last executing test programs: 4m58.558849644s ago: executing program 32 (id=1835): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m47.083351918s ago: executing program 4 (id=2101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4a, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {0xff81, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) 4m46.965008114s ago: executing program 4 (id=2106): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x10000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x237d, 0x0, 0x21, 0xab}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r1, 0x89ef, &(0x7f0000000440)=0x8) 4m46.757399266s ago: executing program 4 (id=2114): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) 4m46.634963543s ago: executing program 4 (id=2116): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') io_setup(0x7, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m46.374987137s ago: executing program 4 (id=2121): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 4m46.166852979s ago: executing program 4 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x1}, 0x80c, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f00000006c0)='.\x00', 0xaa) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0xc55d446065f4a1a9, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x12, 0x7, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 4m46.152538989s ago: executing program 33 (id=2123): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x1}, 0x80c, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) inotify_add_watch(0xffffffffffffffff, &(0x7f00000006c0)='.\x00', 0xaa) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0xc55d446065f4a1a9, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x1c, 0x17, {0x12, 0x7, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) 4m45.117121826s ago: executing program 5 (id=2142): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0xff7f, 0x20d, 0x9, 0x85, 0x8, "f807000004dc176c"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0xa) 4m45.098060807s ago: executing program 5 (id=2143): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x34}}, 0x0) 4m44.959572705s ago: executing program 5 (id=2153): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xd6d, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x5000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m44.890549799s ago: executing program 5 (id=2157): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') io_setup(0x7, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 4m44.811396213s ago: executing program 5 (id=2149): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_rxnfc={0x32, 0xc, 0x6, {0x5, @tcp_ip6_spec={@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x4e24, 0x80}, {0x0, @local, 0x10, 0x1ff, [0xe958fbf, 0x1000]}, @ah_ip6_spec={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000001, 0x81}, {0x0, @remote, 0x6b8e, 0x5, [0x5, 0xd]}, 0xff, 0x1}}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m44.522688779s ago: executing program 5 (id=2163): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 4m44.52253704s ago: executing program 34 (id=2163): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 4m20.719491725s ago: executing program 1 (id=2725): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bind$inet(r2, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 4m19.874767071s ago: executing program 1 (id=2733): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="5c71f9", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m19.651288113s ago: executing program 1 (id=2734): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m19.53094199s ago: executing program 1 (id=2735): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv0}, {@nodelalloc}, {@max_batch_time}, {@nomblk_io_submit}], [{@flag='nomand'}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x574, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x771e, 0x16, 0x0, 0x0) 4m19.33903264s ago: executing program 1 (id=2738): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) 4m18.930776103s ago: executing program 1 (id=2743): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 4m18.930623643s ago: executing program 35 (id=2743): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) rmdir(&(0x7f0000000000)='./file0\x00') 3m20.261130165s ago: executing program 2 (id=3892): io_uring_setup(0x6000, &(0x7f0000000000)={0x0, 0x9e98, 0x800, 0x2, 0x116}) socket(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a5bd7000fddbdf2528"], 0x4c}, 0x1, 0x0, 0x0, 0x240480cc}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 3m20.203059618s ago: executing program 2 (id=3893): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000000)={[{@noswap}, {@huge_never}], [], 0x39}) 3m20.011001889s ago: executing program 2 (id=3909): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r1 = dup(r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/147, 0xfdef) 3m19.959623892s ago: executing program 2 (id=3900): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 3m19.874512986s ago: executing program 2 (id=3901): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x91, 0x20008800, 0x0, 0xffcb) 3m19.63492761s ago: executing program 2 (id=3904): socket$inet(0x2, 0x4000000000000001, 0x0) inotify_init() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="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", 0x3c4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) 3m19.63472866s ago: executing program 36 (id=3904): socket$inet(0x2, 0x4000000000000001, 0x0) inotify_init() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000380)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x2006}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000880)="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", 0x3c4}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000000700)='n', 0x1}], 0x1}}], 0x2, 0x119e75c40673edef) 2m36.463770505s ago: executing program 8 (id=4524): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) set_mempolicy(0x3, &(0x7f0000000180)=0x9, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x2000400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0xfffffffffffffe93, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000240)=@v3={0x3000000, [{0x5, 0xf}, {0xfffffe01, 0xff}]}, 0x18, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 2m36.408878378s ago: executing program 8 (id=4530): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r3, 0xffffffffffffffff, 0x0) 2m36.408291298s ago: executing program 8 (id=4531): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) 2m36.389139869s ago: executing program 8 (id=4532): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) 2m36.315007464s ago: executing program 8 (id=4534): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m35.938105904s ago: executing program 8 (id=4548): chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x98, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040084) 2m35.903318646s ago: executing program 37 (id=4548): chown(&(0x7f0000001840)='./file1\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x98, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040084) 3.79788379s ago: executing program 0 (id=7148): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="029000000080040008000a00", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 3.717403564s ago: executing program 9 (id=7149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "018000", "5e33931677e0f2d7"}, 0x28) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, &(0x7f0000000740)='S', 0x1, 0x8000, 0x0, 0x0) close(r0) 3.652313198s ago: executing program 7 (id=7151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000bb2850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0xfffffffb}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3, 0x3, 0x8}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.639398299s ago: executing program 9 (id=7152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) 3.307096707s ago: executing program 0 (id=7153): r0 = io_uring_setup(0x70c3, &(0x7f00000002c0)={0x0, 0x2c3f, 0x0, 0x20003, 0x1d7}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r3 = fsmount(r1, 0x1, 0x0) fchdir(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 3.0773693s ago: executing program 0 (id=7155): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_wait(r3, &(0x7f0000000140)=[{}], 0x1, 0xffffffff) 2.717579s ago: executing program 9 (id=7160): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x20) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file3\x00', 0x1004081, &(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES32], 0x10, 0x7f4, &(0x7f0000000d80)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file3\x00', 0x0, 0x1000, 0x0) open$dir(0x0, 0x0, 0x40) setpriority(0x0, 0x1, 0xa7a8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700"], 0x48) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 2.328683662s ago: executing program 7 (id=7163): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002580)={r1, r2, 0x4, r0}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, 0x0, 0x0, 0x12000000, 0x0, 0x0) 2.327372662s ago: executing program 6 (id=7173): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x20}, 0x90020, 0x1, 0xfffffffe, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x483, 0x0, 0x20008}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r1 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2.278637754s ago: executing program 3 (id=7164): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r1, r0) write$UHID_CREATE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfd}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.849000988s ago: executing program 7 (id=7165): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff3}}]}}]}, 0x40}}, 0x4010) 1.829226169s ago: executing program 6 (id=7166): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.789513752s ago: executing program 6 (id=7167): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1eb6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x533, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[0x1], 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r0}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@noblock_validity}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") futex(&(0x7f000000cffc)=0x2, 0x189, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f000000cffc), 0x8a, 0x0, 0x0, 0x0, 0x100007) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000080)=""/109, 0x6d) fallocate(r1, 0x10, 0x6, 0x10001) 1.677083077s ago: executing program 0 (id=7168): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$kcm(0x22, 0x2, 0x21) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f851d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x6025, 0x4005, 0xb, 0x6, 0xc2d, 0xfffffffd, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 1.676725277s ago: executing program 9 (id=7169): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4401e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0xa00a, 0x10000, 0x8, 0x8, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1.648222789s ago: executing program 3 (id=7170): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xae1}, 0x108012, 0x8, 0x800, 0x4, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) r1 = socket(0x2d, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x51) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367140051f60a64c9f4d4778037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 1.553885784s ago: executing program 3 (id=7171): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600002000000a00004000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006003200000000000000000000000000fe880000000000000000000000000001ac141432000000000000000000000000040003"], 0xc0}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="0000009dec3143347739b800"], 0x48) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e24, @multicast1}}) socket(0x2, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x30, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0x8, "09df168a0000"}]}}}}}}}, 0x0) 1.552635534s ago: executing program 6 (id=7172): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x0, 0x32}, 0x18) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x84800, 0x28) mknod$loop(0x0, 0x6000, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) ioprio_set$pid(0x2, 0x0, 0x2004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x5453, 0x0) io_setup(0x559, &(0x7f0000000280)=0x0) io_submit(r0, 0x0, 0x0) 1.526097696s ago: executing program 9 (id=7174): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000040000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe80, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.4621433s ago: executing program 9 (id=7175): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x40000004, 0xd2, 0x9, 0x9, 0x202, 0x1ff, 0x0, 0x0, 0x0, 0x400000000100007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x2, @perf_config_ext={0x4, 0x1ff}, 0x24a0, 0x0, 0x1, 0x8, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000000, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 1.461844699s ago: executing program 7 (id=7176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1}, 0x66e}], 0x1, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000740)=0x17, 0x4) 1.289431979s ago: executing program 3 (id=7177): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.287544999s ago: executing program 0 (id=7187): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f0000001140)={0x1, 0x2, 0x6, 0x5, r0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.2731339s ago: executing program 3 (id=7178): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x7437, 0x80}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') clock_nanosleep(0x8, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 950.245148ms ago: executing program 3 (id=7179): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x1ea9, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) 949.998258ms ago: executing program 6 (id=7180): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x113) shutdown(0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 