last executing test programs: 2m42.583771826s ago: executing program 4 (id=1558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000001c0)={'#! ', '', [], 0xa, "2f62304f32148b52ed67747d15"}, 0x11) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x304}, "62648f4b35b737b9", "21c20c7e7ad9ecfe5bccea278546791cbaf728f83c0a7efa8e26655613653bb4", '\x00', "01d787a90d233d89"}, 0x38) sendfile(r0, r3, &(0x7f0000000100)=0x10, 0x10001) 2m42.545495697s ago: executing program 4 (id=1559): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m42.498802738s ago: executing program 4 (id=1561): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x6, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2m41.591682581s ago: executing program 4 (id=1570): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x1}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 2m41.373183774s ago: executing program 4 (id=1575): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2m40.579111235s ago: executing program 4 (id=1585): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000097"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m40.578758655s ago: executing program 32 (id=1585): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000"], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000097"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.147352871s ago: executing program 2 (id=3547): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) 3.032568677s ago: executing program 2 (id=3559): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') setxattr$security_evm(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0), 0x0, 0x0, 0x1) pwrite64(r1, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 3.026301837s ago: executing program 5 (id=3561): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000480)={0x43, 0x3, 0x2, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0xfffffffe, 0x3, 0x3}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@abort}, {@debug}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDvbH7UtGkTS/3RtGq0isEfSZPW2oMXRcGDgqCHeoxJWmK3jTQRbAkaRepRCt7Fo+Bf4Ekvop4KXvUuQpFcWj2tzO5MsrvZ/Nh0k63Zzwem/b6Zt7z3zczbfTNvN4CONZz+k0T0R8TvETFQKdZWGK78d2d5ceqf5cWpJEqlt/9OyvVuLy9O5VXz1x3IC90Rhc+TONag3fmr1y5OFoszV7Ly2MKlD8bmr157fvbS5IWZCzOXJ86ePX1q/MUzEy+0JM80r9tDH88dP/r6uzfenDp3471fvkvy/OvyaJHhjQ4+VSq1uLn2OlgVJ91t7AhN6aoM0+gpj/+B6IrVkzcQr322UgnYc0qlUunB9Q8vlYA9LIl29wBoj/yDPr3/zbddmnrcE269XLkBSvO+k22VI91RyOr01N3fttJwRJxb+vfrdIudeQ4BAFDjh3T+81yj+V8hqp8LHcrWUAYj4v6IOBwRZyLiSEQ8EFGu+1BEPNxk+/WLJGvnP4e2lddWpfO/l7K1rdr5Xz77i8GurHSwnH9Pcn62OHMy69lI9OxLy+MbtPHjq7992fBA1kQ+/0u3tP18LphV+qt7X+3LpicXJu8m52q3Po0Y6m6Uf7KyEpBExNGIGNpmG7PPfHt8vWPDm+a/gRasM5W+iXi6cv6Xoi7/XLLx+uTYfVGcOTmWXxVr/Xrz+lvrtX9X+bdAev73N7z+V/IfTKrXa+ebb+P6H1+se0+zef6Nr//e5J2afR9NLixcGY/oTd6odLp6/0RdvYnV+mn+Iycaj//DsfqXOBYR6UX8SEQ8GhGPZX1/PCKeiIgTa1O72ZsFP7/y5PvloGc7+e+sNP/pps7/atAb9XsaB10Xf/q+ptHBZvJPz//pcjSS7dnK+99W+rW9qxkAAAD+fwoR0R9JYXQlLhRGRyvf4T8S+wvFufmFZ8/PfXh5OqJ/qfz8s5A/6Rqoeh46nt3W5+WJuvKp7LnxV1195fLo1Fxxut3JQ4c7sM74T/3pe/+w9/m9FnQu4x86l/EPncv4h87VYPz3taMfwO5r9Pn/SRv6Aey+uvFv2Q86iPt/6FzGP3Qu4x860nxfbP4jeYFgTRCFe6Ibgh0K2v3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Br/BQAA//857uc3") syz_io_uring_setup(0x21d7, &(0x7f0000000040)={0x0, 0x30f, 0x800, 0x2, 0xd6}, &(0x7f00000000c0), &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000000)=0x4) 2.968451468s ago: executing program 5 (id=3563): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x22100, 0x0) perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.896461249s ago: executing program 5 (id=3567): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x10507e, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000201005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) lseek(r0, 0x2, 0x4) 2.493816405s ago: executing program 2 (id=3569): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 2.431093495s ago: executing program 3 (id=3571): pipe(0x0) socket(0x40000000015, 0x5, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7fffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x3}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 2.360472816s ago: executing program 3 (id=3572): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x6, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xa, 0x5, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.281458888s ago: executing program 3 (id=3574): iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaef3, 0x0, 0x2, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 2.267118037s ago: executing program 5 (id=3575): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f0) 2.244335968s ago: executing program 0 (id=3576): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) set_mempolicy(0x3, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 2.187900359s ago: executing program 0 (id=3577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000000100)=""/130, 0x82}, {0x0}], 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2.168166959s ago: executing program 1 (id=3578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r5 = socket(0x1, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200"], 0x34}}, 0x0) 2.0768407s ago: executing program 1 (id=3579): openat$sndseq(0xffffffffffffff9c, 0x0, 0x400240) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000101b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = fsopen(&(0x7f0000000380)='bdev\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.969158892s ago: executing program 1 (id=3580): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.833822404s ago: executing program 3 (id=3581): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = semget$private(0x0, 0x4, 0x82) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000300)=[0xff06, 0x8, 0xa8bb, 0x6, 0x401, 0x3f, 0xe7d8, 0x4, 0x0]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000400000041000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03400100010000fe00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) 1.668043496s ago: executing program 1 (id=3582): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x84085, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x1320, 0x0, 0x103, 0x5, 0x0, 0x840501, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[], 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) io_destroy(r0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x12000, 0x24, 0x487dc38b8419e9f1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0xffff, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x7053}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044841}, 0x20000000) 1.481813219s ago: executing program 1 (id=3583): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) 1.327065841s ago: executing program 0 (id=3584): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000080000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0xc7, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x2010, r0, 0xfda, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 1.315794741s ago: executing program 2 (id=3585): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x80207450, &(0x7f00000003c0)=0xc446806) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) modify_ldt$write(0x1, &(0x7f0000000300)={0x9, 0x20000000, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.197062303s ago: executing program 0 (id=3586): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x531a, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.006936965s ago: executing program 5 (id=3587): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x200040d5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff2f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) 978.099496ms ago: executing program 3 (id=3588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) socket$inet(0x2, 0x2, 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x40) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 941.769026ms ago: executing program 5 (id=3589): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0xc040000}, 0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000001}, 0x18) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a756e636f6e66696e65645f657865636d656d5f657865635f873a73302073797374656d5f753a6f626a65637457723a64656661756c745f636f6e746578745f743a7330203030302030303030303030303030303031343935202f7573722f7362696e2f637570732d62726f7773ce"], 0x82) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x3, [{0x3}], "8f54b7"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], '@'}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) 909.080017ms ago: executing program 0 (id=3590): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 620.726181ms ago: executing program 1 (id=3591): openat$nvram(0xffffffffffffff9c, 0x0, 0x90802, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) unshare(0x28020480) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 340.190115ms ago: executing program 2 (id=3592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) sendfile(0xffffffffffffffff, r2, 0x0, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 300.811396ms ago: executing program 2 (id=3593): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) pause() dup2(r1, r2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.81051ms ago: executing program 0 (id=3594): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=3595): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x4e, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) kernel console output (not intermixed with test programs): 211.796060][T11428] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.805925][T11428] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.826552][T11430] loop0: detected capacity change from 0 to 8192 [ 211.855803][T11428] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.865694][T11428] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.906107][T11428] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.916271][T11428] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.986543][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.087336][T11437] loop2: detected capacity change from 0 to 2048 [ 212.116025][T11437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.247492][T11444] lo speed is unknown, defaulting to 1000 [ 212.254303][T11444] lo speed is unknown, defaulting to 1000 [ 212.483568][T11448] xt_hashlimit: size too large, truncated to 1048576 [ 212.660020][T11452] pim6reg: entered allmulticast mode [ 212.698291][T11452] pim6reg: left allmulticast mode [ 212.905976][T11458] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 212.958493][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.035742][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 213.035760][ T29] audit: type=1400 audit(213.013:9005): avc: denied { read } for pid=11461 comm="syz.2.2789" lport=12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 213.197606][T11465] lo speed is unknown, defaulting to 1000 [ 213.215321][T11465] lo speed is unknown, defaulting to 1000 [ 213.614904][T11469] loop2: detected capacity change from 0 to 512 [ 213.631976][T11469] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 213.740992][T11469] EXT4-fs (loop2): 1 truncate cleaned up [ 213.771728][T11469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.880957][T11475] loop0: detected capacity change from 0 to 512 [ 213.887883][T11475] EXT4-fs: Ignoring removed i_version option [ 213.894424][T11475] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 213.906878][ T29] audit: type=1400 audit(213.883:9006): avc: denied { watch watch_reads } for pid=11471 comm="syz.1.2794" path="/519/file0" dev="tmpfs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 213.931360][T11475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 213.941115][T11475] System zones: 1-12 [ 213.945243][T11475] EXT4-fs (loop0): orphan cleanup on readonly fs [ 213.945795][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.970954][T11475] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2795: invalid indirect mapped block 12 (level 1) [ 213.989724][T11428] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.998153][T11428] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.020748][T11479] loop1: detected capacity change from 0 to 512 [ 214.038228][T11428] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.046639][T11428] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.066064][T11475] EXT4-fs (loop0): Remounting filesystem read-only [ 214.072687][T11475] EXT4-fs (loop0): 1 truncate cleaned up [ 214.079819][T11479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.087725][T11428] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.100628][T11428] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.112018][T11475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 214.125918][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.172671][T11481] loop2: detected capacity change from 0 to 8192 [ 214.183598][T11428] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.191946][T11428] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.200578][ T29] audit: type=1326 audit(214.133:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.200758][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 214.223558][ T29] audit: type=1326 audit(214.133:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.255761][ T29] audit: type=1326 audit(214.133:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.278771][ T29] audit: type=1326 audit(214.133:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.301835][ T29] audit: type=1326 audit(214.133:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.324886][ T29] audit: type=1326 audit(214.133:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.332911][T11487] loop1: detected capacity change from 0 to 1024 [ 214.347783][ T29] audit: type=1326 audit(214.133:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.347819][ T29] audit: type=1326 audit(214.133:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11484 comm="syz.1.2798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 