last executing test programs: 15m39.770861547s ago: executing program 32 (id=4606): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e2d"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15m6.335184758s ago: executing program 33 (id=5365): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x9, 0x0, 0x7995}, 0xfcb9, 0x0, 0x0, 0x48000000, 0x8, 0x0, 0x0}) open_by_handle_at(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES32], 0x0) 15m6.294690169s ago: executing program 34 (id=5351): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 15m5.844839044s ago: executing program 35 (id=5388): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00e70008000200d4d736"], 0x44}}, 0x2000800) 13m13.193107084s ago: executing program 36 (id=8068): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000400000004000e1ff95000000000000002ba76bb33123751c4e3409e62751ee00ba19ce670d25010000020000040000009fc404000000c788b277beee1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d046837d907b09ec39e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca315f5b87e1ca6433a8acd715f5888b2007f0000000000000000010089937090c34410000000000000090000000000414027efc842b6d6f800005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdce57a79d6fce424c22001f6c3784a1975fa657d05003a32a4fd67ce446ac5430207db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bd2b5543ffc16695572361629d1022f722ec23812b70d72cd0010000007881bfa35b9fd6864e90ddb31f75f6324989cdc7044f563a1f74d4efe895fdbc463f747c08f40105869035000000000003000000000000000000000000000000000000080000003ddf4aa4b1c8b8a0ae6feb6737c275dc2740f742b5425f1d5819610608bbab35471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f15b8ee25a2a5ccf4a9b603c88e12ff25184d4e3c2f7f623559435b2c505fb7113400000f0bc440550ee91302f5a00000000000000000000000000000000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7a92a557ac2b44b8f7a49789906d922b3e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da092dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696abaa042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb328790700000021e041254f06bd7f000000000000000000000000000000282ffe000000000000000431e8e3204a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dfdb3d1179b4b9fccd0cd5b7578802c66f5dbf22ad0bd03cbe0fecd096bcf419d35988948d1cd4c51c406040000000090a3bc3cbc08255975f3cee08dab765d8a4ef870aaae3f81ed6364837171ce5564f3cf6feba1b6745409000000000000003459263499fae97e7dcb30e4cff009e0f4f78c155c4ab19b878fcb4cc14b8d2823643a17120418f42b42ed879cb23e6d4e0d11db988d0bc46de02702d29243b72215d5563bdae8c2ccda4498687cd50f3a9058f61d52d70aabccb18d41d75788faf60ce9be97c13e4252d9d112d9ac47368829f8a29eca17de807c840293dd387eee13fdecf3d5a334350f045a22b9adb0539d44d58a00fb9e83ebf4fea36b87e2afdf63f7abf5caf2b01317a5f65f22c8bcf36b390dece1e98541ae932ec3486f74c1eea673c1647568acb17efcef24a9c3504dfa7c7eefe3dcb8d570a730a0837839f54527ce334b8173e7bf73bcd8d80ef294fde6549a0f1a23b78b41f79ea543d2b38b80d3d28c6c93901b763fc8b88794aa74facc345e28f0ad79de4df5afd52e7dfc387e4d2ca4d5caca74754987dbbd4d64e233b4a1d81a9aeb981734ca5416cacf516ca8384d85310f24d393fd48c668465546117377547d11a61bd2bd9e35fa0da5118554a1d93147b103a51baf94aeb1b6292038300423344e6add2226ba5f6724a08567ef515898f0f7dfd3fc198092af3265c5df377a66bbde4fa4a049692e06ee5022c58290bdc37eeb16f4e099e33679044ba21898f76c982c8203663f1adb7bbb42ed8d9b0bb8bd9255e342959b822fa8b3d08b29f2201dfe3a3c5c8bf8bc82f249e7eb9f8571823d730fdc78c6b3122a3fd9209dcae70c10c7b17e83dd759a52fe5c362358dbb780a52f540000000000000000000011230e1d6f9fd3315ada8ecee55fc0ec6ec0ec950c0ad006a06a162035d5729795c4a58b59f9a252723480b08ae9bd52c176380a42b972a3400b5d28b273e60000007cac9d35a991c27e23ce5217fec9ce89ea2dea8ddb383e53cdd077e7c2d73404b7450664f70225897307d8a140ba97bfc2232dccdb1dd0496c219315c02f2ef46f30add1aa13e52d67116328c3a5ee3356eadea07abe8506767771d68e760f8c623fb64865a942acc4912dcd1fa5d729cb45c15577bbb8b08a705efeaf09dd6aadeb8d61501e4fd9c9b1ac845a2138cbde58a04589888c0e528a5134e1dfa8b3f6d8a76517df589cae1019a3bc280e99fb661271357dbbd7e9c42d3fe45efaaa00"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x9) 13m12.881730564s ago: executing program 37 (id=8082): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x6, 0x4}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) 13m12.190355747s ago: executing program 38 (id=8097): writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094", 0x29}], 0x1) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 13m6.961148609s ago: executing program 39 (id=8152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 13m2.516185285s ago: executing program 40 (id=8216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 11m40.338287261s ago: executing program 41 (id=10780): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x10000000000000, 0x7fff, 0x9b}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900207010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000060000000000000000000000000000000a00010000000000000000000000000000000000000000000000000000000000ffffffff"]) 11m26.049395982s ago: executing program 42 (id=10766): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) 10m9.463331654s ago: executing program 43 (id=12885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000002d0110a"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 9m41.03321575s ago: executing program 44 (id=14086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 9m19.070998773s ago: executing program 45 (id=14706): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file2\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 8m54.87185511s ago: executing program 46 (id=15371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x40, r3, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8b7942f080cfc1abb4deaa9025c8e556"}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004840}, 0x2004c0c4) 8m51.097456205s ago: executing program 47 (id=15485): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x400, 0x3, 0x2, 0xfff, 0x1, "e7ffffff6dfaf60b0e00ffffffffffffffff00", 0x9, 0x201}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) 8m27.742255974s ago: executing program 48 (id=15954): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000400)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 8m8.291452564s ago: executing program 49 (id=16267): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv0}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x1, 0x5a2, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2400) 7m50.874573427s ago: executing program 50 (id=16521): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200008c4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000200)) 5m59.246585704s ago: executing program 51 (id=19198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffa3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 5m36.61444009s ago: executing program 52 (id=19766): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty}, "001863714ab99043"}}}}}, 0x0) 5m29.225216434s ago: executing program 53 (id=19938): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0xc00, 0x48a, 0x0, 0x0) 5m16.799742673s ago: executing program 54 (id=20245): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20003, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unshare(0x2040400) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000004}, 0x0, 0x0) 4m40.19177012s ago: executing program 55 (id=21149): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0xa1, &(0x7f0000001300)={0x77359400}) listen(r0, 0x8) accept$inet(r0, 0x0, 0x0) 4m30.390237434s ago: executing program 56 (id=21316): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 4m13.039197196s ago: executing program 57 (id=21748): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m58.892045672s ago: executing program 58 (id=22000): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) poll(&(0x7f0000000080)=[{r0, 0x8000}], 0x1, 0xf) 3m38.102075898s ago: executing program 59 (id=22362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood', 0x8) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 3m34.254099325s ago: executing program 60 (id=22426): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) 2m49.710457564s ago: executing program 4 (id=23325): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 2m49.617881477s ago: executing program 4 (id=23329): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2m49.590037358s ago: executing program 4 (id=23330): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0xbd3a7481b18b840b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x3, @perf_bp={&(0x7f0000000200), 0xf}, 0x200, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) 2m49.552482969s ago: executing program 4 (id=23331): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 2m49.457279542s ago: executing program 4 (id=23332): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xc7ca, 0x42}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m49.058472136s ago: executing program 4 (id=23335): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m49.058140875s ago: executing program 61 (id=23335): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m42.83710241s ago: executing program 7 (id=23454): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$key(0xf, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m41.93585182s ago: executing program 7 (id=23476): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x400007e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r1, 0x100, 0x0) getdents(r1, 0x0, 0x0) 2m41.668909779s ago: executing program 7 (id=23485): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/179, 0xb3}], 0x1}, 0x7}, {{&(0x7f0000001780)=@nfc_llcp, 0x80, 0x0}, 0x81}], 0x2, 0x6021, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) 2m40.791762508s ago: executing program 7 (id=23497): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 2m40.771012588s ago: executing program 7 (id=23498): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0) 2m40.621131303s ago: executing program 7 (id=23500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000003bc0)=""/4106, 0x100a}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2m40.572227005s ago: executing program 62 (id=23500): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000400)=[{&(0x7f0000003bc0)=""/4106, 0x100a}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m49.539351568s ago: executing program 2 (id=24546): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000c00)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@block={'block', 0x3d, 0x400}}, {@hide}, {@map_off}, {@map_off}, {@sbsector={'sbsector', 0x3d, 0x2}}, {@unhide}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@overriderock}]}, 0x4, 0xa0e, &(0x7f00000001c0)="$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") io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1m49.402035652s ago: executing program 2 (id=24554): syz_pidfd_open(0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) ioprio_get$pid(0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_delete(r0) 1m48.907909189s ago: executing program 2 (id=24561): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x1c, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) 1m48.85783785s ago: executing program 2 (id=24562): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1m47.927385331s ago: executing program 2 (id=24575): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 1m47.893843513s ago: executing program 2 (id=24576): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1m32.769313771s ago: executing program 63 (id=24576): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 48.863935689s ago: executing program 3 (id=25531): setpgid(0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r0, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x14, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x6}, [@printk={@llx, {0x3, 0x0, 0x3, 0xa, 0x0}, {0x5}, {0x6, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, @printk={@p, {0x5, 0x3, 0x6, 0xa, 0x1, 0xfff5}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.550481142s ago: executing program 3 (id=25546): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) pwritev2(r0, &(0x7f00000004c0)=[{&(0x7f0000000a00)="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", 0x981}], 0x1, 0x6, 0x8001, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 47.478138545s ago: executing program 3 (id=25548): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6}, 0x2002, 0x32, 0x43a1bd56, 0x6, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x48800) 47.255730882s ago: executing program 3 (id=25557): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 47.144732406s ago: executing program 3 (id=25560): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private=0x4000000}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) 46.906752043s ago: executing program 3 (id=25565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 46.818437296s ago: executing program 64 (id=25565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 31.925709777s ago: executing program 1 (id=25794): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 31.684001366s ago: executing program 1 (id=25795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="38000000010001", 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) socket$isdn_base(0x22, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) 31.54092803s ago: executing program 1 (id=25800): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) 31.386899575s ago: executing program 1 (id=25802): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2253043, 0x0) 31.24640109s ago: executing program 1 (id=25804): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22000, 0x0) lseek(r2, 0x3, 0x0) 30.754245106s ago: executing program 1 (id=25812): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.718764887s ago: executing program 65 (id=25812): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x94, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.823082894s ago: executing program 6 (id=26251): socket(0x23, 0x1, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff050000000000000066f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 3.355267919s ago: executing program 6 (id=26257): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB="0001000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.871843765s ago: executing program 0 (id=26266): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000cc0)=ANY=[], 0x8, 0x2ef, &(0x7f00000007c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) 2.363907062s ago: executing program 6 (id=26271): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x8) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) ppoll(&(0x7f0000000280)=[{r0, 0x3206}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.936445067s ago: executing program 0 (id=26276): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20013, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) 1.905407407s ago: executing program 9 (id=26279): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a02fe0000000c850000002b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736369dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 1.8327432s ago: executing program 0 (id=26283): syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000180), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.319653167s ago: executing program 6 (id=26286): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(0x4) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 1.262625988s ago: executing program 6 (id=26288): r0 = io_uring_setup(0x660c, &(0x7f00000006c0)={0x0, 0x103, 0x0, 0xfffffffc, 0x211}) close(r0) pipe(&(0x7f0000000080)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) lsetxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 1.244458649s ago: executing program 0 (id=26289): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 1.043543676s ago: executing program 9 (id=26291): socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigqueueinfo(0xffffffffffffffff, 0xd, 0x0) 1.011321157s ago: executing program 8 (id=26292): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, &(0x7f0000000000)=0xb, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[], 0x3, 0x21f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x28000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) getdents64(r1, &(0x7f0000000180)=""/42, 0x2a) read$qrtrtun(r1, &(0x7f0000000040)=""/33, 0x21) 911.75279ms ago: executing program 8 (id=26293): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) 836.612643ms ago: executing program 8 (id=26294): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r3, @ANYBLOB="01f5050000000000300012800b00010067656e65766500002000028005000400010000"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x40800, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0x5, 0x6, @link_local}, 0x14) 807.397234ms ago: executing program 5 (id=26295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0xb}]}, 0x10) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xfdef) 742.863946ms ago: executing program 5 (id=26296): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf251000000008000300", @ANYRES32=r1, @ANYBLOB="08003a000000000008000600", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 723.116326ms ago: executing program 8 (id=26297): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000015600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000012c00)=""/226, 0xe2}, 0x7f}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 660.558548ms ago: executing program 5 (id=26298): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 653.261989ms ago: executing program 8 (id=26299): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) timer_create(0x8, 0x0, &(0x7f0000000000)) timer_delete(0x0) 581.220631ms ago: executing program 5 (id=26300): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 435.480066ms ago: executing program 9 (id=26301): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0xa) 348.519979ms ago: executing program 6 (id=26302): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_io_uring_setup(0x109, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 348.381909ms ago: executing program 9 (id=26303): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x8, 0x200100) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) 345.977319ms ago: executing program 0 (id=26304): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00038014"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) 183.892684ms ago: executing program 5 (id=26305): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a40)=ANY=[], 0x17) write$binfmt_script(r0, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x3c0, 0x220, 0x220, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x36}, @loopback, [0xff000000, 0xffffff00, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffffff], 'syzkaller1\x00', 'sit0\x00', {0xff}, {}, 0x2, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xfffffffa, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 183.284044ms ago: executing program 8 (id=26315): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_emit_ethernet(0xe4, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0xae, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x6a, 0x0, [], "8f5cc9eee7fc24886d2cfcc288acd159a9d3419ac882e33fc5f2c7ac163d5b33dc6bd46e6c5b8be46e9bd6da964f75fd4b89fa7efe720ac196aee5c5b0a329f68551fe6831eb06eb6d4ebf83c366df506c40cf77c4f38249ff2be1f419968c99fb4add40f3531e962501"}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x1af2, 0x161, 0x14, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000080)={0x8d2, 0x6, 0xa, 0x1200000, 0xd, "ac831bd4952662144d1639b46fa544b35cf090"}) 141.461855ms ago: executing program 0 (id=26306): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c, 0x0, @perf_bp={0x0}, 0x0, 0x3ffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 79.578718ms ago: executing program 9 (id=26307): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x400) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, 0x0) 73.731678ms ago: executing program 5 (id=26308): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffd}}]}]}, 0x24}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003"], 0x78}}, 0x0) 0s ago: executing program 9 (id=26309): creat(&(0x7f0000000000)='./file0\x00', 0x93) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) write(r1, &(0x7f00000002c0)="fe", 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) kernel console output (not intermixed with test programs): 195][T31122] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.649958][ T3490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24524'. [ 958.661108][ T3490] netlink: 'syz.2.24524': attribute type 7 has an invalid length. [ 958.697618][T31122] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.744112][ T3496] netlink: 'syz.6.24527': attribute type 12 has an invalid length. [ 958.761497][ T3496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24527'. [ 958.772955][ T3496] netlink: 'syz.6.24527': attribute type 12 has an invalid length. [ 959.238278][ T3544] loop2: detected capacity change from 0 to 1764 [ 959.248916][ T3544] ISOFS: Unable to identify CD-ROM format. [ 959.313417][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 959.313434][ T28] audit: type=1326 audit(2000000955.641:292862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.5.24551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 959.381749][ T28] audit: type=1326 audit(2000000955.641:292863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.5.24551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 959.453946][ T28] audit: type=1326 audit(2000000955.641:292864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.5.24551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 959.511052][ T28] audit: type=1326 audit(2000000955.641:292865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.5.24551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 959.561060][ T28] audit: type=1326 audit(2000000955.641:292866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.5.24551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 959.586327][ T28] audit: type=1326 audit(2000000955.641:292867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.5.24551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 959.611455][ T28] audit: type=1326 audit(2000000955.641:292868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3552 comm="syz.5.24551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 959.868654][ T3578] Invalid option length (63724) for dns_resolver key [ 960.572512][ T3591] 9pnet: p9_errstr2errno: server reported unknown error ÿ [ 960.840202][ T3605] Process accounting resumed [ 960.909085][ T3456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 961.012824][ T3624] __nla_validate_parse: 4 callbacks suppressed [ 961.012842][ T3624] netlink: 1692 bytes leftover after parsing attributes in process `syz.6.24584'. [ 961.172067][ T3635] netlink: 16 bytes leftover after parsing attributes in process `syz.6.24588'. [ 961.207026][ T28] audit: type=1326 audit(2000000957.521:292869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.24590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 961.290397][ T3639] syz.0.24590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 961.297558][ T28] audit: type=1326 audit(2000000957.521:292870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.24590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 961.393761][ T28] audit: type=1326 audit(2000000957.531:292871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3638 comm="syz.0.24590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 961.650353][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24595'. [ 962.191207][ T3674] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 963.056149][ T3689] bridge0: port 2(gretap0) entered blocking state [ 963.075716][ T3689] bridge0: port 2(gretap0) entered disabled state [ 963.096559][ T3689] gretap0: entered allmulticast mode [ 963.112620][ T3689] gretap0: left allmulticast mode [ 964.446105][ T3735] netlink: 48 bytes leftover after parsing attributes in process `syz.6.24630'. [ 964.798845][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 964.798864][ T28] audit: type=1400 audit(2000000961.121:292898): avc: denied { bind } for pid=3750 comm="syz.6.24636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 966.294136][ T3811] netlink: 36 bytes leftover after parsing attributes in process `syz.5.24662'. [ 966.666029][ T3819] loop3: detected capacity change from 0 to 512 [ 966.673463][ T3819] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 966.713581][ T3819] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 966.731024][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 966.737585][ C0] EXT4-fs (loop3): initial error at time 2000000963: ext4_mb_generate_buddy:1317 [ 966.747247][ C0] EXT4-fs (loop3): last error at time 2000000963: ext4_mb_generate_buddy:1317 [ 966.823519][ T3819] EXT4-fs (loop3): 1 truncate cleaned up [ 966.843683][ T3819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 966.882606][ T3819] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.24666: bad entry in directory: directory entry overrun - offset=16, inode=2147483648, rec_len=1024, size=124 fake=0 [ 966.982596][ T545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.450155][ T3860] netlink: 'syz.0.24683': attribute type 1 has an invalid length. [ 967.488687][ T3860] 8021q: adding VLAN 0 to HW filter on device bond4 [ 967.528584][ T3864] bond4: (slave geneve2): making interface the new active one [ 967.538017][ T3864] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 967.575859][T25783] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 967.603339][T25783] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 967.622551][T25783] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 967.673193][T25783] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 968.187268][ T3878] team0: left promiscuous mode [ 968.251691][T31284] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.264988][T31284] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.275032][T31284] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.286399][T31284] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.296228][T31284] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.319547][T31284] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.343954][T25783] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.356953][T25783] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.821380][ T3900] netlink: 'syz.6.24699': attribute type 7 has an invalid length. [ 968.829322][ T3900] netlink: 'syz.6.24699': attribute type 7 has an invalid length. [ 969.587313][ T3913] loop3: detected capacity change from 0 to 1024 [ 969.762042][ T3913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.787494][ T3913] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 969.904091][ T3921] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 969.929287][ T3921] EXT4-fs (loop3): This should not happen!! Data will be lost [ 969.929287][ T3921] [ 969.968204][ T3921] EXT4-fs (loop3): Total free blocks count 0 [ 969.991182][ T3921] EXT4-fs (loop3): Free/Dirty block details [ 969.999347][ T3921] EXT4-fs (loop3): free_blocks=20480 [ 970.015001][ T3921] EXT4-fs (loop3): dirty_blocks=208 [ 970.028441][ T3921] EXT4-fs (loop3): Block reservation details [ 970.091771][ T3921] EXT4-fs (loop3): i_reserved_data_blocks=13 [ 970.507798][T31132] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 2048 with error 28 [ 970.540219][ T545] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 971.223095][ T3952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24719'. [ 971.233184][ T3952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24719'. [ 971.248449][T25783] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.260786][T25783] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.283037][T25783] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.295808][T25783] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 971.311433][ T3958] atomic_op ffff888117fa4128 conn xmit_atomic 0000000000000000 [ 971.400798][ T3970] bond0: Device is already in use. [ 971.560641][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24728'. [ 971.578104][ T3973] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24728'. [ 972.859721][ T4031] loop3: detected capacity change from 0 to 256 [ 973.107851][ T4031] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 973.276207][ T4058] netlink: 168 bytes leftover after parsing attributes in process `syz.6.24765'. [ 973.442255][ T28] audit: type=1400 audit(2000000969.771:292899): avc: denied { getopt } for pid=4066 comm="syz.3.24769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 973.550628][ T28] audit: type=1326 audit(2000000969.871:292900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.604146][ T28] audit: type=1326 audit(2000000969.871:292901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.628321][ T28] audit: type=1326 audit(2000000969.871:292902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.653194][ T28] audit: type=1326 audit(2000000969.871:292903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.687618][ T28] audit: type=1326 audit(2000000969.871:292904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.712326][ T28] audit: type=1326 audit(2000000969.871:292905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.738176][ T28] audit: type=1326 audit(2000000969.901:292906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.765792][ T28] audit: type=1326 audit(2000000969.901:292907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.807490][ T4085] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 973.862907][ T28] audit: type=1326 audit(2000000969.931:292908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4076 comm="syz.0.24773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 973.950740][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.24782'. [ 974.126672][ T4108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24788'. [ 975.992858][ T4198] loop3: detected capacity change from 0 to 256 [ 976.013192][ T4198] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 976.113302][ T4198] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 976.231832][ T2033] bridge0: port 3(syz_tun) entered