2000000333.321:26125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.436595][ T29] audit: type=1326 audit(2000000333.321:26126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.460325][ T29] audit: type=1326 audit(2000000333.321:26127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.484104][ T29] audit: type=1326 audit(2000000333.321:26128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.507918][ T29] audit: type=1326 audit(2000000333.321:26129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.531644][ T29] audit: type=1326 audit(2000000333.321:26130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14182 comm="syz.3.3546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bcbdaeec9 code=0x7ffc0000 [ 245.600691][T14196] tipc: Enabling of bearer rejected, failed to enable media [ 245.763641][T14205] bridge: RTM_NEWNEIGH with invalid ether address [ 245.796943][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3554'. [ 245.813800][T14208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.834963][T14208] vlan0: entered allmulticast mode [ 245.840269][T14208] bond6: entered allmulticast mode [ 246.004684][T14214] loop3: detected capacity change from 0 to 512 [ 246.019354][T14214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.032490][T14214] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.101447][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.111553][T14221] lo speed is unknown, defaulting to 1000 [ 246.279432][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3564'. [ 246.703340][T14245] sch_fq: defrate 4294967295 ignored. [ 246.879586][T14255] lo speed is unknown, defaulting to 1000 [ 247.123307][T14272] loop3: detected capacity change from 0 to 512 [ 247.130231][T14272] EXT4-fs: Ignoring removed orlov option [ 247.144765][T14272] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 247.167979][T14272] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.3579: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 247.190425][T14272] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3579: couldn't read orphan inode 15 (err -117) [ 247.204244][T14272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.217780][T14280] bridge: RTM_NEWNEIGH with invalid ether address [ 247.225235][T14278] tipc: Enabling of bearer rejected, failed to enable media [ 247.237946][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.270713][T14286] tipc: New replicast peer: 255.255.255.83 [ 247.276792][T14286] tipc: Enabled bearer , priority 10 [ 247.327554][T14296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3590'. [ 247.390419][T14302] lo speed is unknown, defaulting to 1000 [ 247.402238][T14304] lo speed is unknown, defaulting to 1000 [ 247.584771][T14312] netlink: 'syz.3.3595': attribute type 10 has an invalid length. [ 247.594480][T14312] team0: Port device dummy0 added [ 247.601367][T14312] netlink: 'syz.3.3595': attribute type 10 has an invalid length. [ 247.609948][T14312] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 247.619791][T14312] team0: Failed to send options change via netlink (err -105) [ 247.632380][T14312] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 247.641553][T14312] team0: Port device dummy0 removed [ 247.648769][T14312] .`: (slave dummy0): Enslaving as an active interface with an up link [ 247.675419][T14314] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3596'. [ 247.730868][T14321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14321 comm=syz.3.3600 [ 247.761831][T14324] netlink: 'syz.0.3601': attribute type 1 has an invalid length. [ 247.775480][T14324] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.812973][T14324] veth9: entered promiscuous mode [ 247.820675][T14324] bond8: (slave veth9): Enslaving as an active interface with a down link [ 247.835688][T14324] bond8: entered allmulticast mode [ 248.030707][T14340] loop3: detected capacity change from 0 to 512 [ 248.037698][T14340] EXT4-fs: Ignoring removed orlov option [ 248.043390][T14340] EXT4-fs: Ignoring removed i_version option [ 248.050525][T14340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 248.068191][T14340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.086321][T14340] ext4 filesystem being mounted at /469/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.191483][T14340] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.3607: corrupted inode contents [ 248.219132][T14340] EXT4-fs (loop3): Remounting filesystem read-only [ 248.316246][T14348] netlink: 'syz.4.3610': attribute type 3 has an invalid length. [ 248.396032][ T9234] tipc: Node number set to 4287994938 [ 248.755867][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.801386][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3616'. [ 248.810418][T14369] netlink: 'syz.3.3616': attribute type 30 has an invalid length. [ 248.843258][ T3628] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.864949][ T3628] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.875160][ T3628] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.883906][ T3628] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.225799][T14384] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3621'. [ 249.240237][T14386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3622'. [ 249.271706][T14386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.289051][T14386] vlan2: entered allmulticast mode [ 249.294230][T14386] bond2: entered allmulticast mode [ 249.717119][T14412] netlink: 'syz.4.3634': attribute type 10 has an invalid length. [ 249.775238][T14419] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 249.881151][T14426] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3649'. [ 250.424113][T14466] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3656'. [ 250.443869][T14466] bond0 (unregistering): Released all slaves [ 250.569657][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3663'. [ 250.579178][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3663'. [ 250.684139][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 250.684158][ T29] audit: type=1326 audit(2000000338.689:26193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.717432][ T29] audit: type=1326 audit(2000000338.689:26194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.741134][ T29] audit: type=1326 audit(2000000338.709:26195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.764887][ T29] audit: type=1326 audit(2000000338.709:26196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.788570][ T29] audit: type=1326 audit(2000000338.709:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.812119][ T29] audit: type=1326 audit(2000000338.709:26198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.835826][ T29] audit: type=1326 audit(2000000338.709:26199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.859611][ T29] audit: type=1326 audit(2000000338.719:26200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.883330][ T29] audit: type=1326 audit(2000000338.729:26201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 250.906947][ T29] audit: type=1326 audit(2000000338.729:26202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.1.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 251.021857][T14506] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3672'. [ 251.095674][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3675'. [ 251.112695][T14514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14514 comm=syz.1.3675 [ 251.236993][T14522] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3678'. [ 251.251988][T14522] netdevsi: renamed from sit0 [ 251.258561][T14522] netdevsi: entered promiscuous mode [ 251.420410][T14537] vlan0: entered allmulticast mode [ 251.425733][T14537] dummy0: entered allmulticast mode [ 251.985767][T14569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14569 comm=syz.0.3694 [ 252.829446][T14593] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.873937][T14593] vlan3: entered allmulticast mode [ 252.879143][T14593] bond5: entered allmulticast mode [ 253.519922][T14627] : renamed from bond0 [ 254.698344][T14640] __nla_validate_parse: 2 callbacks suppressed [ 254.698365][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3719'. [ 254.766280][T14640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.778800][T14646] vlan0: entered allmulticast mode [ 254.784091][T14646] bond2: entered allmulticast mode [ 254.905591][T14644] lo speed is unknown, defaulting to 1000 [ 255.687692][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 255.687707][ T29] audit: type=1326 audit(2000000343.701:26416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 255.717805][ T29] audit: type=1326 audit(2000000343.701:26417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132bb6af79 code=0x7ffc0000 [ 255.741405][ T29] audit: type=1326 audit(2000000343.701:26418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 255.767766][ T29] audit: type=1326 audit(2000000343.751:26419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 255.791517][ T29] audit: type=1326 audit(2000000343.751:26420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132bb6af79 code=0x7ffc0000 [ 255.815190][ T29] audit: type=1326 audit(2000000343.751:26421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 255.839080][ T29] audit: type=1326 audit(2000000343.751:26422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 255.862730][ T29] audit: type=1326 audit(2000000343.751:26423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132bb6af79 code=0x7ffc0000 [ 255.886418][ T29] audit: type=1326 audit(2000000343.751:26424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 255.910018][ T29] audit: type=1326 audit(2000000343.761:26425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14651 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 255.912614][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3735'. [ 255.960333][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3735'. [ 256.159088][T14691] loop3: detected capacity change from 0 to 128 [ 256.233387][T14696] bio_check_eod: 17918 callbacks suppressed [ 256.233406][T14696] syz.3.3743: attempt to access beyond end of device [ 256.233406][T14696] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 256.270529][T14696] syz.3.3743: attempt to access beyond end of device [ 256.270529][T14696] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 256.295151][T14696] syz.3.3743: attempt to access beyond end of device [ 256.295151][T14696] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 256.364811][T14696] syz.3.3743: attempt to access beyond end of device [ 256.364811][T14696] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 256.381971][T14696] syz.3.3743: attempt to access beyond end of device [ 256.381971][T14696] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 256.421561][T14701] lo speed is unknown, defaulting to 1000 [ 256.462167][T14696] syz.3.3743: attempt to access beyond end of device [ 256.462167][T14696] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 256.486012][T14696] syz.3.3743: attempt to access beyond end of device [ 256.486012][T14696] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 256.500356][T14696] syz.3.3743: attempt to access beyond end of device [ 256.500356][T14696] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 256.514185][T14696] syz.3.3743: attempt to access beyond end of device [ 256.514185][T14696] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 256.527983][T14696] syz.3.3743: attempt to access beyond end of device [ 