561.816649ms ago: executing program 7 (id=7181): r0 = getpgid(0x0) perf_event_open(0x0, r0, 0x4, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 484.415653ms ago: executing program 6 (id=7182): r0 = inotify_init() r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 415.779647ms ago: executing program 0 (id=7183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x6f6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 0s ago: executing program 7 (id=7184): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x8887, 0x10000, 0x8, 0x1, 0x80a, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e40)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0xe, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc00}, 0x0) syz_io_uring_setup(0x6001f8c, &(0x7f0000000580)={0x0, 0xdcef, 0x1000, 0x1}, &(0x7f0000000400), &(0x7f0000000280)) r0 = syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x58cd, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) io_uring_enter(r0, 0x6686, 0x2936, 0x28, 0x0, 0x0) kernel console output (not intermixed with test programs): ink_xfrm_socket pid=19153 comm=syz.3.5485 [ 303.067231][T19159] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5485'. [ 303.502374][T19208] veth1_to_bond: entered promiscuous mode [ 303.675007][T19206] veth1_to_bond: left promiscuous mode [ 304.029374][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5505'. [ 305.079582][T19307] loop9: detected capacity change from 0 to 1024 [ 305.119681][T19307] EXT4-fs: Ignoring removed nobh option [ 305.125698][T19307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.167724][T19307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.235542][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.294132][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5530'. [ 305.625088][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5544'. [ 305.648058][T19348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5544'. [ 305.680116][T19354] IPv6: sit3: Disabled Multicast RS [ 305.748818][T19359] netlink: 'syz.9.5548': attribute type 3 has an invalid length. [ 305.757220][T19359] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.5548'. [ 305.874525][T19365] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5550'. [ 306.042809][T19372] loop6: detected capacity change from 0 to 2048 [ 306.080599][T19372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.125869][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.490754][T19402] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5565'. [ 306.694052][T19417] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 307.723579][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 307.723597][ T29] audit: type=1400 audit(1768904925.856:3280): avc: denied { watch watch_reads } for pid=19455 comm="syz.3.5584" path="/file0" dev="ramfs" ino=81014 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 308.017656][T19467] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 308.085147][T19475] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 308.189589][T19481] loop6: detected capacity change from 0 to 164 [ 308.223940][T19481] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 308.269231][T19481] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5595'. [ 308.510118][T19460] Set syz1 is full, maxelem 65536 reached [ 308.579255][T19491] netlink: 'syz.0.5599': attribute type 32 has an invalid length. [ 308.627348][ T29] audit: type=1400 audit(1768904926.766:3281): avc: denied { getopt } for pid=19499 comm="syz.6.5603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 308.721193][ T29] audit: type=1400 audit(1768904926.856:3282): avc: denied { watch watch_reads } for pid=19514 comm="syz.3.5606" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 308.752628][ T3503] kernel write not supported for file bpf-prog (pid: 3503 comm: kworker/1:7) [ 308.819891][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5612'. [ 308.830242][T19528] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 308.846115][T19528] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5612'. [ 308.856983][T19528] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 309.076171][T19548] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5619'. [ 309.096039][T19548] netlink: 152 bytes leftover after parsing attributes in process `syz.9.5619'. [ 309.166435][T19552] loop9: detected capacity change from 0 to 512 [ 309.176668][T19552] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 309.196330][T19552] EXT4-fs (loop9): 1 orphan inode deleted [ 309.202430][T19552] EXT4-fs (loop9): 1 truncate cleaned up [ 309.209059][T19552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.228678][T19552] EXT4-fs (loop9): shut down requested (2) [ 309.258039][T19552] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.985552][T19578] tmpfs: Unsupported parameter 'huge' [ 310.992030][ T29] audit: type=1400 audit(1768904929.126:3283): avc: denied { watch } for pid=19592 comm="syz.7.5636" path="/757/file0" dev="tmpfs" ino=3993 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 311.110921][T19599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5639'. [ 311.226468][T19604] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5641'. [ 311.487035][T19599] batman_adv: batadv0: Interface deactivated: gretap2 [ 312.224289][ T29] audit: type=1400 audit(1768904930.356:3284): avc: denied { setattr } for pid=19621 comm="syz.0.5647" name="secretmem" dev="secretmem" ino=80676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 312.266494][T19625] loop9: detected capacity change from 0 to 2048 [ 312.273585][T19625] EXT4-fs: Ignoring removed bh option [ 312.292551][T19615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.330163][T19615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.356170][T19625] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.634993][ T29] audit: type=1326 audit(1768904930.766:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.671419][ T29] audit: type=1326 audit(1768904930.806:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.696744][ T29] audit: type=1326 audit(1768904930.806:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.720621][ T29] audit: type=1326 audit(1768904930.806:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.746524][ T29] audit: type=1326 audit(1768904930.806:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.771613][ T29] audit: type=1326 audit(1768904930.806:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.796308][ T29] audit: type=1326 audit(1768904930.806:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.809850][T19625] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.820426][ T29] audit: type=1326 audit(1768904930.806:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.854819][ T29] audit: type=1326 audit(1768904930.806:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.880431][ T29] audit: type=1326 audit(1768904930.806:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.904883][ T29] audit: type=1326 audit(1768904930.806:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.929235][ T29] audit: type=1326 audit(1768904930.806:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.953563][ T29] audit: type=1326 audit(1768904930.806:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 312.978102][ T29] audit: type=1326 audit(1768904930.806:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19633 comm="syz.7.5650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 313.123310][T19654] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5657'. [ 314.131346][T19707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5674'. [ 314.142757][T19707] bridge_slave_1: left allmulticast mode [ 314.149229][T19707] bridge_slave_1: left promiscuous mode [ 314.154947][T19707] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.195277][T19707] bridge_slave_0: left allmulticast mode [ 314.201049][T19707] bridge_slave_0: left promiscuous mode [ 314.206893][T19707] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.014715][T19753] netlink: 'syz.7.5690': attribute type 1 has an invalid length. [ 315.155518][T19757] bond4: (slave veth29): Enslaving as an active interface with a down link [ 315.165137][T19753] bond4: entered promiscuous mode [ 315.170342][T19753] bond4: entered allmulticast mode [ 315.185721][T19753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 315.611573][T19785] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5701'. [ 315.647903][T19785] netlink: 'syz.7.5701': attribute type 10 has an invalid length. [ 315.743195][T19782] macvtap1: entered promiscuous mode [ 315.749626][T19782] team0: entered promiscuous mode [ 315.755612][T19782] team_slave_0: entered promiscuous mode [ 315.764476][T19782] team_slave_1: entered promiscuous mode [ 315.779324][T19782] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 315.793386][T19782] team0: Device macvtap1 is already an upper device of the team interface [ 315.812476][T19782] team0: left promiscuous mode [ 315.819266][T19782] team_slave_0: left promiscuous mode [ 315.826794][T19782] team_slave_1: left promiscuous mode [ 315.881476][T19785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.890888][T19785] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 315.995765][T19805] netlink: 'syz.0.5708': attribute type 4 has an invalid length. [ 316.009191][T19805] netlink: 'syz.0.5708': attribute type 4 has an invalid length. [ 316.023549][T19808] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5709'. [ 316.396390][T19822] tipc: Enabling of bearer rejected, failed to enable media [ 316.844526][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5722'. [ 316.857473][T19850] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5722'. [ 317.435111][T19876] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5735'. [ 317.444962][T19876] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.492401][T19882] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5738'. [ 318.665368][T19922] loop6: detected capacity change from 0 to 512 [ 318.681215][T19922] EXT4-fs: Ignoring removed i_version option [ 318.687533][T19922] EXT4-fs: Ignoring removed nobh option [ 318.713106][T19922] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 318.756439][T19922] EXT4-fs (loop6): 1 truncate cleaned up [ 318.789752][T19922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.857867][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5758'. [ 318.904486][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5758'. [ 318.917104][T19941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5758'. [ 319.380908][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 319.380926][ T29] audit: type=1326 audit(1768904937.516:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.3.5770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x0 [ 319.422537][T19972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5771'. [ 319.434454][T19972] hsr_slave_0: left promiscuous mode [ 319.494883][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.591041][T19981] netlink: 'syz.7.5772': attribute type 10 has an invalid length. [ 319.648771][T19995] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5780'. [ 319.720650][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5782'. [ 319.890475][T20024] sctp: [Deprecated]: syz.9.5793 (pid 20024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.890475][T20024] Use struct sctp_sack_info instead [ 320.001197][T20037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.021688][T20037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.037070][T20043] netlink: zone id is out of range [ 320.042670][T20043] netlink: zone id is out of range [ 320.048208][T20043] netlink: zone id is out of range [ 320.063576][T20043] netlink: set zone limit has 8 unknown bytes [ 320.353672][ T29] audit: type=1326 audit(1768904938.486:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.9.5805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7fc00000 [ 320.800473][ T29] audit: type=1326 audit(1768904938.936:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.6.5821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x0 [ 321.006336][ T29] audit: type=1326 audit(1768904939.146:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20059 comm="syz.9.5805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f88e9d2c0d9 code=0x7fc00000 [ 321.318378][T20121] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3798809430/3798809432 [ 321.329604][T20121] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3798809430/3798809432 [ 321.339833][T20121] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3798809430/3798809432 [ 322.009168][ T29] audit: type=1326 audit(1768904940.146:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.9.5833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 322.057559][ T29] audit: type=1326 audit(1768904940.166:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.9.5833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 322.082417][ T29] audit: type=1326 audit(1768904940.166:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.9.5833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 322.107246][ T29] audit: type=1326 audit(1768904940.176:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.9.5833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 322.131695][ T29] audit: type=1326 audit(1768904940.196:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.9.5833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 322.157021][ T29] audit: type=1326 audit(1768904940.196:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20132 comm="syz.9.5833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 322.364101][T20157] loop9: detected capacity change from 0 to 1024 [ 322.407737][T20157] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 322.448611][T20157] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.587162][T20165] netlink: 'syz.3.5843': attribute type 1 has an invalid length. [ 322.665661][T20168] netlink: 'syz.7.5844': attribute type 10 has an invalid length. [ 322.701478][T20168] bond2: (slave dummy0): Releasing active interface [ 322.719590][T20174] __nla_validate_parse: 9 callbacks suppressed [ 