disabled state [ 976.402075][ T2033] syz_tun (unregistering): left allmulticast mode [ 976.408544][ T2033] syz_tun (unregistering): left promiscuous mode [ 976.426598][ T2033] bridge0: port 3(syz_tun) entered disabled state [ 976.491535][ T4214] loop3: detected capacity change from 0 to 512 [ 976.556902][ T4214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 976.586613][ T4214] ext4 filesystem being mounted at /226/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 976.770836][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 976.820243][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.827588][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.838268][ T4201] bridge_slave_0: entered allmulticast mode [ 976.858593][ T4201] bridge_slave_0: entered promiscuous mode [ 976.869426][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.881254][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.888680][ T4201] bridge_slave_1: entered allmulticast mode [ 976.896287][ T4201] bridge_slave_1: entered promiscuous mode [ 976.906581][ T545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.995224][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.036838][ T4232] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24834'. [ 977.055513][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.003885][ T4248] ip6gre1: entered allmulticast mode [ 978.011328][ T4201] team0: Port device team_slave_0 added [ 978.018394][ T4201] team0: Port device team_slave_1 added [ 978.050560][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.058161][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.097480][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.138253][T31299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.150854][T31299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.165281][ T4260] netlink: 104 bytes leftover after parsing attributes in process `syz.0.24846'. [ 978.176514][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.185861][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 978.213878][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.285211][T31299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.296210][T31299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.342853][ T4201] hsr_slave_0: entered promiscuous mode [ 978.349297][ T4201] hsr_slave_1: entered promiscuous mode [ 978.355420][ T4201] debugfs: 'hsr0' already exists in 'hsr' [ 978.366142][ T4201] Cannot create hsr debugfs directory [ 978.372536][ T4273] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 978.413091][ T4273] bond4: (slave lo): Enslaving as an active interface with an up link [ 978.430576][ T4273] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 978.497548][T31299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.512326][T31299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.636920][ T4201] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.678266][T31299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.689702][T31299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.712599][ T4201] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.779984][ T4201] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.813264][T31299] bridge_slave_1: left allmulticast mode [ 978.819212][T31299] bridge_slave_1: left promiscuous mode [ 978.825260][T31299] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.834018][T31299] bridge_slave_0: left allmulticast mode [ 978.839821][T31299] bridge_slave_0: left promiscuous mode [ 978.846020][T31299] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.954534][T31299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.965159][T31299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.976049][T31299] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 978.987035][T31299] bond0 (unregistering): Released all slaves [ 978.995001][ T4201] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 979.188471][T31299] hsr_slave_0: left promiscuous mode [ 979.196982][T31299] hsr_slave_1: left promiscuous mode [ 979.203182][T31299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.210669][T31299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.218392][T31299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.227053][T31299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.238773][T31299] veth1_macvtap: left promiscuous mode [ 979.244568][T31299] veth0_macvtap: left promiscuous mode [ 979.250448][T31299] veth1_vlan: left promiscuous mode [ 979.259708][T31299] veth0_vlan: left promiscuous mode [ 979.299085][ T4332] netlink: 'syz.6.24864': attribute type 9 has an invalid length. [ 979.309716][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 979.309743][ T28] audit: type=1326 audit(2000000975.641:292981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.358578][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24864'. [ 979.376345][ T28] audit: type=1326 audit(2000000975.641:292982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.438197][ T28] audit: type=1326 audit(2000000975.641:292983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.473458][ T28] audit: type=1326 audit(2000000975.641:292984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.500168][ T28] audit: type=1326 audit(2000000975.641:292985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.543150][ T28] audit: type=1326 audit(2000000975.641:292986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.567883][T31299] team0 (unregistering): Port device team_slave_1 removed [ 979.590558][ T28] audit: type=1326 audit(2000000975.641:292987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.617825][T31299] team0 (unregistering): Port device team_slave_0 removed [ 979.655835][ T28] audit: type=1326 audit(2000000975.641:292988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.703521][ T4332] netlink: 'syz.6.24864': attribute type 9 has an invalid length. [ 979.725046][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24864'. [ 979.737901][ T4201] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 979.741093][ T28] audit: type=1326 audit(2000000975.641:292989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.779727][ T4201] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 979.786647][ T28] audit: type=1326 audit(2000000975.641:292990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4334 comm="syz.3.24865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f1433c819 code=0x7ffc0000 [ 979.831787][ T4201] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 979.846734][ T4201] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 980.038513][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.135742][T31299] IPVS: stop unused estimator thread 0... [ 980.142374][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.162793][T25783] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.169906][T25783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.199499][T25783] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.206644][T25783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.345519][ T4409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.361487][ T4409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.419346][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.603189][ T4201] veth0_vlan: entered promiscuous mode [ 980.619371][ T4201] veth1_vlan: entered promiscuous mode [ 980.674291][ T4201] veth0_macvtap: entered promiscuous mode [ 980.683274][ T4201] veth1_macvtap: entered promiscuous mode [ 980.722186][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.745978][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.776323][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.796729][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.820184][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.823177][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24891'. [ 980.842511][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24891'. [ 980.852364][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.881426][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24892'. [ 980.901412][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24892'. [ 980.926683][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24892'. [ 980.964476][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24824'. [ 981.290502][ T4489] macvtap1: entered promiscuous mode [ 981.301045][ T4489] erspan0: entered promiscuous mode [ 981.306336][ T4489] macvtap1: entered allmulticast mode [ 981.327345][ T4489] erspan0: entered allmulticast mode [ 981.357506][ T4490] macvtap1: left promiscuous mode [ 981.363043][ T4490] erspan0: left promiscuous mode [ 981.384338][ T4490] macvtap1: left allmulticast mode [ 981.410456][ T4490] erspan0: left allmulticast mode [ 981.573625][ T4499] rdma_op ffff888198746980 conn xmit_rdma 0000000000000000 [ 982.036494][ T4505] loop3: detected capacity change from 0 to 128 [ 982.227507][ T4525] __nla_validate_parse: 7 callbacks suppressed [ 982.227592][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24918'. [ 982.281186][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.24918'. [ 982.591779][ T4531] syz.3.24911: attempt to access beyond end of device [ 982.591779][ T4531] loop3: rw=2049, sector=201, nr_sectors = 384 limit=128 [ 982.647024][ T4561] tipc: Enabling of bearer rejected, failed to enable media [ 983.530498][ T4576] dvmrp0: entered allmulticast mode [ 983.544867][ T4576] dvmrp0: left allmulticast mode [ 983.847554][ T4689] netlink: 'syz.1.24948': attribute type 10 has an invalid length. [ 984.025618][ T4689] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.077512][ T4689] bond0: (slave team0): Enslaving as an active interface with an up link [ 984.318979][ T4731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24952'. [ 984.914665][ T4765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24969'. [ 984.917217][ T4767] loop1: detected capacity change from 0 to 128 [ 984.998443][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 984.998542][ T28] audit: type=1400 audit(2000001237.326:293005): avc: denied { setopt } for pid=4771 comm="syz.6.24971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 985.168110][ T4780] netlink: 76 bytes leftover after parsing attributes in process `syz.3.24975'. [ 985.180252][ T4770] Invalid ELF header magic: != ELF [ 985.208287][ T4780] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24975'. [ 985.228549][ T4788] loop1: detected capacity change from 0 to 256 [ 985.237651][ T4788] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 985.253537][ T4788] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 985.263834][ T4788] FAT-fs (loop1): Filesystem has been set read-only [ 985.467365][ T4817] netlink: 'syz.6.24990': attribute type 4 has an invalid length. [ 985.478314][ T4817] netlink: 'syz.6.24990': attribute type 4 has an invalid length. [ 985.522194][ T4824] gre1: entered promiscuous mode [ 985.587733][ T4830] loop3: detected capacity change from 0 to 512 [ 985.619265][ T4830] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 985.639926][ T4830] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 985.663185][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 985.670583][ C1] EXT4-fs (loop3): initial error at time 2000001237: ext4_mb_generate_buddy:1317 [ 985.680207][ C1] EXT4-fs (loop3): last error at time 2000001237: ext4_mb_generate_buddy:1317 [ 985.691681][ T4830] EXT4-fs (loop3): 1 truncate cleaned up [ 985.698086][ T4830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.786742][ T4832] Invalid ELF header magic: != ELF [ 985.841989][ T545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.353603][ T4866] bridge1: entered promiscuous mode [ 986.361496][ T4866] bridge1: entered allmulticast mode [ 986.373544][ T4883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25015'. [ 986.384510][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25015'. [ 986.402469][ T4882] loop3: detected capacity change from 0 to 8192 [ 986.415084][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.441218][ T4882] FAT-fs (loop3): Filesystem has been set read-only [ 986.447882][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.469860][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.502116][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.502116][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.524568][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 986.570486][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.578507][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.587003][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.596015][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.604027][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.623447][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.631538][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.631538][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.652550][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 986.661368][ T4882] FAT-fs (loop3): error, invalid access to FAT (entry 0x00004614) [ 986.670273][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.670273][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.686176][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 986.700773][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.700773][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.718944][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 986.727477][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.727477][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.742375][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 986.750655][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.750655][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.862398][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 986.882144][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.882144][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.916831][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 986.935469][ T4882] syz.3.25016: attempt to access beyond end of device [ 986.935469][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 986.959501][ T4915] bridge1: entered promiscuous mode [ 986.975655][ T4915] bridge1: entered allmulticast mode [ 986.996967][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 987.005421][ T4882] syz.3.25016: attempt to access beyond end of device [ 987.005421][ T4882] loop3: rw=8388608, sector=18010, nr_sectors = 1 limit=8192 [ 987.033449][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 987.042044][ T4882] Buffer I/O error on dev loop3, logical block 18010, async page read [ 987.234899][ T4909] Invalid ELF header magic: != ELF [ 988.032274][ T4955] netlink: 'syz.5.25048': attribute type 1 has an invalid length. [ 988.053832][ T4955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 988.132942][ T4962] loop1: detected capacity change from 0 to 512 [ 988.158607][ T4962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.204440][ T4962] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 988.441442][ T4201] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.465774][ T4977] Invalid ELF header magic: != ELF [ 988.499329][ T4985] netlink: 56 bytes leftover after parsing attributes in process `syz.1.25059'. [ 988.508686][ T4985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25059'. [ 988.573538][ T4988] netlink: 'syz.1.25060': attribute type 4 has an invalid length. [ 988.870665][ T4999] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 989.467763][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25071'. [ 989.674802][ T5011] Invalid ELF header magic: != ELF [ 991.256414][ T5149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25101'. [ 991.310655][ T5155] netlink: 24 bytes leftover after parsing attributes in process `syz.5.25104'. [ 991.335224][ T5159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25101'. [ 991.386635][ T5165] geneve2: entered promiscuous mode [ 991.396570][ T1020] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.415942][ T1020] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.456518][ T5170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25109'. [ 991.492901][ T1020] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.513081][ T1020] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.574171][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25116'. [ 991.592239][ T5192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25116'. [ 991.630680][T31142] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.642157][T31142] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.659027][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25116'. [ 991.681647][T31142] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.690957][T31142] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 993.964268][ T5302] loop3: detected capacity change from 0 to 512 [ 994.030393][ T5302] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.25144: inode has both inline data and extents flags [ 994.109668][ T5302] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 994.111038][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 994.121371][ T5302] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.25144: couldn't read orphan inode 15 (err -117) [ 994.128079][ C0] EXT4-fs (loop3): initial error at time 2000001246: ext4_orphan_get:1397: inode 15 [ 994.150479][ C0] EXT4-fs (loop3): last error at time 2000001246: ext4_orphan_get:1397: inode 15 [ 994.210537][ T5317] __nla_validate_parse: 2 callbacks suppressed [ 994.210558][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25150'. [ 994.225719][ T5302] loop3: lost filesystem error report for type 5 error -117 [ 994.226521][ T5302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.317042][ T545] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.329323][ T5326] netlink: 172 bytes leftover after parsing attributes in process `syz.1.25154'. [ 994.355373][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25154'. [ 994.365801][ T5326] netlink: 172 bytes leftover after parsing attributes in process `syz.1.25154'. [ 994.375079][ T5326] netlink: 100 bytes leftover after parsing attributes in process `syz.1.25154'. [ 994.455689][ T5326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.25154'. [ 994.496574][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25159'. [ 994.691331][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25162'. [ 994.713896][ T28] audit: type=1326 audit(2000001247.046:293006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 994.744610][ T28] audit: type=1326 audit(2000001247.046:293007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 994.775133][ T28] audit: type=1326 audit(2000001247.046:293008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 994.863647][ T28] audit: type=1326 audit(2000001247.046:293009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 994.897369][ T28] audit: type=1326 audit(2000001247.046:293010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 994.947472][ T28] audit: type=1326 audit(2000001247.046:293011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 994.983417][ T28] audit: type=1326 audit(2000001247.046:293012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 995.008342][ T28] audit: type=1326 audit(2000001247.046:293013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 995.056271][ T28] audit: type=1326 audit(2000001247.046:293014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 995.098046][ T5370] xt_hashlimit: size too large, truncated to 1048576 [ 995.131268][ T28] audit: type=1326 audit(2000001247.046:293015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5351 comm="syz.0.25164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 995.201867][ T5375] netlink: 24 bytes leftover after parsing attributes in process `syz.6.25172'. [ 995.881587][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25177'. [ 995.948984][ T5399] loop1: detected capacity change from 0 to 1024 [ 996.015163][ T5399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.156681][ T4201] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.640604][ T5444] erspan0: entered promiscuous mode [ 996.700201][ T5444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.716927][ T5444] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.851250][ T5444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 997.725610][ T5508] sctp: [Deprecated]: syz.0.25226 (pid 5508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 997.725610][ T5508] Use struct sctp_sack_info instead [ 999.408661][ T5553] netlink: 'syz.0.25246': attribute type 1 has an invalid length. [ 999.424965][ T5553] bond5: entered promiscuous mode [ 999.430259][ T5553] 8021q: adding VLAN 0 to HW filter on device bond5 [ 999.430272][ T5555] netlink: 'syz.5.25247': attribute type 13 has an invalid length. [ 999.430289][ T5555] netlink: 'syz.5.25247': attribute type 17 has an invalid length. [ 999.454940][ T5555] lo: left allmulticast mode [ 999.499931][ T5555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 999.534907][ T5565] 8021q: adding VLAN 0 to HW filter on device bond5 [ 999.551832][ T5565] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 999.578343][ T5565] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 999.605633][ T5565] bond5: (slave ip6gre3): making interface the new active one [ 999.613326][ T5565] ip6gre3: entered promiscuous mode [ 999.622231][ T5565] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 999.637927][ T5574] __nla_validate_parse: 10 callbacks suppressed [ 999.637946][ T5574] netlink: 172 bytes leftover after parsing attributes in process `syz.6.25252'. [ 999.656373][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.25252'. [ 999.666210][ T5574] netlink: 172 bytes leftover after parsing attributes in process `syz.6.25252'. [ 999.684988][ T5574] netlink: 100 bytes leftover after parsing attributes in process `syz.6.25252'. [ 999.695374][ T5574] netlink: 32 bytes leftover after parsing attributes in process `syz.6.25252'. [ 1000.318578][ T5605] loop3: detected capacity change from 0 to 4096 [ 1000.336012][ T5605] EXT4-fs: test_dummy_encryption option not supported [ 1000.346456][ T5605] xt_hashlimit: size too large, truncated to 1048576 [ 1000.500715][ T5609] netlink: 'syz.1.25264': attribute type 6 has an invalid length. [ 1003.181735][ T5625] netlink: 172 bytes leftover after parsing attributes in process `syz.3.25270'. [ 1003.190947][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25270'. [ 1003.201530][ T5625] netlink: 172 bytes leftover after parsing attributes in process `syz.3.25270'. [ 1003.212217][ T5625] netlink: 100 bytes leftover after parsing attributes in process `syz.3.25270'. [ 1003.231117][ T5625] netlink: 32 bytes leftover after parsing attributes in process `syz.3.25270'. [ 1003.942264][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 1003.942282][ T28] audit: type=1326 audit(2000001256.276:293043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.008671][ T28] audit: type=1326 audit(2000001256.306:293044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.060095][ T28] audit: type=1326 audit(2000001256.306:293045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.083643][ T5663] netlink: 'syz.3.25287': attribute type 83 has an invalid length. [ 1004.121113][ T28] audit: type=1326 audit(2000001256.306:293046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.172879][ T28] audit: type=1326 audit(2000001256.306:293047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.222043][ T28] audit: type=1326 audit(2000001256.306:293048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.271585][ T28] audit: type=1326 audit(2000001256.306:293049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.321047][ T28] audit: type=1326 audit(2000001256.306:293050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.381042][ T28] audit: type=1326 audit(2000001256.306:293051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1004.444558][ T28] audit: type=1326 audit(2000001256.306:293052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5659 comm="syz.1.25286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1005.670568][ T5698] sch_fq: defrate 7 ignored. [ 1006.043591][ T5738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5738 comm=syz.5.25316 [ 1006.076008][ T5740] __nla_validate_parse: 1 callbacks suppressed [ 1006.076026][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25317'. [ 1007.111642][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1008.053881][ T5812] veth0: entered promiscuous mode [ 1008.059526][ T5812] veth0: left promiscuous mode [ 1008.159119][ T5825] netlink: 'syz.3.25350': attribute type 1 has an invalid length. [ 1008.185282][ T5825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1008.329985][ T5839] netlink: 'syz.0.25356': attribute type 1 has an invalid length. [ 1008.380027][ T5839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1008.472626][ T5839] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 1008.481362][T31142] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1008.601057][T16103] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1008.724186][ T5856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25362'. [ 1010.539524][ T5901] syzkaller0: entered allmulticast mode [ 1010.545557][ T5901] syzkaller0: entered promiscuous mode [ 1010.713432][ T5901] syzkaller0 (unregistering): left allmulticast mode [ 1010.720434][ T5901] syzkaller0 (unregistering): left promiscuous mode [ 1011.077185][ T5921] netlink: 'syz.1.25389': attribute type 39 has an invalid length. [ 1011.148081][ T5924] xt_hashlimit: size too large, truncated to 1048576 [ 1011.402504][ T5946] loop3: detected capacity change from 0 to 128 [ 1012.026067][ T28] kauditd_printk_skb: 798 callbacks suppressed [ 1012.026083][ T28] audit: type=1326 audit(2000001264.356:293851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1012.137949][ T28] audit: type=1326 audit(2000001264.386:293852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1012.244155][ T28] audit: type=1326 audit(2000001264.386:293853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1012.353491][ T28] audit: type=1326 audit(2000001264.386:293854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1012.558288][ T28] audit: type=1326 audit(2000001264.406:293855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1012.797775][ T5997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.812837][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25420'. [ 1012.831275][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25420'. [ 1012.837423][ T5997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.840618][ T28] audit: type=1326 audit(2000001264.406:293856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1012.894363][ T28] audit: type=1326 audit(2000001264.406:293857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1012.970617][ T28] audit: type=1326 audit(2000001264.406:293858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1013.000539][ T28] audit: type=1326 audit(2000001264.406:293859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1013.061761][ T28] audit: type=1326 audit(2000001264.406:293860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5971 comm="syz.5.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f690ab6c819 code=0x7ffc0000 [ 1013.384189][ T6031] netlink: 'syz.6.25430': attribute type 1 has an invalid length. [ 1013.417006][ T6031] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1013.676008][ T6034] syz.3.25434 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 1013.691610][ T6034] CPU: 1 UID: 0 PID: 6034 Comm: syz.3.25434 Tainted: G W syzkaller #0 PREEMPT(full) [ 1013.691648][ T6034] Tainted: [W]=WARN [ 1013.691656][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1013.691670][ T6034] Call Trace: [ 1013.691686][ T6034] [ 1013.691696][ T6034] __dump_stack+0x1d/0x30 [ 1013.691805][ T6034] dump_stack_lvl+0x95/0xd0 [ 1013.691833][ T6034] dump_stack+0x15/0x1b [ 1013.691916][ T6034] dump_header+0x80/0x240 [ 1013.691968][ T6034] oom_kill_process+0x295/0x350 [ 1013.691992][ T6034] out_of_memory+0x97d/0xb80 [ 1013.692020][ T6034] try_charge_memcg+0x62e/0xa10 [ 1013.692087][ T6034] obj_cgroup_charge_pages+0x23/0xc0 [ 1013.692120][ T6034] __memcg_kmem_charge_page+0x9e/0x170 [ 1013.692203][ T6034] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1013.692239][ T6034] alloc_pages_mpol+0xb3/0x260 [ 1013.692273][ T6034] alloc_pages_noprof+0x8f/0x140 [ 1013.692359][ T6034] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1013.692401][ T6034] __kvmalloc_node_noprof+0x3d4/0x650 [ 1013.692510][ T6034] ? futex_hash_allocate+0x190/0x9d0 [ 1013.692543][ T6034] ? futex_hash_allocate+0x190/0x9d0 [ 1013.692655][ T6034] futex_hash_allocate+0x190/0x9d0 [ 1013.692695][ T6034] ? cap_task_prctl+0x13f/0x6e0 [ 1013.692726][ T6034] futex_hash_prctl+0xd8/0xf0 [ 1013.692784][ T6034] __se_sys_prctl+0xa3d/0x13f0 [ 1013.692816][ T6034] __x64_sys_prctl+0x67/0x80 [ 1013.692917][ T6034] x64_sys_call+0x2533/0x3020 [ 1013.692953][ T6034] do_syscall_64+0x12c/0x370 [ 1013.693007][ T6034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.693033][ T6034] RIP: 0033:0x7f0f1433c819 [ 1013.693057][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.693077][ T6034] RSP: 002b:00007f0f12d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1013.693102][ T6034] RAX: ffffffffffffffda RBX: 00007f0f145b5fa0 RCX: 00007f0f1433c819 [ 1013.693119][ T6034] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1013.693234][ T6034] RBP: 00007f0f143d2c91 R08: 0000000000000000 R09: 0000000000000000 [ 1013.693250][ T6034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.693264][ T6034] R13: 00007f0f145b6038 R14: 00007f0f145b5fa0 R15: 00007ffe3cd2f368 [ 1013.693334][ T6034] [ 1013.693399][ T6034] memory: usage 307200kB, limit 307200kB, failcnt 414 [ 1013.961632][ T6034] memory+swap: usage 240120kB, limit 9007199254740988kB, failcnt 0 [ 1013.969580][ T6034] kmem: usage 239300kB, limit 9007199254740988kB, failcnt 0 [ 1014.024269][ T6034] Memory cgroup stats for /syz3: [ 1014.024584][ T6034] cache 0 [ 1014.071058][ T6034] rss 737280 [ 1014.074294][ T6034] shmem 0 [ 1014.086288][ T6034] mapped_file 0 [ 1014.089821][ T6034] dirty 0 [ 1014.131180][ T6034] writeback 0 [ 1014.138357][ T6034] workingset_refault_anon 72 [ 1014.166324][ T6034] workingset_refault_file 1 [ 1014.181657][ T6034] swap 0 [ 1014.184547][ T6034] swapcached 26750976 [ 1014.201023][ T6034] pgpgin 638910 [ 1014.209797][ T6034] pgpgout 638724 [ 1014.224008][ T6034] pgfault 741009 [ 1014.227655][ T6034] pgmajfault 110 [ 1014.241578][ T6034] inactive_anon 737280 [ 1014.245775][ T6034] active_anon 0 [ 1014.262427][ T6034] inactive_file 0 [ 1014.266106][ T6034] active_file 24576 [ 1014.273905][ T6034] unevictable 0 [ 1014.308126][ T6034] hierarchical_memory_limit 314572800 [ 1014.350507][ T6034] hierarchical_memsw_limit 9223372036854771712 [ 1014.361665][ T6034] total_cache 0 [ 1014.365263][ T6034] total_rss 737280 [ 1014.370526][ T6034] total_shmem 0 [ 1014.376196][ T6034] total_mapped_file 0 [ 1014.380337][ T6034] total_dirty 0 [ 1014.384102][ T6034] total_writeback 0 [ 1014.387980][ T6034] total_workingset_refault_anon 72 [ 1014.399268][ T6034] total_workingset_refault_file 1 [ 1014.405439][ T6034] total_swap 0 [ 1014.408863][ T6034] total_swapcached 26750976 [ 1014.413716][ T6034] total_pgpgin 638910 [ 1014.417962][ T6034] total_pgpgout 638724 [ 1014.422908][ T6034] total_pgfault 741009 [ 1014.427154][ T6034] total_pgmajfault 110 [ 1014.437775][ T6034] total_inactive_anon 737280 [ 1014.443043][ T6034] total_active_anon 0 [ 1014.447216][ T6034] total_inactive_file 0 [ 1014.451463][ T6034] total_active_file 24576 [ 1014.455837][ T6034] total_unevictable 0 [ 1014.459886][ T6034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.25434,pid=6032,uid=0 [ 1014.475716][ T6034] Memory cgroup out of memory: Killed process 6034 (syz.3.25434) total-vm:96080kB, anon-rss:1400kB, file-rss:22236kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 1017.198412][ T6173] netlink: 'syz.1.25489': attribute type 10 has an invalid length. [ 1017.211773][ T6173] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.25489'. [ 1017.440312][ T6193] loop1: detected capacity change from 0 to 256 [ 1017.452035][ T6193] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1018.215964][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25523'. [ 1018.246827][ T6224] Process accounting resumed [ 1019.292084][ T6218] syz.5.25509 (6218) used greatest stack depth: 6072 bytes left [ 1019.578428][ T6267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1019.585877][ T6267] IPv6: NLM_F_CREATE should be set when creating new route [ 1019.592718][ T6260] syz.1.25519 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 1019.621059][ T6260] CPU: 0 UID: 0 PID: 6260 Comm: syz.1.25519 Tainted: G W syzkaller #0 PREEMPT(full) [ 1019.621100][ T6260] Tainted: [W]=WARN [ 1019.621108][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1019.621122][ T6260] Call Trace: [ 1019.621130][ T6260] [ 1019.621140][ T6260] __dump_stack+0x1d/0x30 [ 1019.621199][ T6260] dump_stack_lvl+0x95/0xd0 [ 1019.621223][ T6260] dump_stack+0x15/0x1b [ 1019.621322][ T6260] dump_header+0x80/0x240 [ 1019.621348][ T6260] oom_kill_process+0x295/0x350 [ 1019.621371][ T6260] out_of_memory+0x97d/0xb80 [ 1019.621398][ T6260] try_charge_memcg+0x62e/0xa10 [ 1019.621499][ T6260] obj_cgroup_charge_pages+0x23/0xc0 [ 1019.621529][ T6260] __memcg_kmem_charge_page+0x9e/0x170 [ 1019.621585][ T6260] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1019.621625][ T6260] alloc_pages_mpol+0xb3/0x260 [ 1019.621657][ T6260] alloc_pages_noprof+0x8f/0x140 [ 1019.621737][ T6260] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1019.621851][ T6260] __kvmalloc_node_noprof+0x3d4/0x650 [ 1019.621899][ T6260] ? futex_hash_allocate+0x190/0x9d0 [ 1019.621939][ T6260] ? futex_hash_allocate+0x190/0x9d0 [ 1019.621989][ T6260] futex_hash_allocate+0x190/0x9d0 [ 1019.622016][ T6260] ? cap_task_prctl+0x13f/0x6e0 [ 1019.622041][ T6260] futex_hash_prctl+0xd8/0xf0 [ 1019.622131][ T6260] __se_sys_prctl+0xa3d/0x13f0 [ 1019.622163][ T6260] __x64_sys_prctl+0x67/0x80 [ 1019.622193][ T6260] x64_sys_call+0x2533/0x3020 [ 1019.622262][ T6260] do_syscall_64+0x12c/0x370 [ 1019.622289][ T6260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.622316][ T6260] RIP: 0033:0x7fb85fe7c819 [ 1019.622336][ T6260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.622431][ T6260] RSP: 002b:00007fb85e8ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1019.622526][ T6260] RAX: ffffffffffffffda RBX: 00007fb8600f6090 RCX: 00007fb85fe7c819 [ 1019.622543][ T6260] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1019.622558][ T6260] RBP: 00007fb85ff12c91 R08: 0000000000000000 R09: 0000000000000000 [ 1019.622573][ T6260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.622593][ T6260] R13: 00007fb8600f6128 R14: 00007fb8600f6090 R15: 00007ffe067cf228 [ 1019.622651][ T6260] [ 1019.622674][ T6260] memory: usage 296280kB, limit 307200kB, failcnt 59 [ 1019.861685][ T6260] memory+swap: usage 296280kB, limit 9007199254740988kB, failcnt 0 [ 1019.919848][ T6260] kmem: usage 156576kB, limit 9007199254740988kB, failcnt 0 [ 1019.945352][ T6260] Memory cgroup stats for /syz1: [ 1019.945672][ T6260] cache 69488640 [ 1019.967110][ T6260] rss 200704 [ 1019.980235][ T6260] shmem 69447680 [ 1020.003400][ T6260] mapped_file 40960 [ 1020.013487][ T6260] dirty 40960 [ 1020.020223][ T6260] writeback 0 [ 1020.027054][ T6260] workingset_refault_anon 1545 [ 1020.037496][ T6260] workingset_refault_file 0 [ 1020.048119][ T6260] swap 0 [ 1020.079667][ T6260] swapcached 32284672 [ 1020.093590][ T6260] pgpgin 463667 [ 1020.101893][ T6260] pgpgout 446652 [ 1020.108768][ T6260] pgfault 580573 [ 1020.122888][ T6260] pgmajfault 14 [ 1020.142716][ T6260] inactive_anon 69648384 [ 1020.165419][ T6260] active_anon 0 [ 1020.199583][ T6260] inactive_file 0 [ 1020.219163][ T6260] active_file 45056 [ 1020.230467][ T6279] sch_fq: defrate 4294967295 ignored. [ 1020.254144][ T6260] unevictable 0 [ 1020.264236][ T6260] hierarchical_memory_limit 314572800 [ 1020.305623][ T6260] hierarchical_memsw_limit 9223372036854771712 [ 1020.340368][ T6260] total_cache 69488640 [ 1020.401892][ T6260] total_rss 200704 [ 1020.405657][ T6260] total_shmem 69447680 [ 1020.499348][ T6260] total_mapped_file 40960 [ 1020.533712][ T6260] total_dirty 40960 [ 1020.572664][ T6260] total_writeback 0 [ 1020.581613][ T6260] total_workingset_refault_anon 1545 [ 1020.586936][ T6260] total_workingset_refault_file 0 [ 1020.655671][ T6260] total_swap 0 [ 1020.663022][ T6291] netlink: 'syz.5.25538': attribute type 1 has an invalid length. [ 1020.685320][ T6260] total_swapcached 32284672 [ 1020.699224][ T6260] total_pgpgin 463667 [ 1020.710752][ T6260] total_pgpgout 446652 [ 1020.715132][ T6260] total_pgfault 580573 [ 1020.719257][ T6260] total_pgmajfault 14 [ 1020.724023][ T6260] total_inactive_anon 69648384 [ 1020.728867][ T6260] total_active_anon 0 [ 1020.733823][ T6260] total_inactive_file 0 [ 1020.738060][ T6260] total_active_file 45056 [ 1020.743806][ T6260] total_unevictable 0 [ 1020.748174][ T6260] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.25519,pid=6250,uid=0 [ 1020.766063][ T6260] Memory cgroup out of memory: Killed process 6260 (syz.1.25519) total-vm:96212kB, anon-rss:1412kB, file-rss:22240kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 1020.772367][ T6291] bond6: entered promiscuous mode [ 1020.852416][ T6291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1020.947398][ T6294] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1020.986876][ T6294] bond6: (slave vcan0): The slave device specified does not support setting the MAC address [ 1021.047413][ T6294] bond6: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 1021.068338][ T6294] bond6: (slave vcan0): making interface the new active one [ 1021.098795][ T6294] vcan0: entered promiscuous mode [ 1021.125284][ T6294] bond6: (slave vcan0): Enslaving as an active interface with an up link [ 1021.166055][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 1021.166072][ T28] audit: type=1400 audit(2000001273.496:293889): avc: denied { write } for pid=6309 comm="syz.1.25543" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1021.239305][ T28] audit: type=1400 audit(2000001273.566:293890): avc: denied { ioctl } for pid=6317 comm="syz.0.25547" path="socket:[216740]" dev="sockfs" ino=216740 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1021.325850][ T6327] netlink: 'syz.0.25551': attribute type 7 has an invalid length. [ 1021.334504][ T6327] netlink: 'syz.0.25551': attribute type 8 has an invalid length. [ 1021.495827][ T6344] loop3: detected capacity change from 0 to 1024 [ 1021.550517][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25558'. [ 1021.567416][ T6344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.675523][ T4343] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.691503][ T6358] netlink: 'syz.0.25562': attribute type 1 has an invalid length. [ 1021.737776][ T6358] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1021.778666][ T28] audit: type=1326 audit(2000001274.106:293891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.859732][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.867838][ T6366] netlink: 'syz.6.25563': attribute type 1 has an invalid length. [ 1021.875966][ T28] audit: type=1326 audit(2000001274.106:293892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.876061][ T28] audit: type=1326 audit(2000001274.106:293893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.876091][ T28] audit: type=1326 audit(2000001274.106:293894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.876119][ T28] audit: type=1326 audit(2000001274.106:293895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.876215][ T28] audit: type=1326 audit(2000001274.106:293896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.876243][ T28] audit: type=1326 audit(2000001274.106:293897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.876274][ T28] audit: type=1326 audit(2000001274.106:293898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6361 comm="syz.1.25564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb85fe7c819 code=0x7ffc0000 [ 1021.902103][ T6358] bond7: (slave batadv0): Enslaving as a backup interface with an up link [ 1022.043224][T16103] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1022.191067][T31277] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1022.619030][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.25577'. [ 1022.646850][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 1022.746140][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.753678][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.761261][ T6369] bridge_slave_0: entered allmulticast mode [ 1022.768177][ T6369] bridge_slave_0: entered promiscuous mode [ 1022.776398][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.783742][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.791110][ T6369] bridge_slave_1: entered allmulticast mode [ 1022.797827][ T6369] bridge_slave_1: entered promiscuous mode [ 1022.827473][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.841244][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.864660][ T6369] team0: Port device team_slave_0 added [ 1022.870256][ T6418] bond0: (slave lo): Error: Device is in use and cannot be enslaved [ 1022.892711][ T6369] team0: Port device team_slave_1 added [ 1022.914159][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.931066][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.957996][ T6369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.970359][ T6428] netlink: 'syz.5.25586': attribute type 1 has an invalid length. [ 1022.991472][ T6369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.998568][ T6369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.025736][ T6369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.039846][ T6428] gretap4: entered allmulticast mode [ 1023.047812][ T6428] bond7: (slave gretap4): making interface the new active one [ 1023.056819][ T6428] bond7: (slave gretap4): Enslaving as an active interface with an up link [ 1023.186408][ T6369] hsr_slave_0: entered promiscuous mode [ 1023.208031][ T6369] hsr_slave_1: entered promiscuous mode [ 1023.225492][ T6369] debugfs: 'hsr0' already exists in 'hsr' [ 1023.238315][ T6369] Cannot create hsr debugfs directory [ 1023.440112][ T6451] sctp: [Deprecated]: syz.1.25594 (pid 6451) Use of int in maxseg socket option. [ 1023.440112][ T6451] Use struct sctp_assoc_value instead [ 1023.683223][ T6369] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1023.711391][ T6369] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1023.723858][ T6467] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.25597'. [ 1023.737731][ T6466] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.25597'. [ 1023.768789][ T6369] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1023.795435][ T6369] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1023.954477][ T6369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.031129][ T6369] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.130046][ T6369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1024.151238][ T6369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.185895][T31157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.193031][T31157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.206263][T31157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.213409][T31157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.348053][ T6543] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.25609'. [ 1024.384107][ T6369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.414035][ T6530] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.25609'. [ 1024.698834][ T6369] veth0_vlan: entered promiscuous mode [ 1024.779418][ T6369] veth1_vlan: entered promiscuous mode [ 1024.838080][ T6369] veth0_macvtap: entered promiscuous mode [ 1024.874632][ T6369] veth1_macvtap: entered promiscuous mode [ 1024.925993][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.984120][ T6369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.043061][ T1020] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.080830][ T1020] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.843256][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.850627][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.925870][T15563] IPVS: starting estimator thread 0... [ 1025.944839][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.957346][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.021070][ T6648] IPVS: using max 2448 ests per chain, 122400 per kthread [ 1026.055473][ T1020] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.080631][ T6647] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.25625'. [ 1026.121868][ T1020] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.140777][ T6644] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.25625'. [ 1026.214249][ T1020] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.235114][ T1020] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.265181][ T1020] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.278640][ T1020] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.296099][ T6674] 9p: Bad value for 'rfdno' [ 