last executing test programs: 4m4.580318707s ago: executing program 32 (id=749): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) shutdown(0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 3m54.725547831s ago: executing program 33 (id=654): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) 3m45.885940697s ago: executing program 6 (id=991): openat$sndseq(0xffffffffffffff9c, &(0x7f00000016c0), 0xc0900) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3m45.025745947s ago: executing program 6 (id=1006): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfefffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x10020, 0x7f, 0x0, 0x7, 0xfff, 0x8001, 0xfff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') 3m44.164522747s ago: executing program 6 (id=1032): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 3m44.124662309s ago: executing program 6 (id=1035): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) 3m44.093986311s ago: executing program 6 (id=1037): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) syz_clone(0x4011, 0x0, 0xc, 0x0, 0x0, 0x0) 3m43.234882851s ago: executing program 6 (id=1067): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) r1 = syz_io_uring_setup(0x5c4, &(0x7f0000000500)={0x0, 0x101a32, 0x0, 0x2, 0x16d}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r0], 0x1) 3m43.229075471s ago: executing program 34 (id=1067): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0xafd4, 0x1000, 0x5, 0x2d2}) r1 = syz_io_uring_setup(0x5c4, &(0x7f0000000500)={0x0, 0x101a32, 0x0, 0x2, 0x16d}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r3 = io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x253f, 0x10000, 0x0, 0x28e, 0x0, r0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r0], 0x1) 3m28.228672145s ago: executing program 2 (id=1438): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) sendfile(r1, r1, 0x0, 0x800000009) 3m27.732059845s ago: executing program 2 (id=1458): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$eJzs3E9sVEUcAODf27a05Y+siCiIWkRjI7GFgsLBxGA08aCJERP12LSFIIUaWhIhaJbE4NGQeDcevXrwql6I8WTiFY8mhoQYLoCJcc3bfW93u91tadl2wX5fst2ZefvezOy8eTtvprsBrFtD6Z+kGr4WEVsjotD8gqHq0+2bFyfu3Lw4EaVy+dhfSWW3W2k8kx0mNmWR4UJE4fOkvqHB7PkLp8anp6fOZvHRudMfj86ev/DiyYEs5ciRQwcPHH557KXlV6pFfmm9bu36bGb3zjc/vPL2RG+enufWWI9OGYqhVkWpeK7TmXXZloZw0tvFgrAs6fmfNldfpf9vjZ5YrPFKa1gyYLWVy+Vyf/vNpXKzSwtSgAdWEt0uAdAd+Qd9ev+bP1oNBDaszvCj624crd4ApfW+nT0inq4k5vMgfU33t500FBEflP7+On3EKs1DAAA0+vFoPhJsGv8Vqysj/5y7+mr6/FC2hlKMiIcjYltEPBIR2yPi0YjYERGPRcTjTcfviYjyIvk3zzbX8q8tQhWud6iqLaXjv1eyta36+G9eAYo9WWxLRD5gntqfvSfD0dd//OT01IFF8vjp9d++bLetcfyXPtL887FgVo7rvU0TdJPjc+MrrnCTG5cidvU21z/pjUhqbZNExM6I2LWM4xYbwidf+HZ3LdI3/3VL17+i3HIdrQPrTOVvIp6vtn8p5rV/Pcdk3vrk6fETUyemzozV1idHB2J6av9oehbsb5nHL79efqdd/kvW//s/mnd54/APx7Kede/S9t/YcP5Hvn5br38xiUhq67Wzy8/j8u9ftL2nWen5vyF5rxLO70s/GZ+bO3sgYkPy1sL0sfq+eTx9jlK1/sN7W/f/bdk+6TvxRESkJ/GTEfFUVO8Q07LviYhnImLvIvX/+bVnP1p5/VdXWv/JputfteXntX99vb5dIMnWBqspg42bek7tuXanzcXj7tr/UCU0nKUsvP6lJUzmXSLalTT/tEtT/u3IOwgAAAD3v0JEbG6YS9ochcLISHUOaHtsLEzPzM7tOz5z7sxkui2iGH2FfKarOh/cl+Tzn8WG+FhT/GA2b/xVz2AlPjIxMz3Z1ZoDmyp9PimMRLzf09D/U392ZooZuJ/5vhasX4v1/3QQv+PKGhYGWFN3//l/9dNVLQiw5hr6f7tv+JdW8H9fwAPA/T9Qt/QP/bhmwIOvrC/Duras/r/PjwDC/0lvvFsLF7paEmCtGf/DurTk9/rvKVDub71pIBa+OAYWP2BPrKwYgy3y6kogHVl1JffBleyV/5pC29dEYXkH7I/OtOnxe3w3SmdnT+zo+Mlfzv5XvtMt+N2a9NNWga5cjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADruvwAAAP//hS/gCQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 3m27.372251055s ago: executing program 2 (id=1470): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) 3m27.203037865s ago: executing program 2 (id=1475): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x0) 3m27.183181846s ago: executing program 2 (id=1477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x9, @empty, 0x6}, 0x1c) listen(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3m26.844735726s ago: executing program 2 (id=1487): r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) 3m26.830314937s ago: executing program 35 (id=1487): r0 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) process_madvise(r1, 0x0, 0x0, 0x15, 0x0) 1m54.003923027s ago: executing program 7 (id=4176): perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x2501, &(0x7f0000000300)={0x0, 0x58cd, 0x10000, 0x3, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x92, 0x0, @fd, 0xfff, 0x0, 0x6}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m53.885833764s ago: executing program 7 (id=4180): r0 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000001f80)=""/4098, 0x1002) 1m53.7809878s ago: executing program 7 (id=4182): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) 1m53.739518732s ago: executing program 7 (id=4184): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1m53.676693345s ago: executing program 7 (id=4187): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f00007a9000/0x3000)=nil, &(0x7f000018b000/0x3000)=nil, &(0x7f0000416000/0x3000)=nil, &(0x7f00005a0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00001cd000/0x12000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioprio_set$pid(0x2, 0x0, 0x0) r0 = io_uring_setup(0x6a04, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000003}, 0xfffffffffffffc94) io_uring_enter(r0, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 1m53.676500305s ago: executing program 7 (id=4188): openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400200, 0x9c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/15, &(0x7f0000000080)=0xf) 1m53.676442535s ago: executing program 36 (id=4188): openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x400200, 0x9c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/15, &(0x7f0000000080)=0xf) 59.226684039s ago: executing program 3 (id=5605): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x400, @loopback, 0x15}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x800010000008eb8, 0x3) 58.376970598s ago: executing program 3 (id=5622): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000240)=""/201, 0xffffff47) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x10000000000001, 0x0, 0x0, 0x2) 58.129182693s ago: executing program 9 (id=5629): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x1, 0x1, {0x0, 0xff, 0x3}, {0x2, 0xff, 0x4}, 0xff}, {0x2, 0x3, {0x0, 0xf0}, {0x0, 0xff, 0x3}, 0x2, 0xfd}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 58.062419586s ago: executing program 9 (id=5630): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r3 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r3, 0x1) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 58.023130099s ago: executing program 9 (id=5633): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r4, 0x325, 0x400, 0x25dfdbfe, {0x8}}, 0x14}}, 0x4800) 57.993194041s ago: executing program 9 (id=5634): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}]}, 0x3, 0x43d, &(0x7f0000000580)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x110) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 57.858800258s ago: executing program 9 (id=5636): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="05031600d3fc140000004788031c", 0xe, 0x4000804, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 57.384262696s ago: executing program 3 (id=5645): bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="02030003130000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2300000007ff010000000000000000000000000001010000800000000002000100000000000000070c0000008005000500000000000a004e23000000fffe8000000000000000000000000000aaff01000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) 57.042860276s ago: executing program 3 (id=5650): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1) 57.013871928s ago: executing program 9 (id=5651): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x4020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x14010, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000004c0)='./file0\x00') 56.97870735s ago: executing program 37 (id=5651): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) unshare(0x4020400) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x14010, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000004c0)='./file0\x00') 56.97637676s ago: executing program 3 (id=5654): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x2, 0x800000000d, 0x2, 0x2, 0x2}, 0x0, &(0x7f0000000240)={0x7c, 0x2, 0x5, 0x2844bb54, 0xfec, 0x0, 0x0, 0x6}, 0x0, 0x0) 56.743365774s ago: executing program 3 (id=5660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x62) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x9, 0x728, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, '\x00\x00\x00\x00@\x00', "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) 56.695549466s ago: executing program 38 (id=5660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000007c0)={0xa, 0x4e23, 0x0, @loopback, 0x1170}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x62) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x4, 0x9, 0x728, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, '\x00\x00\x00\x00@\x00', "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) 13.820656315s ago: executing program 5 (id=6588): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) getsockopt$inet_opts(0xffffffffffffffff, 0x84, 0x75, 0xfffffffffffffffe, &(0x7f0000000040)=0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0), &(0x7f0000000040)=0x8) 13.786835956s ago: executing program 5 (id=6589): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 13.642449485s ago: executing program 5 (id=6591): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0}, 0x0, 0x50, 0x1}) r0 = syz_io_uring_setup(0x2221, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x0, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}) io_uring_enter(r0, 0x66ae, 0x4, 0x2, 0x0, 0x0) 12.782857135s ago: executing program 5 (id=6595): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3ff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 11.855611379s ago: executing program 5 (id=6609): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 11.774183274s ago: executing program 5 (id=6610): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getdents(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) setrlimit(0x0, &(0x7f0000000040)={0x0, 0x9}) symlink(0x0, 0x0) 5.122747172s ago: executing program 0 (id=6710): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, 0x0, 0x15, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250100000008000200010000ef08000100", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4) 5.015978327s ago: executing program 0 (id=6714): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.617188081s ago: executing program 0 (id=6717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.475169649s ago: executing program 0 (id=6718): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffffffffffebe, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="700009450220"], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) 4.148590138s ago: executing program 1 (id=6722): socket(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1008000, &(0x7f0000000380)={[{@fat=@errors_continue}, {@dots}, {@fat=@dos1xfloppy}, {@nodots}]}, 0x1, 0x29d, &(0x7f0000000000)="$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") r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a5bd7000fddbdf2528"], 0x4c}, 0x1, 0x0, 0x0, 0x240480cc}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) 4.148267628s ago: executing program 1 (id=6723): io_uring_setup(0x7, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x345}) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) close(0x3) 3.296269478s ago: executing program 1 (id=6725): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 3.180120365s ago: executing program 1 (id=6729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.154385086s ago: executing program 4 (id=6730): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000726) r1 = inotify_init() r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x80000006) utime(&(0x7f0000000000)='./file0\x00', 0x0) 3.119948738s ago: executing program 4 (id=6731): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r0) sendmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)='D', 0xffef}], 0x1}}], 0x1, 0x4044044) sendmmsg$unix(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="1a5f", 0x2}], 0x1, 0x0, 0x0, 0x20080884}}], 0x1, 0x48880) 3.09310171s ago: executing program 4 (id=6732): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x8080) 2.321494585s ago: executing program 1 (id=6733): unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x0) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 1.468894145s ago: executing program 1 (id=6734): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.430102106s ago: executing program 4 (id=6735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x9db155b4338cbebb, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 1.394281369s ago: executing program 4 (id=6736): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = gettid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[], 0x50) 1.37297626s ago: executing program 0 (id=6738): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000600)=ANY=[], 0x6a5) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x4, 0x3}}, 0x2e) write$char_usb(r0, &(0x7f0000002600)="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", 