322.719672][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5846'. [ 322.962267][T20193] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5851'. [ 322.993352][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5857'. [ 323.008433][T20197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5857'. [ 323.056408][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 323.593368][T20223] netlink: 'syz.9.5866': attribute type 4 has an invalid length. [ 323.623995][T20223] netlink: 'syz.9.5866': attribute type 4 has an invalid length. [ 324.228031][T20252] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5878'. [ 324.641258][T20308] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.648642][T20308] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.274805][T20390] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5891'. [ 325.304375][T20390] macvlan3: entered promiscuous mode [ 325.309909][T20390] macvlan3: entered allmulticast mode [ 325.326460][T20390] bond5: (slave macvlan3): Opening slave failed [ 326.012571][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 326.012586][ T29] audit: type=1326 audit(1768904944.146:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20413 comm="syz.7.5898" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f287fde4ad7 code=0x0 [ 326.133481][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5901'. [ 326.143140][T20421] bridge_slave_1: left allmulticast mode [ 326.149173][T20421] bridge_slave_1: left promiscuous mode [ 326.155129][T20421] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.164091][T20421] bridge_slave_0: left allmulticast mode [ 326.169976][T20421] bridge_slave_0: left promiscuous mode [ 326.176131][T20421] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.263723][T20428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5903'. [ 326.374399][ T9918] geneve0 (unregistering): left promiscuous mode [ 326.526969][ T9918] bond0 (unregistering): left promiscuous mode [ 326.533577][ T9918] bond_slave_0: left promiscuous mode [ 326.539261][ T9918] bond_slave_1: left promiscuous mode [ 326.568413][ T9918] dummy0: left promiscuous mode [ 326.592570][ T9918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.625718][ T9918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.652790][ T9918] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 326.682972][ T9918] bond0 (unregistering): Released all slaves [ 326.709146][ T9918] bond1 (unregistering): Released all slaves [ 326.745896][ T9918] bond2 (unregistering): Released all slaves [ 326.773989][ T9918] bond3 (unregistering): Released all slaves [ 326.805510][ T9918] bond4 (unregistering): Released all slaves [ 326.834743][ T9918] bond5 (unregistering): Released all slaves [ 326.874558][ T9918] tipc: Disabling bearer [ 326.881048][ T9918] tipc: Disabling bearer [ 326.886740][ T9918] tipc: Left network mode [ 326.911911][ T9918] hsr_slave_0: left promiscuous mode [ 326.923872][ T9918] hsr_slave_1: left promiscuous mode [ 326.938051][ T9918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.960750][ T9918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.118532][ T9918] team0 (unregistering): Port device team_slave_1 removed [ 327.129740][ T9918] team0 (unregistering): Port device team_slave_0 removed [ 327.248557][T20456] netlink: 'syz.6.5913': attribute type 13 has an invalid length. [ 327.306587][T20461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5915'. [ 327.368846][T20466] netlink: 88 bytes leftover after parsing attributes in process `syz.7.5917'. [ 327.405746][T20466] tipc: New replicast peer: 172.20.20.170 [ 327.412002][T20466] tipc: Enabled bearer , priority 10 [ 327.559335][ T9918] IPVS: stop unused estimator thread 0... [ 328.926722][T20514] syzkaller0: entered promiscuous mode [ 328.932250][T20514] syzkaller0: entered allmulticast mode [ 329.386085][T20542] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5945'. [ 329.466224][T20542] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5945'. [ 329.857654][T20564] dummy0: Caught tx_queue_len zero misconfig [ 329.907607][T20566] netlink: 'syz.6.5954': attribute type 1 has an invalid length. [ 329.916163][T20566] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5954'. [ 330.526409][T20580] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5959'. [ 330.564512][T20584] netlink: 'syz.0.5961': attribute type 1 has an invalid length. [ 330.644127][T20586] bond5: entered promiscuous mode [ 330.649785][T20586] bond5: entered allmulticast mode [ 330.715441][T20584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5961'. [ 330.759577][T20586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 330.817859][T20584] veth29: entered promiscuous mode [ 330.823726][T20584] veth29: entered allmulticast mode [ 330.848626][T20584] bond5: (slave veth29): Enslaving as a backup interface with a down link [ 330.947911][T20601] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5968'. [ 330.990331][T20601] bond2: left allmulticast mode [ 330.995673][T20601] bond2: left promiscuous mode [ 331.330070][T20628] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5977'. [ 331.377824][ T29] audit: type=1400 audit(1768904949.516:3344): avc: denied { write } for pid=20633 comm="syz.7.5979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 331.459062][ T9918] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.478847][ T9918] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.498476][ T9918] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.522242][ T9918] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.571814][T20643] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5982'. [ 332.109283][T20669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5991'. [ 332.137093][ T29] audit: type=1400 audit(1768904950.276:3345): avc: denied { setattr } for pid=20670 comm="syz.9.5994" name="HIDP" dev="sockfs" ino=84199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 332.437807][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5998'. [ 332.869430][T20714] netlink: 'syz.3.6008': attribute type 1 has an invalid length. [ 332.954755][T20714] bond1: (slave veth7): Enslaving as an active interface with a down link [ 333.023941][T20714] bond1: entered promiscuous mode [ 333.029267][T20714] bond1: entered allmulticast mode [ 333.106917][T20714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.277824][T20693] loop9: detected capacity change from 0 to 512 [ 333.380349][T20693] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.424665][ T29] audit: type=1326 audit(1768904951.486:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20721 comm="syz.0.6012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f1992074ad7 code=0x0 [ 333.486173][T20693] EXT4-fs (loop9): orphan cleanup on readonly fs [ 333.507401][T20731] tipc: Started in network mode [ 333.512309][T20731] tipc: Node identity ac141442, cluster identity 4711 [ 333.551498][T20693] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.6000: Allocating blocks 41-42 which overlap fs metadata [ 333.604584][T20731] tipc: Enabling of bearer rejected, failed to enable media [ 333.673200][T20693] Quota error (device loop9): write_blk: dquota write failed [ 333.682358][T20693] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 333.759709][T20693] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.6000: Allocating blocks 41-42 which overlap fs metadata [ 333.868978][T20693] Quota error (device loop9): write_blk: dquota write failed [ 333.961044][T20733] loop6: detected capacity change from 0 to 1024 [ 333.987940][T20733] EXT4-fs: inline encryption not supported [ 334.076772][T20733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.322859][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.860465][T20693] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 334.872327][T20693] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.6000: Failed to acquire dquot type 1 [ 334.889035][T20693] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 334.993151][T20753] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.011380][T20760] IPVS: set_ctl: invalid protocol: 45813 10.1.1.2:20004 [ 335.022487][T20760] loop6: detected capacity change from 0 to 128 [ 335.030752][T20693] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.6000: corrupted inode contents [ 335.045938][T20693] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #12: comm syz.9.6000: mark_inode_dirty error [ 335.050827][T20762] __nla_validate_parse: 2 callbacks suppressed [ 335.050844][T20762] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6027'. [ 335.077583][T20693] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.6000: corrupted inode contents [ 335.092567][ T29] audit: type=1400 audit(1768904953.216:3347): avc: denied { setattr } for pid=20758 comm="syz.6.6025" path="pipe:[61589]" dev="pipefs" ino=61589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 335.119389][T20693] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #12: comm syz.9.6000: mark_inode_dirty error [ 335.137364][T20693] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.6000: corrupted inode contents [ 335.174721][T20693] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 335.189772][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6027'. [ 335.191566][T20693] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #12: comm syz.9.6000: corrupted inode contents [ 335.260705][T20693] EXT4-fs error (device loop9): ext4_truncate:4635: inode #12: comm syz.9.6000: mark_inode_dirty error [ 335.275004][T20693] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 335.311610][T20693] EXT4-fs (loop9): 1 truncate cleaned up [ 335.338435][T20753] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.344775][T20693] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 335.466760][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.661667][T20753] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.949232][T20793] loop9: detected capacity change from 0 to 512 [ 335.958374][T20784] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6034'. [ 335.968286][T20784] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 336.018754][T20753] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.034571][T20793] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6038: invalid indirect mapped block 4294967295 (level 1) [ 336.085915][T20793] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6038: invalid indirect mapped block 4294967295 (level 1) [ 336.101186][T20793] EXT4-fs (loop9): 2 truncates cleaned up [ 336.107511][T20793] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.171194][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.243981][T20804] netlink: 'syz.9.6041': attribute type 3 has an invalid length. [ 336.251956][T20804] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6041'. [ 336.531689][ T9891] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.725717][T20812] SET target dimension over the limit! [ 336.740033][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6044'. [ 336.791267][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6044'. [ 336.822400][ T295] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.854212][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6044'. [ 337.205720][ T1989] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.435017][ T9903] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.730290][T20808] loop6: detected capacity change from 0 to 512 [ 337.767490][ T29] audit: type=1326 audit(1768904955.906:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 337.843779][ T29] audit: type=1326 audit(1768904955.936:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 337.870093][ T29] audit: type=1326 audit(1768904955.936:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 337.894448][ T29] audit: type=1326 audit(1768904955.936:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 337.921409][ T29] audit: type=1326 audit(1768904955.936:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 337.948781][ T29] audit: type=1326 audit(1768904955.936:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 337.977079][ T29] audit: type=1326 audit(1768904955.936:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 338.001550][ T29] audit: type=1326 audit(1768904955.936:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 338.026031][ T29] audit: type=1326 audit(1768904955.936:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 338.049621][ T29] audit: type=1326 audit(1768904955.936:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20849 comm="syz.3.6060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 338.089247][T20808] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 338.171618][T20808] EXT4-fs (loop6): orphan cleanup on readonly fs [ 338.250374][T20865] loop9: detected capacity change from 0 to 2048 [ 338.337293][ T3312] loop9: p1 p3 p4 [ 338.347138][ T3312] loop9: p4 size 589824 extends beyond EOD, truncated [ 338.358961][T20871] tipc: Failed to remove unknown binding: 66,0,0/2126:3140939607/3140939608 [ 338.361421][T20808] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6043: Allocating blocks 41-42 which overlap fs metadata [ 338.372028][T20871] tipc: Failed to remove unknown binding: 66,0,0/2126:3140939607/3140939608 [ 338.415206][T20865] loop9: p1 p3 p4 [ 338.421471][T20865] loop9: p4 size 589824 extends beyond EOD, truncated [ 338.431458][T20808] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.6043: Allocating blocks 41-42 which overlap fs metadata [ 338.494694][T20808] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.6043: Failed to acquire dquot type 1 [ 338.549386][T20808] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 338.557707][ T5989] udevd[5989]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 338.570068][T20808] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6043: corrupted inode contents [ 338.579397][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 338.580021][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 338.643832][T20808] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.6043: mark_inode_dirty error [ 338.669887][T20808] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6043: corrupted inode contents [ 