256.527983][T14696] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 256.571167][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 256.597174][T14709] bridge0: failed insert local address into bridge forwarding table [ 256.621812][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 256.640822][T14709] bridge0: failed insert local address into bridge forwarding table [ 256.678894][T14715] lo speed is unknown, defaulting to 1000 [ 257.878840][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 257.887823][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 257.955578][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 258.008445][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 258.017582][T14768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 258.228709][T14789] loop3: detected capacity change from 0 to 128 [ 258.257932][T14789] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 259.027272][T14843] lo speed is unknown, defaulting to 1000 [ 259.728940][T14910] lo speed is unknown, defaulting to 1000 [ 259.957465][T14927] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 259.966246][T14927] ref_ctr increment failed for inode: 0x1035 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810b2c0000 [ 260.018006][T14936] __nla_validate_parse: 4 callbacks suppressed [ 260.018026][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3814'. [ 260.081715][T14941] netlink: 'syz.1.3816': attribute type 83 has an invalid length. [ 260.082394][T14936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 260.125571][T14943] vlan0: entered allmulticast mode [ 260.130888][T14943] bond7: entered allmulticast mode [ 260.391427][T14954] lo speed is unknown, defaulting to 1000 [ 260.694437][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 260.694456][ T29] audit: type=1326 audit(2000000348.714:26890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe32d6b5d67 code=0x7ffc0000 [ 260.735025][ T29] audit: type=1326 audit(2000000348.734:26891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe32d65af79 code=0x7ffc0000 [ 260.758738][ T29] audit: type=1326 audit(2000000348.734:26892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 260.782524][ T29] audit: type=1326 audit(2000000348.744:26893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe32d6b5d67 code=0x7ffc0000 [ 260.806044][ T29] audit: type=1326 audit(2000000348.744:26894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe32d65af79 code=0x7ffc0000 [ 260.829658][ T29] audit: type=1326 audit(2000000348.744:26895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 260.853667][ T29] audit: type=1326 audit(2000000348.754:26896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe32d6b5d67 code=0x7ffc0000 [ 260.877200][ T29] audit: type=1326 audit(2000000348.754:26897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe32d65af79 code=0x7ffc0000 [ 260.901043][ T29] audit: type=1326 audit(2000000348.754:26898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 260.924914][ T29] audit: type=1326 audit(2000000348.764:26899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.1.3827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe32d6b5d67 code=0x7ffc0000 [ 261.218100][T14970] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.668566][T14990] bond0: (slave batadv0): Releasing active interface [ 262.983344][T15005] FAT-fs (loop5): unable to read boot sector [ 263.046980][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3840'. [ 263.110277][T15007] macvlan0 (unregistering): left promiscuous mode [ 263.141884][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3842'. [ 263.275477][T15027] netlink: 'syz.1.3850': attribute type 17 has an invalid length. [ 263.283536][T15027] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3850'. [ 263.588548][T15039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3854'. [ 264.506001][T15094] lo speed is unknown, defaulting to 1000 [ 264.707539][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3869'. [ 264.716570][T15127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3869'. [ 265.374920][T15191] tipc: Enabling of bearer rejected, failed to enable media [ 265.702518][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 265.702534][ T29] audit: type=1326 audit(2000000609.717:27084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.828542][ T29] audit: type=1326 audit(2000000609.797:27085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.852316][ T29] audit: type=1326 audit(2000000609.797:27086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.876000][ T29] audit: type=1326 audit(2000000609.797:27087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.899799][ T29] audit: type=1326 audit(2000000609.797:27088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.923692][ T29] audit: type=1326 audit(2000000609.797:27089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.947497][ T29] audit: type=1326 audit(2000000609.797:27090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.971149][ T29] audit: type=1326 audit(2000000609.797:27091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 265.994848][ T29] audit: type=1326 audit(2000000609.797:27092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 266.030806][ T29] audit: type=1326 audit(2000000609.847:27093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15215 comm="syz.0.3896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 266.939320][T15270] wg2: entered promiscuous mode [ 266.944243][T15270] wg2: entered allmulticast mode [ 267.384320][T15314] infiniband syz2: set down [ 267.388995][T15314] infiniband syz2: added bond0 [ 267.415090][T15314] RDS/IB: syz2: added [ 267.530402][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 267.539479][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 267.582015][T15326] 9p: Unknown access argument ÿÿÿÿ: -22 [ 267.591717][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 267.600832][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 267.680821][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 267.689994][T15324] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3939'. [ 267.837961][T15345] veth0_to_team: left allmulticast mode [ 267.843770][T15345] veth0_to_team: left promiscuous mode [ 267.849472][T15345] Ÿë: port 1(veth0_to_team) entered disabled state [ 267.856533][T15341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3946'. [ 267.871343][T15345] team_slave_0: left promiscuous mode [ 267.877862][T15345] team0: Port device team_slave_0 removed [ 267.884325][T15345] team_slave_1: left promiscuous mode [ 267.890781][T15345] team0: Port device team_slave_1 removed [ 267.897215][T15345] bond0: (slave geneve2): Releasing active interface [ 267.905932][T15345] bond1: (slave gre1): Releasing backup interface [ 267.912619][T15345] gre1: left promiscuous mode [ 267.932430][T15341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.949707][T15349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.957045][T15349] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 267.970918][T15349] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 267.986647][T15341] macvlan2: entered promiscuous mode [ 267.992055][T15341] macvlan2: entered allmulticast mode [ 267.997863][T15341] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 268.136083][T15359] veth0: entered promiscuous mode [ 268.142767][T15358] veth0: left promiscuous mode [ 268.222600][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3963'. [ 268.288363][T15369] lo speed is unknown, defaulting to 1000 [ 268.369179][T15371] rdma_rxe: rxe_newlink: failed to add bond0 [ 268.491687][T15374] loop3: detected capacity change from 0 to 8192 [ 269.198343][T15399] lo speed is unknown, defaulting to 1000 [ 269.807286][T15409] netlink: 'syz.2.3967': attribute type 10 has an invalid length. [ 269.819461][T15409] dummy0: entered promiscuous mode [ 269.832399][T15409] team0: Port device dummy0 added [ 269.854220][T15409] netlink: 'syz.2.3967': attribute type 10 has an invalid length. [ 269.867476][T15409] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 269.944055][T15409] dummy0: left promiscuous mode [ 269.956402][T15409] team0: Failed to send options change via netlink (err -105) [ 269.974464][T15422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15422 comm=syz.1.3972 [ 269.987176][T15409] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 270.006779][T15409] team0: Port device dummy0 removed [ 270.050039][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3973'. [ 270.065154][T15424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.112310][T15424] vlan0: entered allmulticast mode [ 270.117503][T15424] bond3: entered allmulticast mode [ 270.125934][T15426] loop3: detected capacity change from 0 to 512 [ 270.152577][T15426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.172102][T15426] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.305715][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.367863][T15446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3984'. [ 270.546740][T15456] lo speed is unknown, defaulting to 1000 [ 271.126233][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 271.126317][ T29] audit: type=1326 audit(2000000615.137:27471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6ded15d67 code=0x7ffc0000 [ 271.175639][ T29] audit: type=1326 audit(2000000615.157:27472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6decbaf79 code=0x7ffc0000 [ 271.199329][ T29] audit: type=1326 audit(2000000615.157:27473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe6ded15d67 code=0x7ffc0000 [ 271.222870][ T29] audit: type=1326 audit(2000000615.157:27474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe6decbaf79 code=0x7ffc0000 [ 271.246453][ T29] audit: type=1326 audit(2000000615.157:27475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 271.270233][ T29] audit: type=1326 audit(2000000615.157:27476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 271.293943][ T29] audit: type=1326 audit(2000000615.157:27477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 271.317519][ T29] audit: type=1326 audit(2000000615.157:27478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 271.341152][ T29] audit: type=1326 audit(2000000615.157:27479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 271.364758][ T29] audit: type=1326 audit(2000000615.157:27480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15464 comm="syz.0.