0x92e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 1.362257281s ago: executing program 4 (id=6739): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x8000000000000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 1.304799574s ago: executing program 0 (id=6741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.293018525s ago: executing program 8 (id=6742): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000580), &(0x7f0000000680)=r2}, 0x20) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.224040869s ago: executing program 8 (id=6743): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setuid(0xee01) r2 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.132431854s ago: executing program 8 (id=6744): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x800000, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x1294, 0x2, 0x5}) mq_getsetattr(r3, 0x0, 0x0) 991.545293ms ago: executing program 8 (id=6745): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/59, 0xfdef}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x4, 0x10000000}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xd}, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0xfdef) 122.879713ms ago: executing program 8 (id=6746): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffd000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x8001}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3656}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 0s ago: executing program 8 (id=6747): r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xf7b7, 0x808, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3901, 0x1, 0x0, 0xe2c) shutdown(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x5800000}], 0x1, 0x60010020, 0x0) kernel console output (not intermixed with test programs): =c000003e syscall=321 compat=0 ip=0x7f98fa5aaeb9 code=0x7ffc0000 [ 202.768331][ T29] audit: type=1326 audit(2000000312.779:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15636 comm="syz.9.4570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98fa5aaeb9 code=0x7ffc0000 [ 202.801590][T15637] loop9: detected capacity change from 0 to 128 [ 202.843371][T15637] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.855894][T15637] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.976344][T14541] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.174290][T15691] loop9: detected capacity change from 0 to 1024 [ 203.186712][T15691] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.305379][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.359620][T15713] netlink: 'syz.1.4603': attribute type 1 has an invalid length. [ 203.379248][T15713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.415654][T15713] bond0: (slave macvlan1): making interface the new active one [ 203.425001][T15713] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 203.975966][T15725] siw: device registration error -23 [ 205.089961][T15819] siw: device registration error -23 [ 205.860133][T15838] 9p: Bad value for 'rfdno' [ 206.038069][T15866] loop3: detected capacity change from 0 to 1 [ 206.094029][T15874] netlink: 'syz.9.4670': attribute type 1 has an invalid length. [ 206.101890][T15874] netlink: 'syz.9.4670': attribute type 4 has an invalid length. [ 206.109710][T15874] __nla_validate_parse: 5 callbacks suppressed [ 206.109792][T15874] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.4670'. [ 206.229725][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4677'. [ 206.238832][T15892] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4679'. [ 206.239044][T15893] netlink: 'syz.3.4677': attribute type 11 has an invalid length. [ 206.260193][T15893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4677'. [ 206.269323][T15893] netlink: 'syz.3.4677': attribute type 11 has an invalid length. [ 206.725999][T15946] netlink: 'syz.9.4700': attribute type 29 has an invalid length. [ 206.734054][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4698'. [ 206.745464][T15946] netlink: 'syz.9.4700': attribute type 29 has an invalid length. [ 206.754619][T15946] netlink: 'syz.9.4700': attribute type 32 has an invalid length. [ 206.762461][T15946] netlink: 500 bytes leftover after parsing attributes in process `syz.9.4700'. [ 206.905064][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4704'. [ 207.078180][T15975] all: renamed from bridge_slave_0 (while UP) [ 207.474734][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4721'. [ 207.486712][T16008] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4726'. [ 207.497913][T15996] A link change request failed with some changes committed already. Interface gre3 may have been left with an inconsistent configuration, please check. [ 207.647707][T16034] lo speed is unknown, defaulting to 1000 [ 207.654092][T16034] lo speed is unknown, defaulting to 1000 [ 208.084309][T16055] netlink: 120 bytes leftover after parsing attributes in process `syz.9.4745'. [ 208.354325][ T1035] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 208.372172][T16094] loop9: detected capacity change from 0 to 4096 [ 208.380811][ T1035] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.391064][T16094] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.397585][T16094] EXT4-fs: test_dummy_encryption option not supported [ 208.438749][T16097] fido_id[16097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 209.301882][T16131] netlink: 'syz.8.4774': attribute type 6 has an invalid length. [ 209.357920][T16139] netlink: 'syz.5.4778': attribute type 27 has an invalid length. [ 209.465352][ T41] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.473928][ T41] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.514223][T16142] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.534501][T16142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.563354][ T3392] lo speed is unknown, defaulting to 1000 [ 209.563450][ T41] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.569202][ T3392] «;”: Port: 1 Link ACTIVE [ 209.577563][ T41] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.611585][ T41] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.620244][ T41] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.645686][ T41] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.654263][ T41] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.778750][T16153] netlink: 'syz.5.4783': attribute type 29 has an invalid length. [ 210.247456][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 210.247473][ T29] audit: type=1400 audit(2000000320.309:3028): avc: denied { create } for pid=16188 comm="syz.5.4798" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.442941][T16216] loop3: detected capacity change from 0 to 512 [ 210.451478][T16216] EXT4-fs: Ignoring removed i_version option [ 210.457592][T16216] EXT4-fs: Ignoring removed bh option [ 210.475109][T16222] siw: device registration error -23 [ 210.579451][T16236] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 210.599956][ T29] audit: type=1326 audit(2000000320.659:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16238 comm="syz.1.4820" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x0 [ 210.641281][T16241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.667821][T16241] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 210.854028][T16269] loop3: detected capacity change from 0 to 1024 [ 210.860885][T16269] ext4: Unknown parameter 'func' [ 211.459180][T16298] __nla_validate_parse: 4 callbacks suppressed [ 211.459247][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4844'. [ 211.511837][T16298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.534841][T16302] bond1: option ad_select: unable to set because the bond device is up [ 211.665198][T16317] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4851'. [ 211.674322][T16317] validate_nla: 1 callbacks suppressed [ 211.674332][T16317] netlink: 'syz.9.4851': attribute type 5 has an invalid length. [ 211.687556][T16317] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4851'. [ 211.723493][T16317] geneve2: entered promiscuous mode [ 211.728820][T16317] geneve2: entered allmulticast mode [ 211.735956][ T4736] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 211.744889][ T4736] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 211.755177][ T4736] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 211.773451][ T3440] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 211.892188][T16329] geneve3: entered promiscuous mode [ 211.898843][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.917268][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.937899][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.958522][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.155809][ T29] audit: type=1326 audit(2000000322.219:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16347 comm="syz.8.4864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x0 [ 212.280452][ T29] audit: type=1400 audit(2000000322.339:3031): avc: denied { lock } for pid=16368 comm="syz.9.4872" path="socket:[44579]" dev="sockfs" ino=44579 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 212.503862][T16382] syzkaller1: entered promiscuous mode [ 212.509373][T16382] syzkaller1: entered allmulticast mode [ 212.579498][T16388] bridge_slave_0: invalid flags given to default FDB implementation [ 212.658701][ T3608] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 212.676780][ T3608] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.721730][T16396] fido_id[16396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 212.832333][T16400] geneve3: entered promiscuous mode [ 212.868148][T16404] geneve4: entered promiscuous mode [ 212.873498][T16404] geneve4: entered allmulticast mode [ 212.882135][ T3440] netdevsim netdevsim9 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 212.920407][ T3440] netdevsim netdevsim9 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 213.327464][ T3440] netdevsim netdevsim9 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 213.356889][ T4725] netdevsim netdevsim9 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 214.636561][T16449] loop3: detected capacity change from 0 to 128 [ 214.712792][T16434] syz.5.4900 (16434) used greatest stack depth: 6128 bytes left [ 214.983939][T16466] netlink: 'syz.3.4912': attribute type 27 has an invalid length. [ 215.303079][T16466] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.310497][T16466] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.407851][T16498] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4924'. [ 215.594987][T16466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.608476][T16466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.635024][ T29] audit: type=1326 audit(2000000325.699:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.658555][ T29] audit: type=1326 audit(2000000325.699:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.687028][ T29] audit: type=1326 audit(2000000325.749:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.710803][ T29] audit: type=1326 audit(2000000325.749:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.734348][ T29] audit: type=1326 audit(2000000325.749:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.758286][ T29] audit: type=1326 audit(2000000325.749:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.781776][ T29] audit: type=1326 audit(2000000325.749:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.805415][ T29] audit: type=1326 audit(2000000325.749:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.829205][ T29] audit: type=1326 audit(2000000325.749:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.852636][ T29] audit: type=1326 audit(2000000325.749:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16505 comm="syz.5.4926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 215.953309][T16466] bond1: left promiscuous mode [ 215.958362][T16466] bridge1: left promiscuous mode [ 216.042396][T16466] hsr1: left promiscuous mode [ 216.105257][T16469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.142747][ T3440] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.152188][ T3440] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.185445][ T3440] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.194475][ T3440] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.247772][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4933'. [ 216.257091][ T3440] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.266062][ T3440] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.303569][ T3440] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.312492][ T3440] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.326232][T16540] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4936'. [ 216.379494][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4940'. [ 216.388996][T16549] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4940'. [ 216.430660][T16552] netlink: 'syz.8.4941': attribute type 9 has an invalid length. [ 216.438515][T16552] netlink: 16166 bytes leftover after parsing attributes in process `syz.8.4941'. [ 216.730478][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4957'. [ 216.732172][T16591] loop9: detected capacity change from 0 to 164 [ 216.748646][T16591] iso9660: Unknown parameter '‘ä ¥;F¼G•ìy]|Û¦¬.