338.687935][T20808] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.6043: mark_inode_dirty error [ 338.707572][T20808] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6043: corrupted inode contents [ 338.726632][T20808] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 338.772365][T20808] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.6043: corrupted inode contents [ 338.800379][T20808] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.6043: mark_inode_dirty error [ 338.822912][T20808] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 338.848093][T20808] EXT4-fs (loop6): 1 truncate cleaned up [ 338.867798][T20808] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.191590][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.652312][T20921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6087'. [ 339.691427][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6087'. [ 339.881713][T20950] loop6: detected capacity change from 0 to 128 [ 340.487476][T20968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6106'. [ 341.178331][T21013] loop6: detected capacity change from 0 to 128 [ 341.303951][T21025] loop9: detected capacity change from 0 to 512 [ 341.330058][T21029] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.6127'. [ 341.347733][T21025] EXT4-fs: Ignoring removed i_version option [ 341.353981][T21025] EXT4-fs: Ignoring removed nobh option [ 341.360930][T21029] netlink: zone id is out of range [ 341.366272][T21029] netlink: zone id is out of range [ 341.372512][T21029] netlink: zone id is out of range [ 341.378077][T21025] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 341.399449][T21025] EXT4-fs (loop9): 1 truncate cleaned up [ 341.406143][T21025] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.440945][T21029] netlink: set zone limit has 8 unknown bytes [ 341.485079][T21031] loop6: detected capacity change from 0 to 8192 [ 341.722674][T21050] netlink: 'syz.0.6134': attribute type 1 has an invalid length. [ 341.909514][T21066] netlink: 'syz.3.6139': attribute type 4 has an invalid length. [ 341.918057][T21066] netlink: 'syz.3.6139': attribute type 4 has an invalid length. [ 342.140912][T21033] Set syz1 is full, maxelem 65536 reached [ 342.147702][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.777314][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 342.777333][ T29] audit: type=1326 audit(1768904960.916:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 342.902726][ T29] audit: type=1326 audit(1768904960.916:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 342.928468][ T29] audit: type=1326 audit(1768904960.916:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 342.952800][ T29] audit: type=1326 audit(1768904960.916:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 342.978175][ T29] audit: type=1326 audit(1768904960.916:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 343.002789][ T29] audit: type=1326 audit(1768904960.916:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 343.027217][ T29] audit: type=1326 audit(1768904960.916:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 343.051287][ T29] audit: type=1326 audit(1768904960.916:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 343.076090][ T29] audit: type=1326 audit(1768904960.916:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 343.100937][ T29] audit: type=1326 audit(1768904960.916:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21088 comm="syz.0.6148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 343.188518][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6150'. [ 343.197942][T21094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6150'. [ 343.893499][T21135] batadv_slave_0: entered promiscuous mode [ 343.901073][T21135] batadv_slave_0 (unregistering): left promiscuous mode [ 343.909588][T21135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.808963][T21159] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6173'. [ 344.828611][T21159] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6173'. [ 345.727618][T21200] tipc: Failed to remove unknown binding: 66,0,0/2126:1280243686/1280243687 [ 345.737230][T21200] tipc: Failed to remove unknown binding: 66,0,0/2126:1280243686/1280243687 [ 345.830487][T21213] netlink: 'syz.0.6194': attribute type 4 has an invalid length. [ 345.845166][T21213] netlink: 'syz.0.6194': attribute type 4 has an invalid length. [ 345.917387][T21219] netlink: 'syz.0.6197': attribute type 13 has an invalid length. [ 345.949777][T21219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.958221][T21219] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.967016][T21219] batman_adv: batadv0: Interface activated: dummy0 [ 345.973861][T21219] batadv0: mtu less than device minimum [ 345.980832][T21219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 345.991923][T21219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 346.003332][T21219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 346.014598][T21219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 346.131283][T21235] netlink: 'syz.7.6203': attribute type 1 has an invalid length. [ 346.153656][T21235] bond6: entered promiscuous mode [ 346.158912][T21235] bond6: entered allmulticast mode [ 346.164339][T21235] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.181035][T21235] bridge18: entered promiscuous mode [ 346.186942][T21235] bridge18: entered allmulticast mode [ 346.193348][T21235] bond6: (slave bridge18): Enslaving as a backup interface with an up link [ 346.234727][T21242] netlink: 'syz.0.6206': attribute type 2 has an invalid length. [ 346.242686][T21242] netlink: 199792 bytes leftover after parsing attributes in process `syz.0.6206'. [ 346.340037][T21259] netlink: 'syz.7.6213': attribute type 13 has an invalid length. [ 346.366123][ T9920] net_ratelimit: 17 callbacks suppressed [ 346.366143][ T9920] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 346.394811][T21259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.404884][T21259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.591715][T21281] loop6: detected capacity change from 0 to 164 [ 346.600999][T21281] ISOFS: unable to read i-node block [ 346.616423][T21281] isofs_fill_super: get root inode failed [ 347.240914][T21306] loop9: detected capacity change from 0 to 1024 [ 347.258730][T21308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6231'. [ 347.282726][T21306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.283854][T21308] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.322876][T21308] bond6: (slave ip6tnl6): refused to change device type [ 347.347020][T21306] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: comm syz.9.6230: inode #3237228: comm syz.9.6230: iget: illegal inode # [ 347.376153][T21306] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.6230: error while reading EA inode 3237228 err=-117 [ 347.453709][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.788092][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 347.788184][ T29] audit: type=1326 audit(1768904965.926:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 347.855724][ T29] audit: type=1326 audit(1768904965.966:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 347.880747][ T29] audit: type=1326 audit(1768904965.966:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 347.906027][ T29] audit: type=1326 audit(1768904965.966:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e66abc547 code=0x7ffc0000 [ 347.930638][ T29] audit: type=1326 audit(1768904965.966:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7e66a7b58e code=0x7ffc0000 [ 347.955224][ T29] audit: type=1326 audit(1768904965.966:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e66a7b58e code=0x7ffc0000 [ 347.980572][ T29] audit: type=1326 audit(1768904965.966:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e66a7b58e code=0x7ffc0000 [ 348.005672][ T29] audit: type=1326 audit(1768904965.966:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7e66a7b58e code=0x7ffc0000 [ 348.029971][ T29] audit: type=1326 audit(1768904965.966:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x7ffc0000 [ 348.054973][ T29] audit: type=1326 audit(1768904965.966:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21335 comm="syz.3.6241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e66a7b58e code=0x7ffc0000 [ 348.538990][T21369] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6251'. [ 348.549779][T21369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=21369 comm=syz.3.6251 [ 348.712137][T21388] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6259'. [ 348.722246][T21388] netlink: 9 bytes leftover after parsing attributes in process `syz.7.6259'. [ 348.751966][T21383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6256'. [ 348.787374][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6262'. [ 348.793529][T21400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.061304][T21425] loop9: detected capacity change from 0 to 1024 [ 349.068811][T21425] EXT4-fs: Ignoring removed orlov option [ 349.076788][T21425] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 349.096323][T21425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 349.104772][T21425] System zones: 0-1, 3-12 [ 349.109906][T21425] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.184342][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.216484][T11672] IPVS: starting estimator thread 0... [ 349.295700][T21437] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 349.306529][T21432] IPVS: using max 2496 ests per chain, 124800 per kthread [ 349.307799][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6274'. [ 349.327676][T21439] netlink: 'syz.0.6275': attribute type 1 has an invalid length. [ 349.351449][T21439] bond7: entered promiscuous mode [ 349.356823][T21439] bond7: entered allmulticast mode [ 349.362623][T21439] 8021q: adding VLAN 0 to HW filter on device bond7 [ 349.379286][T21439] bridge12: entered promiscuous mode [ 349.384930][T21439] bridge12: entered allmulticast mode [ 349.391397][T21439] bond7: (slave bridge12): Enslaving as a backup interface with an up link [ 349.401960][ T9889] IPVS: stop unused estimator thread 0... [ 349.455673][ T9889] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 349.575800][ T9889] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 349.775332][T21462] batman_adv: batadv0: Interface deactivated: dummy0 [ 349.798049][T21462] gre1: left promiscuous mode [ 349.803205][T21462] gtp0: left promiscuous mode [ 349.808418][T21462] geneve3: left promiscuous mode [ 349.813480][T21462] geneve3: left allmulticast mode [ 349.819011][T21462] macvtap1: left allmulticast mode [ 349.824220][T21462] geneve4: left promiscuous mode [ 349.829852][T21462] geneve4: left allmulticast mode [ 349.836893][T21462] veth16: left promiscuous mode [ 349.841868][T21462] veth16: left allmulticast mode [ 349.909073][T21462] bond5: left promiscuous mode [ 349.914467][T21462] veth29: left promiscuous mode [ 349.920230][T21462] bond5: left allmulticast mode [ 349.925628][T21462] veth29: left allmulticast mode [ 349.985365][T21462] bond7: left promiscuous mode [ 349.990537][T21462] bridge12: left promiscuous mode [ 349.996320][T21462] bond7: left allmulticast mode [ 350.001631][T21462] bridge12: left allmulticast mode [ 350.036299][T21472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6289'. [ 350.177016][T21476] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6291'. [ 351.758962][T21535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6307'. [ 352.068895][T21542] netlink: 'syz.0.6309': attribute type 3 has an invalid length. [ 352.076915][T21542] netlink: 'syz.0.6309': attribute type 3 has an invalid length. [ 352.896036][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 352.896053][ T29] audit: type=1326 audit(1768905227.035:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.052658][ T29] audit: type=1326 audit(1768905227.075:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.078770][ T29] audit: type=1326 audit(1768905227.075:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.104949][ T29] audit: type=1326 audit(1768905227.075:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.130328][ T29] audit: type=1326 audit(1768905227.075:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.155393][ T29] audit: type=1326 audit(1768905227.075:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.181770][ T29] audit: type=1326 audit(1768905227.075:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.207206][ T29] audit: type=1326 audit(1768905227.075:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.234242][ T29] audit: type=1326 audit(1768905227.075:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.263403][ T29] audit: type=1326 audit(1768905227.075:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21576 comm="syz.7.6322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 353.306625][T21591] loop9: detected capacity change from 0 to 512 [ 353.322350][T21591] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 353.356933][T21591] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.6328: Unimplemented hash flags: 0x0001 [ 353.370765][T21591] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6328: Corrupt directory, running e2fsck is recommended [ 353.447218][T21607] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6334'. [ 353.505277][T21604] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.6328: Unimplemented hash flags: 0x0001 [ 353.517625][T21604] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6328: Corrupt directory, running e2fsck is recommended [ 353.617318][T21611] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.6328: Unimplemented hash flags: 0x0001 [ 353.629825][T21611] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6328: Corrupt directory, running e2fsck is recommended [ 353.739885][T21591] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.6328: Unimplemented hash flags: 0x0001 [ 353.753388][T21591] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.6328: Corrupt directory, running e2fsck is recommended [ 353.802556][T21591] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.6328: path /437/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 