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 271.395693][T15470] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.448105][T15472] netlink: 'syz.4.3993': attribute type 1 has an invalid length. [ 271.477137][T15472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.504514][T15470] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.521919][T15481] bond3: entered allmulticast mode [ 271.553825][T15483] macvlan0: entered promiscuous mode [ 271.559263][T15483] macvlan0: entered allmulticast mode [ 271.586473][T15483] bond7: entered promiscuous mode [ 271.605401][T15483] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 271.626563][T15483] bond7: left promiscuous mode [ 271.649566][T15470] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.829303][T15470] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.876079][T15497] lo speed is unknown, defaulting to 1000 [ 271.939095][ T3662] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.962602][ T3662] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.989325][ T3662] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.028115][ T3662] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.264890][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.290705][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.298259][T15531] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 272.309687][T15531] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 272.339257][T15541] macvlan0: entered promiscuous mode [ 272.344644][T15541] macvlan0: entered allmulticast mode [ 272.364782][T15541] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 272.594322][T15524] netlink: 'syz.3.4003': attribute type 12 has an invalid length. [ 273.115786][T15591] loop9: detected capacity change from 0 to 7 [ 273.130541][T15591] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.151743][T15591] Buffer I/O error on dev loop9, logical block 0, async page read [ 273.159707][T15591] loop9: unable to read partition table [ 273.166675][T15591] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 273.166675][T15591] ) failed (rc=-5) [ 274.165547][T15638] netlink: 'syz.4.4027': attribute type 10 has an invalid length. [ 274.182083][T15638] netlink: 'syz.4.4027': attribute type 10 has an invalid length. [ 274.742938][T15645] syzkaller0: entered promiscuous mode [ 274.748563][T15645] syzkaller0: entered allmulticast mode [ 274.976816][T15663] tipc: Enabling of bearer rejected, failed to enable media [ 275.262517][T15686] lo speed is unknown, defaulting to 1000 [ 275.292014][T15693] __nla_validate_parse: 2 callbacks suppressed [ 275.292031][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4043'. [ 275.582385][T15680] Set syz1 is full, maxelem 65536 reached [ 275.664296][T15726] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4045'. [ 275.762502][T15732] xt_CT: No such helper "pptp" [ 275.931056][T15741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4047'. [ 277.192104][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 277.211694][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 277.211712][ T29] audit: type=1400 audit(2000000621.227:27509): avc: denied { map } for pid=15780 comm="syz.1.4053" path="socket:[50905]" dev="sockfs" ino=50905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.241273][ T29] audit: type=1400 audit(2000000621.227:27510): avc: denied { read accept } for pid=15780 comm="syz.1.4053" path="socket:[50905]" dev="sockfs" ino=50905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 277.344291][ T29] audit: type=1400 audit(2000000621.357:27511): avc: denied { mounton } for pid=15805 comm="syz.4.4058" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 277.409427][T15806] lo speed is unknown, defaulting to 1000 [ 278.032068][ T29] audit: type=1400 audit(2000000622.027:27512): avc: denied { connect } for pid=15828 comm="syz.2.4060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 278.262485][T15837] lo speed is unknown, defaulting to 1000 [ 278.290315][ T29] audit: type=1400 audit(2000000622.307:27513): avc: denied { name_bind } for pid=15842 comm="syz.4.4067" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 278.496607][T15804] Set syz1 is full, maxelem 65536 reached [ 278.519462][T15853] loop3: detected capacity change from 0 to 1024 [ 278.526189][T15853] EXT4-fs: Ignoring removed bh option [ 278.531665][T15853] EXT4-fs: inline encryption not supported [ 278.537990][T15853] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.580118][T15853] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.4068: lblock 2 mapped to illegal pblock 2 (length 1) [ 278.594220][T15853] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 278.602391][T15853] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.4068: lblock 0 mapped to illegal pblock 48 (length 1) [ 278.617055][T15853] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 278.625877][T15853] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4068: Failed to acquire dquot type 0 [ 278.637258][T15853] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 278.646904][T15853] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4068: mark_inode_dirty error [ 278.658286][T15853] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 278.668548][T15853] EXT4-fs (loop3): 1 orphan inode deleted [ 278.674715][T15853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.775571][ T29] audit: type=1326 audit(2000000622.787:27514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.1.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 278.913662][ T29] audit: type=1326 audit(2000000622.787:27515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.1.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 278.937365][ T29] audit: type=1326 audit(2000000622.817:27516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15858 comm="syz.1.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 279.062232][T15876] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 279.428883][ T3652] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 279.493963][ T3652] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:36: Failed to release dquot type 0 [ 280.453626][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.474261][ T6175] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 280.488746][ T6175] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 280.507075][ T6175] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 280.539554][T15956] loop3: detected capacity change from 0 to 512 [ 280.544814][T15953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4088'. [ 280.884095][T15956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.917791][T15956] ext4 filesystem being mounted at /552/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.152748][T15956] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4087: bg 0: block 64: padding at end of block bitmap is not set [ 281.218806][T15973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4094'. [ 281.251202][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.511104][T15981] netlink: 'syz.2.4097': attribute type 39 has an invalid length. [ 281.604556][T15989] bridge: RTM_NEWNEIGH with invalid ether address [ 281.993480][T15993] netlink: 'syz.2.4103': attribute type 58 has an invalid length. [ 282.001425][T15993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4103'. [ 282.069310][T16002] xt_CT: No such helper "pptp" [ 283.324309][T15997] Set syz1 is full, maxelem 65536 reached [ 283.444375][T16021] netlink: 'syz.0.4112': attribute type 16 has an invalid length. [ 283.452283][T16021] netlink: 'syz.0.4112': attribute type 17 has an invalid length. [ 283.509869][T16033] Set syz1 is full, maxelem 65536 reached [ 283.558977][T16038] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4119'. [ 283.635873][T16043] lo speed is unknown, defaulting to 1000 [ 283.974195][T16061] loop3: detected capacity change from 0 to 4096 [ 284.002333][T16061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.080155][T16061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.677669][T16083] netlink: 'syz.4.4132': attribute type 1 has an invalid length. [ 284.705936][T16083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.723472][T16080] lo speed is unknown, defaulting to 1000 [ 284.736738][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4132'. [ 284.770513][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 284.770574][ T29] audit: type=1326 audit(2000000628.777:27528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 284.800537][ T29] audit: type=1326 audit(2000000628.777:27529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 284.824436][ T29] audit: type=1326 audit(2000000628.777:27530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 284.848201][ T29] audit: type=1326 audit(2000000628.777:27531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 284.871974][ T29] audit: type=1326 audit(2000000628.777:27532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 284.896803][T16083] bond4 (unregistering): Released all slaves [ 284.913989][ T29] audit: type=1326 audit(2000000628.847:27533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 284.937680][ T29] audit: type=1326 audit(2000000628.847:27534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 284.961528][ T29] audit: type=1326 audit(2000000628.847:27535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16079 comm="syz.2.4130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 285.033541][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.136556][T16092] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4134'. [ 285.386597][T16109] syzkaller0: entered promiscuous mode [ 285.392360][T16109] syzkaller0: entered allmulticast mode [ 285.594087][ T29] audit: type=1326 audit(2000000629.607:27536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 285.682023][ T29] audit: type=1326 audit(2000000629.607:27537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16115 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 285.926889][T16130] lo speed is unknown, defaulting to 1000 [ 286.082280][T16137] Set syz1 is full, maxelem 65536 reached [ 286.144833][T16140] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4149'. [ 286.553011][T16164] lo speed is unknown, defaulting to 1000 [ 286.809976][T16175] netlink: 'syz.2.4159': attribute type 30 has an invalid length. [ 287.033878][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4163'. [ 287.076704][T16186] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.166889][T16186] vlan0: entered allmulticast mode [ 287.172159][T16186] bond8: entered allmulticast mode [ 287.305112][T16176] Set syz1 is full, maxelem 65536 reached [ 287.435168][T16200] tipc: Enabling of bearer rejected, already enabled [ 287.681052][T16210] netlink: 'syz.4.4173': attribute type 16 has an invalid length. [ 287.689020][T16210] netlink: 'syz.4.4173': attribute type 17 has an invalid length. [ 287.828983][T16220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4177'. [ 287.830348][T16216] netlink: 'syz.3.4176': attribute type 13 has an invalid length. [ 287.981806][T16224] veth12: entered promiscuous mode [ 287.987082][T16224] veth12: entered allmulticast mode [ 288.022453][T16230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4181'. [ 288.141994][T16245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4188'. [ 288.671732][T16275] netlink: 'syz.4.4201': attribute type 10 has an invalid length. [ 288.680774][T16275] netlink: 'syz.4.4201': attribute type 10 has an invalid length. [ 288.819301][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4203'. [ 288.900613][T16287] loop3: detected capacity change from 0 to 128 [ 288.909787][T16287] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 288.922677][T16287] ext4 filesystem being mounted at /569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 288.970930][ T6175] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.997636][T16291] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.031221][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4206'. [ 289.220107][T16291] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.281050][T16291] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.342534][T16291] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.405557][ T3652] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.421823][ T3652] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.430819][T16306] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4210'. [ 289.445986][ T3652] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.471300][ T3652] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.720162][T16334] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 289.827326][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 289.827344][ T29] audit: type=1326 audit(2000000633.837:27606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 289.837453][T16344] lo speed is unknown, defaulting to 1000 [ 289.905958][ T29] audit: type=1326 audit(2000000633.877:27607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 289.929681][ T29] audit: type=1326 audit(2000000633.877:27608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 289.953410][ T29] audit: type=1326 audit(2000000633.877:27609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 289.977037][ T29] audit: type=1326 audit(2000000633.877:27610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 290.000793][ T29] audit: type=1326 audit(2000000633.907:27611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 290.024325][ T29] audit: type=1326 audit(2000000633.907:27612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 290.048320][ T29] audit: type=1326 audit(2000000633.907:27613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 290.072105][ T29] audit: type=1326 audit(2000000633.907:27614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 290.095751][ T29] audit: type=1326 audit(2000000633.907:27615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16343 comm="syz.1.