×ïÚ‘âó¼XˆòÛº»„ÒŸ<­åñmÅ‚¿ÀÜé¢kžESI85 Jv°' [ 216.825142][T16602] loop9: detected capacity change from 0 to 1024 [ 216.832061][T16602] EXT4-fs: Ignoring removed orlov option [ 216.845995][T16602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.073932][T16625] batadv_slave_1: entered promiscuous mode [ 217.080286][T16625] batadv_slave_1: left promiscuous mode [ 217.103371][T16627] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 217.292231][T16639] netlink: 'syz.5.4979': attribute type 15 has an invalid length. [ 217.300243][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4979'. [ 217.309673][T16639] netlink: 'syz.5.4979': attribute type 15 has an invalid length. [ 217.317546][T16639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4979'. [ 217.403648][T16646] lo speed is unknown, defaulting to 1000 [ 217.409864][T16646] lo speed is unknown, defaulting to 1000 [ 217.706027][T16662] ref_ctr_offset mismatch. inode: 0x1411 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x989680 [ 217.718153][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.797202][T16667] netlink: 'syz.9.4998': attribute type 27 has an invalid length. [ 217.808816][T16668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4988'. [ 217.817866][T16668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4988'. [ 217.880679][T16667] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.888009][T16667] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.946415][T16667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.958100][T16667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.009557][T16667] ipip0: left promiscuous mode [ 218.035404][T16667] geneve2: left promiscuous mode [ 218.040397][T16667] geneve2: left allmulticast mode [ 218.053266][T16667] geneve3: left promiscuous mode [ 218.059638][T16667] geneve4: left promiscuous mode [ 218.064765][T16667] geneve4: left allmulticast mode [ 218.085294][T16671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.096409][T16671] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.107152][T16671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 218.123985][ T12] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.132974][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.141863][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 65535 - 0 [ 218.151025][ T12] netdevsim netdevsim9 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 218.161716][ T12] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.170630][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.179648][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 65535 - 0 [ 218.188628][ T12] netdevsim netdevsim9 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 218.227201][ T12] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.236276][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.245255][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 65535 - 0 [ 218.254355][ T12] netdevsim netdevsim9 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 218.265193][ T12] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.274098][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.274244][T16686] loop9: detected capacity change from 0 to 2048 [ 218.283002][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 65535 - 0 [ 218.298469][ T12] netdevsim netdevsim9 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 218.322181][T16686] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.381820][T16692] lo speed is unknown, defaulting to 1000 [ 218.423299][T16692] lo speed is unknown, defaulting to 1000 [ 218.447602][T16685] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 218.468477][T16685] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 218.480946][T16685] EXT4-fs (loop9): This should not happen!! Data will be lost [ 218.480946][T16685] [ 218.490629][T16685] EXT4-fs (loop9): Total free blocks count 0 [ 218.496652][T16685] EXT4-fs (loop9): Free/Dirty block details [ 218.502553][T16685] EXT4-fs (loop9): free_blocks=2415919504 [ 218.508312][T16685] EXT4-fs (loop9): dirty_blocks=736 [ 218.513537][T16685] EXT4-fs (loop9): Block reservation details [ 218.519513][T16685] EXT4-fs (loop9): i_reserved_data_blocks=46 [ 218.908884][T16712] syzkaller0: entered allmulticast mode [ 218.924123][T16712] syzkaller0: entered promiscuous mode [ 218.936622][T16712] syzkaller0 (unregistering): left allmulticast mode [ 218.943499][T16712] syzkaller0 (unregistering): left promiscuous mode [ 219.143578][ T3324] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 2 with error 28 [ 219.627379][T16743] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 220.146957][T16771] lo speed is unknown, defaulting to 1000 [ 220.153902][T16771] lo speed is unknown, defaulting to 1000 [ 220.202761][T16773] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5029'. [ 220.212320][T16773] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5029'. [ 220.244844][T16754] syz.3.5020 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 220.259308][T16754] CPU: 1 UID: 0 PID: 16754 Comm: syz.3.5020 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.259339][T16754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.259402][T16754] Call Trace: [ 220.259410][T16754] [ 220.259422][T16754] __dump_stack+0x1d/0x30 [ 220.259514][T16754] dump_stack_lvl+0x95/0xd0 [ 220.259616][T16754] dump_stack+0x15/0x1b [ 220.259636][T16754] dump_header+0x80/0x240 [ 220.259723][T16754] oom_kill_process+0x295/0x350 [ 220.259819][T16754] out_of_memory+0x97d/0xb80 [ 220.259846][T16754] try_charge_memcg+0x62e/0xa10 [ 220.259873][T16754] obj_cgroup_charge_pages+0x23/0xc0 [ 220.259945][T16754] __memcg_kmem_charge_page+0x9e/0x170 [ 220.259981][T16754] __alloc_frozen_pages_noprof+0x18a/0x350 [ 220.260016][T16754] alloc_pages_mpol+0xb3/0x260 [ 220.260054][T16754] alloc_pages_noprof+0x8f/0x130 [ 220.260111][T16754] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 220.260149][T16754] __kvmalloc_node_noprof+0x471/0x680 [ 220.260216][T16754] ? ip_set_alloc+0x24/0x30 [ 220.260253][T16754] ? ip_set_alloc+0x24/0x30 [ 220.260287][T16754] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 220.260320][T16754] ip_set_alloc+0x24/0x30 [ 220.260481][T16754] hash_netiface_create+0x282/0x740 [ 220.260523][T16754] ? __pfx_hash_netiface_create+0x10/0x10 [ 220.260573][T16754] ip_set_create+0x3cf/0x970 [ 220.260601][T16754] ? __nla_parse+0x40/0x60 [ 220.260627][T16754] nfnetlink_rcv_msg+0x509/0x5d0 [ 220.260671][T16754] netlink_rcv_skb+0x123/0x220 [ 220.260711][T16754] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 220.260745][T16754] nfnetlink_rcv+0x167/0x1720 [ 220.260775][T16754] ? __kfree_skb+0x109/0x150 [ 220.260808][T16754] ? nlmon_xmit+0x4f/0x60 [ 220.260871][T16754] ? consume_skb+0x49/0x140 [ 220.260912][T16754] ? nlmon_xmit+0x4f/0x60 [ 220.261023][T16754] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 220.261071][T16754] ? __dev_queue_xmit+0x139a/0x1f20 [ 220.261187][T16754] ? __dev_queue_xmit+0x148/0x1f20 [ 220.261226][T16754] ? ref_tracker_free+0x37d/0x3e0 [ 220.261319][T16754] ? __netlink_deliver_tap+0x4dc/0x500 [ 220.261419][T16754] netlink_unicast+0x5c0/0x690 [ 220.261453][T16754] netlink_sendmsg+0x5c8/0x6f0 [ 220.261492][T16754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.261515][T16754] ____sys_sendmsg+0x5af/0x600 [ 220.261569][T16754] ___sys_sendmsg+0x195/0x1e0 [ 220.261608][T16754] __x64_sys_sendmsg+0xd4/0x160 [ 220.261637][T16754] x64_sys_call+0x17ba/0x3000 [ 220.261676][T16754] do_syscall_64+0xc0/0x2a0 [ 220.261780][T16754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.261811][T16754] RIP: 0033:0x7fc352edaeb9 [ 220.261846][T16754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.261868][T16754] RSP: 002b:00007fc351937028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.261895][T16754] RAX: ffffffffffffffda RBX: 00007fc353155fa0 RCX: 00007fc352edaeb9 [ 220.261910][T16754] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 220.261938][T16754] RBP: 00007fc352f48c1f R08: 0000000000000000 R09: 0000000000000000 [ 220.261958][T16754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.261971][T16754] R13: 00007fc353156038 R14: 00007fc353155fa0 R15: 00007fff22031988 [ 220.261991][T16754] [ 220.262002][T16754] memory: usage 307200kB, limit 307200kB, failcnt 5256 [ 220.590317][T16754] memory+swap: usage 308784kB, limit 9007199254740988kB, failcnt 0 [ 220.598310][T16754] kmem: usage 306988kB, limit 9007199254740988kB, failcnt 0 [ 220.605640][T16754] Memory cgroup stats for /syz3: [ 220.607918][T16754] cache 20480 [ 220.616213][T16754] rss 192512 [ 220.619421][T16754] shmem 0 [ 220.622358][T16754] mapped_file 20480 [ 220.626794][T16754] dirty 8192 [ 220.629984][T16754] writeback 0 [ 220.633372][T16754] workingset_refault_anon 2790 [ 220.638125][T16754] workingset_refault_file 1919 [ 220.643034][T16754] swap 1622016 [ 220.646523][T16754] swapcached 0 [ 220.649880][T16754] pgpgin 281707 [ 220.653448][T16754] pgpgout 281654 [ 220.656980][T16754] pgfault 278047 [ 220.660572][T16754] pgmajfault 488 [ 220.664446][T16754] inactive_anon 4096 [ 220.668620][T16754] active_anon 0 [ 220.672083][T16754] inactive_file 0 [ 220.676011][T16754] active_file 0 [ 220.679458][T16754] unevictable 212992 [ 220.683633][T16754] hierarchical_memory_limit 314572800 [ 220.688998][T16754] hierarchical_memsw_limit 9223372036854771712 [ 220.695458][T16754] total_cache 20480 [ 220.699277][T16754] total_rss 192512 [ 220.703051][T16754] total_shmem 0 [ 220.706595][T16754] total_mapped_file 20480 [ 220.710980][T16754] total_dirty 8192 [ 220.714780][T16754] total_writeback 0 [ 220.718671][T16754] total_workingset_refault_anon 2790 [ 220.723976][T16754] total_workingset_refault_file 1919 [ 220.729260][T16754] total_swap 1622016 [ 220.733174][T16754] total_swapcached 0 [ 220.737061][T16754] total_pgpgin 281707 [ 220.741099][T16754] total_pgpgout 281654 [ 220.745192][T16754] total_pgfault 278048 [ 220.749338][T16754] total_pgmajfault 488 [ 220.753428][T16754] total_inactive_anon 4096 [ 220.757944][T16754] total_active_anon 0 [ 220.761914][T16754] total_inactive_file 0 [ 220.766080][T16754] total_active_file 0 [ 220.770051][T16754] total_unevictable 212992 [ 220.774489][T16754] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.5020,pid=16752,uid=0 [ 220.789330][T16754] Memory cgroup out of memory: Killed process 16752 (syz.3.5020) total-vm:96180kB, anon-rss:1204kB, file-rss:22188kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 220.891775][T16791] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5035'. [ 221.030210][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 221.030225][ T29] audit: type=1326 audit(2000000331.089:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.8.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 221.060113][ T29] audit: type=1326 audit(2000000331.089:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.8.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 221.102101][ T29] audit: type=1326 audit(2000000331.149:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.8.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 221.125732][ T29] audit: type=1326 audit(2000000331.149:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.8.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 221.149399][ T29] audit: type=1326 audit(2000000331.149:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.8.5041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 221.213897][ T29] audit: type=1326 audit(2000000331.279:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.5.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 221.237619][ T29] audit: type=1326 audit(2000000331.279:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.5.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 221.296778][ T29] audit: type=1326 audit(2000000331.359:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.5.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 221.320500][ T29] audit: type=1326 audit(2000000331.359:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.5.