1026.305011][T31277] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.335130][T31277] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.374992][T31277] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1026.392041][T31277] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.518389][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 1026.518410][ T28] audit: type=1400 audit(2000001284.840:293917): avc: denied { name_connect } for pid=6685 comm="syz.8.25567" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 1026.608605][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25634'. [ 1026.656070][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25634'. [ 1026.694472][T31157] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.716200][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25634'. [ 1026.751811][T31157] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.779956][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25634'. [ 1026.825254][T31157] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1026.862297][T31157] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1028.483724][ T6805] loop1: detected capacity change from 0 to 1024 [ 1028.521528][ T6805] EXT4-fs: Ignoring removed orlov option [ 1028.723790][ T6805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1028.737122][ T28] audit: type=1326 audit(2000001287.050:293918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6813 comm="syz.6.25666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f738339c819 code=0x0 [ 1028.903918][T24042] IPVS: starting estimator thread 0... [ 1028.910054][ T6833] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1028.910808][ T4201] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.011104][ T6838] IPVS: using max 2592 ests per chain, 129600 per kthread [ 1029.146760][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.25675'. [ 1030.259543][ T6904] netlink: 20 bytes leftover after parsing attributes in process `syz.8.25697'. [ 1030.296672][ T6906] loop1: detected capacity change from 0 to 764 [ 1030.325799][ T6906] rock: directory entry would overflow storage [ 1030.332356][ T6906] rock: sig=0x4654, size=5, remaining=4 [ 1030.344675][ T6908] netlink: 'syz.8.25699': attribute type 1 has an invalid length. [ 1030.353547][ T6908] netlink: 'syz.8.25699': attribute type 4 has an invalid length. [ 1030.366708][ T6908] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.25699'. [ 1031.150123][ T6973] netlink: 'syz.6.25726': attribute type 8 has an invalid length. [ 1031.167331][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25726'. [ 1031.192750][ T6973] bond0: entered promiscuous mode [ 1031.202219][ T6973] bond_slave_0: entered promiscuous mode [ 1031.212062][ T6973] bond_slave_1: entered promiscuous mode [ 1031.224378][ T6973] gretap0: entered promiscuous mode [ 1031.236285][ T6973] bond0: left promiscuous mode [ 1031.247053][ T6973] bond_slave_0: left promiscuous mode [ 1031.254787][ T6973] bond_slave_1: left promiscuous mode [ 1031.262780][ T6973] gretap0: left promiscuous mode [ 1032.250272][ T6984] veth0_virt_wifi: entered promiscuous mode [ 1032.460449][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25729'. [ 1032.562683][ T6988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.949025][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.6.25736'. [ 1033.618503][ T7033] loop1: detected capacity change from 0 to 128 [ 1034.276037][T12821] IPVS: starting estimator thread 0... [ 1034.401561][ T7044] IPVS: using max 2640 ests per chain, 132000 per kthread [ 1034.978599][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25764'. [ 1035.004151][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25764'. [ 1037.115971][ T7150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.25795'. [ 1037.131737][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25796'. [ 1037.243844][ T7156] batman_adv: batadv0: Adding interface: dummy0 [ 1037.250194][ T7156] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1037.317478][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25796'. [ 1037.317840][ T7156] batman_adv: batadv0: Interface activated: dummy0 [ 1037.362794][ T7164] batadv0: mtu less than device minimum [ 1037.394059][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.405105][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.415971][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.426971][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.438035][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.448998][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.460284][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.471402][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.482693][ T7164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1037.627225][ T7176] netlink: 'syz.6.25807': attribute type 1 has an invalid length. [ 1037.661082][ T7176] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1037.821222][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1038.164277][ T28] audit: type=1400 audit(2000001296.480:293919): avc: denied { read } for pid=7196 comm="syz.0.25814" path="socket:[220005]" dev="sockfs" ino=220005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1038.401131][ T7192] chnl_net:caif_netlink_parms(): no params data found [ 1039.208614][T31153] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.229164][ T7192] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.238389][ T7192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.246084][ T7192] bridge_slave_0: entered allmulticast mode [ 1039.253817][ T7192] bridge_slave_0: entered promiscuous mode [ 1039.318611][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25829'. [ 1039.331364][T31153] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.348314][ T7192] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.356392][ T7192] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.364088][ T7192] bridge_slave_1: entered allmulticast mode [ 1039.370742][ T7192] bridge_slave_1: entered promiscuous mode [ 1039.392862][ T7244] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1039.434579][T31153] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.461121][ T7249] bond8: option ad_select: unable to set because the bond device is up [ 1039.480572][ T7192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.508153][ T7192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.528991][ T7192] team0: Port device team_slave_0 added [ 1039.536985][ T7192] team0: Port device team_slave_1 added [ 1039.569316][T31153] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.601410][ T7264] netlink: 'syz.8.25837': attribute type 10 has an invalid length. [ 1039.648377][ T7264] team0: Failed to send options change via netlink (err -105) [ 1039.657863][ T7270] netlink: 36 bytes leftover after parsing attributes in process `syz.6.25839'. [ 1039.671400][ T7271] netlink: 'syz.8.25837': attribute type 10 has an invalid length. [ 1039.701675][ T7264] team0: Port device dummy0 added [ 1039.714654][ T7271] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1039.789017][ T7271] team0: Failed to send options change via netlink (err -105) [ 1039.807911][ T7271] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1039.832051][ T7271] team0: Port device dummy0 removed [ 1039.843045][ T7271] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1039.872244][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.879588][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.936578][ T7192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.984988][ T7192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1039.995403][ T7192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.022292][ T7192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.068896][ T7192] hsr_slave_0: entered promiscuous mode [ 1040.086080][ T7192] hsr_slave_1: entered promiscuous mode [ 1040.094245][ T7192] debugfs: 'hsr0' already exists in 'hsr' [ 1040.100142][ T7192] Cannot create hsr debugfs directory [ 1040.212764][T31153] bridge_slave_1: left allmulticast mode [ 1040.224774][ T7291] netlink: 'syz.8.25846': attribute type 1 has an invalid length. [ 1040.226758][T31153] bridge_slave_1: left promiscuous mode [ 1040.249704][T31153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.267104][T31153] bridge_slave_0: left allmulticast mode [ 1040.272936][T31153] bridge_slave_0: left promiscuous mode [ 1040.279796][T31153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.331512][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25846'. [ 1040.453507][T31153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.463214][T31153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.473928][T31153] bond0 (unregistering): (slave team0): Releasing backup interface [ 1040.483075][T31153] bond0 (unregistering): Released all slaves [ 1040.502000][ T7291] bond2: entered allmulticast mode [ 1040.507379][ T7291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1040.520054][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1040.529850][ T7293] bond2: (slave batadv1): making interface the new active one [ 1040.552750][ T28] audit: type=1326 audit(2000001298.850:293920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.561543][ T7293] batadv1: entered allmulticast mode [ 1040.606502][ T7293] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1040.644281][ T28] audit: type=1326 audit(2000001298.850:293921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.670139][ T28] audit: type=1326 audit(2000001298.850:293922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.699594][ T28] audit: type=1326 audit(2000001298.850:293923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.724972][ T28] audit: type=1326 audit(2000001298.850:293924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.750307][ T7296] bond2 (unregistering): (slave batadv1): Releasing active interface [ 1040.751086][ T28] audit: type=1326 audit(2000001298.850:293925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.781768][ T7296] batadv1: left allmulticast mode [ 1040.783367][ T28] audit: type=1326 audit(2000001298.850:293926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.811925][ T28] audit: type=1326 audit(2000001298.850:293927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.813207][ T7296] bond2 (unregistering): Released all slaves [ 1040.836012][ T28] audit: type=1326 audit(2000001298.850:293928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7301 comm="syz.5.25850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f690ab6c819 code=0x7fc00000 [ 1040.937411][T31153] hsr_slave_0: left promiscuous mode [ 1041.007769][T31153] hsr_slave_1: left promiscuous mode [ 1041.014630][ T7336] loop8: detected capacity change from 0 to 512 [ 1041.032122][T31153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.052192][T31153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1041.058242][ T7336] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1041.084237][ T7336] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.25860: iget: bad i_size value: 38620345925642 [ 1041.107988][ T7336] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1041.108701][ T7336] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.25860: couldn't read orphan inode 15 (err -117) [ 1041.118029][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1041.118074][ C1] EXT4-fs (loop8): initial error at time 2000001299: ext4_orphan_get:1397: inode 15 [ 1041.118104][ C1] EXT4-fs (loop8): last error at time 2000001299: ext4_orphan_get:1397: inode 15 [ 1041.156309][ T7336] loop8: lost filesystem error report for type 5 error -117 [ 1041.157103][ T7336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1041.234038][T31153] team0 (unregistering): Port device team_slave_1 removed [ 1041.270205][T31153] team0 (unregistering): Port device team_slave_0 removed [ 1041.525261][ T6369] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.602411][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25869'. [ 1041.627084][T31153] IPVS: stop unused estimator thread 0... [ 1041.733347][ T7192] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1041.748336][ T7192] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1041.776408][ T7396] SELinux: security_context_str_to_sid (¬) failed with errno=-22 [ 1041.777182][ T7192] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1041.803934][ T7192] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1042.148993][ T7192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.196959][ T7192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.306056][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.313273][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.370580][ T7424] netlink: 'syz.5.25877': attribute type 4 has an invalid length. [ 1042.380467][T31157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.387562][T31157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.426800][ T7192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.446437][ T7427] netlink: 'syz.5.25877': attribute type 4 has an invalid length. [ 1042.717998][ T7192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.213565][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 1043.213584][ T28] audit: type=1400 audit(2000001301.520:294000): avc: denied { remount } for pid=7487 comm="syz.0.25885" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1043.306893][ T7192] veth0_vlan: entered promiscuous mode [ 1043.325412][ T7192] veth1_vlan: entered promiscuous mode [ 1043.365697][ T7192] veth0_macvtap: entered promiscuous mode [ 1043.383095][ T7192] veth1_macvtap: entered promiscuous mode [ 1043.544750][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.552323][ T28] audit: type=1400 audit(2000001301.880:294001): avc: denied { getopt } for pid=7494 comm="syz.0.25895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1043.643714][ T7192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.661808][T31153] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.672559][T31157] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.755380][T31157] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.051974][T31157] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.500592][ T7621] sctp: [Deprecated]: syz.8.25909 (pid 7621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1045.500592][ T7621] Use struct sctp_sack_info instead [ 1045.624951][ T7636] loop9: detected capacity change from 0 to 128 [ 1045.716473][ T7643] netlink: 'syz.8.25916': attribute type 1 has an invalid length. [ 1045.831191][ T7643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1045.920465][ T7658] bond2: (slave veth1_to_team): Enslaving as a backup interface with an up link [ 1046.168958][ T28] audit: type=1326 audit(2000001304.490:294002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1046.246631][ T28] audit: type=1326 audit(2000001304.520:294003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1046.358523][ T28] audit: type=1326 audit(2000001304.520:294004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1046.727243][ T7732] xt_hashlimit: size too large, truncated to 1048576 [ 1047.171050][ T28] audit: type=1326 audit(2000001304.520:294005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1047.237484][ T7753] netlink: 'syz.9.25937': attribute type 