214.414207][T11481] loop2: p1 p4 < > [ 214.418240][T11481] loop2: p1 start 4261412864 is beyond EOD, truncated [ 214.424248][T11487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.440914][T11493] loop3: detected capacity change from 0 to 2048 [ 214.449930][T11494] wireguard0: entered promiscuous mode [ 214.455545][T11494] wireguard0: entered allmulticast mode [ 214.720048][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.236870][T11513] syzkaller0: entered promiscuous mode [ 215.242475][T11513] syzkaller0: entered allmulticast mode [ 215.864969][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2808'. [ 215.944020][T11521] loop0: detected capacity change from 0 to 1024 [ 215.954580][T11521] EXT4-fs: Ignoring removed i_version option [ 215.957069][T11526] lo speed is unknown, defaulting to 1000 [ 215.960649][T11521] EXT4-fs: Ignoring removed mblk_io_submit option [ 215.968717][T11526] lo speed is unknown, defaulting to 1000 [ 215.991899][T11521] EXT4-fs: Ignoring removed nobh option [ 215.997575][T11521] EXT4-fs: Ignoring removed bh option [ 216.032622][T11521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.072252][T11521] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.2817: Allocating blocks 385-513 which overlap fs metadata [ 216.105913][T11521] EXT4-fs (loop0): pa ffff888106a27e00: logic 16, phys. 129, len 24 [ 216.114116][T11521] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 216.177534][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.196674][T11535] netlink: 'syz.2.2813': attribute type 1 has an invalid length. [ 216.204591][T11535] netlink: 'syz.2.2813': attribute type 2 has an invalid length. [ 216.214891][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2813'. [ 216.255784][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2816'. [ 216.262635][T11539] program syz.1.2815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.275290][T11541] bridge0: port 1(ip6gretap2) entered blocking state [ 216.282180][T11541] bridge0: port 1(ip6gretap2) entered disabled state [ 216.291286][T11541] ip6gretap2: entered allmulticast mode [ 216.298543][T11541] ip6gretap2: entered promiscuous mode [ 216.325529][T11541] veth1: entered promiscuous mode [ 216.331305][T11541] bridge0: port 2(veth1) entered blocking state [ 216.337826][T11541] bridge0: port 2(veth1) entered disabled state [ 216.344900][T11541] veth1: entered allmulticast mode [ 216.350191][T11547] loop3: detected capacity change from 0 to 512 [ 216.395579][T11547] loop3: detected capacity change from 0 to 512 [ 216.404130][T11549] tipc: Enabled bearer , priority 0 [ 216.411831][T11547] EXT4-fs: inline encryption not supported [ 216.418450][T11546] tipc: Resetting bearer [ 216.450292][T11546] tipc: Disabling bearer [ 216.608973][T11570] loop2: detected capacity change from 0 to 1024 [ 216.646897][T11570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.679019][T11570] tmpfs: Bad value for 'mpol' [ 216.685805][T11570] tipc: New replicast peer: 255.255.255.255 [ 216.691872][T11570] tipc: Enabled bearer , priority 10 [ 216.767647][T11581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.788742][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.912845][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2836'. [ 217.080938][T11595] tipc: Enabling of bearer rejected, failed to enable media [ 217.314103][T11595] syzkaller0: entered promiscuous mode [ 217.319924][T11595] syzkaller0: entered allmulticast mode [ 217.387353][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 217.403229][T11604] geneve2: entered promiscuous mode [ 217.457516][T11612] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 217.683464][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2849'. [ 217.685952][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.709871][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.045515][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 218.045533][ T29] audit: type=1326 audit(218.023:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8a42758e7 code=0x7ffc0000 [ 218.205283][ T29] audit: type=1326 audit(218.053:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8a421ab19 code=0x7ffc0000 [ 218.228227][ T29] audit: type=1326 audit(218.053:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8a42758e7 code=0x7ffc0000 [ 218.251101][ T29] audit: type=1326 audit(218.053:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8a421ab19 code=0x7ffc0000 [ 218.273990][ T29] audit: type=1326 audit(218.053:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 218.296880][ T29] audit: type=1326 audit(218.053:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8a42758e7 code=0x7ffc0000 [ 218.319796][ T29] audit: type=1326 audit(218.053:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8a421ab19 code=0x7ffc0000 [ 218.342671][ T29] audit: type=1326 audit(218.053:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 218.365699][ T29] audit: type=1326 audit(218.063:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8a42758e7 code=0x7ffc0000 [ 218.388573][ T29] audit: type=1326 audit(218.063:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.0.2840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8a421ab19 code=0x7ffc0000 [ 218.444601][T11645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 218.457531][T11645] ip6gre1: entered allmulticast mode [ 218.507167][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2860'. [ 218.538188][T11658] loop2: detected capacity change from 0 to 512 [ 218.545269][T11658] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.558059][T11658] EXT4-fs (loop2): 1 truncate cleaned up [ 218.564266][T11658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.655839][T11666] random: crng reseeded on system resumption [ 218.679475][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.743320][T11671] tipc: Enabled bearer , priority 0 [ 218.752860][T11671] syzkaller0: entered promiscuous mode [ 218.758482][T11671] syzkaller0: entered allmulticast mode [ 218.774374][T11671] tipc: Resetting bearer [ 218.856594][T11670] tipc: Resetting bearer [ 219.013461][T11670] tipc: Disabling bearer [ 219.264140][T11677] netlink: 'syz.5.2869': attribute type 4 has an invalid length. [ 219.276325][T11677] netlink: 'syz.5.2869': attribute type 4 has an invalid length. [ 219.428409][T11689] lo speed is unknown, defaulting to 1000 [ 219.435113][T11689] lo speed is unknown, defaulting to 1000 [ 219.679127][T11698] ip6gretap2: left allmulticast mode [ 219.684579][T11698] ip6gretap2: left promiscuous mode [ 219.689976][T11698] bridge0: port 1(ip6gretap2) entered disabled state [ 219.702359][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2873'. [ 219.861330][T11698] veth1: left allmulticast mode [ 219.866620][T11698] bridge0: port 2(veth1) entered disabled state [ 219.950106][T11706] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2876'. [ 220.012180][T11708] tipc: Enabling of bearer rejected, failed to enable media [ 220.023735][T11711] loop3: detected capacity change from 0 to 512 [ 220.115167][T11720] lo speed is unknown, defaulting to 1000 [ 220.121353][T11720] lo speed is unknown, defaulting to 1000 [ 220.608383][T11741] netlink: 'syz.5.2893': attribute type 3 has an invalid length. [ 220.616394][T11741] netlink: 'syz.5.2893': attribute type 3 has an invalid length. [ 220.682505][T11747] tipc: Enabling of bearer rejected, failed to enable media [ 220.894555][T11754] __nla_validate_parse: 3 callbacks suppressed [ 220.894570][T11754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2900'. [ 221.120418][T11764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2906'. [ 221.184145][T11769] Falling back ldisc for ttyS3. [ 221.203268][T11775] lo speed is unknown, defaulting to 1000 [ 221.209797][T11775] lo speed is unknown, defaulting to 1000 [ 221.218569][T11777] loop0: detected capacity change from 0 to 1024 [ 221.226583][T11777] EXT4-fs: Ignoring removed orlov option [ 221.235097][T11777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.286039][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.311646][T11785] random: crng reseeded on system resumption [ 222.866996][T11800] IPv6: Can't replace route, no match found [ 222.987483][T11814] batadv_slave_0: entered promiscuous mode [ 223.018139][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2922'. [ 223.036929][T11814] batadv_slave_0 (unregistering): left promiscuous mode [ 223.069439][T11817] lo speed is unknown, defaulting to 1000 [ 223.095675][T11817] lo speed is unknown, defaulting to 1000 [ 223.123244][T11823] netlink: 'syz.2.2927': attribute type 4 has an invalid length. [ 223.182184][T11826] netlink: 'syz.2.2927': attribute type 4 has an invalid length. [ 223.235451][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 223.235470][ T29] audit: type=1326 audit(223.213:9546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11830 comm="syz.1.2930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x0 [ 223.296865][T11829] loop3: detected capacity change from 0 to 1024 [ 223.305024][T11829] EXT4-fs: Ignoring removed i_version option [ 223.311210][T11829] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.317997][T11829] EXT4-fs: Ignoring removed nobh option [ 223.323712][T11829] EXT4-fs: Ignoring removed bh option [ 223.361870][T11845] loop3: detected capacity change from 0 to 512 [ 223.443484][ T29] audit: type=1400 audit(223.413:9547): avc: denied { getopt } for pid=11852 comm="syz.3.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 223.463791][ T29] audit: type=1400 audit(223.413:9548): avc: denied { write } for pid=11852 comm="syz.3.2937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 224.130605][ T29] audit: type=1326 audit(224.103:9549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11855 comm="syz.1.2939" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x0 [ 224.158691][T11859] loop0: detected capacity change from 0 to 512 [ 224.167291][T11859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.185387][T11859] EXT4-fs (loop0): 1 truncate cleaned up [ 224.191771][T11859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.210661][ T29] audit: type=1326 audit(224.183:9550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 224.233845][ T29] audit: type=1326 audit(224.183:9551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 224.256894][ T29] audit: type=1326 audit(224.183:9552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 224.280018][ T29] audit: type=1326 audit(224.183:9553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11858 comm="syz.0.2938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 224.315754][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.349005][T11865] lo speed is unknown, defaulting to 1000 [ 224.357001][T11865] lo speed is unknown, defaulting to 1000 [ 224.359379][T11869] loop3: detected capacity change from 0 to 512 [ 224.512120][T11881] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.595836][T11881] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.647457][T11881] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.716063][T11881] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.788811][T11890] loop3: detected capacity change from 0 to 2048 [ 224.804626][T11881] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.818286][T11881] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.830575][T11881] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.844786][T11881] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.895060][T11890] loop3: p1 < > p4 [ 224.918770][T11890] loop3: p4 size 8388608 extends beyond EOD, truncated [ 224.983464][ T29] audit: type=1326 audit(224.953:9554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 225.034846][ T29] audit: type=1326 audit(224.953:9555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11893 comm="syz.0.2954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 225.094919][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'. [ 225.103896][T11900] netlink: 'syz.1.2957': attribute type 30 has an invalid length. [ 225.114262][T11900] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.122540][T11900] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.130899][T11900] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.139153][T11900] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.150291][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2957'. [ 225.159290][T11900] netlink: 'syz.1.2957': attribute type 30 has an invalid length. [ 225.375267][T11913] 9pnet_fd: Insufficient options for proto=fd [ 226.616972][T11919] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 226.734122][T11919] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 226.834213][T11935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2971'. [ 227.374510][T11939] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 227.381099][T11939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 227.388645][T11939] vhci_hcd vhci_hcd.0: Device attached [ 227.481077][T11941] vhci_hcd: connection closed [ 227.484612][ T37] vhci_hcd: stop threads [ 227.493753][ T37] vhci_hcd: release socket [ 227.498262][ T37] vhci_hcd: disconnect device [ 227.938971][T11968] lo speed is unknown, defaulting to 1000 [ 227.945948][T11968] lo speed is unknown, defaulting to 1000 [ 228.409225][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 228.409242][ T29] audit: type=1400 audit(228.383:9590): avc: denied { ioctl } for pid=11972 comm="syz.1.2981" path="socket:[38143]" dev="sockfs" ino=38143 ioctlcmd=0x89f8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.514857][ T29] audit: type=1326 audit(228.493:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.580882][ T29] audit: type=1326 audit(228.493:9592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.603943][ T29] audit: type=1326 audit(228.493:9593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.627021][ T29] audit: type=1326 audit(228.493:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.647990][T11983] loop2: detected capacity change from 0 to 512 [ 228.649826][ T29] audit: type=1326 