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 221.344192][ T29] audit: type=1326 audit(2000000331.359:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16813 comm="syz.5.5046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 221.491629][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5052'. [ 221.520399][T16831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5052'. [ 222.389082][T16857] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 222.389082][T16857] The task syz.8.5059 (16857) triggered the difference, watch for misbehavior. [ 223.133535][T16895] loop3: detected capacity change from 0 to 2048 [ 223.188158][T16902] __nla_validate_parse: 2 callbacks suppressed [ 223.188178][T16902] netlink: 65536 bytes leftover after parsing attributes in process `syz.5.5081'. [ 223.205267][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5082'. [ 223.223224][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5082'. [ 223.606307][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5088'. [ 223.615382][T16916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5088'. [ 223.624462][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5090'. [ 223.633422][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5090'. [ 223.642293][T16920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.921945][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5096'. [ 224.076349][T16947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5101'. [ 224.667920][T16966] xt_hashlimit: max too large, truncated to 1048576 [ 224.685439][T16966] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 224.844606][T16970] gtp0: entered promiscuous mode [ 225.005357][T16987] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5117'. [ 225.981177][T17059] netlink: 'syz.1.5147': attribute type 1 has an invalid length. [ 225.989029][T17059] netlink: 'syz.1.5147': attribute type 4 has an invalid length. [ 226.586895][T17103] ipip1: entered promiscuous mode [ 226.680550][T17110] loop9: detected capacity change from 0 to 1024 [ 226.688161][T17110] EXT4-fs: Ignoring removed bh option [ 226.706128][T17110] EXT4-fs: inline encryption not supported [ 226.729828][T17110] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 226.750097][T17110] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 226.766284][T17110] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 2: comm syz.9.5169: lblock 2 mapped to illegal pblock 2 (length 1) [ 226.790763][T17110] __quota_error: 42 callbacks suppressed [ 226.790782][T17110] Quota error (device loop9): qtree_write_dquot: dquota write failed [ 226.804692][T17110] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 48: comm syz.9.5169: lblock 0 mapped to illegal pblock 48 (length 1) [ 226.819214][T17110] Quota error (device loop9): v2_write_file_info: Can't write info structure [ 226.828079][T17110] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.5169: Failed to acquire dquot type 0 [ 226.839632][T17110] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 226.851646][T17110] EXT4-fs error (device loop9): ext4_evict_inode:253: inode #11: comm syz.9.5169: mark_inode_dirty error [ 226.875639][T17110] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 226.903000][T17110] EXT4-fs (loop9): 1 orphan inode deleted [ 226.922963][ T3440] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 226.929645][T17110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.937459][ T3440] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 226.958165][ T3440] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 227.053636][T17110] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 227.086454][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.106247][T14541] EXT4-fs error (device loop9): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 227.128287][T14541] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 227.149560][T14541] EXT4-fs error (device loop9): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 227.198513][ T29] audit: type=1326 audit(2000000337.259:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.1.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 227.272424][ T29] audit: type=1326 audit(2000000337.259:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.1.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 227.296082][ T29] audit: type=1326 audit(2000000337.269:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.1.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 227.319886][ T29] audit: type=1326 audit(2000000337.269:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.1.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 227.343424][ T29] audit: type=1326 audit(2000000337.269:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.1.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 227.366828][ T29] audit: type=1326 audit(2000000337.269:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.1.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 227.390384][ T29] audit: type=1326 audit(2000000337.269:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17121 comm="syz.1.5175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 227.570521][T17144] loop9: detected capacity change from 0 to 512 [ 227.589045][T17144] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.616056][T17144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 227.629187][T17144] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.674128][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 227.707919][T17154] loop9: detected capacity change from 0 to 1024 [ 227.718626][T17154] EXT4-fs: Ignoring removed oldalloc option [ 227.724701][T17154] EXT4-fs: Ignoring removed bh option [ 227.734326][T17154] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.854278][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.891096][T17169] netlink: 'syz.9.5190': attribute type 4 has an invalid length. [ 227.912204][T17169] netlink: 'syz.9.5190': attribute type 4 has an invalid length. [ 228.208918][T17196] lo speed is unknown, defaulting to 1000 [ 228.218755][T17196] lo speed is unknown, defaulting to 1000 [ 228.224206][T17201] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17201 comm=syz.5.5206 [ 228.238665][T17201] netlink: 'syz.5.5206': attribute type 1 has an invalid length. [ 228.260990][T17201] bond3: (slave bridge1): making interface the new active one [ 228.283234][T17201] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 228.411237][T17196] loop9: detected capacity change from 0 to 512 [ 228.420493][T17213] __nla_validate_parse: 8 callbacks suppressed [ 228.420511][T17213] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5210'. [ 228.446130][T17196] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 228.554660][T17222] tipc: Failed to remove unknown binding: 66,1,1/0:32258939/32258941 [ 228.562796][T17222] tipc: Failed to remove unknown binding: 66,1,1/0:32258939/32258941 [ 228.567717][T17225] loop9: detected capacity change from 0 to 1024 [ 228.580967][T17225] EXT4-fs: Ignoring removed orlov option [ 228.602534][T17225] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.688739][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.731167][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5225'. [ 228.740986][T17246] netlink: 'syz.9.5222': attribute type 12 has an invalid length. [ 228.748937][T17246] netlink: 'syz.9.5222': attribute type 29 has an invalid length. [ 228.756818][T17246] netlink: 148 bytes leftover after parsing attributes in process `syz.9.5222'. [ 228.765892][T17246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5222'. [ 228.781951][T17249] team1: entered promiscuous mode [ 228.787113][T17249] team1: entered allmulticast mode [ 228.792644][T17249] 8021q: adding VLAN 0 to HW filter on device team1 [ 228.953069][T17271] netlink: 'syz.9.5234': attribute type 1 has an invalid length. [ 228.975691][T17271] bond2: (slave geneve5): making interface the new active one [ 228.983671][T17271] bond2: (slave geneve5): Enslaving as an active interface with an up link [ 228.992396][ T4725] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.001668][ T4725] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.013184][ T4725] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.022138][ T4725] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 229.060176][T17281] loop9: detected capacity change from 0 to 512 [ 229.083525][T17281] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.5238: inode has both inline data and extents flags [ 229.097577][T17281] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.5238: couldn't read orphan inode 15 (err -117) [ 229.106013][T17290] netlink: 'syz.1.5242': attribute type 2 has an invalid length. [ 229.116785][T17281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.117275][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5242'. [ 229.157565][T17290] netlink: 'syz.1.5242': attribute type 2 has an invalid length. [ 229.165557][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5242'. [ 229.189640][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.217027][T17299] loop9: detected capacity change from 0 to 1024 [ 229.227727][T17299] EXT4-fs: inline encryption not supported [ 229.245924][T17299] EXT4-fs: Ignoring removed nobh option [ 229.251526][T17299] EXT4-fs: Ignoring removed bh option [ 229.251799][T17305] sch_tbf: burst 19360 is lower than device lo mtu (11337746) ! [ 229.293400][T17299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.357238][T14541] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.402376][T17321] xt_hashlimit: size too large, truncated to 1048576 [ 229.545671][T17329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17329 comm=syz.5.5256 [ 229.584060][T17329] bond4: (slave bridge2): making interface the new active one [ 229.592124][T17329] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 229.632798][T16508] lo speed is unknown, defaulting to 1000 [ 229.638637][T16508] syz0: Port: 1 Link ACTIVE [ 229.754173][T17357] loop9: detected capacity change from 0 to 128 [ 229.761124][T17357] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 229.772852][T17357] FAT-fs (loop9): error, invalid FAT chain (i_pos 548, last_block 8) [ 229.781077][T17357] FAT-fs (loop9): Filesystem has been set read-only [ 229.789092][T17357] FAT-fs (loop9): error, corrupted file size (i_pos 548, 522) [ 230.224432][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5270'. [ 230.354496][T17381] tipc: Started in network mode [ 230.359430][T17381] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 230.366777][T17381] tipc: Enabled bearer , priority 18 [ 230.575557][T17400] lo speed is unknown, defaulting to 1000 [ 230.581776][T17400] lo speed is unknown, defaulting to 1000 [ 230.746527][T17413] loop3: detected capacity change from 0 to 1024 [ 230.757437][T17413] EXT4-fs: Ignoring removed orlov option [ 230.763530][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5288'. [ 230.778746][T17415] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5288'. [ 230.850296][T17422] xt_hashlimit: size too large, truncated to 1048576 [ 231.362926][ T3419] tipc: Node number set to 10463914 [ 231.457376][T17448] lo speed is unknown, defaulting to 1000 [ 231.464819][T17448] lo speed is unknown, defaulting to 1000 [ 231.901250][T17466] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 232.161786][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5322'. [ 232.437463][T17530] loop3: detected capacity change from 0 to 512 [ 232.478833][T17534] bond0: (slave bond_slave_0): Releasing backup interface [ 232.685278][T17563] loop3: detected capacity change from 0 to 128 [ 232.725086][T17565] loop9: detected capacity change from 0 to 8192 [ 232.735260][T17565] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 232.743249][T17565] FAT-fs (loop9): Filesystem has been set read-only [ 232.749923][T17565] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 232.757818][T17565] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 232.765771][T17565] bio_check_eod: 52 callbacks suppressed [ 232.765787][T17565] syz.9.5349: attempt to access beyond end of device [ 232.765787][T17565] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 232.785433][T17565] buffer_io_error: 3 callbacks suppressed [ 232.785449][T17565] Buffer I/O error on dev loop9, logical block 57847, async page read [ 232.799416][T17565] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 232.807627][T17565] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 232.815549][T17565] FAT-fs (loop9): error, invalid access to FAT (entry 0x0000e1b1) [ 232.914096][T17579] loop9: detected capacity change from 0 to 256 [ 233.298669][T17599] sch_fq: defrate 7 ignored. [ 233.335127][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 233.335142][ T29] audit: type=1326 audit(2000000343.399:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.370689][ T29] audit: type=1326 audit(2000000343.399:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.394323][ T29] audit: type=1326 audit(2000000343.399:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.418191][ T29] audit: type=1326 audit(2000000343.399:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.441802][ T29] audit: type=1326 audit(2000000343.399:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.465381][ T29] audit: type=1326 audit(2000000343.399:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.488952][ T29] audit: type=1326 audit(2000000343.399:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.512645][ T29] audit: type=1326 audit(2000000343.399:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.536286][ T29] audit: type=1326 audit(2000000343.399:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17601 comm="syz.3.5364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 233.637534][T17616] loop3: detected capacity change from 0 to 512 [ 233.840021][T17633] lo speed is unknown, defaulting to 1000 [ 233.873077][T17633] lo speed is unknown, defaulting to 1000 [ 233.948887][T17647] sock: sock_timestamping_bind_phc: sock not bind to device [ 234.527107][ T29] audit: type=1326 audit(2000000344.589:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17691 comm="syz.5.5401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 234.548697][T17695] __nla_validate_parse: 3 callbacks suppressed [ 234.548718][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5405'. [ 234.566266][T17695] validate_nla: 3 callbacks suppressed [ 234.566282][T17695] netlink: 'syz.8.5405': attribute type 12 has an invalid length. [ 234.583210][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5405'. [ 234.592312][T17695] netlink: 'syz.8.5405': attribute type 12 has an invalid length. [ 235.873724][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5431'. [ 