10 has an invalid length. [ 1047.290433][ T28] audit: type=1326 audit(2000001304.520:294006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1047.347771][ T7753] team0 (unregistering): Port device team_slave_0 removed [ 1047.386137][ T7753] team0 (unregistering): Port device team_slave_1 removed [ 1047.401010][ T28] audit: type=1326 audit(2000001304.520:294007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1047.477321][ T28] audit: type=1326 audit(2000001304.520:294008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1047.586461][ T28] audit: type=1326 audit(2000001304.520:294009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7692 comm="syz.0.25926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fba1c00c819 code=0x7ffc0000 [ 1047.940071][ T7828] netlink: 'syz.6.25957': attribute type 3 has an invalid length. [ 1048.226107][ T28] kauditd_printk_skb: 206 callbacks suppressed [ 1048.226124][ T28] audit: type=1326 audit(2000001306.550:294216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.323628][ T28] audit: type=1326 audit(2000001306.590:294217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.379385][ T28] audit: type=1326 audit(2000001306.590:294218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.405169][ T28] audit: type=1326 audit(2000001306.590:294219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.450909][ T28] audit: type=1326 audit(2000001306.590:294220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.526183][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25976'. [ 1048.638583][ T28] audit: type=1326 audit(2000001306.590:294221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.663290][ T28] audit: type=1326 audit(2000001306.590:294222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.709257][ T28] audit: type=1326 audit(2000001306.600:294223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.733749][ T28] audit: type=1326 audit(2000001306.600:294224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1048.757828][ T28] audit: type=1326 audit(2000001306.600:294225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7805 comm="syz.9.25952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f803864d04e code=0x7ffc0000 [ 1049.246988][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25992'. [ 1049.267028][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.25992'. [ 1049.939709][ T7951] loop8: detected capacity change from 0 to 512 [ 1049.951828][ T7951] EXT4-fs: Ignoring removed mblk_io_submit option [ 1049.985081][ T7951] EXT4-fs (loop8): 1 truncate cleaned up [ 1049.992160][ T7951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1050.014443][ T7953] netlink: 'syz.5.26008': attribute type 4 has an invalid length. [ 1050.039304][ T7953] netlink: 152 bytes leftover after parsing attributes in process `syz.5.26008'. [ 1050.111951][ T6369] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.483287][ T7972] pimreg: entered allmulticast mode [ 1050.489098][ T7972] pimreg: left allmulticast mode [ 1050.724505][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.8.26023'. [ 1050.734419][ T7990] netlink: 20 bytes leftover after parsing attributes in process `syz.8.26023'. [ 1051.493240][ T8011] netlink: 'syz.0.26031': attribute type 8 has an invalid length. [ 1051.520237][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26031'. [ 1051.533580][ T8011] bond0: entered promiscuous mode [ 1051.553825][ T8014] netlink: 'syz.0.26031': attribute type 8 has an invalid length. [ 1051.568418][ T8011] gretap0: entered promiscuous mode [ 1051.575088][ T8011] hsr1: entered promiscuous mode [ 1051.580128][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26031'. [ 1052.051942][T31153] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.138255][T31153] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.224722][ T8049] xt_hashlimit: size too large, truncated to 1048576 [ 1052.232423][T31153] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.335720][T31153] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.379899][ T8059] netlink: 'syz.9.26051': attribute type 1 has an invalid length. [ 1052.531970][T31153] bridge_slave_1: left allmulticast mode [ 1052.537682][T31153] bridge_slave_1: left promiscuous mode [ 1052.569322][T31153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.578415][ T8069] loop9: detected capacity change from 0 to 512 [ 1052.585948][T31153] bridge_slave_0: left allmulticast mode [ 1052.593653][T31153] bridge_slave_0: left promiscuous mode [ 1052.599831][T31153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.655587][ T8069] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #3: comm syz.9.26053: corrupted inode contents [ 1052.714513][ T8069] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1052.714975][ T8069] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #3: comm syz.9.26053: mark_inode_dirty error [ 1052.724071][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1052.724095][ C1] EXT4-fs (loop9): initial error at time 2000001311: ext4_do_update_inode:5602: inode 3 [ 1052.724125][ C1] EXT4-fs (loop9): last error at time 2000001311: ext4_do_update_inode:5602: inode 3 [ 1052.781211][ T8069] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1052.782203][ T8069] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #3: comm syz.9.26053: corrupted inode contents [ 1052.815071][T31153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.841862][T31153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.841952][ T8069] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1052.865639][T31153] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1052.875499][ T8069] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #3: comm syz.9.26053: mark_inode_dirty error [ 1052.898441][ T8069] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1052.898671][ T8069] EXT4-fs error (device loop9): ext4_acquire_dquot:7026: comm syz.9.26053: Failed to acquire dquot type 0 [ 1052.901901][T31153] bond0 (unregistering): Released all slaves [ 1052.919140][ T8069] loop9: lost filesystem error report for type 5 error -117 [ 1052.919653][ T8069] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.26053: corrupted inode contents [ 1052.919680][ T8069] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1052.919933][ T8069] EXT4-fs error (device loop9): ext4_dirty_inode:6495: inode #16: comm syz.9.26053: mark_inode_dirty error [ 1052.938053][T31153] bond1 (unregistering): Released all slaves [ 1052.971994][ T8069] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1052.972734][ T8069] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.26053: corrupted inode contents [ 1053.014035][ T8069] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1053.014304][ T8069] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.26053: mark_inode_dirty error [ 1053.037731][T31153] bond2 (unregistering): (slave veth1_to_team): Removing an active aggregator [ 1053.042340][ T8069] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1053.049157][ T8069] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.26053: corrupted inode contents [ 1053.055414][T31153] bond2 (unregistering): (slave veth1_to_team): Releasing backup interface [ 1053.060819][ T8069] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1053.100458][ T8069] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1053.122838][T31153] bond2 (unregistering): Released all slaves [ 1053.123975][ T8069] loop9: lost filesystem error report for type 5 error -117 [ 1053.131442][ T8069] EXT4-fs error (device loop9): ext4_do_update_inode:5602: inode #16: comm syz.9.26053: corrupted inode contents [ 1053.161113][ T8069] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1053.161346][ T8069] EXT4-fs error (device loop9): ext4_truncate:4602: inode #16: comm syz.9.26053: mark_inode_dirty error [ 1053.201730][ T8069] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1053.228648][ T8069] loop9: lost filesystem error report for type 5 error -117 [ 1053.229081][ T8069] EXT4-fs (loop9): 1 truncate cleaned up [ 1053.243708][ T8069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1053.256611][ T8069] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1053.281119][ T8069] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #3: comm syz.9.26053: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 1053.281119][ T8069] [ 1053.389847][T31153] hsr_slave_0: left promiscuous mode [ 1053.395985][T31153] hsr_slave_1: left promiscuous mode [ 1053.401839][T31153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.409304][T31153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.434642][T31153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.456871][T31153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.465700][ T7192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.479439][T31153] veth0_virt_wifi: left promiscuous mode [ 1053.491056][T31153] veth1_macvtap: left promiscuous mode [ 1053.498840][T31153] veth0_macvtap: left promiscuous mode [ 1053.521037][T31153] veth1_vlan: left promiscuous mode [ 1053.530787][T31153] veth0_vlan: left promiscuous mode [ 1053.709248][ T8116] siw: device registration error -23 [ 1053.746356][ T8116] netlink: 14 bytes leftover after parsing attributes in process `syz.6.26065'. [ 1053.796865][T31153] team0 (unregistering): Port device team_slave_1 removed [ 1053.832686][T31153] team0 (unregistering): Port device team_slave_0 removed [ 1053.946213][ T8116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.965438][ T8116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.986828][ T8116] bond0 (unregistering): Released all slaves [ 1054.008868][ T8046] chnl_net:caif_netlink_parms(): no params data found [ 1054.259384][ T8046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.299462][ T8046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.323735][ T8046] bridge_slave_0: entered allmulticast mode [ 1054.346976][ T8046] bridge_slave_0: entered promiscuous mode [ 1054.368693][ T8046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.399701][ T8046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.417273][ T8046] bridge_slave_1: entered allmulticast mode [ 1054.429631][ T8046] bridge_slave_1: entered promiscuous mode [ 1054.476546][T31153] IPVS: stop unused estimator thread 0... [ 1054.485710][ T8150] tipc: Failed to remove unknown binding: 66,1,1/0:147824545/147824547 [ 1054.513949][ T8150] tipc: Failed to remove unknown binding: 66,1,1/0:147824545/147824547 [ 1054.514354][ T8046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.537358][ T8046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.584900][ T8046] team0: Port device team_slave_0 added [ 1054.632042][ T8046] team0: Port device team_slave_1 added [ 1054.669916][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.705901][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.831904][ T8046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.869335][ T8046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.876585][ T8046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.886370][ T8183] loop9: detected capacity change from 0 to 512 [ 1054.923150][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26078'. [ 1054.939776][ T8046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.941095][ T8185] netlink: 'syz.6.26078': attribute type 11 has an invalid length. [ 1054.971552][ T8183] EXT4-fs: Ignoring removed i_version option [ 1054.994591][ T8183] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1055.022469][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26078'. [ 1055.025914][ T8046] hsr_slave_0: entered promiscuous mode [ 1055.041762][ T8185] netlink: 'syz.6.26078': attribute type 11 has an invalid length. [ 1055.074109][ T8046] hsr_slave_1: entered promiscuous mode [ 1055.099830][ T8046] debugfs: 'hsr0' already exists in 'hsr' [ 1055.124812][ T8046] Cannot create hsr debugfs directory [ 1055.234302][ T7192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.623324][ T8247] loop9: detected capacity change from 0 to 512 [ 1055.680423][ T8046] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1055.703407][ T8247] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.723546][ T8046] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1055.750312][ T8247] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1055.763118][ T8046] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1055.783875][ T8046] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1055.865923][ T7192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.992165][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.038728][ T8046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.074480][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.081667][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.120362][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.127480][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.504723][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.822096][ T8314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1056.915809][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 1056.915828][ T28] audit: type=1400 audit(2000001315.240:294362): avc: denied { setopt } for pid=8326 comm="syz.6.26102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1056.970813][ T1020] batadv2: left allmulticast mode [ 1056.976851][ T1020] batadv2: left promiscuous mode [ 1056.989826][ T1020] bridge0: port 3(batadv2) entered disabled state [ 1057.029344][ T1020] bridge_slave_1: left allmulticast mode [ 1057.052180][ T1020] bridge_slave_1: left promiscuous mode [ 1057.057917][ T1020] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.066176][ T1020] bridge_slave_0: left allmulticast mode [ 1057.072584][ T1020] bridge_slave_0: left promiscuous mode [ 1057.078215][ T1020] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.284827][ T28] audit: type=1400 audit(2000001315.610:294363): avc: denied { search } for pid=8347 comm="syz.0.26112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1057.340031][ T28] audit: type=1400 audit(2000001315.630:294364): avc: denied { search } for pid=8347 comm="syz.0.26112" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1057.389904][ T28] audit: type=1400 audit(2000001315.630:294365): avc: denied { read open } for pid=8347 comm="syz.0.26112" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1057.573255][ T1020] team0: Port device bridge2 removed [ 1057.679659][ T1020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1057.701794][ T1020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1057.715273][ T1020] bond0 (unregistering): Released all slaves [ 1057.773210][ T8046] veth0_vlan: entered promiscuous mode [ 1057.794179][ T8046] veth1_vlan: entered promiscuous mode [ 1057.818748][ T8046] veth0_macvtap: entered promiscuous mode [ 1057.855301][ T8046] veth1_macvtap: entered promiscuous mode [ 1057.922393][ T1020] hsr_slave_0: left promiscuous mode [ 1057.925117][ T28] audit: type=1326 audit(2000001316.250:294366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8385 comm="syz.5.26123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f690ab66597 code=0x0 [ 1057.951950][ T1020] hsr_slave_1: left