audit(228.493:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.660161][ T58] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 228.678955][ T29] audit: type=1326 audit(228.493:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.709427][ T29] audit: type=1326 audit(228.493:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.716976][T11983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.732352][ T29] audit: type=1326 audit(228.493:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.768041][ T29] audit: type=1326 audit(228.493:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.1.2983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 228.819638][T11991] lo speed is unknown, defaulting to 1000 [ 228.828077][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.834468][T11991] lo speed is unknown, defaulting to 1000 [ 228.983224][T12002] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.993111][T12002] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.045117][T12002] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.055044][T12002] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.133331][T12002] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.143284][T12002] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.221650][T12002] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.231674][T12002] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.260734][T12029] lo speed is unknown, defaulting to 1000 [ 229.286708][T12029] lo speed is unknown, defaulting to 1000 [ 229.446330][T12027] sch_fq: defrate 0 ignored. [ 229.483973][T12002] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.492394][T12002] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.529100][T12002] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.537473][T12002] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.571427][T12002] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.579833][T12002] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.604064][T12002] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.612419][T12002] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.680357][T12046] openvswitch: netlink: Message has 6 unknown bytes. [ 229.782531][T12057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3009'. [ 229.845180][T12060] lo speed is unknown, defaulting to 1000 [ 229.857169][T12060] lo speed is unknown, defaulting to 1000 [ 230.075607][T12071] loop0: detected capacity change from 0 to 2048 [ 230.218598][T12071] loop0: p1 < > p4 [ 230.238922][T12071] loop0: p4 size 8388608 extends beyond EOD, truncated [ 230.463309][T12077] netlink: 'syz.1.3013': attribute type 21 has an invalid length. [ 230.471320][T12077] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3013'. [ 230.482260][T12077] netlink: 'syz.1.3013': attribute type 4 has an invalid length. [ 230.490066][T12077] netlink: 'syz.1.3013': attribute type 5 has an invalid length. [ 230.497848][T12077] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3013'. [ 230.733649][ T3424] page_pool_release_retry() stalled pool shutdown: id 66, 1 inflight 60 sec [ 230.947970][T12088] loop2: detected capacity change from 0 to 4096 [ 231.106753][T12088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.148789][T12088] lo speed is unknown, defaulting to 1000 [ 231.156145][T12088] lo speed is unknown, defaulting to 1000 [ 231.599432][T12091] loop0: detected capacity change from 0 to 1024 [ 231.983087][T12091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.002242][T12095] lo speed is unknown, defaulting to 1000 [ 232.045032][T12095] lo speed is unknown, defaulting to 1000 [ 232.061636][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.353691][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3025'. [ 232.362741][T12109] netlink: 'syz.5.3025': attribute type 30 has an invalid length. [ 232.375167][T12109] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.383576][T12109] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.391898][T12109] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.400150][T12109] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.417371][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3025'. [ 232.426494][T12109] netlink: 'syz.5.3025': attribute type 30 has an invalid length. [ 232.764491][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.815845][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 232.896688][T12121] loop2: detected capacity change from 0 to 512 [ 232.926458][T12121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.967129][T12121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.994735][ T3424] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 233.053870][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.219380][T12112] syz.5.3026 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 233.233424][T12112] CPU: 0 UID: 0 PID: 12112 Comm: syz.5.3026 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 233.233519][T12112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 233.233537][T12112] Call Trace: [ 233.233546][T12112] [ 233.233556][T12112] __dump_stack+0x1d/0x30 [ 233.233599][T12112] dump_stack_lvl+0xe8/0x140 [ 233.233618][T12112] dump_stack+0x15/0x1b [ 233.233634][T12112] dump_header+0x81/0x220 [ 233.233673][T12112] oom_kill_process+0x334/0x3f0 [ 233.233721][T12112] out_of_memory+0x979/0xb80 [ 233.233757][T12112] try_charge_memcg+0x5e6/0x9e0 [ 233.233789][T12112] obj_cgroup_charge_pages+0xa6/0x150 [ 233.233856][T12112] __memcg_kmem_charge_page+0x9f/0x170 [ 233.233898][T12112] __alloc_frozen_pages_noprof+0x188/0x360 [ 233.233937][T12112] alloc_pages_mpol+0xb3/0x250 [ 233.233982][T12112] alloc_pages_noprof+0x90/0x130 [ 233.234019][T12112] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 233.234116][T12112] __kvmalloc_node_noprof+0x30f/0x4e0 [ 233.234167][T12112] ? ip_set_alloc+0x1f/0x30 [ 233.234196][T12112] ? ip_set_alloc+0x1f/0x30 [ 233.234301][T12112] ? __kmalloc_cache_noprof+0x189/0x320 [ 233.234391][T12112] ip_set_alloc+0x1f/0x30 [ 233.234453][T12112] hash_netiface_create+0x282/0x740 [ 233.234543][T12112] ? __pfx_hash_netiface_create+0x10/0x10 [ 233.234571][T12112] ip_set_create+0x3c9/0x960 [ 233.234618][T12112] ? __nla_parse+0x40/0x60 [ 233.234651][T12112] nfnetlink_rcv_msg+0x4c6/0x590 [ 233.234747][T12112] ? selinux_capable+0x1f9/0x270 [ 233.234772][T12112] netlink_rcv_skb+0x123/0x220 [ 233.234810][T12112] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 233.234854][T12112] nfnetlink_rcv+0x16b/0x1690 [ 233.234887][T12112] ? insn_get_prefixes+0x99d/0xbe0 [ 233.234916][T12112] ? insn_get_prefixes+0x99d/0xbe0 [ 233.234955][T12112] ? ___slab_alloc+0x275/0x900 [ 233.234999][T12112] ? inat_get_opcode_attribute+0xc/0x20 [ 233.235032][T12112] ? insn_get_opcode+0x750/0x790 [ 233.235064][T12112] ? should_fail_ex+0x30/0x280 [ 233.235083][T12112] ? __rcu_read_unlock+0x34/0x70 [ 233.235107][T12112] ? context_to_sid+0x2da/0x310 [ 233.235159][T12112] ? sidtab_context_to_sid+0x5d/0x5e0 [ 233.235272][T12112] ? security_compute_sid+0xdcf/0xe30 [ 233.235306][T12112] ? kfree+0x27b/0x320 [ 233.235341][T12112] ? ebitmap_destroy+0x7d/0xa0 [ 233.235374][T12112] ? should_fail_ex+0x30/0x280 [ 233.235474][T12112] ? selinux_nlmsg_lookup+0x99/0x890 [ 233.235501][T12112] ? selinux_netlink_send+0x59f/0x5f0 [ 233.235526][T12112] ? __rcu_read_unlock+0x34/0x70 [ 233.235605][T12112] ? __netlink_lookup+0x266/0x2a0 [ 233.235731][T12112] netlink_unicast+0x59e/0x670 [ 233.235768][T12112] netlink_sendmsg+0x58b/0x6b0 [ 233.235817][T12112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.235926][T12112] __sock_sendmsg+0x145/0x180 [ 233.235956][T12112] ____sys_sendmsg+0x31e/0x4e0 [ 233.236048][T12112] ___sys_sendmsg+0x17b/0x1d0 [ 233.236158][T12112] __x64_sys_sendmsg+0xd4/0x160 [ 233.236200][T12112] x64_sys_call+0x2999/0x2fb0 [ 233.236229][T12112] do_syscall_64+0xd2/0x200 [ 233.236262][T12112] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.236373][T12112] ? clear_bhb_loop+0x40/0x90 [ 233.236400][T12112] ? clear_bhb_loop+0x40/0x90 [ 233.236496][T12112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.236525][T12112] RIP: 0033:0x7fc0a5c9e929 [ 233.236558][T12112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.236583][T12112] RSP: 002b:00007fc0a4307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.236610][T12112] RAX: ffffffffffffffda RBX: 00007fc0a5ec5fa0 RCX: 00007fc0a5c9e929 [ 233.236627][T12112] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 233.236643][T12112] RBP: 00007fc0a5d20b39 R08: 0000000000000000 R09: 0000000000000000 [ 233.236673][T12112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.236689][T12112] R13: 0000000000000000 R14: 00007fc0a5ec5fa0 R15: 00007fff761cbd88 [ 233.236716][T12112] [ 233.623351][ T29] kauditd_printk_skb: 820 callbacks suppressed [ 233.623368][ T29] audit: type=1326 audit(233.330:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c563258e7 code=0x7ffc0000 [ 233.623529][T12112] memory: usage 307200kB, limit 307200kB, failcnt 543 [ 233.629583][ T29] audit: type=1326 audit(233.330:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c562cab19 code=0x7ffc0000 [ 233.629619][ T29] audit: type=1326 audit(233.330:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 233.705924][T12112] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 233.713855][T12112] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 233.721254][T12112] Memory cgroup stats for /syz5: [ 233.721601][T12112] cache 0 [ 233.729537][T12112] rss 0 [ 233.732399][T12112] shmem 0 [ 233.735378][T12112] mapped_file 0 [ 233.738877][T12112] dirty 0 [ 233.741855][T12112] writeback 0 [ 233.745345][T12112] workingset_refault_anon 233 [ 233.750107][T12112] workingset_refault_file 3 [ 233.754787][T12112] swap 466944 [ 233.758176][T12112] swapcached 0 [ 233.761569][T12112] nr_memmap_boot_pages 168045 [ 233.766331][T12112] pgpgin 168043 [ 233.769809][T12112] pglazyfree 152755 [ 233.773747][T12112] pgfault 86 [ 233.777052][T12112] a_other 0 [ 233.780211][T12112] inactive_anon 0 [ 233.783888][T12112] active_anon 8192 [ 233.787682][T12112] inactive_file 0 [ 233.791420][T12112] active_file 0 [ 233.795003][T12112] hierarchical_memory_limit 314572800 [ 233.800514][T12112] hierarchical_memsw_limit 9223372036854771712 [ 233.806766][T12112] total_cache 0 [ 233.810250][T12112] total_rss 0 [ 233.813680][T12112] total_shmem 0 [ 233.817300][T12112] total_mapped_file 0 [ 233.821305][T12112] total_dirty 0 [ 233.825019][T12112] total_writeback 0 [ 233.828852][T12112] total_workingset_refault_anon 233 [ 233.834206][T12112] total_workingset_refault_file 3 [ 233.839251][T12112] total_swap 466944 [ 233.843119][T12112] total_swapcached 0 [ 233.847042][T12112] total_nr_memmap_boot_pages 168045 [ 233.852332][T12112] total_pgpgin 168043 [ 233.856340][T12112] total_pglazyfree 152755 [ 233.860711][T12112] total_pgfault 86 [ 233.864452][T12112] total_a_other 0 [ 233.868140][T12112] total_inactive_anon 0 [ 233.872337][T12112] total_active_anon 8192 [ 233.876603][T12112] total_inactive_file 0 [ 233.880949][T12112] total_active_file 0 [ 233.885015][T12112] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3026,pid=12111,uid=0 [ 233.900323][T12112] Memory cgroup out of memory: Killed process 12111 (syz.5.3026) total-vm:95800kB, anon-rss:1064kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 233.939653][ T29] audit: type=1326 audit(234.027:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c563258e7 code=0x7ffc0000 [ 233.962726][ T29] audit: type=1326 audit(234.027:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c562cab19 code=0x7ffc0000 [ 233.985992][ T29] audit: type=1326 audit(234.027:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 234.009080][ T29] audit: type=1326 audit(234.037:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c563258e7 code=0x7ffc0000 [ 234.032088][ T29] audit: type=1326 audit(234.037:10427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c562cab19 code=0x7ffc0000 [ 234.055059][ T29] audit: type=1326 audit(234.037:10428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 234.078106][ T29] audit: type=1326 audit(234.047:10429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.1.3023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c563258e7 code=0x7ffc0000 [ 234.248180][T12134] loop0: detected capacity change from 0 to 8192 [ 234.291187][T12134] loop0: p1 p4 < > [ 234.295083][T12134] loop0: p1 start 4261412864 is beyond EOD, truncated [ 234.373516][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3042'. [ 234.620817][T12169] xt_hashlimit: max too large, truncated to 1048576 [ 234.928450][T12178] loop3: detected capacity change from 0 to 1024 [ 235.029395][T12181] loop0: detected capacity change from 0 to 512 [ 235.038914][T12181] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3053: iget: bad extended attribute block 1 [ 235.053098][T12181] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3053: couldn't read orphan inode 15 (err -117) [ 235.067660][T12181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.124507][T12188] bridge: RTM_NEWNEIGH with invalid ether address [ 235.151274][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.162347][T12190] vlan0: entered promiscuous mode [ 235.196627][T12192] loop0: detected capacity change from 0 to 2048 [ 235.212778][T12192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.261189][T12197] lo speed is unknown, defaulting to 1000 [ 235.271471][T12197] lo speed is unknown, defaulting to 1000 [ 235.344676][T12200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3060'. [ 235.423696][T12205] bridge: RTM_NEWNEIGH with invalid ether address [ 235.478009][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.494276][T10414] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 235.502099][T12208] tipc: Enabled bearer , priority 0 [ 235.520156][T12206] tipc: Resetting bearer [ 235.538389][T12213] loop0: detected capacity change from 0 to 2048 [ 235.553088][T12206] tipc: Disabling bearer [ 235.673146][T12219] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 235.726296][T12226] netlink: 'syz.0.3070': attribute type 21 has an invalid length. [ 