235.882805][T17756] netlink: 'syz.5.5431': attribute type 15 has an invalid length. [ 235.890696][T17756] netlink: 'syz.5.5431': attribute type 18 has an invalid length. [ 236.019420][T17766] netlink: 182 bytes leftover after parsing attributes in process `syz.9.5437'. [ 236.129278][T17771] VFS: Mount too revealing [ 236.308184][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5444'. [ 236.317261][T17784] netlink: 'syz.1.5444': attribute type 12 has an invalid length. [ 236.355729][T17784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5444'. [ 236.364694][T17784] netlink: 'syz.1.5444': attribute type 12 has an invalid length. [ 237.261399][T17850] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5457'. [ 237.270590][T17850] netlink: 208 bytes leftover after parsing attributes in process `syz.5.5457'. [ 237.314679][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5458'. [ 237.323709][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5458'. [ 237.783163][T17937] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 237.791036][T17937] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 238.001819][T17953] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 238.273434][T17967] netlink: 'syz.3.5489': attribute type 1 has an invalid length. [ 238.281353][T17967] netlink: 'syz.3.5489': attribute type 4 has an invalid length. [ 238.303718][T17967] netlink: 'syz.3.5489': attribute type 1 has an invalid length. [ 238.311779][T17967] netlink: 'syz.3.5489': attribute type 4 has an invalid length. [ 238.397825][T17981] loop3: detected capacity change from 0 to 512 [ 238.710978][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 238.710993][ T29] audit: type=1326 audit(2000000348.769:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17996 comm="syz.3.5504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 238.778438][ T29] audit: type=1326 audit(2000000348.769:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17996 comm="syz.3.5504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 238.801938][ T29] audit: type=1326 audit(2000000348.769:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17996 comm="syz.3.5504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 238.825464][ T29] audit: type=1326 audit(2000000348.769:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17996 comm="syz.3.5504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 238.848903][ T29] audit: type=1326 audit(2000000348.769:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17996 comm="syz.3.5504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 238.872493][ T29] audit: type=1326 audit(2000000348.769:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17996 comm="syz.3.5504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc352edaeb9 code=0x7ffc0000 [ 239.118937][ T29] audit: type=1326 audit(2000000349.179:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18008 comm="syz.1.5509" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x0 [ 240.637312][T18077] __nla_validate_parse: 8 callbacks suppressed [ 240.637333][T18077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5531'. [ 240.716693][T18080] xt_hashlimit: size too large, truncated to 1048576 [ 240.865586][T18083] netlink: 'syz.8.5532': attribute type 25 has an invalid length. [ 240.873467][T18083] netlink: 'syz.8.5532': attribute type 28 has an invalid length. [ 240.934039][T18085] lo speed is unknown, defaulting to 1000 [ 240.945824][T18085] lo speed is unknown, defaulting to 1000 [ 241.015345][T18087] netlink: 'syz.1.5535': attribute type 6 has an invalid length. [ 241.156461][T18100] netlink: 'syz.3.5541': attribute type 4 has an invalid length. [ 241.184813][T18100] netlink: 'syz.3.5541': attribute type 4 has an invalid length. [ 241.375012][ T29] audit: type=1326 audit(2000000351.439:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.8.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 241.398569][ T29] audit: type=1326 audit(2000000351.439:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.8.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 241.467852][ T29] audit: type=1326 audit(2000000351.439:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18130 comm="syz.8.5555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 241.534345][T18138] lo speed is unknown, defaulting to 1000 [ 241.540586][T18138] lo speed is unknown, defaulting to 1000 [ 241.618101][T18148] netlink: 'syz.5.5561': attribute type 4 has an invalid length. [ 241.654462][T18148] netlink: 'syz.5.5561': attribute type 4 has an invalid length. [ 241.672536][T14630] lo speed is unknown, defaulting to 1000 [ 241.686134][T16471] lo speed is unknown, defaulting to 1000 [ 241.986492][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5572'. [ 242.024667][T18180] loop9: detected capacity change from 0 to 256 [ 242.084031][T18186] netlink: 'syz.9.5576': attribute type 4 has an invalid length. [ 242.111868][T18186] netlink: 'syz.9.5576': attribute type 4 has an invalid length. [ 242.186233][T18196] xt_hashlimit: max too large, truncated to 1048576 [ 242.663067][T18229] netlink: 'syz.1.5590': attribute type 4 has an invalid length. [ 242.704187][T14630] lo speed is unknown, defaulting to 1000 [ 242.710048][T14630] syz0: Port: 1 Link DOWN [ 242.717551][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5594'. [ 242.746592][T14630] lo speed is unknown, defaulting to 1000 [ 242.752406][T14630] syz0: Port: 1 Link ACTIVE [ 242.815498][T18243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5598'. [ 242.931263][T18250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5601'. [ 242.954675][T18250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5601'. [ 243.342037][T18272] xt_hashlimit: max too large, truncated to 1048576 [ 243.453316][T18277] lo speed is unknown, defaulting to 1000 [ 243.459552][T18277] lo speed is unknown, defaulting to 1000 [ 243.599003][T18288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5614'. [ 244.071490][T18313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.078738][T18313] IPv6: NLM_F_CREATE should be set when creating new route [ 244.086009][T18313] IPv6: NLM_F_CREATE should be set when creating new route [ 244.244861][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5629'. [ 244.381876][T18335] loop9: detected capacity change from 0 to 512 [ 244.389479][T18335] EXT4-fs: Ignoring removed nobh option [ 244.397993][T18335] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 244.413967][T18335] EXT4-fs (loop9): 1 truncate cleaned up [ 244.429025][T18335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.446859][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 244.446873][ T29] audit: type=1400 audit(2000000354.509:3253): avc: denied { mounton } for pid=18334 comm="syz.9.5634" path="/315/file2/bus" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.509208][T14541] EXT4-fs error (device loop9): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 244.535462][T14541] EXT4-fs (loop9): Remounting filesystem read-only [ 244.620084][ T29] audit: type=1326 audit(2000000354.679:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 244.643828][ T29] audit: type=1326 audit(2000000354.679:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 244.667440][ T29] audit: type=1326 audit(2000000354.679:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 244.691032][ T29] audit: type=1326 audit(2000000354.679:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 244.715321][ T29] audit: type=1326 audit(2000000354.679:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 244.739491][ T29] audit: type=1326 audit(2000000354.679:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 244.763014][ T29] audit: type=1326 audit(2000000354.679:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 244.786562][ T29] audit: type=1326 audit(2000000354.679:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18343 comm="syz.8.5637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 245.246727][T14616] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.282943][ T29] audit: type=1326 audit(2000000355.339:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18366 comm="syz.8.5647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb43e3aeb9 code=0x7ffc0000 [ 245.337302][ T4740] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.413735][ T4740] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.504021][ T4740] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.535509][T18395] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18395 comm=syz.5.5656 [ 245.588950][ T4740] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 245.676600][T18389] lo speed is unknown, defaulting to 1000 [ 245.693374][T18389] lo speed is unknown, defaulting to 1000 [ 245.737571][ T4740] bridge_slave_1: left allmulticast mode [ 245.743432][ T4740] bridge_slave_1: left promiscuous mode [ 245.749152][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.793598][ T4740] bridge_slave_0: left allmulticast mode [ 245.799310][ T4740] bridge_slave_0: left promiscuous mode [ 245.805003][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.888219][ T4740] bond2 (unregistering): (slave geneve5): Releasing active interface [ 245.955749][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.964954][ T4740] bond0 (unregistering): Released all slaves [ 245.973296][ T4740] bond1 (unregistering): Released all slaves [ 245.988301][ T4740] bond2 (unregistering): Released all slaves [ 246.094961][ T4740] hsr_slave_0: left promiscuous mode [ 246.103392][ T4740] hsr_slave_1: left promiscuous mode [ 246.109090][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.133742][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.204630][ T4740] team0 (unregistering): Port device team_slave_1 removed [ 246.223694][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 246.298776][T18389] chnl_net:caif_netlink_parms(): no params data found [ 246.326153][T18412] lo speed is unknown, defaulting to 1000 [ 246.356344][T18412] lo speed is unknown, defaulting to 1000 [ 246.443969][T18389] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.451093][T18389] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.479255][T18389] bridge_slave_0: entered allmulticast mode [ 246.493748][T18389] bridge_slave_0: entered promiscuous mode [ 246.494024][T18473] validate_nla: 3 callbacks suppressed [ 246.494038][T18473] netlink: 'syz.1.5670': attribute type 1 has an invalid length. [ 246.528376][T18389] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.535487][T18389] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.549508][T18389] bridge_slave_1: entered allmulticast mode [ 246.556348][T18389] bridge_slave_1: entered promiscuous mode [ 246.574196][T18389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.588956][T18473] bond2: entered promiscuous mode [ 246.594149][T18473] bond2: entered allmulticast mode [ 246.599847][T18473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.612265][T18412] chnl_net:caif_netlink_parms(): no params data found [ 246.635941][T18479] macvlan6: entered promiscuous mode [ 246.641385][T18479] macvlan6: entered allmulticast mode [ 246.649650][T18479] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 246.678945][T18389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.751591][T18412] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.758852][T18412] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.814218][T18412] bridge_slave_0: entered allmulticast mode [ 246.829005][T18412] bridge_slave_0: entered promiscuous mode [ 246.836097][T18412] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.843183][T18412] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.850720][T18412] bridge_slave_1: entered allmulticast mode [ 246.857345][T18412] bridge_slave_1: entered promiscuous mode [ 246.871180][T18389] team0: Port device team_slave_0 added [ 246.878919][T18389] team0: Port device team_slave_1 added [ 246.917017][T18412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.934131][T18412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.943876][T18389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.950913][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.976939][T18389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.018866][T18512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.024613][T18389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.026217][T18512] IPv6: NLM_F_CREATE should be set when creating new route [ 247.033156][T18389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.066425][T18389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.104032][T18412] team0: Port device team_slave_0 added [ 247.110771][T18412] team0: Port device team_slave_1 added [ 247.130288][T18389] hsr_slave_0: entered promiscuous mode [ 247.151652][T18389] hsr_slave_1: entered promiscuous mode [ 247.197306][T18389] debugfs: 'hsr0' already exists in 'hsr' [ 247.203106][T18389] Cannot create hsr debugfs directory [ 247.233877][T18412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.240865][T18412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.266928][T18412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.416929][T18412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.424070][T18412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.450050][T18412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.651432][T18412] hsr_slave_0: entered promiscuous mode [ 247.673709][T18412] hsr_slave_1: entered promiscuous mode [ 247.683935][T18412] debugfs: 'hsr0' already exists in 'hsr' [ 247.689711][T18412] Cannot create hsr debugfs directory [ 248.064404][T18389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.085491][T18389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.097780][T18389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.126442][T18389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.451327][T18389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.501470][T18389] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.909962][T18389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.920568][T18389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.967304][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.974519][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.003590][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.010645][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.032460][T18616] netlink: 'syz.1.5693': attribute type 4 has an invalid length. [ 249.045885][T18621] tipc: Started in network mode [ 249.051231][T18621] tipc: Node identity ac14140f, cluster identity 4711 [ 249.070761][T18621] tipc: New replicast peer: 255.255.255.255 [ 249.077052][T18621] tipc: Enabled bearer , priority 10 [ 249.083987][T18412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.094251][T18412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.114184][T18622] netlink: 'syz.1.5693': attribute type 4 has an invalid length. [ 249.138857][T18412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.161231][T18389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.180175][ T3419] lo speed is unknown, defaulting to 1000 [ 249.191480][T18412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.220824][ T3399] lo speed is unknown, defaulting to 1000 [ 249.272986][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.473000][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 249.473015][ T29] audit: type=1326 audit(2000000359.529:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18632 comm="syz.8.5697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb43e3aeb9 code=0x0 [ 249.881200][T18412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.914686][T18412] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.955265][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.962515][ T4740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.983526][ T29] audit: type=1326 audit(2000000360.039:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.007084][ T29] audit: type=1326 audit(2000000360.039:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.032106][ T29] audit: type=1326 audit(2000000360.049:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.055656][ T29] audit: type=1326 audit(2000000360.049:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.079253][ T29] audit: type=1326 audit(2000000360.049:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.103227][ T3399] tipc: Node number set to 2886997007 [ 250.130504][T18412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.140972][T18412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.165438][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.172516][ T4740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.202631][ T29] audit: type=1326 audit(2000000360.179:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.226114][ T29] audit: type=1326 audit(2000000360.179:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.245472][T18389] veth0_vlan: entered promiscuous mode [ 250.249769][ T29] audit: type=1326 audit(2000000360.179:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18730 comm="syz.1.5704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 250.272210][T18389] veth1_vlan: entered promiscuous mode [ 250.384502][T18412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.406159][T18761] syzkaller0: entered allmulticast mode [ 250.430323][T18389] veth0_macvtap: entered promiscuous mode [ 250.441351][T18761] syzkaller0: entered promiscuous mode [ 250.449138][T18389] veth1_macvtap: entered promiscuous mode [ 250.471908][T18761] syzkaller0 (unregistering): left allmulticast mode [ 250.478725][T18761] syzkaller0 (unregistering): left promiscuous mode [ 250.561919][T18389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.601734][T18389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.652684][ T4740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.663827][T18412] veth0_vlan: entered promiscuous mode [ 250.683120][ T4740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.695991][T18412] veth1_vlan: entered promiscuous mode [ 250.706116][ T4740] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.726905][ T3440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.742564][T18412] veth0_macvtap: entered promiscuous mode [ 250.782344][T18412] veth1_macvtap: entered promiscuous mode [ 250.809621][T18412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.823342][ T29] audit: type=1400 audit(2000000360.869:3312): avc: denied { read } for pid=18806 comm="syz.4.5653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 250.825157][T18412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.893230][ T4740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.915922][ T3440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.948601][ T3440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.973186][ T3440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.051280][T18838] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5723'. [ 251.181225][T18854] syzkaller0: entered allmulticast mode [ 251.203914][T18854] syzkaller0: entered promiscuous mode [ 251.227669][T18854] syzkaller0 (unregistering): left promiscuous mode [ 251.234455][T18854] syzkaller0 (unregistering): left allmulticast mode [ 252.080052][ T3440] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x20 [ 252.181801][T18952] loop4: detected capacity change from 0 to 1024 [ 252.211177][T18952] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.247092][T18952] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 252.577284][T19003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.136927][T19003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.208430][T19003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.296805][T19003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.362424][ T4740] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.376460][ T4740] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.394029][ T4740] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.432725][ T4740] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.122521][T19114] lo speed is unknown, defaulting to 1000 [ 254.193292][T19114] lo speed is unknown, defaulting to 1000 [ 254.393094][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.103724][T19160] lo speed is unknown, defaulting to 1000 [ 255.144694][T19160] lo speed is unknown, defaulting to 1000 [ 255.151364][T19163] lo speed is unknown, defaulting to 1000 [ 255.214933][T19163] lo speed is unknown, defaulting to 1000 [ 256.509018][T19232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5813'. [ 256.543845][T19232] netlink: 'syz.1.5813': attribute type 1 has an invalid length. [ 256.734478][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5819'. [ 256.774719][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'. [ 256.908627][T19255] netlink: 'syz.5.5823': attribute type 29 has an invalid length. [ 256.954871][T19255] netlink: 'syz.5.5823': attribute type 29 has an invalid length. [ 256.993577][T19255] netlink: 500 bytes leftover after parsing attributes in process `syz.5.5823'. [ 257.243100][T19267] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.5827'. [ 257.350806][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5830'. [ 257.400803][ T10] IPVS: starting estimator thread 0... [ 257.408737][T19278] IPVS: nq: FWM 3 0x00000003 - no destination available [ 257.415939][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 257.435759][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5833'. [ 257.499193][T19279] IPVS: using max 2448 ests per chain, 122400 per kthread [ 257.987858][T19322] netlink: 'syz.8.5850': attribute type 5 has an invalid length. [ 258.130849][T19332] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5854'. [ 258.454882][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 258.454899][ T29] audit: type=1326 audit(2000000368.519:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.531226][ T29] audit: type=1326 audit(2000000368.559:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.555446][ T29] audit: type=1326 audit(2000000368.559:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.579263][ T29] audit: type=1326 audit(2000000368.559:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.602878][ T29] audit: type=1326 audit(2000000368.559:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.626449][ T29] audit: type=1326 audit(2000000368.559:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.650048][ T29] audit: type=1326 audit(2000000368.559:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.673684][ T29] audit: type=1326 audit(2000000368.569:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.697336][ T29] audit: type=1326 audit(2000000368.569:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.720885][ T29] audit: type=1326 audit(2000000368.569:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19350 comm="syz.1.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 258.849969][T19365] pim6reg: entered allmulticast mode [ 258.871319][T19365] pim6reg: left allmulticast mode [ 259.102407][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5873'. [ 259.179158][T19385] loop4: detected capacity change from 0 to 128 [ 259.210827][T19385] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 259.508696][T19428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5894'. [ 260.862497][T19517] netlink: 'syz.4.5920': attribute type 10 has an invalid length. [ 261.518202][T19580] ip6tnl3: entered promiscuous mode [ 261.544687][T19587] __nla_validate_parse: 3 callbacks suppressed [ 261.544748][T19587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5942'. [ 261.584032][T19587] IPv6: Can't replace route, no match found [ 261.594685][ T10] kernel read not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 261.767776][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5956'. [ 261.776739][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5956'. [ 262.337994][T19671] netem: incorrect ge model size [ 262.343293][T19671] netem: change failed [ 262.424282][T19677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5971'. [ 264.993542][T19867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5994'. [ 265.100311][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5995'. [ 265.169454][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5997'. [ 265.189837][T19875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5997'. [ 265.566012][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 265.566029][ T29] audit: type=1326 audit(2000000375.629:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.614396][ T29] audit: type=1326 audit(2000000375.629:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.638089][ T29] audit: type=1326 audit(2000000375.629:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.661834][ T29] audit: type=1326 audit(2000000375.629:3405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.685391][ T29] audit: type=1326 audit(2000000375.629:3406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.708804][ T29] audit: type=1326 audit(2000000375.629:3407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.732559][ T29] audit: type=1326 audit(2000000375.629:3408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.751282][T19921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6017'. [ 265.756261][ T29] audit: type=1326 audit(2000000375.629:3409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.788800][ T29] audit: type=1326 audit(2000000375.629:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.812524][ T29] audit: type=1326 audit(2000000375.629:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19910 comm="syz.4.