promiscuous mode [ 1057.957654][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.971176][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.999600][ T1020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.019432][ T1020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.044451][ T1020] team_slave_0: left promiscuous mode [ 1058.049894][ T1020] team_slave_1: left promiscuous mode [ 1058.074438][ T1020] veth1_macvtap: left promiscuous mode [ 1058.086180][ T1020] veth0_macvtap: left promiscuous mode [ 1058.097378][ T1020] veth1_vlan: left promiscuous mode [ 1058.109426][ T1020] veth0_vlan: left promiscuous mode [ 1058.280204][ T1020] team0 (unregistering): Port device team_slave_1 removed [ 1058.297425][ T1020] team0 (unregistering): Port device team_slave_0 removed [ 1058.380562][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.398137][ T8046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.401770][ T28] audit: type=1326 audit(2000001316.720:294367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8393 comm="syz.9.26125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f803868c819 code=0x0 [ 1058.471119][T31277] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.482939][T31277] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.501238][T31277] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.519548][T31277] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.560350][ T8426] netlink: 'syz.6.26126': attribute type 4 has an invalid length. [ 1058.624045][ T8432] all: renamed from veth0_to_hsr [ 1058.688211][ T8444] ipip1: entered promiscuous mode [ 1058.705390][ T1020] IPVS: stop unused estimator thread 0... [ 1058.736970][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26133'. [ 1058.747675][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26133'. [ 1058.766501][ T8449] 8021q: VLANs not supported on gre0 [ 1059.037808][ T28] audit: type=1326 audit(2000001317.360:294368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.6.26136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738339c819 code=0x7ffc0000 [ 1059.139631][ T28] audit: type=1326 audit(2000001317.360:294369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.6.26136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738339c819 code=0x7ffc0000 [ 1059.169115][ T28] audit: type=1326 audit(2000001317.360:294370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.6.26136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738339c819 code=0x7ffc0000 [ 1059.204420][ T28] audit: type=1326 audit(2000001317.360:294371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8454 comm="syz.6.26136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738339c819 code=0x7ffc0000 [ 1059.302734][ T8471] bond4: (slave lo): Releasing backup interface [ 1059.314913][ T8471] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1059.340703][ T8471] bond0: (slave bridge_slave_1): Releasing backup interface [ 1059.358163][ T8471] net_ratelimit: 10 callbacks suppressed [ 1059.358180][ T8471] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1059.390565][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26146'. [ 1059.402158][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.416257][ T8484] bridge_slave_0 (unregistering): left allmulticast mode [ 1059.423718][ T8484] bridge_slave_0 (unregistering): left promiscuous mode [ 1059.430692][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.534471][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26150'. [ 1059.582696][ T8503] can0: slcan on ptm0. [ 1059.593854][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.609210][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1059.691118][ T8503] can0 (unregistered): slcan off ptm0. [ 1060.230899][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26166'. [ 1060.389264][ T8591] siw: device registration error -23 [ 1060.395373][ T8591] netlink: 14 bytes leftover after parsing attributes in process `syz.5.26169'. [ 1062.304509][ T8653] netlink: 'syz.8.26185': attribute type 10 has an invalid length. [ 1062.332880][ T8653] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1062.353634][ T8653] team0: Failed to send options change via netlink (err -105) [ 1062.382140][ T8653] team0: Port device netdevsim1 added [ 1062.404362][T16103] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 1062.859428][ T8699] netlink: 64 bytes leftover after parsing attributes in process `syz.9.26205'. [ 1062.895559][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.26207'. [ 1062.986125][ T8716] loop9: detected capacity change from 0 to 512 [ 1063.048789][ T8716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1063.073763][ T8716] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.26213: iget: bad i_size value: 38620345925642 [ 1063.138951][ T8716] fserror_report: 1 callbacks suppressed [ 1063.138970][ T8716] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1063.149099][ T8716] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.26213: couldn't read orphan inode 15 (err -117) [ 1063.158285][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1063.158306][ C1] EXT4-fs (loop9): initial error at time 2000001321: ext4_orphan_get:1397: inode 15 [ 1063.158337][ C1] EXT4-fs (loop9): last error at time 2000001321: ext4_orphan_get:1397: inode 15 [ 1063.202807][ T8716] loop9: lost filesystem error report for type 5 error -117 [ 1063.212717][ T8716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1063.426457][ T8746] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.26213: bg 0: block 5: invalid block bitmap [ 1063.450125][ T8746] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 884 with error 28 [ 1063.622739][ T8746] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1063.622739][ T8746] [ 1063.647716][ T8746] EXT4-fs (loop9): Total free blocks count 0 [ 1063.654989][ T8746] EXT4-fs (loop9): Free/Dirty block details [ 1063.668048][ T8746] EXT4-fs (loop9): free_blocks=0 [ 1063.700631][ T8746] EXT4-fs (loop9): dirty_blocks=884 [ 1063.721217][ T8746] EXT4-fs (loop9): Block reservation details [ 1063.778918][ T8746] EXT4-fs (loop9): i_reserved_data_blocks=884 [ 1063.886147][ T7192] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.251771][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1064.251815][ T28] audit: type=1400 audit(2000001322.570:294378): avc: denied { mounton } for pid=8776 comm="syz.5.26235" path="/file0" dev="ramfs" ino=223959 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1064.407491][ T8779] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1064.547940][ T8787] loop9: detected capacity change from 0 to 1024 [ 1064.604273][ T8787] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.650441][ T8787] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1064.945324][ T8815] bond1: (slave lo): Releasing backup interface [ 1064.957665][ T8815] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1064.997399][ T8815] batman_adv: batadv0: Interface deactivated: dummy0 [ 1065.004443][ T8815] batman_adv: batadv0: Removing interface: dummy0 [ 1065.027894][ T8819] loop8: detected capacity change from 0 to 1024 [ 1065.045153][ T8819] EXT4-fs: Ignoring removed i_version option [ 1065.073134][ T28] audit: type=1326 audit(2000001323.400:294379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.0.26246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba1c00c819 code=0x0 [ 1065.076994][ T8819] EXT4-fs: Ignoring removed bh option [ 1065.122075][ T8815] bridge_slave_0: left allmulticast mode [ 1065.128029][ T8815] bridge_slave_0: left promiscuous mode [ 1065.134156][ T8815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.154956][ T8815] bridge_slave_1: left allmulticast mode [ 1065.171092][ T8815] bridge_slave_1: left promiscuous mode [ 1065.176898][ T8815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.188304][ T8819] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.222981][ T8815] team0: Port device team_slave_0 removed [ 1065.242596][ T8815] team0: Port device team_slave_1 removed [ 1065.250313][ T8819] EXT4-fs (loop8): shut down requested (2) [ 1065.256467][ T8815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.267000][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.276746][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.286096][ T8815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1065.289217][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.312861][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.322022][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.330858][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.340996][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=13 [ 1065.349819][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.358881][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.368570][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.377659][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=13 [ 1065.451643][ T8819] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 1065.467082][ T28] audit: type=1400 audit(2000001323.790:294380): avc: denied { remove_name } for pid=8818 comm="syz.8.26253" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1065.526186][ T8046] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.541631][ T28] audit: type=1400 audit(2000001323.790:294381): avc: denied { rename } for pid=8818 comm="syz.8.26253" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1065.589588][ T8846] loop9: detected capacity change from 0 to 1024 [ 1065.612095][ T8846] EXT4-fs: Ignoring removed nobh option [ 1065.626772][ T8846] EXT4-fs: Ignoring removed bh option [ 1065.632939][ T8846] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block [ 1065.632939][ T8846] [ 1066.135083][ T8864] bridge_slave_0: left allmulticast mode [ 1066.140826][ T8864] bridge_slave_0: left promiscuous mode [ 1066.167002][ T8864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.206019][ T8864] bridge_slave_1: left allmulticast mode [ 1066.224905][ T8864] bridge_slave_1: left promiscuous mode [ 1066.248738][ T8864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.265475][ T8864] bond0: (slave bond_slave_0): Releasing backup interface [ 1066.292194][ T8864] bond0: (slave bond_slave_1): Releasing backup interface [ 1066.313555][ T8864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.351100][ T8864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.360208][ T8864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.392986][ T8864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.403125][ T8864] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1066.853877][ T3407] IPVS: starting estimator thread 0... [ 1066.941700][ T8893] IPVS: using max 2640 ests per chain, 132000 per kthread [ 1066.974611][ T8899] bridge_slave_1: left allmulticast mode [ 1066.983605][ T8899] bridge_slave_1: left promiscuous mode [ 1067.006361][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.402361][ T8899] bond0: (slave bond_slave_0): Releasing backup interface [ 1067.435895][ T8899] bond0: (slave bond_slave_1): Releasing backup interface [ 1067.496812][ T8899] team0: Port device team_slave_0 removed [ 1067.508555][ T8899] team0: Port device team_slave_1 removed [ 1067.517909][ T8899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.527364][ T8899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.552486][ T8899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.560030][ T8899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.608044][ T8899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1067.753055][ T8919] loop8: detected capacity change from 0 to 128 [ 1067.938773][ T8924] netlink: 20 bytes leftover after parsing attributes in process `syz.8.26294'. [ 1067.964017][ T8924] geneve2: entered promiscuous mode [ 1068.101920][ T28] audit: type=1326 audit(2000001326.420:294382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.8.26299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994595c819 code=0x7ffc0000 [ 1068.178808][ T28] audit: type=1326 audit(2000001326.420:294383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.8.26299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994595c819 code=0x7ffc0000 [ 1068.228907][ T28] audit: type=1326 audit(2000001326.420:294384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.8.26299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994595c819 code=0x7ffc0000 [ 1068.278999][ T28] audit: type=1326 audit(2000001326.420:294385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.8.26299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f994595c819 code=0x7ffc0000 [ 1068.427913][ T28] audit: type=1326 audit(2000001326.420:294386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.8.26299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994595c819 code=0x7ffc0000 [ 1068.453141][ T28] audit: type=1326 audit(2000001326.420:294387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8939 comm="syz.8.26299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994595c819 code=0x7ffc0000 [ 1068.455270][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26304'. [ 1068.678312][T31277] ================================================================== [ 1068.686444][T31277] BUG: KCSAN: data-race in n_tty_lookahead_flow_ctrl / tty_set_termios [ 1068.694721][T31277] [ 1068.697190][T31277] write to 0xffff88811aab5508 of 44 bytes by task 8959 on cpu 0: [ 1068.704929][T31277] tty_set_termios+0xc0/0x910 [ 1068.709645][T31277] set_termios+0x4a7/0x4f0 [ 1068.714107][T31277] tty_mode_ioctl+0x37f/0x5b0 [ 1068.718807][T31277] n_tty_ioctl_helper+0x87/0x370 [ 1068.723774][T31277] n_tty_ioctl+0x101/0x230 [ 1068.728224][T31277] tty_ioctl+0x83e/0xb80 [ 1068.732494][T31277] __se_sys_ioctl+0xce/0x140 [ 1068.737192][T31277] __x64_sys_ioctl+0x43/0x50 [ 1068.741826][T31277] x64_sys_call+0x1563/0x3020 [ 1068.746530][T31277] do_syscall_64+0x12c/0x370 [ 1068.751157][T31277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.757079][T31277] [ 1068.759433][T31277] read to 0xffff88811aab5521 of 1 bytes by task 31277 on cpu 1: [ 1068.767200][T31277] n_tty_lookahead_flow_ctrl+0x126/0x300 [ 1068.772875][T31277] tty_port_default_lookahead_buf+0x91/0xc0 [ 1068.778894][T31277] flush_to_ldisc+0x288/0x340 [ 1068.783604][T31277] process_scheduled_works+0x513/0xa10 [ 1068.789100][T31277] worker_thread+0x58a/0x780 [ 1068.793733][T31277] kthread+0x22a/0x280 [ 1068.797831][T31277] ret_from_fork+0x150/0x360 [ 1068.802459][T31277] ret_from_fork_asm+0x1a/0x30 [ 1068.807245][T31277] [ 1068.809584][T31277] value changed: 0x11 -> 0x4d [ 1068.814265][T31277] [ 1068.816610][T31277] Reported by Kernel Concurrency Sanitizer on: [ 1068.822788][T31277] CPU: 1 UID: 0 PID: 31277 Comm: kworker/u8:52 Tainted: G W syzkaller #0 PREEMPT(full) [ 1068.834013][T31277] Tainted: [W]=WARN [ 1068.837829][T31277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1068.847913][T31277] Workqueue: events_unbound flush_to_ldisc [ 1068.853907][T31277] ================================================================== [ 1068.977032][ T8967] netlink: 64 bytes leftover after parsing attributes in process `syz.5.26308'. [ 1068.986508][ T8967] openvswitch: netlink: Either Ethernet header or EtherType is required.