235.850944][T12236] xt_hashlimit: max too large, truncated to 1048576 [ 235.880368][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.889302][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.905181][T12239] loop0: detected capacity change from 0 to 1024 [ 235.939463][T12239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.983841][T12239] kernel read not supported for file /policy (pid: 12239 comm: syz.0.3073) [ 236.093676][T12255] loop3: detected capacity change from 0 to 2048 [ 236.156051][T12257] wireguard0: entered promiscuous mode [ 236.162868][T12257] wireguard0: entered allmulticast mode [ 236.256721][T12260] lo speed is unknown, defaulting to 1000 [ 236.263277][T12260] lo speed is unknown, defaulting to 1000 [ 236.287728][T12247] loop2: detected capacity change from 0 to 8192 [ 236.330789][T12247] loop2: p2 p3 p4 [ 236.337522][T12247] loop2: p2 start 452985600 is beyond EOD, truncated [ 236.344307][T12247] loop2: p3 size 33554432 extends beyond EOD, truncated [ 236.354838][T12247] loop2: p4 start 8388607 is beyond EOD, truncated [ 236.491924][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.509406][T12274] xt_hashlimit: max too large, truncated to 1048576 [ 236.550231][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 236.579544][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 236.775943][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 236.795500][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 236.856460][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 236.873736][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3087'. [ 237.003031][T12297] loop0: detected capacity change from 0 to 512 [ 237.021187][ T37] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 237.082184][T12297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.220307][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.317024][T12291] Set syz1 is full, maxelem 65536 reached [ 237.317220][T12307] __nla_validate_parse: 1 callbacks suppressed [ 237.317236][T12307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3097'. [ 237.362889][T12309] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.431060][T12314] netlink: 'syz.1.3099': attribute type 4 has an invalid length. [ 237.481098][T12314] netlink: 'syz.1.3099': attribute type 4 has an invalid length. [ 237.496086][T12309] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.598117][T12321] lo speed is unknown, defaulting to 1000 [ 237.604803][T12321] lo speed is unknown, defaulting to 1000 [ 237.772614][T12309] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.798490][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 237.822632][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3101'. [ 237.853143][T12309] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.864813][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 237.873879][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 237.886106][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 237.897447][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 237.906613][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3102'. [ 237.959869][T12309] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.973165][T12309] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.986148][T12309] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.999642][T12309] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.477766][T12339] loop0: detected capacity change from 0 to 8192 [ 238.530143][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 238.530158][ T29] audit: type=1326 audit(238.728:10717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff136ec58e7 code=0x7ffc0000 [ 238.539938][T12339] loop0: p2 p3 p4 [ 238.559848][ T29] audit: type=1326 audit(238.728:10718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff136e6ab19 code=0x7ffc0000 [ 238.586600][ T29] audit: type=1326 audit(238.728:10719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff136ece929 code=0x7ffc0000 [ 238.611526][T12339] loop0: p2 start 452985600 is beyond EOD, truncated [ 238.618306][T12339] loop0: p3 size 33554432 extends beyond EOD, truncated [ 238.734589][T12343] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3109'. [ 238.817324][T12341] Set syz1 is full, maxelem 65536 reached [ 238.824153][ T29] audit: type=1326 audit(238.790:10720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff136ec58e7 code=0x7ffc0000 [ 238.847281][ T29] audit: type=1326 audit(238.790:10721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff136e6ab19 code=0x7ffc0000 [ 238.870241][ T29] audit: type=1326 audit(238.790:10722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff136ece929 code=0x7ffc0000 [ 238.893271][ T29] audit: type=1326 audit(238.831:10723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff136ec58e7 code=0x7ffc0000 [ 238.916164][ T29] audit: type=1326 audit(238.831:10724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff136e6ab19 code=0x7ffc0000 [ 238.939250][ T29] audit: type=1326 audit(238.831:10725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff136ece929 code=0x7ffc0000 [ 238.962256][ T29] audit: type=1326 audit(238.862:10726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12329 comm="syz.2.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff136ec58e7 code=0x7ffc0000 [ 238.991045][T12339] loop0: p4 start 8388607 is beyond EOD, truncated [ 239.144013][T12352] loop2: detected capacity change from 0 to 2048 [ 239.181118][T12359] loop3: detected capacity change from 0 to 512 [ 239.187905][T12359] EXT4-fs: Ignoring removed oldalloc option [ 239.220715][T12363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3119'. [ 239.230682][T12362] loop0: detected capacity change from 0 to 1024 [ 239.260275][T12366] loop2: detected capacity change from 0 to 512 [ 239.269187][T12362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.287443][T12366] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.315699][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 239.382285][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.992773][T12401] loop0: detected capacity change from 0 to 512 [ 240.012589][T12401] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 240.027542][T12401] EXT4-fs (loop0): orphan cleanup on readonly fs [ 240.046465][T12401] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.3142: Failed to acquire dquot type 1 [ 240.074178][T12401] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3142: bg 0: block 40: padding at end of block bitmap is not set [ 240.091495][T12401] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 240.101454][T12401] EXT4-fs (loop0): 1 truncate cleaned up [ 240.109801][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.110049][T12401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.182994][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.276159][T12430] netlink: 'syz.5.3144': attribute type 10 has an invalid length. [ 240.344376][T12434] loop0: detected capacity change from 0 to 128 [ 240.360808][T12434] syz.0.3146: attempt to access beyond end of device [ 240.360808][T12434] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 240.374722][T12434] syz.0.3146: attempt to access beyond end of device [ 240.374722][T12434] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 240.411627][T12434] syz.0.3146: attempt to access beyond end of device [ 240.411627][T12434] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 240.437795][T12434] syz.0.3146: attempt to access beyond end of device [ 240.437795][T12434] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 240.447366][T12437] lo: entered promiscuous mode [ 240.470796][T12434] syz.0.3146: attempt to access beyond end of device [ 240.470796][T12434] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 240.532399][T12445] syz.0.3146: attempt to access beyond end of device [ 240.532399][T12445] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 240.546211][T12434] syz.0.3146: attempt to access beyond end of device [ 240.546211][T12434] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 240.572851][T12445] syz.0.3146: attempt to access beyond end of device [ 240.572851][T12445] loop0: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 240.618450][T12434] syz.0.3146: attempt to access beyond end of device [ 240.618450][T12434] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 240.632096][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 240.669015][T12445] syz.0.3146: attempt to access beyond end of device [ 240.669015][T12445] loop0: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 240.759803][T12452] loop3: detected capacity change from 0 to 512 [ 240.775511][T12452] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 240.783717][T12452] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup [ 240.794320][T12452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.871054][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.881191][T12454] wireguard0: entered promiscuous mode [ 240.889117][T12454] wireguard0: entered allmulticast mode [ 240.937059][T12465] netlink: 'syz.1.3154': attribute type 10 has an invalid length. [ 240.959247][T12465] dummy0: entered promiscuous mode [ 240.970367][T12465] dummy0: entered allmulticast mode [ 240.986021][T12465] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 241.014024][T12467] lo speed is unknown, defaulting to 1000 [ 241.021864][T12467] lo speed is unknown, defaulting to 1000 [ 241.331240][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 242.179392][T12502] netlink: 'syz.2.3169': attribute type 1 has an invalid length. [ 242.215076][T12502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.359021][T12502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.376407][T12502] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 242.410213][T12502] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 242.469751][T12513] __nla_validate_parse: 10 callbacks suppressed [ 242.469769][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 242.491303][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 242.537097][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 242.548532][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 242.557911][T12509] wireguard0: entered promiscuous mode [ 242.564712][T12509] wireguard0: entered allmulticast mode [ 242.591008][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 242.601258][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 242.653248][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3175'. [ 242.670912][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'. [ 242.901837][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 242.910810][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3182'. [ 243.073976][T12550] ref_ctr increment failed for inode: 0xce2 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005ed40 [ 243.086066][T12549] uprobe: syz.1.3187:12549 failed to unregister, leaking uprobe [ 243.381681][T12554] lo speed is unknown, defaulting to 1000 [ 243.388665][T12554] lo speed is unknown, defaulting to 1000 [ 243.573582][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 243.573601][ T29] audit: type=1326 audit(243.900:11130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12510 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff8a42758e7 code=0x7ffc0000 [ 243.602825][ T29] audit: type=1326 audit(243.900:11131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12510 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff8a421ab19 code=0x7ffc0000 [ 243.625805][ T29] audit: type=1326 audit(243.900:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12510 comm="syz.0.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 244.207343][T12561] loop3: detected capacity change from 0 to 1024 [ 244.427859][T12559] wireguard1: entered promiscuous mode [ 244.434332][T12559] wireguard1: entered allmulticast mode [ 245.326290][T12579] lo speed is unknown, defaulting to 1000 [ 245.360135][T12579] lo speed is unknown, defaulting to 1000 [ 245.863120][T12570] Set syz1 is full, maxelem 65536 reached [ 245.903419][ T29] audit: type=1326 audit(246.278:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.5.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 245.926559][ T29] audit: type=1326 audit(246.278:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.5.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 245.949606][ T29] audit: type=1326 audit(246.278:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.5.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 245.972697][ T29] audit: type=1326 audit(246.278:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.5.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 245.995746][ T29] audit: type=1326 audit(246.278:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.5.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 246.018920][ T29] audit: type=1326 audit(246.278:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.5.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 246.041937][ T29] audit: type=1326 audit(246.278:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12596 comm="syz.5.