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 265.836119][T19921] hsr_slave_0: left promiscuous mode [ 265.842346][T19921] hsr_slave_1: left promiscuous mode [ 265.920916][T19929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6020'. [ 266.695772][T19998] __nla_validate_parse: 3 callbacks suppressed [ 266.695787][T19998] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6052'. [ 266.711103][T19998] netlink: 188 bytes leftover after parsing attributes in process `syz.5.6052'. [ 266.810264][T20005] veth0: entered promiscuous mode [ 266.825194][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6054'. [ 267.022178][T20024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6061'. [ 267.165107][T20042] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 2, id = 0 [ 267.182656][T20044] netlink: 'syz.4.6068': attribute type 1 has an invalid length. [ 267.190499][T20044] netlink: 'syz.4.6068': attribute type 2 has an invalid length. [ 267.268008][T20046] ip6gre2: entered promiscuous mode [ 267.276652][T20046] ip6gre2: entered allmulticast mode [ 268.034725][T20085] dvmrp0: entered allmulticast mode [ 268.099763][T20094] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6091'. [ 268.222601][T20111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6099'. [ 268.265873][T20109] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.309529][T20108] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 268.355939][T20114] wireguard0: entered promiscuous mode [ 268.361525][T20114] wireguard0: entered allmulticast mode [ 268.475624][T20131] netlink: 'syz.4.6106': attribute type 1 has an invalid length. [ 268.516258][T20131] bond1: entered promiscuous mode [ 268.533140][T20131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.582825][T20131] bond1: (slave bridge2): making interface the new active one [ 268.590397][T20131] bridge2: entered promiscuous mode [ 268.597939][T20131] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 268.725649][T20164] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 268.820123][T20187] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6115'. [ 268.829476][T20187] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6115'. [ 269.349116][T20272] io-wq is not configured for unbound workers [ 269.644545][T20305] program syz.0.6144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.439208][T20332] gre3: entered promiscuous mode [ 270.444294][T20332] gre3: entered allmulticast mode [ 270.511634][T20336] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6155'. [ 270.550204][T20336] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6155'. [ 270.689234][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 270.689248][ T29] audit: type=1400 audit(2000000380.749:3527): avc: denied { watch_reads } for pid=20340 comm="syz.4.6157" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 270.901100][ T29] audit: type=1326 audit(2000000380.959:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 270.953436][ T29] audit: type=1326 audit(2000000380.959:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 270.965350][T20363] tipc: New replicast peer: 255.255.255.255 [ 270.977011][ T29] audit: type=1326 audit(2000000380.989:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 270.983083][T20363] tipc: Enabled bearer , priority 10 [ 271.006475][ T29] audit: type=1326 audit(2000000380.989:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 271.036295][ T29] audit: type=1326 audit(2000000380.989:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 271.059891][ T29] audit: type=1326 audit(2000000380.989:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 271.083411][ T29] audit: type=1326 audit(2000000380.989:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 271.106988][ T29] audit: type=1326 audit(2000000380.989:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 271.130956][ T29] audit: type=1326 audit(2000000380.989:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20356 comm="syz.0.6164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 271.314600][T20379] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 271.470922][T20406] ip6tnl4: entered promiscuous mode [ 271.542345][T20412] lo speed is unknown, defaulting to 1000 [ 271.552091][T20412] lo speed is unknown, defaulting to 1000 [ 272.014924][T20433] __nla_validate_parse: 6 callbacks suppressed [ 272.015021][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6195'. [ 272.881960][T20477] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6213'. [ 272.956784][T20487] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 274.152482][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6245'. [ 274.161847][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6245'. [ 274.172581][T20552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6245'. [ 274.358703][T20570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6252'. [ 274.432235][T20576] netlink: 'syz.1.6255': attribute type 1 has an invalid length. [ 274.446389][T20576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.472281][T20576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.482204][T20576] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 274.495599][T20576] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 274.538500][T20579] xt_hashlimit: size too large, truncated to 1048576 [ 274.816886][T20593] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 274.839175][T20593] team0 (unregistering): Port device team_slave_0 removed [ 274.855645][T20593] team0 (unregistering): Failed to send options change via netlink (err -105) [ 274.865126][T20593] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 274.878176][T20593] team0 (unregistering): Port device team_slave_1 removed [ 275.191827][T20616] netlink: 391 bytes leftover after parsing attributes in process `syz.4.6269'. [ 275.201050][T20616] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 275.209279][T20616] openvswitch: netlink: Message has 4 unknown bytes. [ 275.595495][T20618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.656524][T20618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.706089][T20618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.758964][T20618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.815297][ T4740] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.827991][ T4740] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.839186][ T4740] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.847546][ T4740] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.133760][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 276.133775][ T29] audit: type=1326 audit(2000000386.199:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20660 comm="syz.5.6288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x0 [ 276.256959][T20675] veth10: entered promiscuous mode [ 276.262135][T20675] veth10: entered allmulticast mode [ 276.420340][ T29] audit: type=1400 audit(2000000386.479:3630): avc: denied { watch } for pid=20700 comm="syz.8.6304" path="/" dev="configfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 276.588346][ T29] audit: type=1326 audit(2000000386.649:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7fc00000 [ 276.655176][ T29] audit: type=1326 audit(2000000386.689:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20713 comm="syz.1.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7fc00000 [ 276.780247][T20728] lo speed is unknown, defaulting to 1000 [ 276.788948][T20728] lo speed is unknown, defaulting to 1000 [ 277.239407][ T29] audit: type=1326 audit(2000000387.299:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.4.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fadebec4cd7 code=0x7fc00000 [ 277.304262][T20752] netlink: 'syz.8.6320': attribute type 1 has an invalid length. [ 277.329588][T20752] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.355486][ T29] audit: type=1326 audit(2000000387.414:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20713 comm="syz.1.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c02dbaeb9 code=0x7fc00000 [ 277.395156][T20752] bond6: (slave veth9): Enslaving as an active interface with a down link [ 277.414143][T20757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.431310][T20757] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 277.454275][T20759] netlink: 'syz.1.6322': attribute type 1 has an invalid length. [ 277.473563][T20760] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6321'. [ 277.482763][T20760] unsupported nlmsg_type 40 [ 277.497056][T20759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.534423][T20759] bond4: (slave veth13): Enslaving as an active interface with a down link [ 277.554060][T20759] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 277.563252][T20759] bond4: (slave batadv2): making interface the new active one [ 277.572072][T20759] batadv2: entered promiscuous mode [ 277.577527][T20759] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 277.699107][ T29] audit: type=1400 audit(2000000387.754:3635): avc: denied { relabelfrom } for pid=20772 comm="syz.1.6327" name="" dev="pipefs" ino=64716 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 278.066383][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6338'. [ 278.077705][T20799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6338'. [ 278.087272][ T29] audit: type=1400 audit(2000000388.144:3636): avc: denied { bind } for pid=20792 comm="syz.0.6335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 278.128466][ T29] audit: type=1400 audit(2000000388.184:3637): avc: denied { bind } for pid=20803 comm="syz.4.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 278.364236][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6345'. [ 278.629099][ T29] audit: type=1326 audit(2000000388.684:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20842 comm="syz.5.6358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692f6eaeb9 code=0x7ffc0000 [ 279.004933][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6364'. [ 279.050794][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6366'. [ 279.063005][T20862] vlan0: entered promiscuous mode [ 279.068214][T20862] dummy0: entered promiscuous mode [ 279.149089][T20866] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.206964][T20866] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.245596][T20866] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.258278][T20880] netlink: 'syz.0.6374': attribute type 8 has an invalid length. [ 279.266086][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6374'. [ 279.279163][T20880] bond0: entered promiscuous mode [ 279.284262][T20880] bond_slave_0: entered promiscuous mode [ 279.289965][T20880] bond_slave_1: entered promiscuous mode [ 279.298581][T20880] gretap0: entered promiscuous mode [ 279.305260][T20880] bond0: left promiscuous mode [ 279.310070][T20880] bond_slave_0: left promiscuous mode [ 279.315612][T20880] bond_slave_1: left promiscuous mode [ 279.322989][T20880] gretap0: left promiscuous mode [ 279.331194][T20866] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.443201][ T4740] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.465065][ T4740] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.487531][ T4740] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.506020][ T4740] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.615894][T20919] lo speed is unknown, defaulting to 1000 [ 279.629352][T20919] lo speed is unknown, defaulting to 1000 [ 279.751819][T20933] lo speed is unknown, defaulting to 1000 [ 279.773282][T20933] lo speed is unknown, defaulting to 1000 [ 280.006963][T20942] 8021q: adding VLAN 0 to HW filter on device bond5 [ 280.024153][T20919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6392'. [ 280.033250][T20919] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6392'. [ 280.057448][T20942] team0: Failed to send port change of device bond5 via netlink (err -105) [ 280.068216][T20942] team0: Failed to send options change via netlink (err -105) [ 280.075762][T20942] team0: Port device bond5 added [ 280.095959][T20919] geneve0: entered promiscuous mode [ 280.101239][T20919] geneve0: entered allmulticast mode [ 280.353354][T20948] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 280.870057][T20988] netlink: 'syz.1.6419': attribute type 1 has an invalid length. [ 280.883184][T20988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 280.913362][T20988] bond6: (slave veth15): Enslaving as an active interface with a down link [ 280.926799][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6420'. [ 280.933018][T20988] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 280.945981][T20988] bond6: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 281.660074][T21034] VFS: Mount too revealing [ 281.886648][T21049] ref_ctr_offset mismatch. inode: 0x1191 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 281.889492][T21047] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÛß% [ 281.934574][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 281.934588][ T29] audit: type=1326 audit(2000000391.994:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 281.970372][ T29] audit: type=1326 audit(2000000391.994:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 281.994108][ T29] audit: type=1326 audit(2000000391.994:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 282.017727][ T29] audit: type=1326 audit(2000000391.994:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 282.035850][T21056] netlink: 'syz.5.6448': attribute type 1 has an invalid length. [ 282.041602][ T29] audit: type=1326 audit(2000000391.994:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 282.072773][ T29] audit: type=1326 audit(2000000391.994:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 282.078624][T21056] bond5: entered promiscuous mode [ 282.096750][ T29] audit: type=1326 audit(2000000391.994:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 282.125337][ T29] audit: type=1326 audit(2000000391.994:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21051 comm="syz.1.6446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 282.128216][T21056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.168550][T21065] netlink: 'syz.4.6449': attribute type 1 has an invalid length. [ 282.196329][T21056] bond5: (slave bridge4): making interface the new active one [ 282.203990][T21056] bridge4: entered promiscuous mode [ 