353.933178][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.979250][T21646] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6349'. [ 354.074637][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6352'. [ 354.315890][T21674] netlink: 'syz.9.6360': attribute type 83 has an invalid length. [ 354.488198][T21680] ref_ctr_offset mismatch. inode: 0x72c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1f00000000 [ 354.594799][T21686] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6366'. [ 354.676537][T21698] loop6: detected capacity change from 0 to 512 [ 354.687505][T21698] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 354.710963][T21698] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #17: comm syz.6.6369: inode has both inline data and extents flags [ 354.726606][T21698] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6369: couldn't read orphan inode 17 (err -117) [ 354.740162][T21698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.766218][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.992184][T21726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6382'. [ 355.046554][T21729] syzkaller0: entered promiscuous mode [ 355.052713][T21729] syzkaller0: entered allmulticast mode [ 355.121178][T21731] loop6: detected capacity change from 0 to 128 [ 355.190494][T21735] bio_check_eod: 33 callbacks suppressed [ 355.190513][T21735] syz.6.6384: attempt to access beyond end of device [ 355.190513][T21735] loop6: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 355.227036][T21735] syz.6.6384: attempt to access beyond end of device [ 355.227036][T21735] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 355.242734][T21735] syz.6.6384: attempt to access beyond end of device [ 355.242734][T21735] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 355.257684][T21735] syz.6.6384: attempt to access beyond end of device [ 355.257684][T21735] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 355.274561][T21739] kernel profiling enabled (shift: 63) [ 355.280327][T21739] profiling shift: 63 too large [ 355.303391][T21735] syz.6.6384: attempt to access beyond end of device [ 355.303391][T21735] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 355.334244][T21735] syz.6.6384: attempt to access beyond end of device [ 355.334244][T21735] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 355.348871][T21735] syz.6.6384: attempt to access beyond end of device [ 355.348871][T21735] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 355.370554][T21735] syz.6.6384: attempt to access beyond end of device [ 355.370554][T21735] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 355.392705][T21735] syz.6.6384: attempt to access beyond end of device [ 355.392705][T21735] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 355.417323][T21735] syz.6.6384: attempt to access beyond end of device [ 355.417323][T21735] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 355.583402][T21766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6399'. [ 355.639282][T21766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6399'. [ 355.677462][T21777] unsupported nlmsg_type 40 [ 355.855972][T21798] loop9: detected capacity change from 0 to 512 [ 355.872848][T21800] loop6: detected capacity change from 0 to 1024 [ 355.886973][T21800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 355.918436][T21800] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 355.931818][T21802] lo speed is unknown, defaulting to 1000 [ 355.938873][T21802] lo speed is unknown, defaulting to 1000 [ 355.945624][T21800] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 355.957679][T21802] lo speed is unknown, defaulting to 1000 [ 355.964761][T21802] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 355.973977][T21800] EXT4-fs error (device loop6): ext4_get_journal_inode:5849: comm syz.6.6414: inode #1: comm syz.6.6414: iget: illegal inode # [ 355.991968][T21798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.006407][T21802] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 356.013691][T21798] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.028237][T21802] lo speed is unknown, defaulting to 1000 [ 356.034228][T21800] EXT4-fs (loop6): no journal found [ 356.039533][T21800] EXT4-fs (loop6): can't get journal size [ 356.046239][T21802] lo speed is unknown, defaulting to 1000 [ 356.053397][T21802] lo speed is unknown, defaulting to 1000 [ 356.061475][T21800] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e118, mo2=0002] [ 356.064087][T21802] lo speed is unknown, defaulting to 1000 [ 356.069951][T21800] EXT4-fs (loop6): failed to initialize system zone (-22) [ 356.076921][T21802] lo speed is unknown, defaulting to 1000 [ 356.083509][T21800] EXT4-fs (loop6): mount failed [ 356.089694][T21802] lo speed is unknown, defaulting to 1000 [ 356.103802][T21802] lo speed is unknown, defaulting to 1000 [ 356.110833][T21802] lo speed is unknown, defaulting to 1000 [ 356.156624][T21807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6416'. [ 356.172496][T21807] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21807 comm=syz.3.6416 [ 356.172981][T21808] netlink: 1304 bytes leftover after parsing attributes in process `syz.6.6414'. [ 356.252630][T21812] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21812 comm=syz.3.6418 [ 356.316109][T21816] lo speed is unknown, defaulting to 1000 [ 356.650691][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.809943][T21831] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 356.828979][T11678] lo speed is unknown, defaulting to 1000 [ 356.947466][T21854] __nla_validate_parse: 5 callbacks suppressed [ 356.947486][T21854] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6434'. [ 356.971904][T21858] loop6: detected capacity change from 0 to 128 [ 357.022631][T21858] buffer_io_error: 19 callbacks suppressed [ 357.022651][T21858] Buffer I/O error on dev loop6, logical block 128, lost async page write [ 357.476650][T21884] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6445'. [ 357.515434][T21884] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21884 comm=syz.7.6445 [ 358.904796][T21919] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6457'. [ 358.918758][T21921] netlink: 'syz.0.6458': attribute type 13 has an invalid length. [ 358.997799][T21925] netlink: 'syz.0.6459': attribute type 3 has an invalid length. [ 359.006273][T21925] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6459'. [ 359.010912][T21926] pim6reg9: entered allmulticast mode [ 359.140519][T21941] netlink: 'syz.6.6464': attribute type 1 has an invalid length. [ 359.164480][T21941] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.189140][T21941] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 359.214974][T21941] bond3: entered allmulticast mode [ 359.401047][T21950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6466'. [ 360.731957][T21988] lo speed is unknown, defaulting to 1000 [ 361.475448][T22012] ip6t_rpfilter: unknown options [ 361.642845][T22023] program syz.9.6494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.931009][T22037] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 362.099067][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 362.099085][ T29] audit: type=1400 audit(1768905236.235:3644): avc: denied { setattr } for pid=22050 comm="syz.6.6505" path="/dev/bus/usb/001/001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 362.998307][T22092] netlink: 'syz.6.6519': attribute type 1 has an invalid length. [ 363.010101][T22093] syz_tun: entered allmulticast mode [ 363.031666][T22093] syz_tun: left allmulticast mode [ 363.058595][T22092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.118781][T22095] veth9: entered promiscuous mode [ 363.158115][T22095] bond4: (slave veth9): Enslaving as an active interface with a down link [ 363.175640][T22092] bond4: entered allmulticast mode [ 363.193392][T22101] lo speed is unknown, defaulting to 1000 [ 363.781174][T22126] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6531'. [ 363.850442][T22130] dummy0: entered allmulticast mode [ 363.877907][T22130] dummy0: left allmulticast mode [ 364.174090][T22145] lo speed is unknown, defaulting to 1000 [ 364.568216][ T29] audit: type=1326 audit(1768905238.705:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.674994][ T29] audit: type=1326 audit(1768905238.725:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.701397][ T29] audit: type=1326 audit(1768905238.725:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.727710][ T29] audit: type=1326 audit(1768905238.735:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.753875][ T29] audit: type=1326 audit(1768905238.735:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.780723][ T29] audit: type=1326 audit(1768905238.735:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.810778][ T29] audit: type=1326 audit(1768905238.735:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.839702][ T29] audit: type=1326 audit(1768905238.735:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.865589][ T29] audit: type=1326 audit(1768905238.735:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22150 comm="syz.7.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 364.947514][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6545'. [ 364.977732][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6545'. [ 365.042277][T22167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6547'. [ 365.137047][T22167] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22167 comm=syz.3.6547 [ 365.529523][T22196] netlink: 'syz.3.6559': attribute type 4 has an invalid length. [ 366.714770][T22252] loop6: detected capacity change from 0 to 512 [ 366.766239][T22252] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.6580: invalid indirect mapped block 256 (level 2) [ 366.826321][T22252] EXT4-fs (loop6): 2 truncates cleaned up [ 366.832876][T22252] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.928800][T22267] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.6580: bg 0: block 5: invalid block bitmap [ 366.956540][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6583'. [ 366.978779][T22269] bond7: entered promiscuous mode [ 366.985576][T22269] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.009045][ T295] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 367.022117][ T295] EXT4-fs (loop6): This should not happen!! Data will be lost [ 367.022117][ T295] [ 367.032477][ T295] EXT4-fs (loop6): Total free blocks count 0 [ 367.038727][ T295] EXT4-fs (loop6): Free/Dirty block details [ 367.044862][ T295] EXT4-fs (loop6): free_blocks=0 [ 367.049858][ T295] EXT4-fs (loop6): dirty_blocks=2778 [ 367.051726][T22275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.055471][ T295] EXT4-fs (loop6): Block reservation details [ 367.063141][T22275] IPv6: NLM_F_CREATE should be set when creating new route [ 367.063157][T22275] IPv6: NLM_F_CREATE should be set when creating new route [ 367.063859][T22275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.070453][ T295] EXT4-fs (loop6): i_reserved_data_blocks=2778 [ 367.105441][ T295] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 367.109238][T22269] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.128239][T22269] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 367.141580][T22269] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 367.165271][T22275] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 367.178231][T22275] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 367.288318][T22287] loop6: detected capacity change from 0 to 512 [ 367.297827][T22287] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 367.323639][T22287] EXT4-fs (loop6): invalid journal inode [ 367.330587][T22287] EXT4-fs (loop6): can't get journal size [ 367.340159][T22287] EXT4-fs (loop6): 1 truncate cleaned up [ 367.347420][T22291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6590'. [ 367.358209][T22287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.422616][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 367.422646][ T29] audit: type=1326 audit(1768905241.555:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.455856][ T29] audit: type=1326 audit(1768905241.595:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.482333][ T29] audit: type=1326 audit(1768905241.595:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.507575][ T29] audit: type=1326 audit(1768905241.595:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.531615][ T29] audit: type=1326 audit(1768905241.595:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.556341][ T29] audit: type=1326 audit(1768905241.595:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.580712][ T29] audit: type=1326 audit(1768905241.595:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.606144][ T29] audit: type=1326 audit(1768905241.595:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.630150][ T29] audit: type=1326 audit(1768905241.595:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.654499][ T29] audit: type=1326 audit(1768905241.595:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22289 comm="syz.7.