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 246.165664][T12615] loop2: detected capacity change from 0 to 512 [ 246.177862][T12615] EXT4-fs (loop2): 1 orphan inode deleted [ 246.185725][T12615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.198388][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 246.332133][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.503235][T12630] loop2: detected capacity change from 0 to 1024 [ 246.559870][T12630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.582287][T12630] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3213: bg 0: block 260: invalid block bitmap [ 246.660646][T12630] smc: net device bond0 applied user defined pnetid SYZ0 [ 246.674958][T12630] smc: net device bond0 erased user defined pnetid SYZ0 [ 246.724785][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.150008][T12634] Set syz1 is full, maxelem 65536 reached [ 247.300139][T12653] xt_cgroup: invalid path, errno=-2 [ 247.598544][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 248.237931][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 248.514446][T12685] lo speed is unknown, defaulting to 1000 [ 248.520886][T12685] lo speed is unknown, defaulting to 1000 [ 249.037581][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 249.037597][ T29] audit: type=1326 audit(249.471:11161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.068554][T12694] __nla_validate_parse: 22 callbacks suppressed [ 249.068635][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3236'. [ 249.084051][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3236'. [ 249.170295][ T29] audit: type=1326 audit(249.502:11162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.193445][ T29] audit: type=1326 audit(249.502:11163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.216529][ T29] audit: type=1326 audit(249.502:11164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.239789][ T29] audit: type=1326 audit(249.553:11165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.262887][ T29] audit: type=1326 audit(249.553:11166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.286055][ T29] audit: type=1326 audit(249.573:11167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.309123][ T29] audit: type=1326 audit(249.573:11168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.332154][ T29] audit: type=1326 audit(249.573:11169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.355157][ T29] audit: type=1326 audit(249.573:11170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.3.3238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 249.412657][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3236'. [ 249.421719][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3236'. [ 249.460267][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3236'. [ 249.469394][T12694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3236'. [ 249.597932][T12709] loop3: detected capacity change from 0 to 512 [ 250.571390][T12726] loop3: detected capacity change from 0 to 128 [ 250.684952][T12725] wireguard0: entered promiscuous mode [ 250.692405][T12725] wireguard0: entered allmulticast mode [ 250.899535][T12728] lo speed is unknown, defaulting to 1000 [ 250.926088][T12728] lo speed is unknown, defaulting to 1000 [ 251.016003][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 251.025000][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 251.034316][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 251.067834][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3251'. [ 251.497909][T12751] loop2: detected capacity change from 0 to 128 [ 251.518650][T12751] bio_check_eod: 70 callbacks suppressed [ 251.518671][T12751] syz.2.3256: attempt to access beyond end of device [ 251.518671][T12751] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 251.539136][T12751] syz.2.3256: attempt to access beyond end of device [ 251.539136][T12751] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 251.786373][T12755] lo speed is unknown, defaulting to 1000 [ 251.793135][T12755] lo speed is unknown, defaulting to 1000 [ 252.473074][T12751] syz.2.3256: attempt to access beyond end of device [ 252.473074][T12751] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 252.519341][T12751] syz.2.3256: attempt to access beyond end of device [ 252.519341][T12751] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 252.556526][T12764] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 252.585496][T12751] syz.2.3256: attempt to access beyond end of device [ 252.585496][T12751] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 252.634784][T12764] dummy0: entered promiscuous mode [ 252.645757][T12764] dummy0: entered allmulticast mode [ 252.655969][T12764] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 252.683747][T12751] syz.2.3256: attempt to access beyond end of device [ 252.683747][T12751] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 252.900496][T12751] syz.2.3256: attempt to access beyond end of device [ 252.900496][T12751] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 253.014181][T12763] lo speed is unknown, defaulting to 1000 [ 253.067577][T12765] syz.2.3256: attempt to access beyond end of device [ 253.067577][T12765] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 253.074460][T12751] syz.2.3256: attempt to access beyond end of device [ 253.074460][T12751] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 253.100171][T12763] lo speed is unknown, defaulting to 1000 [ 253.124990][T12751] syz.2.3256: attempt to access beyond end of device [ 253.124990][T12751] loop2: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 253.457805][T12776] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.466395][T12776] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.474828][T12776] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.483254][T12776] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.019004][T12783] batadv_slave_1: entered promiscuous mode [ 254.026524][T12783] batadv_slave_1: left promiscuous mode [ 254.063396][T12787] lo speed is unknown, defaulting to 1000 [ 254.088103][T12794] __nla_validate_parse: 2 callbacks suppressed [ 254.088118][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'. [ 254.109955][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 254.109974][ T29] audit: type=1326 audit(254.588:11261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.139511][ T29] audit: type=1326 audit(254.588:11262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.162838][ T29] audit: type=1326 audit(254.588:11263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.185998][ T29] audit: type=1326 audit(254.588:11264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.209197][ T29] audit: type=1326 audit(254.588:11265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.232335][ T29] audit: type=1326 audit(254.588:11266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.255606][ T29] audit: type=1326 audit(254.588:11267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.278819][ T29] audit: type=1326 audit(254.588:11268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.301839][ T29] audit: type=1326 audit(254.588:11269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.324997][ T29] audit: type=1326 audit(254.588:11270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12793 comm="syz.1.3268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5632e929 code=0x7ffc0000 [ 254.425830][T12787] lo speed is unknown, defaulting to 1000 [ 255.007829][T12822] loop0: detected capacity change from 0 to 512 [ 255.042611][T12822] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 255.053643][T12822] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 255.063748][T12822] System zones: 0-2, 18-18, 34-35 [ 255.070862][T12822] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.093356][T12819] lo speed is unknown, defaulting to 1000 [ 255.106993][T12819] lo speed is unknown, defaulting to 1000 [ 255.268690][T12827] EXT4-fs (loop0): re-mounted 00000000-0700-0000-0000-000000000000 ro. [ 255.500463][T12831] loop2: detected capacity change from 0 to 128 [ 255.851563][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 255.964886][T12844] loop3: detected capacity change from 0 to 512 [ 256.069150][T12856] netlink: 'syz.3.3285': attribute type 4 has an invalid length. [ 256.088961][ T3410] lo speed is unknown, defaulting to 1000 [ 256.094838][ T3410] syz2: Port: 1 Link DOWN [ 256.102108][T12856] netlink: 'syz.3.3285': attribute type 4 has an invalid length. [ 256.116763][ T3410] lo speed is unknown, defaulting to 1000 [ 256.122786][ T3410] syz2: Port: 1 Link ACTIVE [ 256.279885][T12866] smc: net device bond0 applied user defined pnetid SYZ0 [ 256.288142][T12866] smc: net device bond0 erased user defined pnetid SYZ0 [ 256.492791][T12868] netlink: 'syz.1.3290': attribute type 13 has an invalid length. [ 256.501221][T12868] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3290'. [ 256.513225][T12868] erspan0: refused to change device tx_queue_len [ 256.521074][T12868] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 256.546426][T12876] loop3: detected capacity change from 0 to 256 [ 256.593656][T12876] loop3: detected capacity change from 0 to 2048 [ 256.608022][T12877] lo speed is unknown, defaulting to 1000 [ 256.624284][T12876] EXT4-fs: Ignoring removed i_version option [ 256.634276][T12877] lo speed is unknown, defaulting to 1000 [ 256.918441][T12882] bridge0: entered promiscuous mode [ 256.931177][T12882] bridge0: port 1(macsec0) entered blocking state [ 256.937874][T12882] bridge0: port 1(macsec0) entered disabled state [ 256.967379][T12882] macsec0: entered allmulticast mode [ 256.972779][T12882] bridge0: entered allmulticast mode [ 257.011624][T12882] macsec0: left allmulticast mode [ 257.016751][T12882] bridge0: left allmulticast mode [ 257.066264][T12882] bridge0: left promiscuous mode [ 257.365745][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3311'. [ 257.723168][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 257.982310][T12935] netlink: 'syz.5.3314': attribute type 13 has an invalid length. [ 257.990196][T12935] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3314'. [ 258.013182][T12935] erspan0: refused to change device tx_queue_len [ 258.019575][T12935] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 258.495211][T12946] loop0: detected capacity change from 0 to 512 [ 258.503669][T12946] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 258.520271][T12946] EXT4-fs (loop0): 1 truncate cleaned up [ 258.527013][T12946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.580549][T12954] lo speed is unknown, defaulting to 1000 [ 258.587195][T12954] lo speed is unknown, defaulting to 1000 [ 258.657303][T12953] lo speed is unknown, defaulting to 1000 [ 258.663930][T12953] lo speed is unknown, defaulting to 1000 [ 258.779673][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.847093][T12957] Set syz1 is full, maxelem 65536 reached [ 259.239299][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 259.239316][ T29] audit: type=1400 audit(259.786:11408): avc: denied { bind } for pid=12963 comm="syz.5.3324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.372787][ T29] audit: type=1400 audit(259.907:11409): avc: denied { create } for pid=12969 comm="syz.5.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.392240][ T29] audit: type=1400 audit(259.907:11410): avc: denied { setopt } for pid=12969 comm="syz.5.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.411389][ T29] audit: type=1400 audit(259.907:11411): avc: denied { allowed } for pid=12969 comm="syz.5.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 259.430368][ T29] audit: type=1400 audit(259.907:11412): avc: denied { sqpoll } for pid=12969 comm="syz.5.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 259.449269][ T29] audit: type=1400 audit(259.907:11413): avc: denied { create } for pid=12969 comm="syz.5.3326" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 259.512290][ T29] audit: type=1400 audit(259.968:11414): avc: denied { execmem } for pid=12972 comm="syz.5.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 259.531257][ T29] audit: type=1400 audit(260.028:11415): avc: denied { bind } for pid=12960 comm="syz.2.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 259.550168][ T29] audit: type=1400 audit(260.028:11416): avc: denied { name_bind } for pid=12960 comm="syz.2.3323" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 259.571646][ T29] audit: type=1400 audit(260.028:11417): avc: denied { node_bind } for pid=12960 comm="syz.2.3323" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 259.719739][T12975] loop0: detected capacity change from 0 to 512 [ 259.727457][T12975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.749597][T12975] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 259.758475][T12975] System zones: 0-2, 18-18, 34-34 [ 259.768168][T12975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.877642][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.457181][T12997] loop2: detected capacity change from 0 to 2048 [ 260.512723][T12997] loop2: p1 < > p4 [ 260.525127][T12997] loop2: p4 size 8388608 extends beyond EOD, truncated [ 260.665639][T13011] loop2: detected capacity change from 0 to 1024 [ 260.701034][T13011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.732201][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3336'. [ 260.790369][T13019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3350'. [ 260.806136][T12994] loop3: detected capacity change from 0 to 128 [ 260.843172][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.934232][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 261.002204][T13031] loop3: detected capacity change from 0 to 1024 [ 261.007593][T13029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3343'. [ 261.017561][T13029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3343'. [ 261.026541][T13029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3343'. [ 261.039057][T13029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3343'. [ 261.259600][T13046] netlink: 'syz.0.3351': attribute type 4 has an invalid length. [ 261.284765][T13046] netlink: 'syz.0.3351': attribute type 4 has an invalid length. [ 261.293651][ T1040] lo speed is unknown, defaulting to 1000 [ 261.299546][ T1040] syz0: Port: 1 Link DOWN [ 261.334823][ T1040] lo speed is unknown, defaulting to 1000 [ 261.340717][ T1040] syz0: Port: 1 Link ACTIVE [ 261.362513][T13053] loop0: detected capacity change from 0 to 128 [ 261.382736][T13053] bio_check_eod: 90 callbacks suppressed [ 261.382756][T13053] syz.0.3354: attempt to access beyond end of device [ 261.382756][T13053] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 261.408117][T13051] loop2: detected capacity change from 0 to 8192 [ 261.415872][T13053] syz.0.3354: attempt to access beyond end of device [ 261.415872][T13053] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 261.430791][T13053] syz.0.3354: attempt