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 290.305822][T16363] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4235'. [ 290.654251][T16389] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4243'. [ 290.698146][T16387] infiniband !yz!: set down [ 290.702821][T16387] infiniband !yz!: added team_slave_0 [ 290.719920][T16387] RDS/IB: !yz!: added [ 291.303770][T16422] __nla_validate_parse: 2 callbacks suppressed [ 291.303786][T16422] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4258'. [ 291.535792][T16454] veth0_vlan: left promiscuous mode [ 291.541108][T16454] veth0_vlan: entered allmulticast mode [ 291.555774][T16454] veth0_vlan: entered promiscuous mode [ 292.241046][T16495] netlink: 'syz.0.4283': attribute type 1 has an invalid length. [ 292.248943][T16495] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.4283'. [ 292.280005][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4290'. [ 292.289072][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4290'. [ 292.298317][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4290'. [ 292.319471][T16501] tipc: Enabling of bearer rejected, failed to enable media [ 292.462263][T16522] netlink: 'syz.2.4299': attribute type 30 has an invalid length. [ 292.483082][T16524] veth14: entered promiscuous mode [ 292.488265][T16524] veth14: entered allmulticast mode [ 292.663710][T16539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4305'. [ 292.686591][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4306'. [ 293.061972][T16563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4315'. [ 293.082036][T16560] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4314'. [ 293.168620][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4319'. [ 293.473245][T16587] tipc: Enabled bearer , priority 0 [ 293.481333][T16587] tipc: Disabling bearer [ 293.719501][T16603] vlan0: entered allmulticast mode [ 293.724988][T16603] dummy0: entered allmulticast mode [ 293.747178][T16605] loop3: detected capacity change from 0 to 512 [ 293.755735][T16605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 293.943693][T16617] lo speed is unknown, defaulting to 1000 [ 294.508783][T16654] tipc: Started in network mode [ 294.513792][T16654] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 294.522801][T16654] tipc: Enabling of bearer rejected, failed to enable media [ 294.550125][T16656] tipc: Enabling of bearer rejected, failed to enable media [ 294.588689][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.786817][T16669] 8021q: adding VLAN 0 to HW filter on device bond8 [ 294.804879][T16669] vlan0: entered allmulticast mode [ 294.810379][T16669] bond8: entered allmulticast mode [ 294.915444][T16684] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.960114][T16684] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.010400][T16684] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.071545][T16684] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.140152][ T3682] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.153026][ T3682] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.171889][ T3682] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.188503][ T3682] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.252260][T16698] lo speed is unknown, defaulting to 1000 [ 295.369018][T16707] netlink: 'syz.3.4373': attribute type 8 has an invalid length. [ 295.393381][T16707] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 296.389230][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 296.389247][ T29] audit: type=1326 audit(2000000640.407:27739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.451974][ T29] audit: type=1326 audit(2000000640.417:27740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.475794][ T29] audit: type=1326 audit(2000000640.417:27741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.499566][ T29] audit: type=1326 audit(2000000640.437:27742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.523185][ T29] audit: type=1326 audit(2000000640.437:27743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.546896][ T29] audit: type=1326 audit(2000000640.437:27744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.570521][ T29] audit: type=1326 audit(2000000640.437:27746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.594284][ T29] audit: type=1326 audit(2000000640.437:27745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.618184][ T29] audit: type=1326 audit(2000000640.437:27747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.641918][ T29] audit: type=1326 audit(2000000640.437:27748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16744 comm="syz.2.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 296.755604][T16754] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 296.998028][T16761] __nla_validate_parse: 5 callbacks suppressed [ 296.998099][T16761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 297.015055][T16761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4394'. [ 297.553106][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4400'. [ 297.779032][T16792] loop3: detected capacity change from 0 to 128 [ 297.895592][T16792] bio_check_eod: 37 callbacks suppressed [ 297.895611][T16792] syz.3.4407: attempt to access beyond end of device [ 297.895611][T16792] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 297.945333][T16792] syz.3.4407: attempt to access beyond end of device [ 297.945333][T16792] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 297.979347][T16792] syz.3.4407: attempt to access beyond end of device [ 297.979347][T16792] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 297.993057][T16792] syz.3.4407: attempt to access beyond end of device [ 297.993057][T16792] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 298.019384][T16792] syz.3.4407: attempt to access beyond end of device [ 298.019384][T16792] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 298.042603][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'. [ 298.048648][T16792] syz.3.4407: attempt to access beyond end of device [ 298.048648][T16792] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 298.065952][T16792] syz.3.4407: attempt to access beyond end of device [ 298.065952][T16792] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 298.089050][T16792] syz.3.4407: attempt to access beyond end of device [ 298.089050][T16792] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 298.127493][T16792] syz.3.4407: attempt to access beyond end of device [ 298.127493][T16792] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 298.158586][T16792] syz.3.4407: attempt to access beyond end of device [ 298.158586][T16792] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 298.272156][T16808] tipc: Enabling of bearer rejected, failed to enable media [ 298.768448][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4424'. [ 298.811291][T16836] 8021q: adding VLAN 0 to HW filter on device bond9 [ 298.820469][T16826] lo speed is unknown, defaulting to 1000 [ 298.878691][T16836] vlan0: entered allmulticast mode [ 298.884020][T16836] bond9: entered allmulticast mode [ 298.934719][T16841] lo speed is unknown, defaulting to 1000 [ 299.151906][T16844] lo speed is unknown, defaulting to 1000 [ 299.451067][T16855] xfrm0: entered promiscuous mode [ 299.456161][T16855] xfrm0: entered allmulticast mode [ 299.835406][T16867] Set syz0 is full, maxelem 0 reached [ 301.050490][T16901] xt_connbytes: Forcing CT accounting to be enabled [ 301.057473][T16901] set match dimension is over the limit! [ 301.184860][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4453'. [ 301.407081][T16929] netlink: 'syz.2.4458': attribute type 10 has an invalid length. [ 301.438899][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 301.438997][ T29] audit: type=1400 audit(2000000645.457:28558): avc: denied { accept } for pid=16931 comm="syz.4.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 301.465468][T16933] netlink: 'syz.2.4458': attribute type 10 has an invalid length. [ 301.469956][T16929] dummy0: entered promiscuous mode [ 301.494932][T16929] team0: Port device dummy0 added [ 301.506652][T16933] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 301.544378][T16933] dummy0: left promiscuous mode [ 301.562360][T16933] team0: Failed to send options change via netlink (err -105) [ 301.570198][T16933] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 301.584745][T16933] team0: Port device dummy0 removed [ 301.628134][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4462'. [ 301.734537][T16941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4463'. [ 302.037075][ T29] audit: type=1326 audit(2000000646.047:28559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.099798][ T29] audit: type=1326 audit(2000000646.087:28560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.122978][ T29] audit: type=1326 audit(2000000646.087:28561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.146486][ T29] audit: type=1326 audit(2000000646.087:28562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.169666][ T29] audit: type=1326 audit(2000000646.087:28563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.192936][ T29] audit: type=1326 audit(2000000646.087:28564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.216090][ T29] audit: type=1326 audit(2000000646.087:28565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.239303][ T29] audit: type=1326 audit(2000000646.087:28566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.262872][ T29] audit: type=1326 audit(2000000646.087:28567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16959 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x7ffc0000 [ 302.839226][T16961] Set syz1 is full, maxelem 65536 reached [ 303.061821][T16989] lo speed is unknown, defaulting to 1000 [ 303.569784][T17000] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 303.690011][T17013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4490'. [ 303.711566][T17014] pim6reg: entered allmulticast mode [ 303.720076][T17016] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4492'. [ 303.731116][T17014] pim6reg: left allmulticast mode [ 303.743703][T17013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4490'. [ 