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 367.681000][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.707897][T22298] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6591'. [ 367.729457][T22298] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22298 comm=syz.6.6591 [ 367.786436][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6593'. [ 367.803244][T22303] netlink: 'syz.0.6593': attribute type 5 has an invalid length. [ 367.811443][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6593'. [ 367.938766][T22316] loop6: detected capacity change from 0 to 512 [ 367.946594][T22316] EXT4-fs: Ignoring removed nobh option [ 367.954794][T22316] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 367.963678][T22316] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6599: invalid indirect mapped block 256 (level 1) [ 367.978280][T22316] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6599: invalid indirect mapped block 2683928664 (level 1) [ 367.993114][T22316] EXT4-fs (loop6): 1 truncate cleaned up [ 367.999232][T22316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.018629][T22315] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6599: Invalid block bitmap block 3 in block_group 0 [ 368.032604][T22315] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 368.042559][T22315] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.6599: invalid indirect mapped block 2683928664 (level 1) [ 368.067777][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.106565][T22319] loop6: detected capacity change from 0 to 512 [ 368.116644][T22319] EXT4-fs warning (device loop6): ext4_init_metadata_csum:4637: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 368.132738][T22319] EXT4-fs (loop6): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 368.151741][ T3312] udevd[3312]: incorrect jbd checksum on /dev/loop6 [ 368.169326][T22319] lo: entered allmulticast mode [ 368.196969][T22328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6604'. [ 368.434593][T22353] loop6: detected capacity change from 0 to 1024 [ 368.462220][T22353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.560350][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.651106][T22366] tipc: Failed to remove unknown binding: 66,0,0/0:1774782171/1774782172 [ 368.670338][T22366] tipc: Failed to remove unknown binding: 66,0,0/0:1774782171/1774782172 [ 368.854142][T22374] tipc: Failed to remove unknown binding: 66,0,0/0:3940655730/3940655731 [ 368.866377][T22374] tipc: Failed to remove unknown binding: 66,0,0/0:3940655730/3940655731 [ 369.099513][T22408] netlink: 'syz.9.6632': attribute type 1 has an invalid length. [ 369.128042][T22408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 369.191824][T22413] loop6: detected capacity change from 0 to 8192 [ 369.360807][T22431] netlink: 'syz.7.6645': attribute type 1 has an invalid length. [ 369.410625][T22431] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 369.422051][T22431] bond8: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 369.457435][T22431] bond8: (slave vxcan3): making interface the new active one [ 369.459959][T22434] __nla_validate_parse: 4 callbacks suppressed [ 369.459999][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6645'. [ 369.465472][T22431] bond8: (slave vxcan3): Enslaving as an active interface with an up link [ 369.492401][T22434] bond8 (unregistering): (slave vxcan3): Releasing backup interface [ 369.515909][T22434] bond8 (unregistering): Released all slaves [ 369.647105][T22440] ªªªªªª: renamed from vlan0 [ 369.893284][T22453] lo speed is unknown, defaulting to 1000 [ 370.325978][T22464] delete_channel: no stack [ 370.423083][T22469] netlink: 'syz.0.6658': attribute type 10 has an invalid length. [ 370.431119][T22469] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6658'. [ 370.448183][T22469] team0: Port device geneve1 added [ 370.471270][ T9897] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.510196][ T9897] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.555181][ T9897] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.595301][T22474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6661'. [ 370.599781][ T9897] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.648702][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6661'. [ 370.701833][T22476] lo speed is unknown, defaulting to 1000 [ 370.787525][T22459] syz.3.6656 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 370.802246][T22459] CPU: 0 UID: 0 PID: 22459 Comm: syz.3.6656 Not tainted syzkaller #0 PREEMPT(voluntary) [ 370.802288][T22459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.802303][T22459] Call Trace: [ 370.802310][T22459] [ 370.802384][T22459] __dump_stack+0x1d/0x30 [ 370.802415][T22459] dump_stack_lvl+0x95/0xd0 [ 370.802440][T22459] dump_stack+0x15/0x1b [ 370.802464][T22459] dump_header+0x80/0x240 [ 370.802502][T22459] oom_kill_process+0x295/0x350 [ 370.802527][T22459] out_of_memory+0x97d/0xb80 [ 370.802553][T22459] try_charge_memcg+0x62e/0xa10 [ 370.802659][T22459] obj_cgroup_charge_pages+0xa6/0x150 [ 370.802758][T22459] __memcg_kmem_charge_page+0x9e/0x170 [ 370.802845][T22459] __alloc_frozen_pages_noprof+0x18a/0x350 [ 370.802880][T22459] alloc_pages_mpol+0xb3/0x260 [ 370.802913][T22459] alloc_pages_noprof+0x8f/0x130 [ 370.803013][T22459] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 370.803053][T22459] __kvmalloc_node_noprof+0x471/0x680 [ 370.803082][T22459] ? ip_set_alloc+0x24/0x30 [ 370.803166][T22459] ? ip_set_alloc+0x24/0x30 [ 370.803199][T22459] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 370.803223][T22459] ip_set_alloc+0x24/0x30 [ 370.803349][T22459] hash_netiface_create+0x282/0x740 [ 370.803387][T22459] ? __pfx_hash_netiface_create+0x10/0x10 [ 370.803452][T22459] ip_set_create+0x3cf/0x970 [ 370.803559][T22459] ? __nla_parse+0x40/0x60 [ 370.803594][T22459] nfnetlink_rcv_msg+0x509/0x5d0 [ 370.803644][T22459] netlink_rcv_skb+0x123/0x220 [ 370.803702][T22459] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 370.803745][T22459] nfnetlink_rcv+0x167/0x1720 [ 370.803787][T22459] ? __kfree_skb+0x109/0x150 [ 370.803886][T22459] ? nlmon_xmit+0x4f/0x60 [ 370.803908][T22459] ? consume_skb+0x49/0x140 [ 370.803937][T22459] ? nlmon_xmit+0x4f/0x60 [ 370.803965][T22459] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 370.804017][T22459] ? __dev_queue_xmit+0x139a/0x1f20 [ 370.804050][T22459] ? __dev_queue_xmit+0x148/0x1f20 [ 370.804165][T22459] ? ref_tracker_free+0x37d/0x3e0 [ 370.804227][T22459] ? __netlink_deliver_tap+0x4dc/0x500 [ 370.804341][T22459] netlink_unicast+0x5c0/0x690 [ 370.804375][T22459] netlink_sendmsg+0x5c8/0x6f0 [ 370.804399][T22459] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.804464][T22459] __sock_sendmsg+0x145/0x170 [ 370.804489][T22459] ____sys_sendmsg+0x31e/0x4a0 [ 370.804532][T22459] ___sys_sendmsg+0x195/0x1e0 [ 370.804585][T22459] __x64_sys_sendmsg+0xd4/0x160 [ 370.804622][T22459] x64_sys_call+0x17ba/0x3000 [ 370.804720][T22459] do_syscall_64+0xc0/0x2a0 [ 370.804751][T22459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.804777][T22459] RIP: 0033:0x7f7e66abacb9 [ 370.804795][T22459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.804817][T22459] RSP: 002b:00007f7e65517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.804841][T22459] RAX: ffffffffffffffda RBX: 00007f7e66d35fa0 RCX: 00007f7e66abacb9 [ 370.804876][T22459] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 370.804891][T22459] RBP: 00007f7e66b28bf7 R08: 0000000000000000 R09: 0000000000000000 [ 370.804906][T22459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.804920][T22459] R13: 00007f7e66d36038 R14: 00007f7e66d35fa0 R15: 00007ffe5fa5c708 [ 370.804942][T22459] [ 370.804951][T22459] memory: usage 307200kB, limit 307200kB, failcnt 158 [ 371.074776][T22482] netlink: 'syz.7.6664': attribute type 1 has an invalid length. [ 371.091078][T22459] memory+swap: usage 347160kB, limit 9007199254740988kB, failcnt 0 [ 371.091102][T22459] kmem: usage 210988kB, limit 9007199254740988kB, failcnt 0 [ 371.091117][T22459] Memory cgroup stats for /syz3: [ 371.091595][T22459] cache 98177024 [ 371.091606][T22459] rss 204800 [ 371.091614][T22459] shmem 28729344 [ 371.091693][T22459] mapped_file 0 [ 371.091702][T22459] dirty 0 [ 371.091710][T22459] writeback 0 [ 371.091718][T22459] workingset_refault_anon 2081 [ 371.091727][T22459] workingset_refault_file 0 [ 371.145358][T22482] 8021q: adding VLAN 0 to HW filter on device bond8 [ 371.147672][T22459] swap 40919040 [ 371.147684][T22459] swapcached 94208 [ 371.147758][T22459] pgpgin 259279 [ 371.147828][T22459] pgpgout 235236 [ 371.147864][T22459] pgfault 200733 [ 371.147871][T22459] pgmajfault 273 [ 371.147878][T22459] inactive_anon 368640 [ 371.147930][T22459] active_anon 28663808 [ 371.147938][T22459] inactive_file 0 [ 371.147946][T22459] active_file 0 [ 371.147953][T22459] unevictable 69447680 [ 371.147960][T22459] hierarchical_memory_limit 314572800 [ 371.147970][T22459] hierarchical_memsw_limit 9223372036854771712 [ 371.148038][T22459] total_cache 98177024 [ 371.148046][T22459] total_rss 204800 [ 371.148055][T22459] total_shmem 28729344 [ 371.148101][T22459] total_mapped_file 0 [ 371.148109][T22459] total_dirty 0 [ 371.148117][T22459] total_writeback 0 [ 371.148126][T22459] total_workingset_refault_anon 2081 [ 371.148136][T22459] total_workingset_refault_file 0 [ 371.148144][T22459] total_swap 40919040 [ 371.148151][T22459] total_swapcached 94208 [ 371.148213][T22459] total_pgpgin 259279 [ 371.148221][T22459] total_pgpgout 235236 [ 371.148231][T22459] total_pgfault 200733 [ 371.182226][T22488] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6665'. [ 371.186360][T22459] total_pgmajfault 273 [ 371.186375][T22459] total_inactive_anon 368640 [ 371.201691][T22482] macvlan3: entered promiscuous mode [ 371.203503][T22459] total_active_anon 28663808 [ 371.203516][T22459] total_inactive_file 0 [ 371.206889][T22482] macvlan3: entered allmulticast mode [ 371.211628][T22459] total_active_file 0 [ 371.211639][T22459] total_unevictable 69447680 [ 371.218541][T22482] bond8: entered promiscuous mode [ 371.223960][T22459] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 371.228123][T22482] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 371.231476][T22459] ,cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6656,pid=22458,uid=0 [ 371.410436][T22459] Memory cgroup out of memory: Killed process 22459 (syz.3.6656) total-vm:94132kB, anon-rss:1332kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 371.436726][T22482] bond8: left promiscuous mode [ 371.474090][T22488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.527533][T22494] 8021q: adding VLAN 0 to HW filter on device bond5 [ 371.553485][T22494] bond5: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 371.565310][T22494] bond5: (slave ip6tnl2): Error -95 calling set_mac_address [ 371.628310][T22503] netlink: 'syz.3.6670': attribute type 30 has an invalid length. [ 371.660713][T22505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6671'. [ 371.768476][T22514] loop6: detected capacity change from 0 to 2048 [ 371.788338][T22514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.814706][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.833090][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6686'. [ 371.892952][T22524] lo speed is unknown, defaulting to 1000 [ 372.062098][T11682] IPVS: starting estimator thread 0... [ 372.122589][T22544] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6682'. [ 372.151686][T22544] 8021q: adding VLAN 0 to HW filter on device bond7 [ 372.155728][T22534] IPVS: using max 2400 ests per chain, 120000 per kthread [ 372.229982][T22544] bond7: (slave ip6tnl1): refused to change device type [ 372.254790][T22549] loop6: detected capacity change from 0 to 1024 [ 372.262275][T22549] EXT4-fs: Ignoring removed nobh option [ 372.268764][T22549] EXT4-fs: inline encryption not supported [ 372.323216][T22549] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.364141][T22554] loop9: detected capacity change from 0 to 512 [ 372.377394][ T9925] IPVS: stop unused estimator thread 0... [ 372.388016][T22554] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.434272][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.447962][T22554] ext4 filesystem being mounted at /496/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.464149][T22554] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.6685: corrupted inode contents [ 372.477383][T22554] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.6685: mark_inode_dirty error [ 372.489718][T22554] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.6685: corrupted inode contents [ 372.544289][T22554] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.6685: mark_inode_dirty error [ 372.655039][T22554] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #21: comm syz.9.6685: corrupted inode contents [ 372.668464][T22554] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #21: comm syz.9.6685: mark_inode_dirty error [ 372.701080][T22554] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #21: comm syz.9.6685: corrupted inode contents [ 372.713887][T22554] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #21: comm syz.9.6685: mark_inode_dirty error [ 372.727271][T22554] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #21: comm syz.9.6685: mark inode dirty (error -117) [ 372.740502][T22554] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 372.782582][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.863713][T22564] loop9: detected capacity change from 0 to 512 [ 372.902115][T22564] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6688: bg 0: block 248: padding at end of block bitmap is not set [ 372.906848][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 372.906864][ T29] audit: type=1326 audit(1768905247.045:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22567 comm="syz.3.6691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e66abacb9 code=0x0 [ 372.944233][T22564] Quota error (device loop9): write_blk: dquota write failed [ 372.955005][T22564] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 372.966937][T22564] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.6688: Failed to acquire dquot type 1 [ 372.979770][T22564] EXT4-fs (loop9): 1 truncate cleaned up [ 372.986229][T22564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.999304][T22564] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.164676][T14120] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.191735][T22580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6692'. [ 373.205113][T22576] loop6: detected capacity change from 0 to 1024 [ 373.239261][T22576] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.6694: bad orphan inode 134217728 [ 373.280728][T22576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.662733][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.794927][T22607] lo speed is unknown, defaulting to 1000 [ 374.067945][T22614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6706'. [ 374.096777][T22614] team0 (unregistering): Port device team_slave_0 removed [ 374.119560][T22614] team0 (unregistering): Port device team_slave_1 removed [ 374.134431][T22616] lo: Caught tx_queue_len zero misconfig [ 374.236873][ T29] audit: type=1326 audit(1768905248.375:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22624 comm="syz.9.