to access beyond end of device [ 261.430791][T13053] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 261.446268][T13053] syz.0.3354: attempt to access beyond end of device [ 261.446268][T13053] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 261.506298][T13053] syz.0.3354: attempt to access beyond end of device [ 261.506298][T13053] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 261.519832][T13053] syz.0.3354: attempt to access beyond end of device [ 261.519832][T13053] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 261.535838][T13056] syz.0.3354: attempt to access beyond end of device [ 261.535838][T13056] loop0: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 261.549666][T13053] syz.0.3354: attempt to access beyond end of device [ 261.549666][T13053] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 261.563544][T13056] syz.0.3354: attempt to access beyond end of device [ 261.563544][T13056] loop0: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 261.571513][T13053] syz.0.3354: attempt to access beyond end of device [ 261.571513][T13053] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 261.606353][T13052] Buffer I/O error on dev loop0, logical block 305, async page read [ 261.623151][T13052] Buffer I/O error on dev loop0, logical block 306, async page read [ 261.645561][T13052] Buffer I/O error on dev loop0, logical block 307, async page read [ 261.679377][T13052] Buffer I/O error on dev loop0, logical block 308, async page read [ 261.706869][T13052] Buffer I/O error on dev loop0, logical block 309, async page read [ 261.732902][T13052] Buffer I/O error on dev loop0, logical block 310, async page read [ 261.754825][T13052] Buffer I/O error on dev loop0, logical block 311, async page read [ 261.785334][T13052] Buffer I/O error on dev loop0, logical block 312, async page read [ 261.803207][T13052] Buffer I/O error on dev loop0, logical block 305, async page read [ 261.811537][T13070] netlink: 'syz.1.3358': attribute type 1 has an invalid length. [ 261.834752][T13070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.844379][T13052] Buffer I/O error on dev loop0, logical block 306, async page read [ 261.886786][T13070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.898875][T13070] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 261.911654][T13070] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 261.990272][T13072] veth7: entered promiscuous mode [ 261.997218][T13072] bond0: (slave veth7): Enslaving as an active interface with a down link [ 262.013648][T13072] erspan0: entered allmulticast mode [ 262.023866][T13072] bond0: (slave erspan0): making interface the new active one [ 262.031956][T13072] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 262.155839][T13090] $Hÿ: left promiscuous mode [ 262.160926][T13090] dummy0: left promiscuous mode [ 262.167335][T13090] wg2: left promiscuous mode [ 262.182276][T13090] ªªªªªª: left promiscuous mode [ 262.187171][T13090] bond1: left promiscuous mode [ 262.194613][T13090] bond3: left promiscuous mode [ 262.332350][T13095] loop3: detected capacity change from 0 to 128 [ 262.542158][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3365'. [ 262.597701][T13103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3366'. [ 262.737086][ T3424] IPVS: starting estimator thread 0... [ 262.858464][T13118] loop0: detected capacity change from 0 to 512 [ 262.858575][T13109] IPVS: using max 2256 ests per chain, 112800 per kthread [ 262.874221][T13117] loop2: detected capacity change from 0 to 512 [ 262.874689][T13117] journal_path: Lookup failure for './file0/../file0' [ 262.887433][T13117] EXT4-fs: error: could not find journal device path [ 262.930938][T13118] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.933227][T13118] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.3371: corrupted inode contents [ 262.933482][T13118] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.3371: mark_inode_dirty error [ 262.948746][T13118] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.3371: corrupted inode contents [ 262.967264][T13118] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.3371: corrupted inode contents [ 262.974520][T13118] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.3371: mark_inode_dirty error [ 262.974908][T13118] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.3371: corrupted inode contents [ 262.975126][T13118] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.3371: mark_inode_dirty error [ 262.975345][T13118] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.3371: corrupted inode contents [ 262.975590][T13118] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.3371: mark_inode_dirty error [ 262.978222][T13118] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.3371: corrupted inode contents [ 263.007783][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.136518][T13129] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 263.142647][T13129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.148885][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'. [ 263.185590][T13129] bond4 (unregistering): Released all slaves [ 263.431499][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 263.512816][T13141] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 263.577124][T13141] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.585513][T13141] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.593758][T13141] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.602011][T13141] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.646185][T13141] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 263.656392][T13144] loop3: detected capacity change from 0 to 1024 [ 263.981086][T13137] lo speed is unknown, defaulting to 1000 [ 264.004963][T13137] lo speed is unknown, defaulting to 1000 [ 264.068147][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 264.658968][T13161] netlink: 'syz.3.3386': attribute type 4 has an invalid length. [ 264.711304][ T1040] lo speed is unknown, defaulting to 1000 [ 264.717149][ T1040] syz2: Port: 1 Link DOWN [ 264.721799][T13163] netlink: 'syz.3.3386': attribute type 4 has an invalid length. [ 264.755764][T13164] ipvlan0: entered promiscuous mode [ 264.786275][T13164] bridge0: port 1(ipvlan0) entered blocking state [ 264.792795][T13164] bridge0: port 1(ipvlan0) entered disabled state [ 264.825247][T13164] ipvlan0: entered allmulticast mode [ 264.830635][T13164] bridge0: entered allmulticast mode [ 264.952157][T13164] ipvlan0: left allmulticast mode [ 264.957283][T13164] bridge0: left allmulticast mode [ 265.263452][T13171] lo speed is unknown, defaulting to 1000 [ 265.269637][T13171] lo speed is unknown, defaulting to 1000 [ 265.668292][T13179] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.678255][T13179] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.748911][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 265.748937][ T29] audit: type=1400 audit(266.258:11863): avc: denied { setopt } for pid=13178 comm="syz.1.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.840783][ T3410] lo speed is unknown, defaulting to 1000 [ 265.846589][ T3410] syz2: Port: 1 Link ACTIVE [ 265.857220][ T29] audit: type=1400 audit(266.449:11864): avc: denied { ioctl } for pid=13182 comm="syz.2.3392" path="socket:[43280]" dev="sockfs" ino=43280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 265.882604][ T29] audit: type=1400 audit(266.449:11865): avc: denied { read } for pid=13185 comm="syz.5.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 265.921429][ T29] audit: type=1400 audit(266.499:11866): avc: denied { create } for pid=13182 comm="syz.2.3392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.980323][T13179] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.990295][T13179] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.062355][T13197] __nla_validate_parse: 5 callbacks suppressed [ 266.062375][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3395'. [ 266.088646][T13179] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.098532][T13179] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.215586][T13179] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.225469][T13179] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.281979][T13204] lo speed is unknown, defaulting to 1000 [ 266.288771][T13204] lo speed is unknown, defaulting to 1000 [ 266.354760][T13179] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.363321][T13179] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.377551][T13212] vlan0: entered allmulticast mode [ 266.382758][T13212] bridge_slave_0: entered allmulticast mode [ 266.392585][T13179] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.400960][T13179] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.414609][T13179] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.423087][T13179] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.436388][T13179] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.444885][T13179] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.469346][ T29] audit: type=1400 audit(267.062:11867): avc: denied { mounton } for pid=13214 comm="syz.0.3400" path="/633/file0" dev="tmpfs" ino=3418 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 266.496295][ T29] audit: type=1400 audit(267.092:11868): avc: denied { mount } for pid=13214 comm="syz.0.3400" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.530195][ T29] audit: type=1400 audit(267.092:11869): avc: denied { write } for pid=13214 comm="syz.0.3400" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.550598][ T29] audit: type=1400 audit(267.092:11870): avc: denied { open } for pid=13214 comm="syz.0.3400" path="/633/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 266.572646][ T29] audit: type=1400 audit(267.122:11871): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 266.617180][T13220] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.627082][T13220] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.657143][ T29] audit: type=1400 audit(267.253:11872): avc: denied { create } for pid=13225 comm="syz.3.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 266.690894][T13220] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.700761][T13220] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.770717][T13220] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.780743][T13220] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.911316][T13220] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.921409][T13220] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.017381][T13242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3409'. [ 267.036503][T13246] loop0: detected capacity change from 0 to 256 [ 267.051493][T13248] netlink: 'syz.5.3411': attribute type 1 has an invalid length. [ 267.079220][T13248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.096131][T13248] ipvlan0: entered promiscuous mode [ 267.201034][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 267.222645][T13259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3414'. [ 267.278042][T13256] netlink: 'syz.2.3413': attribute type 13 has an invalid length. [ 267.285961][T13256] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3413'. [ 267.296942][T13256] erspan0: refused to change device tx_queue_len [ 267.303503][T13256] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 267.379900][T13261] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 267.488060][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3417'. [ 267.509749][T13265] loop2: detected capacity change from 0 to 512 [ 267.518831][T13265] EXT4-fs (loop2): 1 truncate cleaned up [ 267.526806][T13265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.572283][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.631929][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3420'. [ 267.651924][T13276] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13276 comm=syz.2.3420 [ 267.692700][T13281] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 267.708429][T13281] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.727331][T13281] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.734719][T13281] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 267.746856][T13281] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 267.781493][T13285] veth9: entered promiscuous mode [ 267.788396][T13285] bond7: (slave veth9): Enslaving as an active interface with a down link [ 267.811886][T13281] erspan0: entered allmulticast mode [ 267.821317][T13281] bond7: (slave erspan0): making interface the new active one [ 267.829423][T13281] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 268.146135][T13303] netlink: 'syz.0.3427': attribute type 13 has an invalid length. [ 268.154108][T13303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3427'. [ 268.168198][T13303] erspan0: refused to change device tx_queue_len [ 268.175128][T13303] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 268.749101][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3438'. [ 268.860711][T13220] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.869008][T13220] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.912915][T13331] loop2: detected capacity change from 0 to 128 [ 268.923082][T13220] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.931455][T13220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.963757][T13220] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.972079][T13220] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.991326][T13315] loop0: detected capacity change from 0 to 8192 [ 269.004511][T13220] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.012580][T13331] bio_check_eod: 191 callbacks suppressed [ 269.012601][T13331] syz.2.3441: attempt to access beyond end of device [ 269.012601][T13331] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 269.012837][T13220] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.031137][T13331] syz.2.3441: attempt to access beyond end of device [ 269.031137][T13331] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 