303.765743][T17016] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17016 comm=syz.0.4492 [ 303.779313][T17016] netlink: 'syz.0.4492': attribute type 1 has an invalid length. [ 303.890025][T17027] delete_channel: no stack [ 304.010155][T17043] netlink: 'syz.1.4504': attribute type 21 has an invalid length. [ 304.099624][T17052] netlink: 'syz.1.4508': attribute type 10 has an invalid length. [ 304.108801][T17052] dummy0: left promiscuous mode [ 304.122670][T17052] netlink: 'syz.1.4508': attribute type 10 has an invalid length. [ 304.372463][T17071] netlink: 'syz.4.4514': attribute type 10 has an invalid length. [ 304.381202][T17073] netlink: 'syz.3.4515': attribute type 6 has an invalid length. [ 304.413045][T17071] netlink: 'syz.4.4514': attribute type 10 has an invalid length. [ 304.506918][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 304.520212][T17063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 305.145491][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4527'. [ 305.162774][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4527'. [ 305.196835][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4527'. [ 305.206717][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4527'. [ 306.411955][T17159] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 306.429687][T17159] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.448149][T17159] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 306.456908][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 306.456926][ T29] audit: type=1326 audit(2000000650.477:29073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.469895][T17159] bond5: (slave batadv1): making interface the new active one [ 306.495585][T17159] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 306.510084][T17163] bond5 (unregistering): (slave batadv1): Releasing active interface [ 306.518253][ T29] audit: type=1326 audit(2000000650.477:29074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.541977][ T29] audit: type=1326 audit(2000000650.477:29075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.565674][ T29] audit: type=1326 audit(2000000650.477:29076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.589840][ T29] audit: type=1326 audit(2000000650.567:29077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.613614][ T29] audit: type=1326 audit(2000000650.587:29078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.637468][ T29] audit: type=1326 audit(2000000650.587:29079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.661171][ T29] audit: type=1326 audit(2000000650.587:29080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.684901][ T29] audit: type=1326 audit(2000000650.587:29081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.708582][ T29] audit: type=1326 audit(2000000650.587:29082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17146 comm="syz.3.4540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4bcbde1785 code=0x7ffc0000 [ 306.740119][T17163] bond5 (unregistering): Released all slaves [ 306.845716][T17175] Set syz1 is full, maxelem 65536 reached [ 306.972540][T17190] lo speed is unknown, defaulting to 1000 [ 307.142102][T17203] tipc: Started in network mode [ 307.147054][T17203] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 307.156067][T17203] tipc: Enabling of bearer rejected, failed to enable media [ 308.004415][T17221] team2: entered promiscuous mode [ 308.009592][T17221] team2: entered allmulticast mode [ 308.017696][T17221] 8021q: adding VLAN 0 to HW filter on device team2 [ 308.982496][T17242] loop3: detected capacity change from 0 to 512 [ 309.019366][T17242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 309.064092][T17242] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm +}[@: Unimplemented hash flags: 0x0001 [ 309.075248][T17242] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm +}[@: Corrupt directory, running e2fsck is recommended [ 309.178755][T17242] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm +}[@: path /634/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 309.971285][T17255] netlink: 'syz.0.4581': attribute type 13 has an invalid length. [ 310.044446][T17255] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.105835][T17255] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 310.279928][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.369075][T17267] siw: device registration error -23 [ 310.679524][T17285] loop3: detected capacity change from 0 to 1024 [ 310.700255][T17285] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 310.733345][T17285] ext4 filesystem being mounted at /638/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.746955][T17285] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm wÞ££‘: inode has both inline data and extents flags [ 310.768883][T17285] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm wÞ££‘: inode has both inline data and extents flags [ 310.791244][T17296] lo speed is unknown, defaulting to 1000 [ 310.797630][T17285] 9pnet_fd: Insufficient options for proto=fd [ 310.841393][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 310.874398][T17299] __nla_validate_parse: 6 callbacks suppressed [ 310.874415][T17299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4600'. [ 310.899112][T17299] IPVS: Unknown mcast interface: ipvlan1 [ 310.905452][T17302] netlink: 'syz.1.4602': attribute type 4 has an invalid length. [ 310.919105][T17302] netlink: 'syz.1.4602': attribute type 4 has an invalid length. [ 310.933355][ T9236] lo speed is unknown, defaulting to 1000 [ 310.939261][ T9236] syz0: Port: 1 Link ACTIVE [ 311.717213][T17337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4614'. [ 312.130218][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 312.130236][ T29] audit: type=1326 audit(2000000656.137:29250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.160227][ T29] audit: type=1326 audit(2000000656.147:29251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.183948][ T29] audit: type=1326 audit(2000000656.147:29252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.207592][ T29] audit: type=1326 audit(2000000656.147:29253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.231223][ T29] audit: type=1326 audit(2000000656.147:29254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.254807][ T29] audit: type=1326 audit(2000000656.147:29255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.278433][ T29] audit: type=1326 audit(2000000656.147:29256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.302068][ T29] audit: type=1326 audit(2000000656.147:29257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.325678][ T29] audit: type=1326 audit(2000000656.147:29258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.349309][ T29] audit: type=1326 audit(2000000656.147:29259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17342 comm="syz.4.4616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 312.443519][T17350] loop3: detected capacity change from 0 to 1024 [ 312.453216][T17348] lo speed is unknown, defaulting to 1000 [ 312.519066][T17355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4620'. [ 312.548893][T17350] EXT4-fs: Ignoring removed orlov option [ 312.571059][T17350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.617855][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'. [ 312.674912][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.736786][T17369] rdma_rxe: rxe_newlink: failed to add bond0 [ 313.155512][T17378] netlink: 'syz.1.4631': attribute type 13 has an invalid length. [ 313.192238][T17378] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 313.238712][ T9234] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.262079][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4639'. [ 313.331280][T17403] vlan0: entered promiscuous mode [ 313.336437][T17403] bond9: entered promiscuous mode [ 313.341718][T17403] vlan0: entered allmulticast mode [ 313.346866][T17403] bond9: entered allmulticast mode [ 313.364790][T17403] bond9: (slave geneve4): refused to change device type [ 313.689925][T17425] .`: (slave dummy0): Releasing backup interface [ 313.699350][T17424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4645'. [ 313.739781][ T57] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.745857][T17425] sd 0:0:1:0: device reset [ 313.748325][ T57] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.788983][ T57] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.799550][ T9232] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.817829][ T57] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.018681][ T3682] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.080592][T17440] infiniband syz!: set down [ 314.085158][T17440] infiniband syz!: added team_slave_0 [ 314.106675][T17440] RDS/IB: syz!: added [ 314.388999][ T9234] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.438847][ T9234] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.622511][ T9234] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.059059][ T3646] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.066985][ T3646] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.435917][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4676'. [ 315.457451][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4676'. [ 315.858666][ T9232] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 316.022819][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4686'. [ 316.078415][T17524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4685'. [ 316.080368][T17521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 316.097526][T17525] vlan2: entered allmulticast mode [ 316.102761][T17525] bond4: entered allmulticast mode [ 316.554138][T17544] bridge0: failed insert local address into bridge forwarding table [ 316.769569][T17550] netlink: 'syz.4.4697': attribute type 10 has an invalid length. [ 316.777490][T17550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4697'. [ 316.818799][T17550] vlan0: entered promiscuous mode [ 316.824023][T17550] vlan0: entered allmulticast mode [ 316.829213][T17550] veth0_vlan: entered allmulticast mode [ 316.834876][T17550] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 317.102442][T17571] veth0_to_team: left allmulticast mode [ 317.108066][T17571] veth0_to_team: left promiscuous mode [ 317.113772][T17571] Ÿë: port 1(veth0_to_team) entered disabled state [ 317.151136][T17571] : (slave batadv1): Releasing active interface [ 319.538548][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 319.562908][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4725'. [ 319.607890][T17635] tipc: Enabling of bearer rejected, failed to enable media [ 320.175991][T17664] netlink: 'syz.4.4740': attribute type 1 has an invalid length. [ 320.203091][T17664] 8021q: adding VLAN 0 to HW filter on device bond5 [ 320.236367][T17664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17664 comm=syz.4.4740 [ 320.280699][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4742'. [ 320.792876][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 320.792907][ T29] audit: type=1326 audit(2000000664.807:29548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 320.837050][ T29] audit: type=1326 audit(2000000664.837:29549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 320.860815][ T29] audit: type=1326 audit(2000000664.837:29550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 320.884486][ T29] audit: type=1326 audit(2000000664.837:29551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 320.908149][ T29] audit: type=1326 audit(2000000664.837:29552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 320.931853][ T29] audit: type=1326 audit(2000000664.837:29553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 320.955588][ T29] audit: type=1326 audit(2000000664.837:29554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 320.979268][ T29] audit: type=1326 audit(2000000664.837:29555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 321.003030][ T29] audit: type=1326 audit(2000000664.837:29556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 321.026720][ T29] audit: type=1326 audit(2000000664.837:29557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17684 comm="syz.4.