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 374.334931][ T29] audit: type=1326 audit(1768905248.405:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22624 comm="syz.9.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 374.360292][ T29] audit: type=1326 audit(1768905248.405:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22624 comm="syz.9.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 374.384348][ T29] audit: type=1326 audit(1768905248.405:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22624 comm="syz.9.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 374.408816][ T29] audit: type=1326 audit(1768905248.405:3842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22624 comm="syz.9.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 374.433302][ T29] audit: type=1326 audit(1768905248.405:3843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22624 comm="syz.9.6711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 374.459106][ T29] audit: type=1326 audit(1768905248.435:3844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22626 comm="syz.6.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 374.560105][T22642] batman_adv: batadv0: Adding interface: dummy0 [ 374.566477][T22642] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.592751][T22642] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 374.613531][T22645] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6717'. [ 374.800261][T22654] loop6: detected capacity change from 0 to 8192 [ 375.326277][T22669] loop6: detected capacity change from 0 to 128 [ 375.453185][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.453966][T22672] bio_check_eod: 94 callbacks suppressed [ 375.453981][T22672] syz.6.6725: attempt to access beyond end of device [ 375.453981][T22672] loop6: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 375.463690][T22673] FAT-fs (loop6): Filesystem has been set read-only [ 375.463777][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.463815][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.463839][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.463863][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.463893][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.463976][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.464020][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.464045][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.464098][T22673] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 375.589778][T22676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6727'. [ 375.625387][T22672] syz.6.6725: attempt to access beyond end of device [ 375.625387][T22672] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 375.640197][T22672] syz.6.6725: attempt to access beyond end of device [ 375.640197][T22672] loop6: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 375.655848][T22672] syz.6.6725: attempt to access beyond end of device [ 375.655848][T22672] loop6: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 375.689636][T22672] syz.6.6725: attempt to access beyond end of device [ 375.689636][T22672] loop6: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 375.720318][T22672] syz.6.6725: attempt to access beyond end of device [ 375.720318][T22672] loop6: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 375.736534][T22672] syz.6.6725: attempt to access beyond end of device [ 375.736534][T22672] loop6: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 375.750293][T22672] syz.6.6725: attempt to access beyond end of device [ 375.750293][T22672] loop6: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 375.764496][T22672] syz.6.6725: attempt to access beyond end of device [ 375.764496][T22672] loop6: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 375.778868][T22669] syz.6.6725: attempt to access beyond end of device [ 375.778868][T22669] loop6: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 375.826708][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6733'. [ 376.082689][T22697] netlink: 'syz.7.6735': attribute type 3 has an invalid length. [ 376.101893][T22697] netlink: 'syz.7.6735': attribute type 3 has an invalid length. [ 376.225914][T22708] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6740'. [ 376.414187][T22713] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6741'. [ 376.449345][T22722] veth0_vlan: left allmulticast mode [ 376.460010][T22722] gtp0: left promiscuous mode [ 376.465713][T22722] macvlan2: left promiscuous mode [ 376.471082][T22722] macvlan2: left allmulticast mode [ 376.477850][T22722] bond4: left promiscuous mode [ 376.483101][T22722] bond4: left allmulticast mode [ 376.545684][T22722] bond6: left promiscuous mode [ 376.550711][T22722] bridge18: left promiscuous mode [ 376.556326][T22722] bond6: left allmulticast mode [ 376.561403][T22722] bridge18: left allmulticast mode [ 376.977436][T22734] netlink: 'syz.3.6748': attribute type 3 has an invalid length. [ 376.985388][T22734] netlink: 'syz.3.6748': attribute type 3 has an invalid length. [ 377.361852][T22758] netlink: 'syz.7.6758': attribute type 1 has an invalid length. [ 377.384175][T22760] netlink: 'syz.6.6759': attribute type 83 has an invalid length. [ 377.406561][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6761'. [ 377.429826][T22758] 8021q: adding VLAN 0 to HW filter on device bond9 [ 377.465390][T22765] bond9: entered allmulticast mode [ 377.545649][T22771] bond9: (slave ip6gretap1): making interface the new active one [ 377.553894][T22771] ip6gretap1: entered allmulticast mode [ 377.605848][T22771] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 377.624168][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6761'. [ 377.635894][T22779] bridge_slave_0: Caught tx_queue_len zero misconfig [ 377.708521][T22787] netlink: 'syz.6.6768': attribute type 3 has an invalid length. [ 377.717383][T22787] netlink: 'syz.6.6768': attribute type 3 has an invalid length. [ 377.727368][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6779'. [ 377.840603][T22789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.851600][T22789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.897500][T22789] bond1: left promiscuous mode [ 377.902358][T22789] bond1: left allmulticast mode [ 377.917765][T11682] lo speed is unknown, defaulting to 1000 [ 377.923929][T11682] syz2: Port: 1 Link DOWN [ 377.935078][ T9934] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.962069][ T9934] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.980405][ T9934] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.993027][ T9934] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.003108][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 378.003126][ T29] audit: type=1326 audit(1768905508.135:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 378.110049][ T29] audit: type=1326 audit(1768905508.135:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 378.135865][ T29] audit: type=1326 audit(1768905508.135:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 378.160602][ T29] audit: type=1326 audit(1768905508.135:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 378.185005][ T29] audit: type=1326 audit(1768905508.135:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 378.210041][ T29] audit: type=1326 audit(1768905508.155:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 378.234247][ T29] audit: type=1400 audit(1768905508.175:3899): avc: denied { setcheckreqprot } for pid=22800 comm="syz.9.6773" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 378.256615][ T29] audit: type=1326 audit(1768905508.195:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 378.280776][ T29] audit: type=1326 audit(1768905508.195:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f287fdeaa22 code=0x7ffc0000 [ 378.309927][ T29] audit: type=1326 audit(1768905508.395:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22798 comm="syz.7.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f287fdeaab7 code=0x7ffc0000 [ 378.343956][T22799] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6771'. [ 378.369372][T22799] hsr_slave_1 (unregistering): left promiscuous mode [ 378.383501][T22816] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6778'. [ 378.417335][T22816] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22816 comm=syz.9.6778 [ 378.507377][T22822] netlink: 'syz.9.6782': attribute type 4 has an invalid length. [ 378.518354][T22824] veth1_to_bond: Caught tx_queue_len zero misconfig [ 378.538657][T22822] netlink: 'syz.9.6782': attribute type 4 has an invalid length. [ 378.603885][T22831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22831 comm=syz.6.6787 [ 378.694817][T22844] lo speed is unknown, defaulting to 1000 [ 379.532070][T22874] delete_channel: no stack [ 379.936376][T22893] __nla_validate_parse: 3 callbacks suppressed [ 379.936445][T22893] netlink: 199776 bytes leftover after parsing attributes in process `syz.9.6807'. [ 379.978926][T22896] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 379.978926][T22896] The task syz.7.6805 (22896) triggered the difference, watch for misbehavior. [ 380.158274][T22909] loop9: detected capacity change from 0 to 256 [ 380.378937][T22913] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6813'. [ 380.435244][T22915] syzkaller1: entered promiscuous mode [ 380.441451][T22915] syzkaller1: entered allmulticast mode [ 380.702656][T22923] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6817'. [ 380.720918][T22924] macsec1: left promiscuous mode [ 380.726482][T22924] macsec1: left allmulticast mode [ 380.747159][T22924] bond3: left allmulticast mode [ 380.752140][T22924] bond4: left allmulticast mode [ 380.760484][T22924] veth9: left promiscuous mode [ 380.806554][T22930] ref_ctr_offset mismatch. inode: 0xac1 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1f00000000 [ 381.438723][T22948] validate_nla: 2 callbacks suppressed [ 381.438740][T22948] netlink: 'syz.9.6827': attribute type 1 has an invalid length. [ 381.460079][T22948] bond8: entered promiscuous mode [ 381.465299][T22948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.482432][T22948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 381.490467][T22948] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 381.501242][T22948] bond8: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 381.518603][T22948] bond8: (slave wireguard0): making interface the new active one [ 381.520955][T22952] loop6: detected capacity change from 0 to 256 [ 381.526672][T22948] wireguard0: entered promiscuous mode [ 381.542640][T22948] bond8: (slave wireguard0): Enslaving as an active interface with an up link [ 381.558539][T22953] bond8: (slave wireguard1): The slave device specified does not support setting the MAC address [ 381.571721][T22953] bond8: (slave wireguard1): Enslaving as a backup interface with an up link [ 381.844260][T22988] bond8: left promiscuous mode [ 381.849754][T22988] wireguard0: left promiscuous mode [ 381.965098][T23005] netlink: 'syz.3.6851': attribute type 1 has an invalid length. [ 381.985473][T23005] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 381.999815][T23005] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 382.010549][T23005] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 382.420360][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6856'. [ 382.429782][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6856'. [ 382.648275][T23028] loop9: detected capacity change from 0 to 512 [ 382.660379][T23028] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 382.680313][T23028] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6859'. [ 382.743587][T23033] delete_channel: no stack [ 382.968835][T23049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6868'. [ 383.021378][T23053] xt_hashlimit: size too large, truncated to 1048576 [ 383.028123][T23052] lo speed is unknown, defaulting to 1000 [ 383.082586][T23057] –: renamed from vxcan1 [ 383.449910][T23064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6874'. [ 383.536733][T23071] netlink: 'syz.9.6887': attribute type 4 has an invalid length. [ 383.552636][T23072] kernel profiling enabled (shift: 63) [ 383.558229][T23072] profiling shift: 63 too large [ 383.582200][T23071] netlink: 'syz.9.6887': attribute type 4 has an invalid length. [ 383.617296][T23083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6881'. [ 383.698081][T23085] netlink: 'syz.9.6882': attribute type 39 has an invalid length. [ 383.896847][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 383.896867][ T29] audit: type=1326 audit(1768905513.995:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 383.928311][ T29] audit: type=1326 audit(1768905513.995:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 383.953189][ T29] audit: type=1326 audit(1768905513.995:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 383.977494][ T29] audit: type=1326 audit(1768905513.995:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 384.003020][ T29] audit: type=1326 audit(1768905513.995:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 384.028572][ T29] audit: type=1326 audit(1768905513.995:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 384.053426][ T29] audit: type=1326 audit(1768905513.995:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 384.078239][ T29] audit: type=1326 audit(1768905513.995:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 384.103218][ T29] audit: type=1326 audit(1768905513.995:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 384.128245][ T29] audit: type=1326 audit(1768905513.995:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23088 comm="syz.6.6884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45985dacb9 code=0x7ffc0000 [ 384.603456][T23101] siw: device registration error -23 [ 385.121318][T23106] loop6: detected capacity change from 0 to 512 [ 385.137568][T23106] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 385.177491][T23106] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6892'. [ 385.313006][T23127] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6899'. [ 386.342314][T23154] siw: device registration error -23 [ 386.356033][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6918'. [ 386.375687][T23156] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.410613][T23156] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.565125][T23170] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 386.799375][T23182] netlink: 'syz.7.6920': attribute type 13 has an invalid length. [ 386.812058][T23183] netlink: 'syz.3.6919': attribute type 1 has an invalid length. [ 386.830249][T23179] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 387.032179][T23183] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.058910][T23187] bond3: (slave dummy0): making interface the new active one [ 387.067847][T23187] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 387.077227][T23190] bond3: entered allmulticast mode [ 387.107412][T23190] dummy0: entered allmulticast mode [ 387.300226][T23213] lo speed is unknown, defaulting to 1000 [ 387.726753][T23243] loop6: detected capacity change from 0 to 512 [ 387.735020][T23243] EXT4-fs: Ignoring removed bh option [ 387.742908][T23243] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 387.752472][T23243] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 387.779692][T23243] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 387.789875][T23243] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 387.798737][T23243] System zones: 0-2, 18-18, 34-35 [ 387.805817][T23247] loop9: detected capacity change from 0 to 128 [ 387.812804][T23243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.917602][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.265495][T23270] lo speed is unknown, defaulting to 1000 [ 388.283569][T23274] netlink: 1304 bytes leftover after parsing attributes in process `syz.9.6948'. [ 388.700522][T23293] loop6: detected capacity change from 0 to 8192 [ 389.099674][T23306] bond0: (slave bond_slave_0): Releasing backup interface [ 389.128788][T23306] bond0: (slave bond_slave_1): Releasing backup interface [ 389.161438][T23306] team0: Port device team_slave_0 removed [ 389.188985][T23306] team0: Port device team_slave_1 removed [ 389.209661][T23306] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.236588][T23307] team0: No ports can be present during mode change [ 389.361627][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 389.361646][ T29] audit: type=1326 audit(1768905519.495:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.401960][ T29] audit: type=1326 audit(1768905519.525:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.427259][ T29] audit: type=1326 audit(1768905519.525:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.451228][ T29] audit: type=1326 audit(1768905519.525:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.475952][ T29] audit: type=1326 audit(1768905519.525:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.500399][ T29] audit: type=1326 audit(1768905519.535:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.525045][ T29] audit: type=1326 audit(1768905519.535:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.549373][ T29] audit: type=1326 audit(1768905519.535:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.573331][ T29] audit: type=1326 audit(1768905519.535:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 389.598168][ T29] audit: type=1326 audit(1768905519.595:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23311 comm="syz.9.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 390.293295][T23337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6969'. [ 390.402947][T23337] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23337 comm=syz.0.6969 [ 390.655556][T23348] lo speed is unknown, defaulting to 1000 [ 391.523894][T23371] loop6: detected capacity change from 0 to 512 [ 391.559536][T23371] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.603060][T23371] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.721525][T23386] netlink: 'syz.0.6984': attribute type 1 has an invalid length. [ 391.753104][T23386] Unknown options in mask 20 [ 392.081407][T23409] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6992'. [ 392.103685][T23409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23409 comm=syz.9.6992 [ 392.153618][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6993'. [ 392.347913][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.047379][T23449] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7008'. [ 393.107681][T23452] ip6t_rpfilter: unknown options [ 393.397510][T23475] program syz.6.7026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.759721][T23487] syzkaller0: entered promiscuous mode [ 393.765289][T23487] syzkaller0: entered allmulticast mode [ 394.365993][T23510] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 395.052746][T23535] netlink: 120 bytes leftover after parsing attributes in process `syz.9.7041'. [ 395.161847][T23537] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 395.386781][T11671] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 395.422127][T11671] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 395.526603][T23548] lo speed is unknown, defaulting to 1000 [ 395.911943][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 395.911960][ T29] audit: type=1326 audit(1768905526.045:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 395.943739][ T29] audit: type=1326 audit(1768905526.045:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 395.970594][ T29] audit: type=1326 audit(1768905526.115:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 395.994657][ T29] audit: type=1326 audit(1768905526.115:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 396.019867][ T29] audit: type=1326 audit(1768905526.115:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 396.043726][ T29] audit: type=1326 audit(1768905526.115:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 396.115675][ T29] audit: type=1326 audit(1768905526.255:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 396.161649][ T29] audit: type=1326 audit(1768905526.285:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23578 comm="syz.0.7056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199207acb9 code=0x7ffc0000 [ 396.187502][ T29] audit: type=1326 audit(1768905526.295:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.7.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 396.212109][ T29] audit: type=1326 audit(1768905526.295:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.7.7059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f287fdeacb9 code=0x7ffc0000 [ 396.739001][T23600] loop6: detected capacity change from 0 to 256 [ 396.754612][T23600] FAT-fs (loop6): Directory bread(block 1285) failed [ 396.761644][T23600] FAT-fs (loop6): Directory bread(block 1286) failed [ 396.769370][T23600] FAT-fs (loop6): Directory bread(block 1287) failed [ 396.782115][T23600] FAT-fs (loop6): Directory bread(block 1288) failed [ 396.796392][T23600] FAT-fs (loop6): FAT read failed (blocknr 1281) [ 397.541847][T23613] lo speed is unknown, defaulting to 1000 [ 397.722350][T23619] lo speed is unknown, defaulting to 1000 [ 398.120540][T23622] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7073'. [ 398.177943][T23625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23625 comm=syz.9.7073 [ 398.795623][T23649] 8021q: adding VLAN 0 to HW filter on device bond8 [ 398.814967][T23649] vlan1: entered allmulticast mode [ 398.820306][T23649] bond8: entered allmulticast mode [ 399.035084][T23660] lo: entered allmulticast mode [ 399.041046][T23659] lo: left allmulticast mode [ 399.089384][T23662] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7085'. [ 399.200525][T23676] lo speed is unknown, defaulting to 1000 [ 399.371824][T23680] lo speed is unknown, defaulting to 1000 [ 399.668263][T23694] netlink: 136 bytes leftover after parsing attributes in process `syz.0.7096'. [ 399.677840][T23694] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 399.697180][T23696] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7098'. [ 399.723881][T23696] netlink: 'syz.9.7098': attribute type 5 has an invalid length. [ 399.732155][T23696] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7098'. [ 399.763656][T23702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7100'. [ 399.781854][T23701] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7101'. [ 399.800860][T23702] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23702 comm=syz.0.7100 [ 400.101911][T23738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7113'. [ 400.213894][T23750] syz_tun: entered allmulticast mode [ 401.360212][T23790] netlink: 'syz.6.7135': attribute type 1 has an invalid length. [ 401.370083][T23790] Unknown options in mask 20 [ 401.527512][T23799] lo speed is unknown, defaulting to 1000 [ 401.979522][T23832] netlink: 'syz.0.7148': attribute type 1 has an invalid length. [ 402.004754][T23832] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address [ 402.016155][T23832] bond9: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 402.032516][T23832] bond9: (slave vxcan1): making interface the new active one [ 402.041181][T23832] bond9: (slave vxcan1): Enslaving as an active interface with an up link [ 402.057811][T23840] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7150'. [ 402.081561][T23840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23840 comm=syz.7.7150 [ 402.088270][T23832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7148'. [ 402.107704][T23832] bond9 (unregistering): (slave vxcan1): Releasing backup interface [ 402.139915][T23832] bond9 (unregistering): Released all slaves [ 402.265394][T23847] lo speed is unknown, defaulting to 1000 [ 402.534760][T23851] netlink: 'syz.3.7154': attribute type 10 has an invalid length. [ 403.129489][ T29] kauditd_printk_skb: 692 callbacks suppressed [ 403.129529][ T29] audit: type=1326 audit(1768905533.265:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.196311][ T29] audit: type=1326 audit(1768905533.265:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.220677][ T29] audit: type=1326 audit(1768905533.265:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.244696][ T29] audit: type=1326 audit(1768905533.265:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.269137][ T29] audit: type=1326 audit(1768905533.265:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.293357][ T29] audit: type=1326 audit(1768905533.265:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.317978][ T29] audit: type=1326 audit(1768905533.265:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.342329][ T29] audit: type=1326 audit(1768905533.265:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f88e9d8acb9 code=0x7ffc0000 [ 403.366927][ T29] audit: type=1326 audit(1768905533.265:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f88e9d8aa22 code=0x7ffc0000 [ 403.390909][ T29] audit: type=1326 audit(1768905533.265:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23862 comm="syz.9.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f88e9d4b58e code=0x7ffc0000 [ 404.001076][T23883] loop6: detected capacity change from 0 to 1024 [ 404.010265][T23883] EXT4-fs: Ignoring removed bh option [ 404.023293][T23879] __nla_validate_parse: 1 callbacks suppressed [ 404.023313][T23879] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7165'. [ 404.046643][T23883] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.077838][T23879] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23879 comm=syz.7.7165 [ 404.100842][T23889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.110705][T23889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.118406][T23889] batman_adv: batadv0: Removing interface: macvtap1 [ 404.129728][T23883] EXT4-fs error (device loop6): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.6.7167: path /515/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 404.130014][T23889] batman_adv: batadv0: Removing interface: dummy0 [ 404.162089][T23889] batman_adv: batadv0: Removing interface: gretap2 [ 404.168935][T23883] EXT4-fs (loop6): Remounting filesystem read-only [ 404.169597][T23890] tipc: Failed to remove unknown binding: 66,0,0/0:2988359941/2988359942 [ 404.187725][T23879] netlink: 'syz.7.7165': attribute type 1 has an invalid length. [ 404.191596][T23890] tipc: Failed to remove unknown binding: 66,0,0/0:2988359941/2988359942 [ 404.216967][T15725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.382353][T23888] delete_channel: no stack [ 405.384439][T23931] lo speed is unknown, defaulting to 1000 [ 405.785029][T23909] ================================================================== [ 405.793306][T23909] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 405.802379][T23909] [ 405.804737][T23909] write to 0xffff88819480a768 of 8 bytes by task 23904 on cpu 0: [ 405.812492][T23909] shmem_file_splice_read+0x470/0x600 [ 405.818004][T23909] splice_direct_to_actor+0x26e/0x670 [ 405.823570][T23909] do_splice_direct+0x119/0x1a0 [ 405.828549][T23909] do_sendfile+0x380/0x650 [ 405.833068][T23909] __x64_sys_sendfile64+0x105/0x150 [ 405.838377][T23909] x64_sys_call+0x2db1/0x3000 [ 405.843152][T23909] do_syscall_64+0xc0/0x2a0 [ 405.847770][T23909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.853720][T23909] [ 405.856051][T23909] write to 0xffff88819480a768 of 8 bytes by task 23909 on cpu 1: [ 405.863969][T23909] shmem_file_splice_read+0x470/0x600 [ 405.869500][T23909] splice_direct_to_actor+0x26e/0x670 [ 405.875260][T23909] do_splice_direct+0x119/0x1a0 [ 405.880132][T23909] do_sendfile+0x380/0x650 [ 405.884565][T23909] __x64_sys_sendfile64+0x105/0x150 [ 405.889794][T23909] x64_sys_call+0x2db1/0x3000 [ 405.894490][T23909] do_syscall_64+0xc0/0x2a0 [ 405.899090][T23909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.905063][T23909] [ 405.907391][T23909] value changed: 0x000000000000af6d -> 0x000000000000af72 [ 405.914501][T23909] [ 405.916834][T23909] Reported by Kernel Concurrency Sanitizer on: [ 405.923372][T23909] CPU: 1 UID: 0 PID: 23909 Comm: syz.9.7175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 405.933638][T23909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.943799][T23909] ==================================================================