269.060385][T13331] syz.2.3441: attempt to access beyond end of device [ 269.060385][T13331] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 269.075353][T13315] loop0: p1 p3 p4 [ 269.080232][T13315] loop0: p1 size 8390912 extends beyond EOD, truncated [ 269.094765][T13331] syz.2.3441: attempt to access beyond end of device [ 269.094765][T13331] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 269.108701][T13331] syz.2.3441: attempt to access beyond end of device [ 269.108701][T13331] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 269.124857][T13331] syz.2.3441: attempt to access beyond end of device [ 269.124857][T13331] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 269.130656][T13315] loop0: p3 size 589824 extends beyond EOD, truncated [ 269.169684][T13336] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.233820][T13336] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.293608][T13336] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.336439][T13344] loop0: detected capacity change from 0 to 512 [ 269.343371][T13344] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.354818][T13336] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.355119][T13344] EXT4-fs (loop0): 1 truncate cleaned up [ 269.371534][T13344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.424082][T13346] lo speed is unknown, defaulting to 1000 [ 269.430721][T13346] lo speed is unknown, defaulting to 1000 [ 269.543073][T13336] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.643679][T13336] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.724097][T13336] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.768345][T13349] loop3: detected capacity change from 0 to 1024 [ 269.783232][T13336] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.821156][T13349] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 269.832196][T13349] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 269.844484][T13349] JBD2: no valid journal superblock found [ 269.850351][T13349] EXT4-fs (loop3): Could not load journal inode [ 269.904895][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.946363][T13356] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.956234][T13356] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.030637][T13356] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.040635][T13356] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.141285][T13356] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.151199][T13356] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.220214][T13356] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.230145][T13356] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.338116][T13356] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.346406][T13356] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.385941][T13356] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.394279][T13356] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.404646][T13384] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3457'. [ 270.408332][T13356] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.421967][T13356] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.435824][T13356] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.444163][T13356] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.556863][T13390] netlink: 'syz.0.3460': attribute type 10 has an invalid length. [ 270.567973][T13390] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 270.624484][T13395] lo speed is unknown, defaulting to 1000 [ 270.631889][T13395] lo speed is unknown, defaulting to 1000 [ 270.636626][T13399] loop3: detected capacity change from 0 to 512 [ 270.688410][T13402] loop3: detected capacity change from 0 to 1024 [ 271.450225][T13420] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.537208][T13420] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.635701][T13420] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.673743][T13423] netlink: 'syz.0.3470': attribute type 1 has an invalid length. [ 271.689404][T13423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.720301][T13423] 8021q: adding VLAN 0 to HW filter on device bond4 [ 271.728707][T13423] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 271.741247][T13423] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 271.766248][T13420] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.780968][T13425] gretap2: entered promiscuous mode [ 271.789921][T13425] bond4: (slave gretap2): making interface the new active one [ 271.798027][T13425] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 271.817217][T13425] bond4: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 271.850662][T13420] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.886365][T13420] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.908932][T13420] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.921677][T13420] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.978069][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 271.978088][ T29] audit: type=1400 audit(272.595:12691): avc: denied { bind } for pid=13426 comm="syz.0.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.004822][ T29] audit: type=1326 audit(272.625:12692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 272.027925][ T29] audit: type=1326 audit(272.625:12693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 272.371819][ T29] audit: type=1400 audit(272.685:12694): avc: denied { connect } for pid=13426 comm="syz.0.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.391289][ T29] audit: type=1400 audit(272.685:12695): avc: denied { listen } for pid=13426 comm="syz.0.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.410499][ T29] audit: type=1326 audit(272.755:12696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 272.433742][ T29] audit: type=1326 audit(272.755:12697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 272.456809][ T29] audit: type=1326 audit(272.755:12698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 272.479899][ T29] audit: type=1326 audit(272.775:12699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 272.502879][ T29] audit: type=1326 audit(272.775:12700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a5c9e929 code=0x7ffc0000 [ 272.597677][T13446] __nla_validate_parse: 2 callbacks suppressed [ 272.597697][T13446] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 272.612830][T13446] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 272.620681][T13446] netlink: 8 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 272.629494][T13446] netlink: 'wÞ£ÿ': attribute type 30 has an invalid length. [ 272.840184][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'. [ 272.849406][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3478'. [ 272.852770][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3479'. [ 272.859399][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3478'. [ 272.876267][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3478'. [ 272.880521][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3479'. [ 273.146016][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3483'. [ 273.163266][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3483'. [ 273.523350][T13470] loop3: detected capacity change from 0 to 512 [ 273.581376][T13470] journal_path: Lookup failure for './file0/../file0' [ 273.588278][T13470] EXT4-fs: error: could not find journal device path [ 273.604707][T13471] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.836765][T13471] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.857392][T13478] loop2: detected capacity change from 0 to 1024 [ 273.864782][T13478] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 273.908410][T13478] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 273.918198][T13478] EXT4-fs (loop2): orphan cleanup on readonly fs [ 273.924671][T13478] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #3: comm syz.2.3485: iget: bad i_size value: 1407392063428608 [ 273.955661][T13478] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.3485: Bad quota inode: 3, type: 0 [ 273.964487][T13471] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.979486][T13484] loop0: detected capacity change from 0 to 2048 [ 273.982673][T13478] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 274.000712][T13478] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 274.009114][T13478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.059656][T13471] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.114309][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.136969][T13471] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.138297][T13488] loop2: detected capacity change from 0 to 512 [ 274.155619][T13471] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.168771][T13471] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.180767][T13471] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.212775][T13488] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.220067][T13488] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3491: bg 0: block 248: padding at end of block bitmap is not set [ 274.244755][T13488] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3491: Failed to acquire dquot type 1 [ 274.263089][T13488] EXT4-fs (loop2): 1 truncate cleaned up [ 274.270157][T13488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.286300][T13488] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 274.315543][T13488] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 274.338629][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.365541][T13504] loop2: detected capacity change from 0 to 1024 [ 274.385852][T13504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.413760][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.951465][T13512] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.996816][T13512] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.027644][T13517] capability: warning: `syz.2.3499' uses 32-bit capabilities (legacy support in use) [ 275.044341][T13517] loop2: detected capacity change from 0 to 512 [ 275.051546][T13517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.061781][T13517] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.3499: bad orphan inode 11 [ 275.073428][T13517] ext4_test_bit(bit=10, block=4) = 1 [ 275.074008][T13512] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.078742][T13517] is_bad_inode(inode)=0 [ 275.078753][T13517] NEXT_ORPHAN(inode)=2080374784 [ 275.097833][T13517] max_ino=32 [ 275.101046][T13517] i_nlink=0 [ 275.104263][T13517] EXT4-fs (loop2): 1 truncate cleaned up [ 275.110306][T13517] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.145842][T13522] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.155777][T13522] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.188185][T13512] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.225750][T13524] 0ªX¹¦À: renamed from caif0 [ 275.246902][T13524] 0ªX¹¦À: entered allmulticast mode [ 275.252324][T13524] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 275.270328][T13522] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.280209][T13522] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.307859][T13512] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.357634][T13522] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.367567][T13522] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.401556][T13512] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.423834][T13512] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.443029][T13522] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 275.452916][T13522] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.472144][T13512] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.503172][T13522] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.511577][T13522] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.542313][T13522] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.550669][T13522] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.583337][T13522] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.591749][T13522] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.689982][T13522] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 275.698365][T13522] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.822895][T13538] lo speed is unknown, defaulting to 1000 [ 275.829067][T13538] lo speed is unknown, defaulting to 1000 [ 275.936300][T13545] loop0: detected capacity change from 0 to 256 [ 276.173718][T13551] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.222820][T13551] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.281064][T13551] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.341211][T13551] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.631297][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.657597][T13564] netlink: 'syz.2.3516': attribute type 1 has an invalid length. [ 276.737082][T13568] loop2: detected capacity change from 0 to 128 [ 276.770827][T13568] syz.2.3527: attempt to access beyond end of device [ 276.770827][T13568] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 276.786876][T13568] syz.2.3527: attempt to access beyond end of device [ 276.786876][T13568] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 276.801735][T13568] syz.2.3527: attempt to access beyond end of device [ 276.801735][T13568] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 276.815578][T13568] syz.2.3527: attempt to access beyond end of device [ 276.815578][T13568] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 276.837633][T13568] syz.2.3527: attempt to access beyond end of device [ 276.837633][T13568] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 276.877486][T13568] syz.2.3527: attempt to access beyond end of device [ 276.877486][T13568] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 276.903445][T13573] syz.2.3527: attempt to access beyond end of device [ 276.903445][T13573] loop2: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 276.927167][T13568] syz.2.3527: attempt to access beyond end of device [ 276.927167][T13568] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 276.927484][T13573] syz.2.3527: attempt to access beyond end of device [ 276.927484][T13573] loop2: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 276.969183][T13568] syz.2.3527: attempt to access beyond end of device [ 276.969183][T13568] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 277.010813][T13577] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.020750][T13577] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.058574][T13577] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.068556][T13577] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.091464][T13565] buffer_io_error: 118 callbacks suppressed [ 277.091485][T13565] Buffer I/O error on dev loop2, logical block 305, async page read [ 277.107329][T13565] Buffer I/O error on dev loop2, logical block 306, async page read [ 277.116943][T13565] Buffer I/O error on dev loop2, logical block 307, async page read [ 277.125084][T13565] Buffer I/O error on dev loop2, logical block 308, async page read [ 277.133469][T13565] Buffer I/O error on dev loop2, logical block 309, async page read [ 277.141721][T13565] Buffer I/O error on dev loop2, logical block 310, async page read [ 277.149872][T13565] Buffer I/O error on dev loop2, logical block 311, async page read [ 277.158118][T13565] Buffer I/O error on dev loop2, logical block 312, async page read [ 277.166174][T13565] Buffer I/O error on dev loop2, logical block 305, async page read [ 277.174488][T13565] Buffer I/O error on dev loop2, logical block 306, async page read [ 277.184025][T13577] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.193851][T13577] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.222059][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 277.222078][ T29] audit: type=1400 audit(277.850:12819): avc: denied { create } for pid=13581 comm="syz.5.