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 321.120298][T17700] loop3: detected capacity change from 0 to 128 [ 321.133136][T17700] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.148423][T17700] ext4 filesystem being mounted at /657/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.167948][T17700] netlink: 444 bytes leftover after parsing attributes in process `syz.3.4753'. [ 321.177435][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4753'. [ 321.314956][ T6175] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.374133][T17713] geneve0: entered allmulticast mode [ 321.415871][T17709] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4756'. [ 321.425689][T17709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4756'. [ 321.509724][T17726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4762'. [ 321.688553][T17734] wireguard0: entered promiscuous mode [ 321.694176][T17734] wireguard0: entered allmulticast mode [ 321.814044][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4765'. [ 322.093285][T17750] ip6gre0: Caught tx_queue_len zero misconfig [ 322.252819][T17751] loop3: detected capacity change from 0 to 1024 [ 322.269013][T17751] EXT4-fs: Ignoring removed bh option [ 322.386460][T17751] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.413358][T17751] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.465325][T17751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 322.483770][T17751] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.4769: lblock 2 mapped to illegal pblock 2 (length 1) [ 322.500447][T17751] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.4769: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.528748][T17751] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4769: Failed to acquire dquot type 0 [ 322.568682][T17751] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 322.584189][T17751] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.4769: mark_inode_dirty error [ 322.598720][T17751] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 322.609156][T17751] EXT4-fs (loop3): 1 orphan inode deleted [ 322.619713][T17751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.642607][ T3682] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.667267][ T3682] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:64: Failed to release dquot type 0 [ 322.785500][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.800372][ T6175] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 322.819064][ T6175] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 322.834580][ T6175] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 322.893129][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'. [ 322.912650][T17765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4776'. [ 322.933382][T17763] vhci_hcd: invalid port number 96 [ 322.938633][T17763] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 323.534216][T17813] pimreg: entered allmulticast mode [ 323.550133][T17813] pimreg: left allmulticast mode [ 323.743565][T17823] lo speed is unknown, defaulting to 1000 [ 323.809379][T17827] wg2: entered promiscuous mode [ 323.814334][T17827] wg2: entered allmulticast mode [ 323.862422][T17832] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4800'. [ 324.060550][T17840] netlink: 'syz.3.4803': attribute type 1 has an invalid length. [ 324.134776][T17852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4804'. [ 324.146460][T17840] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.184068][T17850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.261012][T17850] bond10: (slave batadv0): making interface the new active one [ 324.269992][T17850] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 324.359495][T17853] bond10 (unregistering): (slave batadv0): Releasing active interface [ 324.369224][T17853] bond10 (unregistering): Released all slaves [ 324.606816][T17866] netlink: 'syz.3.4819': attribute type 1 has an invalid length. [ 324.631442][T17866] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.659333][T17866] macvlan0: entered promiscuous mode [ 324.664765][T17866] macvlan0: entered allmulticast mode [ 324.671466][T17866] bond10: (slave macvlan0): Opening slave failed [ 325.370672][T17838] lo speed is unknown, defaulting to 1000 [ 325.846351][T17899] loop3: detected capacity change from 0 to 1024 [ 325.864020][T17899] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 325.917645][T17899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.031696][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 326.031714][ T29] audit: type=1326 audit(2000000670.047:29645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 326.062593][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.106689][ T29] audit: type=1326 audit(2000000670.097:29646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132bb6af79 code=0x7ffc0000 [ 326.130557][ T29] audit: type=1326 audit(2000000670.097:29647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 326.154205][ T29] audit: type=1326 audit(2000000670.097:29648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 326.177904][ T29] audit: type=1326 audit(2000000670.097:29649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132bb6af79 code=0x7ffc0000 [ 326.201564][ T29] audit: type=1326 audit(2000000670.097:29650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 326.225131][ T29] audit: type=1326 audit(2000000670.097:29651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132bb6af79 code=0x7ffc0000 [ 326.248667][ T29] audit: type=1326 audit(2000000670.097:29652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 326.272331][ T29] audit: type=1326 audit(2000000670.097:29653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f132bb6af79 code=0x7ffc0000 [ 326.295865][ T29] audit: type=1326 audit(2000000670.097:29654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17903 comm="syz.4.4821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f132bbc5d67 code=0x7ffc0000 [ 327.071579][T17923] loop3: detected capacity change from 0 to 512 [ 327.078450][T17920] lo speed is unknown, defaulting to 1000 [ 327.080717][T17910] Set syz1 is full, maxelem 65536 reached [ 327.148735][T17923] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 327.214475][T17923] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 327.240077][T17923] EXT4-fs (loop3): 1 truncate cleaned up [ 327.396612][T17923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.490015][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.785294][T17937] netlink: 'syz.3.4834': attribute type 4 has an invalid length. [ 327.794524][T17937] netlink: 'syz.3.4834': attribute type 4 has an invalid length. [ 328.001030][T17941] __nla_validate_parse: 4 callbacks suppressed [ 328.001050][T17941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4835'. [ 328.479578][T17948] lo speed is unknown, defaulting to 1000 [ 328.589959][T17957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4852'. [ 328.740457][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 328.982807][T17956] Set syz1 is full, maxelem 65536 reached [ 329.056675][T17959] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4842'. [ 329.121395][T17959] loop3: detected capacity change from 0 to 8192 [ 329.229420][T17961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4844'. [ 331.312131][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4850'. [ 331.444528][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 331.453597][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 331.463605][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 331.481897][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 331.490867][T17979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4849'. [ 332.200418][T18003] netlink: 'syz.3.4858': attribute type 13 has an invalid length. [ 332.209354][T18004] netlink: 'syz.2.4861': attribute type 4 has an invalid length. [ 332.579278][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 332.579295][ T29] audit: type=1326 audit(2000000676.597:29775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.609325][ T29] audit: type=1326 audit(2000000676.597:29776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.637434][ T29] audit: type=1326 audit(2000000676.657:29777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.661217][ T29] audit: type=1326 audit(2000000676.657:29778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe32d6bef03 code=0x7ffc0000 [ 332.684687][ T29] audit: type=1326 audit(2000000676.657:29779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe32d6bef03 code=0x7ffc0000 [ 332.708166][ T29] audit: type=1326 audit(2000000676.657:29780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.731944][ T29] audit: type=1326 audit(2000000676.657:29781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.755623][ T29] audit: type=1326 audit(2000000676.657:29782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.779417][ T29] audit: type=1326 audit(2000000676.657:29783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.803272][ T29] audit: type=1326 audit(2000000676.657:29784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18016 comm="syz.1.