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.257984][T13577] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.258538][ T29] audit: type=1400 audit(277.850:12820): avc: denied { connect } for pid=13581 comm="syz.5.3522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 277.267828][T13577] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.358213][ T29] audit: type=1400 audit(277.991:12821): avc: denied { cpu } for pid=13589 comm="syz.5.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 278.059100][T13577] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.067507][T13577] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.078761][T13577] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.087073][T13577] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.099812][T13577] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.108103][T13577] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.119214][T13577] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.127526][T13577] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.398611][T13551] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.409966][T13551] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.421333][T13551] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.432277][T13551] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.470753][ T29] audit: type=1326 audit(279.103:12822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.3.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 278.500453][ T29] audit: type=1326 audit(279.113:12823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.3.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 278.523614][ T29] audit: type=1326 audit(279.113:12824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.3.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 278.546665][ T29] audit: type=1326 audit(279.113:12825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.3.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 278.569876][ T29] audit: type=1326 audit(279.113:12826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.3.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f02a816e929 code=0x7ffc0000 [ 278.593525][ T29] audit: type=1326 audit(279.113:12827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.3.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f02a81658e7 code=0x7ffc0000 [ 278.616519][ T29] audit: type=1326 audit(279.113:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13599 comm="syz.3.3529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02a810ab19 code=0x7ffc0000 [ 278.667398][T13611] openvswitch: netlink: Message has 6 unknown bytes. [ 279.075463][T13620] __nla_validate_parse: 3 callbacks suppressed [ 279.075483][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 279.099859][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3536'. [ 279.322414][T13626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3550'. [ 279.400640][T13634] loop0: detected capacity change from 0 to 1024 [ 279.413154][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3542'. [ 279.418336][T13634] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 279.433023][T13634] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 279.452586][T13634] JBD2: no valid journal superblock found [ 279.458379][T13634] EXT4-fs (loop0): Could not load journal inode [ 279.506805][T13640] loop2: detected capacity change from 0 to 2048 [ 279.525390][T13640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.768341][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3540'. [ 279.838013][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.855630][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'. [ 280.974847][T13689] loop2: detected capacity change from 0 to 512 [ 281.005017][T13689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.173065][T13701] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.3559: corrupted inode contents [ 281.238793][T13701] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.3559: mark_inode_dirty error [ 281.262945][T13701] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.3559: corrupted inode contents [ 281.275235][T13701] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.3559: mark_inode_dirty error [ 281.288856][T13701] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.3559: mark inode dirty (error -117) [ 281.321151][T13701] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 281.341685][T13703] SELinux: policydb version 1729875103 does not match my version range 15-34 [ 281.392881][T13703] SELinux: failed to load policy [ 281.488072][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.717051][T13722] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3573'. [ 281.761181][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3573'. [ 281.766074][T13730] loop3: detected capacity change from 0 to 2048 [ 281.798980][T13732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3577'. [ 281.828358][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3578'. [ 282.678974][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 282.679043][ T29] audit: type=1400 audit(283.322:13004): avc: denied { write } for pid=13759 comm="syz.2.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 282.709429][ T29] audit: type=1400 audit(283.352:13005): avc: denied { getopt } for pid=13759 comm="syz.2.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.728746][ T29] audit: type=1400 audit(283.352:13006): avc: denied { connect } for pid=13759 comm="syz.2.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.747917][ T29] audit: type=1400 audit(283.352:13007): avc: denied { name_connect } for pid=13759 comm="syz.2.3585" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 282.806207][ T29] audit: type=1326 audit(283.442:13008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13762 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 282.829305][ T29] audit: type=1326 audit(283.442:13009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13762 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 282.852407][ T29] audit: type=1326 audit(283.442:13010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13762 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 282.875460][ T29] audit: type=1326 audit(283.442:13011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13762 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 282.898481][ T29] audit: type=1326 audit(283.442:13012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13762 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 282.921507][ T29] audit: type=1326 audit(283.442:13013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13762 comm="syz.0.3586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff8a427e929 code=0x7ffc0000 [ 284.007576][T13784] loop0: detected capacity change from 0 to 1024 [ 284.028537][T13784] EXT4-fs: Ignoring removed bh option [ 284.034045][T13784] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.047476][T13784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.061015][T13786] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.129338][T13786] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.165361][T13786] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.216662][T13786] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.266806][T13784] ================================================================== [ 284.274954][T13784] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 284.282993][T13784] [ 284.285341][T13784] write to 0xffff888119c7a54c of 4 bytes by task 13790 on cpu 1: [ 284.293082][T13784] xas_set_mark+0x12b/0x140 [ 284.297644][T13784] tag_pages_for_writeback+0xc2/0x290 [ 284.303057][T13784] ext4_do_writepages+0x697/0x21c0 [ 284.308204][T13784] ext4_writepages+0x176/0x300 [ 284.313012][T13784] do_writepages+0x1c3/0x310 [ 284.317647][T13784] file_write_and_wait_range+0x156/0x2c0 [ 284.323325][T13784] generic_buffers_fsync_noflush+0x45/0x120 [ 284.329269][T13784] ext4_sync_file+0x1ab/0x690 [ 284.333976][T13784] vfs_fsync_range+0x10d/0x130 [ 284.338772][T13784] ext4_buffered_write_iter+0x34f/0x3c0 [ 284.344358][T13784] ext4_file_write_iter+0x383/0xf00 [ 284.349661][T13784] iter_file_splice_write+0x5f2/0x970 [ 284.355082][T13784] direct_splice_actor+0x156/0x2a0 [ 284.360247][T13784] splice_direct_to_actor+0x312/0x680 [ 284.365676][T13784] do_splice_direct+0xda/0x150 [ 284.370493][T13784] do_sendfile+0x380/0x650 [ 284.374944][T13784] __x64_sys_sendfile64+0x105/0x150 [ 284.380188][T13784] x64_sys_call+0xb39/0x2fb0 [ 284.384814][T13784] do_syscall_64+0xd2/0x200 [ 284.389361][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.395287][T13784] [ 284.397629][T13784] read to 0xffff888119c7a54c of 4 bytes by task 13784 on cpu 0: [ 284.405285][T13784] file_write_and_wait_range+0x10e/0x2c0 [ 284.410971][T13784] generic_buffers_fsync_noflush+0x45/0x120 [ 284.416916][T13784] ext4_sync_file+0x1ab/0x690 [ 284.421628][T13784] vfs_fsync_range+0x10d/0x130 [ 284.426422][T13784] ext4_buffered_write_iter+0x34f/0x3c0 [ 284.432098][T13784] ext4_file_write_iter+0x383/0xf00 [ 284.437336][T13784] iter_file_splice_write+0x5f2/0x970 [ 284.442754][T13784] direct_splice_actor+0x156/0x2a0 [ 284.447904][T13784] splice_direct_to_actor+0x312/0x680 [ 284.453318][T13784] do_splice_direct+0xda/0x150 [ 284.458113][T13784] do_sendfile+0x380/0x650 [ 284.462562][T13784] __x64_sys_sendfile64+0x105/0x150 [ 284.467784][T13784] x64_sys_call+0xb39/0x2fb0 [ 284.472386][T13784] do_syscall_64+0xd2/0x200 [ 284.476931][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.482854][T13784] [ 284.485203][T13784] value changed: 0x02000021 -> 0x0e000021 [ 284.490942][T13784] [ 284.493277][T13784] Reported by Kernel Concurrency Sanitizer on: [ 284.499464][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.0.3594 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 284.511653][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.521729][T13784] ================================================================== [ 284.539741][T13786] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.553702][T13786] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.565941][T13786] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.577894][T13786] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.860267][T13784] ================================================================== [ 284.868436][T13784] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 284.876538][T13784] [ 284.878882][T13784] write to 0xffff888103f9d768 of 8 bytes by task 13790 on cpu 1: [ 284.886625][T13784] filemap_splice_read+0x47e/0x6b0 [ 284.891770][T13784] ext4_file_splice_read+0x8f/0xb0 [ 284.896929][T13784] splice_direct_to_actor+0x26c/0x680 [ 284.902335][T13784] do_splice_direct+0xda/0x150 [ 284.907155][T13784] do_sendfile+0x380/0x650 [ 284.911599][T13784] __x64_sys_sendfile64+0x105/0x150 [ 284.916855][T13784] x64_sys_call+0xb39/0x2fb0 [ 284.921487][T13784] do_syscall_64+0xd2/0x200 [ 284.926030][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.931945][T13784] [ 284.934281][T13784] write to 0xffff888103f9d768 of 8 bytes by task 13784 on cpu 0: [ 284.942068][T13784] filemap_splice_read+0x47e/0x6b0 [ 284.947207][T13784] ext4_file_splice_read+0x8f/0xb0 [ 284.952446][T13784] splice_direct_to_actor+0x26c/0x680 [ 284.957867][T13784] do_splice_direct+0xda/0x150 [ 284.962676][T13784] do_sendfile+0x380/0x650 [ 284.967237][T13784] __x64_sys_sendfile64+0x105/0x150 [ 284.972486][T13784] x64_sys_call+0xb39/0x2fb0 [ 284.977097][T13784] do_syscall_64+0xd2/0x200 [ 284.981633][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.987549][T13784] [ 284.989895][T13784] value changed: 0x000000000000107c -> 0x000000000000107d [ 284.997034][T13784] [ 284.999377][T13784] Reported by Kernel Concurrency Sanitizer on: [ 285.005550][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.0.3594 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 285.017747][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 285.027842][T13784] ================================================================== [ 285.089459][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.956395][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!