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 332.890691][T18030] loop3: detected capacity change from 0 to 512 [ 333.033882][T18030] loop3: detected capacity change from 0 to 512 [ 333.080767][T18030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.107389][T18030] ext4 filesystem being mounted at /692/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.320430][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.458647][T18048] __nla_validate_parse: 5 callbacks suppressed [ 333.458666][T18048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4871'. [ 333.525351][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4871'. [ 333.534325][T18048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4871'. [ 333.550152][T18051] netlink: 'syz.4.4871': attribute type 10 has an invalid length. [ 335.052655][T18081] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 335.091352][T18087] loop3: detected capacity change from 0 to 256 [ 335.425947][T18079] Set syz1 is full, maxelem 65536 reached [ 335.744339][T18111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4895'. [ 336.004054][T18127] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 336.012899][T18127] ref_ctr increment failed for inode: 0x128e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a798b80 [ 336.025665][T18127] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 336.034547][T18127] ref_ctr decrement failed for inode: 0x128e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811a798b80 [ 336.065990][T18127] uprobe: syz.0.4902:18127 failed to unregister, leaking uprobe [ 336.246956][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4906'. [ 336.256042][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4906'. [ 336.302479][T18139] netlink: 'syz.4.4907': attribute type 13 has an invalid length. [ 336.396997][T18133] lo speed is unknown, defaulting to 1000 [ 336.721277][T18156] syzkaller0: create flow: hash 3172182155 index 0 [ 336.808681][T18155] syzkaller0 (unregistered): delete flow: hash 3172182155 index 0 [ 336.878868][T18160] lo speed is unknown, defaulting to 1000 [ 337.003965][T18168] loop3: detected capacity change from 0 to 512 [ 337.059502][T18168] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.079553][T18168] ext4 filesystem being mounted at /703/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 337.363081][T18181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4923'. [ 337.413845][T18190] netlink: 'syz.4.4924': attribute type 1 has an invalid length. [ 337.421800][T18190] netlink: 'syz.4.4924': attribute type 4 has an invalid length. [ 337.429629][T18190] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.4924'. [ 337.499723][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.594557][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 337.594576][ T29] audit: type=1326 audit(2000000681.607:30015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.630221][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4928'. [ 337.630659][ T29] audit: type=1326 audit(2000000681.607:30016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.663043][ T29] audit: type=1326 audit(2000000681.607:30017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.686776][ T29] audit: type=1326 audit(2000000681.607:30018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.710942][ T29] audit: type=1326 audit(2000000681.607:30019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.734637][ T29] audit: type=1326 audit(2000000681.627:30020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.758348][ T29] audit: type=1326 audit(2000000681.627:30021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.782078][ T29] audit: type=1326 audit(2000000681.627:30022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.805900][ T29] audit: type=1326 audit(2000000681.627:30023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.829677][ T29] audit: type=1326 audit(2000000681.627:30024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18176 comm="syz.0.4921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe6ded51785 code=0x7ffc0000 [ 337.901267][T18205] loop3: detected capacity change from 0 to 2048 [ 337.953699][T18205] Alternate GPT is invalid, using primary GPT. [ 337.960189][T18205] loop3: p1 p2 p3 [ 337.963945][T18205] loop3: partition table partially beyond EOD, truncated [ 338.046227][T18218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.054909][T18218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.063626][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4936'. [ 338.627736][T18254] __nla_validate_parse: 1 callbacks suppressed [ 338.627754][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4950'. [ 339.551773][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4960'. [ 339.714138][T18295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.743587][T18295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.513455][T18380] geneve0: entered allmulticast mode [ 341.591411][T18449] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4972'. [ 341.702965][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4972'. [ 341.711920][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4972'. [ 341.859124][T18442] netlink: 'syz.3.4972': attribute type 10 has an invalid length. [ 341.889168][T18442] .`: (slave dummy0): Enslaving as an active interface with an up link [ 341.918638][T18455] netlink: 'syz.2.4976': attribute type 12 has an invalid length. [ 342.140190][T18462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4980'. [ 342.163063][T18464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4981'. [ 342.172463][T18462] IPVS: Error connecting to the multicast addr [ 342.186564][T18464] 8021q: adding VLAN 0 to HW filter on device bond11 [ 342.233629][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4982'. [ 342.325294][T18473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4984'. [ 342.608505][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 342.608562][ T29] audit: type=1400 audit(2000000686.617:30217): avc: denied { create } for pid=18494 comm="syz.1.4992" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.648708][ T29] audit: type=1400 audit(2000000686.627:30218): avc: denied { write } for pid=18494 comm="syz.1.4992" name="file0" dev="tmpfs" ino=4187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.671600][ T29] audit: type=1400 audit(2000000686.627:30219): avc: denied { open } for pid=18494 comm="syz.1.4992" path="/802/file0" dev="tmpfs" ino=4187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.694670][ T29] audit: type=1400 audit(2000000686.627:30220): avc: denied { ioctl } for pid=18494 comm="syz.1.4992" path="/802/file0" dev="tmpfs" ino=4187 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 342.762898][T18503] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4994'. [ 342.772169][ T29] audit: type=1326 audit(2000000686.747:30221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.2.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 342.795907][ T29] audit: type=1326 audit(2000000686.747:30222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.2.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 342.819707][ T29] audit: type=1326 audit(2000000686.747:30223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.2.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 342.843340][ T29] audit: type=1326 audit(2000000686.747:30224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.2.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 342.867090][ T29] audit: type=1326 audit(2000000686.747:30225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.2.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 342.890750][ T29] audit: type=1326 audit(2000000686.747:30226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18500 comm="syz.2.4993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 343.537839][T18521] vlan0: entered allmulticast mode [ 343.543134][T18521] bridge_slave_0: entered allmulticast mode [ 343.973335][T18537] tipc: Enabling of bearer rejected, failed to enable media [ 344.526092][T18567] lo speed is unknown, defaulting to 1000 [ 344.738095][T18588] lo speed is unknown, defaulting to 1000 [ 344.892876][T18592] loop3: detected capacity change from 0 to 1024 [ 344.900366][T18592] EXT4-fs: Ignoring removed orlov option [ 344.939090][T18592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.579208][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.784271][T18614] rdma_op ffff88810b151180 conn xmit_rdma 0000000000000000 [ 345.995713][T18610] lo speed is unknown, defaulting to 1000 [ 346.658586][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.965705][T18643] netlink: 'syz.4.5046': attribute type 12 has an invalid length. [ 347.433026][T18673] netlink: 'syz.3.5057': attribute type 12 has an invalid length. [ 347.687428][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 347.687447][ T29] audit: type=1326 audit(2000000691.697:30704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.2.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 347.717667][ T29] audit: type=1326 audit(2000000691.697:30705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.2.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 347.741363][ T29] audit: type=1326 audit(2000000691.697:30706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.2.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 347.764990][ T29] audit: type=1326 audit(2000000691.697:30707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.2.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 347.903650][ T29] audit: type=1326 audit(2000000691.907:30708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.2.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 347.927457][ T29] audit: type=1326 audit(2000000691.907:30709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18652 comm="syz.2.5052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe9ef6beec9 code=0x7ffc0000 [ 348.533405][T18677] Set syz1 is full, maxelem 65536 reached [ 348.653580][ T29] audit: type=1400 audit(2000000692.667:30710): avc: denied { cpu } for pid=18696 comm="syz.3.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 348.739314][ T29] audit: type=1326 audit(2000000692.757:30711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.1.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 348.748138][T18705] netlink: 664 bytes leftover after parsing attributes in process `syz.4.5071'. [ 348.766558][ T29] audit: type=1326 audit(2000000692.787:30712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.1.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 348.795924][ T29] audit: type=1326 audit(2000000692.787:30713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18703 comm="syz.1.5072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 348.868650][T18713] loop3: detected capacity change from 0 to 512 [ 348.899843][T18713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.912525][T18713] ext4 filesystem being mounted at /745/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.937756][T18724] netlink: 'syz.1.5079': attribute type 83 has an invalid length. [ 348.981752][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.994097][T18728] netlink: 28 bytes leftover after parsing attributes in process `{/}\…‘"ÀÒÁåXÜe†'. [ 349.003600][T18728] netlink: 28 bytes leftover after parsing attributes in process `{/}\…‘"ÀÒÁåXÜe†'. [ 349.014389][T18728] netlink: 28 bytes leftover after parsing attributes in process `{/}\…‘"ÀÒÁåXÜe†'. [ 349.023894][T18728] netlink: 28 bytes leftover after parsing attributes in process `{/}\…‘"ÀÒÁåXÜe†'. [ 349.096548][T18734] netlink: 'syz.3.5082': attribute type 1 has an invalid length. [ 349.104585][T18734] netlink: 'syz.3.5082': attribute type 2 has an invalid length. [ 349.118098][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5082'. [ 349.177192][T18747] loop3: detected capacity change from 0 to 2048 [ 349.195570][T18747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.219207][T18758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5088'. [ 349.330369][T18762] block device autoloading is deprecated and will be removed. [ 349.508395][T18774] netlink: 'syz.2.5098': attribute type 4 has an invalid length. [ 349.516289][T18774] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5098'. [ 349.606496][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.830728][T18838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5120'. [ 351.099875][T18846] xt_socket: unknown flags 0x50 [ 351.355472][T18870] ref_ctr increment failed for inode: 0x1351 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811a79f300 [ 351.671520][T18892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18892 comm=syz.0.5139 [ 351.684775][T18892] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=18892 comm=syz.0.5139 [ 351.748407][T18895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5140'. [ 352.086936][T18913] lo speed is unknown, defaulting to 1000 [ 352.871576][T18936] blktrace: Concurrent blktraces are not allowed on loop4 [ 353.231741][T18933] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18933 comm=syz.1.5152 [ 353.408672][T18949] xt_connbytes: Forcing CT accounting to be enabled [ 353.426711][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 353.426729][ T29] audit: type=1326 audit(2000000697.437:30901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.0.5158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6ded1eec9 code=0x0 [ 353.460738][ T29] audit: type=1400 audit(2000000697.477:30902): avc: denied { block_suspend } for pid=18944 comm="syz.3.5157" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 353.585794][T18941] lo speed is unknown, defaulting to 1000 [ 353.739874][ T29] audit: type=1326 audit(2000000697.757:30903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 353.802266][ T29] audit: type=1326 audit(2000000697.777:30904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 353.826108][ T29] audit: type=1326 audit(2000000697.777:30905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 353.850200][ T29] audit: type=1326 audit(2000000697.777:30906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 353.873856][ T29] audit: type=1326 audit(2000000697.777:30907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 353.891687][T18966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'. [ 353.897556][ T29] audit: type=1326 audit(2000000697.777:30908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 353.930184][ T29] audit: type=1326 audit(2000000697.777:30909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 353.953866][ T29] audit: type=1326 audit(2000000697.787:30910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18963 comm="syz.1.5161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe32d6beec9 code=0x7ffc0000 [ 354.167317][T18981] lo speed is unknown, defaulting to 1000 [ 354.353615][T18997] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5172'. [ 354.377525][T18997] 1ªX¹¦À: renamed from 60ªX¹¦À [ 354.395708][T18997] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 355.506907][T19033] netlink: 'syz.3.5186': attribute type 4 has an invalid length. [ 355.514917][T19033] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5186'. [ 355.572018][T19037] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5187'. [ 355.593993][T19039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5189'. [ 355.695542][T19044] tipc: Enabling of bearer rejected, failed to enable media [ 355.739370][T19048] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5193'. [ 355.784543][T19050] syz_tun: entered allmulticast mode [ 355.797430][T19049] syz_tun: left allmulticast mode [ 356.584908][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5213'. [ 356.628419][T19106] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5214'. [ 356.640568][T19106] .` (unregistering): (slave dummy0): Releasing backup interface [ 356.659502][T19106] .` (unregistering): Released all slaves [ 356.730151][T19108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5215'. [ 358.294404][T19148] lo speed is unknown, defaulting to 1000 [ 358.438607][T19150] xt_socket: unknown flags 0x50 [ 358.596121][T19161] netlink: 'syz.3.5228': attribute type 30 has an invalid length. [ 358.799181][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 358.799199][ T29] audit: type=1400 audit(2000000702.817:31011): avc: denied { remount } for pid=19165 comm="syz.1.5230" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 358.886001][ T29] audit: type=1400 audit(2000000702.897:31012): avc: denied { execute_no_trans } for pid=19173 comm="syz.4.5234" path="/899/file0" dev="tmpfs" ino=4706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 358.925865][ T29] audit: type=1400 audit(2000000702.937:31013): avc: denied { mount } for pid=19179 comm="syz.1.5235" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 359.019897][T19182] netlink: 'syz.4.5236': attribute type 4 has an invalid length. [ 359.027701][T19182] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5236'. [ 359.078540][ T29] audit: type=1326 audit(2000000703.087:31014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.4.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 359.102340][ T29] audit: type=1326 audit(2000000703.087:31015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.4.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 359.102955][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 359.125975][ T29] audit: type=1326 audit(2000000703.087:31016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.4.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 359.158571][ T29] audit: type=1326 audit(2000000703.087:31017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.4.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 359.195727][ T29] audit: type=1326 audit(2000000703.207:31018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.4.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 359.219620][ T29] audit: type=1326 audit(2000000703.207:31019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19181 comm="syz.4.5236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f132bbceec9 code=0x7ffc0000 [ 359.331932][T19198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5241'. [ 359.348537][ T29] audit: type=1400 audit(2000000703.347:31020): avc: denied { ioctl } for pid=19195 comm="syz.4.5240" path="socket:[63092]" dev="sockfs" ino=63092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 360.135864][T19218] loop3: detected capacity change from 0 to 1024 [ 360.149227][T19218] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 360.187303][T19218] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.5248: Invalid block bitmap block 0 in block_group 0 [ 360.239084][T19218] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.5248: Failed to acquire dquot type 0 [ 360.285343][T19218] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.5248: Freeing blocks not in datazone - block = 0, count = 4096 [ 360.331238][T19218] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.5248: Invalid inode bitmap blk 0 in block_group 0 [ 360.364960][ T3654] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:38: Failed to release dquot type 0 [ 360.409301][T19218] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 360.428528][T19218] EXT4-fs (loop3): 1 orphan inode deleted [ 360.434951][T19218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.520316][T19228] macvtap0: entered allmulticast mode [ 360.526251][T19228] bridge0: entered allmulticast mode [ 360.529625][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.585979][T19228] bridge0: left allmulticast mode [ 360.763595][T19240] pim6reg1: entered promiscuous mode [ 360.769160][T19240] pim6reg1: entered allmulticast mode [ 360.948912][T19254] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5260'. [ 360.959689][T19255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5262'. [ 360.970560][T19254] 0ªX¹¦À: renamed from 61ªX¹¦À [ 360.987925][T19254] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 361.042288][T19258] loop3: detected capacity change from 0 to 2048 [ 361.065017][T19258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.137912][ T6175] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 361.153513][ T6175] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 361.161361][T19261] macvtap1: entered allmulticast mode [ 361.168129][T19261] bridge0: entered allmulticast mode [ 361.176473][ T6175] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.189196][T19261] batman_adv: batadv0: Adding interface: macvtap1 [ 361.196248][T19261] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 361.218387][T19261] batman_adv: batadv0: Interface activated: macvtap1 [ 361.302368][T19276] netlink: 'syz.4.5269': attribute type 1 has an invalid length. [ 361.322066][T19276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5269'. [ 361.332103][T19276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.345934][T19276] 8021q: adding VLAN 0 to HW filter on device bond6 [ 361.356057][T19276] bond6: (slave geneve2): making interface the new active one [ 361.364724][T19276] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 361.373507][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.383502][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.392479][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 361.401685][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 362.019764][T19306] IPv6: Can't replace route, no match found [ 362.063445][T19311] lo speed is unknown, defaulting to 1000 [ 362.116594][T19318] netlink: 'syz.1.5283': attribute type 13 has an invalid length. [ 362.224822][ T9232] lo speed is unknown, defaulting to 1000 [ 362.230937][ T9232] syz0: Port: 1 Link DOWN [ 362.580242][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5298'. [ 362.589376][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5298'. [ 362.807359][T19343] lo speed is unknown, defaulting to 1000 [ 363.178153][T19391] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 363.210909][T19395] netlink: 'syz.3.5310': attribute type 7 has an invalid length. [ 363.218855][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5310'. [ 363.461036][T19412] ================================================================== [ 363.469183][T19412] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 363.478164][T19412] [ 363.480501][T19412] read to 0xffff888118f6d3a0 of 4 bytes by task 19419 on cpu 1: [ 363.488135][T19412] selinux_inode_permission+0x334/0x740 [ 363.493699][T19412] security_inode_permission+0x6d/0xb0 [ 363.499187][T19412] inode_permission+0x106/0x310 [ 363.504063][T19412] link_path_walk+0x162/0x900 [ 363.508771][T19412] path_openat+0x1de/0x2170 [ 363.513285][T19412] do_filp_open+0x109/0x230 [ 363.517796][T19412] io_openat2+0x272/0x390 [ 363.522164][T19412] io_openat+0x1b/0x30 [ 363.526273][T19412] __io_issue_sqe+0xfe/0x2e0 [ 363.530883][T19412] io_issue_sqe+0x56/0xa80 [ 363.535324][T19412] io_wq_submit_work+0x3f7/0x5f0 [ 363.540287][T19412] io_worker_handle_work+0x44e/0x9b0 [ 363.545600][T19412] io_wq_worker+0x22e/0x860 [ 363.550132][T19412] ret_from_fork+0x122/0x1b0 [ 363.554732][T19412] ret_from_fork_asm+0x1a/0x30 [ 363.559522][T19412] [ 363.561857][T19412] write to 0xffff888118f6d3a0 of 4 bytes by task 19412 on cpu 0: [ 363.569577][T19412] selinux_inode_permission+0x3ac/0x740 [ 363.575169][T19412] security_inode_permission+0x6d/0xb0 [ 363.580646][T19412] inode_permission+0x106/0x310 [ 363.585520][T19412] link_path_walk+0x162/0x900 [ 363.590217][T19412] path_openat+0x1de/0x2170 [ 363.594732][T19412] do_filp_open+0x109/0x230 [ 363.599248][T19412] io_openat2+0x272/0x390 [ 363.603596][T19412] io_openat+0x1b/0x30 [ 363.607679][T19412] __io_issue_sqe+0xfe/0x2e0 [ 363.612289][T19412] io_issue_sqe+0x56/0xa80 [ 363.616733][T19412] io_submit_sqes+0x675/0x1060 [ 363.621524][T19412] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 363.627124][T19412] __x64_sys_io_uring_enter+0x78/0x90 [ 363.632527][T19412] x64_sys_call+0x2df0/0x3000 [ 363.637223][T19412] do_syscall_64+0xd2/0x200 [ 363.641748][T19412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.647655][T19412] [ 363.649987][T19412] value changed: 0x00000000 -> 0x00000001 [ 363.655710][T19412] [ 363.658049][T19412] Reported by Kernel Concurrency Sanitizer on: [ 363.664217][T19412] CPU: 0 UID: 0 PID: 19412 Comm: syz.3.5313 Not tainted syzkaller #0 PREEMPT(voluntary) [ 363.674047][T19412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.684117][T19412] ================================================================== [ 363.852815][T19423] netlink: 'syz.1.5318': attribute type 6 has an invalid length. [ 363.861456][T19423] netlink: 'syz.1.5318': attribute type 6 has an invalid length.