282.210852][T21056] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 282.222757][T21065] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 282.233269][T21065] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 282.245635][T21065] bond2: (slave ip6gre1): making interface the new active one [ 282.253977][T21065] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 282.262653][T21063] tipc: Started in network mode [ 282.267699][T21063] tipc: Node identity ac14140f, cluster identity 4711 [ 282.291541][T21063] tipc: New replicast peer: 255.255.255.255 [ 282.299851][T21063] tipc: Enabled bearer , priority 10 [ 282.307454][T21068] bond2: option fail_over_mac: unable to set because the bond device has slaves [ 282.316748][T21069] tipc: Disabling bearer [ 282.487612][T21090] __nla_validate_parse: 5 callbacks suppressed [ 282.487629][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6459'. [ 282.523398][T21093] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6461'. [ 282.541551][T21095] netlink: 'syz.4.6462': attribute type 10 has an invalid length. [ 282.559454][T21093] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6461'. [ 282.828520][T21136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6477'. [ 283.118700][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6493'. [ 283.200600][T21181] netlink: 86172 bytes leftover after parsing attributes in process `syz.5.6495'. [ 283.209963][T21181] netlink: zone id is out of range [ 283.215148][T21181] netlink: zone id is out of range [ 283.220817][T21181] netlink: zone id is out of range [ 283.226728][T21181] netlink: zone id is out of range [ 283.231916][T21181] netlink: zone id is out of range [ 283.237538][T21181] netlink: zone id is out of range [ 283.242668][T21181] netlink: zone id is out of range [ 283.247825][T21181] netlink: zone id is out of range [ 283.253651][T21181] netlink: zone id is out of range [ 283.390664][ T29] audit: type=1400 audit(2000000393.444:3718): avc: denied { append } for pid=21190 comm="syz.5.6499" name="rt_cache" dev="proc" ino=4026533400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 283.493492][T21209] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6506'. [ 283.598213][ T29] audit: type=1326 audit(2000000393.654:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21222 comm="syz.1.6513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c02dbaeb9 code=0x7ffc0000 [ 283.706888][T21237] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 283.837811][T21246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6521'. [ 283.851387][T21246] vlan0: entered promiscuous mode [ 283.856529][T21246] dummy0: entered promiscuous mode [ 283.964148][T21252] xt_hashlimit: size too large, truncated to 1048576 [ 284.155197][T21267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6529'. [ 284.165286][T21267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6529'. [ 286.301814][T21185] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.689773][T21337] tipc: Started in network mode [ 286.694838][T21337] tipc: Node identity 4, cluster identity 4711 [ 286.701012][T21337] tipc: Node number set to 4 [ 288.605884][T21414] __nla_validate_parse: 3 callbacks suppressed [ 288.605901][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6589'. [ 288.925890][ T4721] batadv2: left promiscuous mode [ 289.688623][T21438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6598'. [ 289.801847][T21440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6599'. [ 289.991842][T14630] IPVS: starting estimator thread 0... [ 290.082926][T21446] IPVS: using max 2448 ests per chain, 122400 per kthread [ 290.143332][T21453] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6604'. [ 290.497849][T21462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6608'. [ 290.756310][T21472] netlink: 'syz.4.6613': attribute type 1 has an invalid length. [ 290.764785][T21472] netlink: 'syz.4.6613': attribute type 2 has an invalid length. [ 290.795723][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6613'. [ 290.881955][T21473] lo speed is unknown, defaulting to 1000 [ 290.927372][T21473] lo speed is unknown, defaulting to 1000 [ 291.077103][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 291.077119][ T29] audit: type=1326 audit(2000000401.134:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.078514][T21480] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.6616'. [ 291.083331][ T29] audit: type=1326 audit(2000000401.134:3724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.140892][ T29] audit: type=1326 audit(2000000401.134:3725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.156674][T21480] net_ratelimit: 56 callbacks suppressed [ 291.156692][T21480] netlink: zone id is out of range [ 291.165207][ T29] audit: type=1326 audit(2000000401.134:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.170129][T21480] netlink: zone id is out of range [ 291.199162][T21480] netlink: zone id is out of range [ 291.209021][T21480] netlink: set zone limit has 8 unknown bytes [ 291.373580][ T29] audit: type=1326 audit(2000000401.134:3727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.397234][ T29] audit: type=1326 audit(2000000401.134:3728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.421707][ T29] audit: type=1326 audit(2000000401.134:3729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.431775][T21498] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6625'. [ 291.445936][ T29] audit: type=1326 audit(2000000401.134:3730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.478892][ T29] audit: type=1326 audit(2000000401.134:3731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.479146][T21498] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6625'. [ 291.502384][ T29] audit: type=1326 audit(2000000401.134:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21479 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd40fd2aeb9 code=0x7ffc0000 [ 291.596787][T21505] xt_hashlimit: size too large, truncated to 1048576 [ 291.737427][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6629'. [ 291.755289][T21515] netlink: 'syz.8.6629': attribute type 1 has an invalid length. [ 292.257892][T21543] lo speed is unknown, defaulting to 1000 [ 292.284211][T21543] lo speed is unknown, defaulting to 1000 [ 292.437553][T21546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.453689][T21546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.647580][T21551] tipc: Enabling of bearer rejected, failed to enable media [ 293.413467][T21682] netlink: zone id is out of range [ 293.418637][T21682] netlink: zone id is out of range [ 293.449615][T21682] netlink: zone id is out of range [ 293.481342][T21682] netlink: set zone limit has 8 unknown bytes [ 294.330457][T21705] syz.8.6669 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 294.344497][T21705] CPU: 1 UID: 0 PID: 21705 Comm: syz.8.6669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 294.344563][T21705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.344576][T21705] Call Trace: [ 294.344582][T21705] [ 294.344590][T21705] __dump_stack+0x1d/0x30 [ 294.344650][T21705] dump_stack_lvl+0x95/0xd0 [ 294.344679][T21705] dump_stack+0x15/0x1b [ 294.344703][T21705] dump_header+0x80/0x240 [ 294.344749][T21705] oom_kill_process+0x295/0x350 [ 294.344782][T21705] out_of_memory+0x97d/0xb80 [ 294.344885][T21705] try_charge_memcg+0x62e/0xa10 [ 294.344917][T21705] obj_cgroup_charge_pages+0x23/0xc0 [ 294.344956][T21705] __memcg_kmem_charge_page+0x9e/0x170 [ 294.345015][T21705] __alloc_frozen_pages_noprof+0x18a/0x350 [ 294.345048][T21705] alloc_pages_mpol+0xb3/0x260 [ 294.345151][T21705] alloc_pages_noprof+0x8f/0x130 [ 294.345209][T21705] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 294.345254][T21705] __kvmalloc_node_noprof+0x471/0x680 [ 294.345285][T21705] ? ip_set_alloc+0x24/0x30 [ 294.345318][T21705] ? ip_set_alloc+0x24/0x30 [ 294.345355][T21705] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 294.345434][T21705] ip_set_alloc+0x24/0x30 [ 294.345466][T21705] hash_netiface_create+0x282/0x740 [ 294.345550][T21705] ? __pfx_hash_netiface_create+0x10/0x10 [ 294.345585][T21705] ip_set_create+0x3cf/0x970 [ 294.345682][T21705] ? __nla_validate_parse+0x22a/0x1cf0 [ 294.345729][T21705] ? __nla_parse+0x40/0x60 [ 294.345759][T21705] nfnetlink_rcv_msg+0x509/0x5d0 [ 294.345819][T21705] netlink_rcv_skb+0x123/0x220 [ 294.345852][T21705] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.345894][T21705] nfnetlink_rcv+0x167/0x1720 [ 294.345972][T21705] ? hrtimer_force_reprogram+0x184/0x1a0 [ 294.346108][T21705] ? __list_add_valid_or_report+0x38/0xe0 [ 294.346138][T21705] ? merge_sched_in+0x5db/0xbe0 [ 294.346166][T21705] ? rb_next+0x5c/0x80 [ 294.346190][T21705] ? visit_groups_merge+0xf7e/0xfd0 [ 294.346240][T21705] ? event_sched_out+0x896/0x8f0 [ 294.346271][T21705] ? _raw_spin_lock_bh+0x56/0xb0 [ 294.346372][T21705] ? should_fail_ex+0x30/0x280 [ 294.346404][T21705] ? selinux_nlmsg_lookup+0x99/0x890 [ 294.346432][T21705] ? __rcu_read_unlock+0x33/0x70 [ 294.346481][T21705] ? __netlink_lookup+0x276/0x2b0 [ 294.346505][T21705] netlink_unicast+0x5c0/0x690 [ 294.346537][T21705] netlink_sendmsg+0x5c8/0x6f0 [ 294.346558][T21705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.346655][T21705] ____sys_sendmsg+0x5af/0x600 [ 294.346679][T21705] ___sys_sendmsg+0x195/0x1e0 [ 294.346708][T21705] __x64_sys_sendmsg+0xd4/0x160 [ 294.346742][T21705] x64_sys_call+0x17ba/0x3000 [ 294.346817][T21705] do_syscall_64+0xc0/0x2a0 [ 294.346848][T21705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.346872][T21705] RIP: 0033:0x7fcb43e3aeb9 [ 294.346892][T21705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.346967][T21705] RSP: 002b:00007fcb42897028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.346994][T21705] RAX: ffffffffffffffda RBX: 00007fcb440b5fa0 RCX: 00007fcb43e3aeb9 [ 294.347009][T21705] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 294.347026][T21705] RBP: 00007fcb43ea8c1f R08: 0000000000000000 R09: 0000000000000000 [ 294.347043][T21705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.347059][T21705] R13: 00007fcb440b6038 R14: 00007fcb440b5fa0 R15: 00007ffcd5c87108 [ 294.347082][T21705] [ 294.347119][T21705] memory: usage 307200kB, limit 307200kB, failcnt 808 [ 294.692650][T21705] memory+swap: usage 308124kB, limit 9007199254740988kB, failcnt 0 [ 294.700621][T21705] kmem: usage 239380kB, limit 9007199254740988kB, failcnt 0 [ 294.707965][T21705] Memory cgroup stats for /syz8: [ 294.711007][T21705] cache 69419008 [ 294.719843][T21705] rss 0 [ 294.722968][T21705] shmem 0 [ 294.725968][T21705] mapped_file 0 [ 294.729471][T21705] dirty 0 [ 294.732488][T21705] writeback 0 [ 294.735849][T21705] workingset_refault_anon 2322 [ 294.740645][T21705] workingset_refault_file 2183 [ 294.745465][T21705] swap 946176 [ 294.748800][T21705] swapcached 28672 [ 294.752621][T21705] pgpgin 343230 [ 294.756148][T21705] pgpgout 326275 [ 294.759733][T21705] pgfault 255850 [ 294.763334][T21705] pgmajfault 370 [ 294.766914][T21705] inactive_anon 20480 [ 294.767588][T21718] __nla_validate_parse: 2 callbacks suppressed [ 294.767602][T21718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6673'. [ 294.770936][T21705] active_anon 8192 [ 294.778065][T21718] chnl_net:caif_netlink_parms(): no params data found [ 294.786228][T21705] inactive_file 0 [ 294.786253][T21705] active_file 4096 [ 294.786262][T21705] unevictable 69414912 [ 294.786282][T21705] hierarchical_memory_limit 314572800 [ 294.814001][T21705] hierarchical_memsw_limit 9223372036854771712 [ 294.820201][T21705] total_cache 69419008 [ 294.824502][T21705] total_rss 0 [ 294.827809][T21705] total_shmem 0 [ 294.831388][T21705] total_mapped_file 0 [ 294.835450][T21705] total_dirty 0 [ 294.838977][T21705] total_writeback 0 [ 294.842803][T21705] total_workingset_refault_anon 2322 [ 294.848139][T21705] total_workingset_refault_file 2183 [ 294.853511][T21705] total_swap 946176 [ 294.857369][T21705] total_swapcached 28672 [ 294.861710][T21705] total_pgpgin 343230 [ 294.865751][T21705] total_pgpgout 326275 [ 294.869857][T21705] total_pgfault 255850 [ 294.873983][T21705] total_pgmajfault 370 [ 294.878157][T21705] total_inactive_anon 20480 [ 294.882688][T21705] total_active_anon 8192 [ 294.887007][T21705] total_inactive_file 0 [ 294.891231][T21705] total_active_file 4096 [ 294.895598][T21705] total_unevictable 69414912 [ 294.900264][T21705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3172,pid=11918,uid=0 [ 294.915304][T21705] Memory cgroup out of memory: Killed process 11918 (syz.8.3172) total-vm:96048kB, anon-rss:1220kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 295.033112][T21704] syz.8.6669 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 295.044008][T21704] CPU: 1 UID: 0 PID: 21704 Comm: syz.8.6669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 295.044037][T21704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.044051][T21704] Call Trace: [ 295.044058][T21704] [ 295.044067][T21704] __dump_stack+0x1d/0x30 [ 295.044113][T21704] dump_stack_lvl+0x95/0xd0 [ 295.044133][T21704] dump_stack+0x15/0x1b [ 295.044152][T21704] dump_header+0x80/0x240 [ 295.044226][T21704] oom_kill_process+0x295/0x350 [ 295.044255][T21704] out_of_memory+0x97d/0xb80 [ 295.044298][T21704] try_charge_memcg+0x62e/0xa10 [ 295.044322][T21704] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 295.044449][T21704] __read_swap_cache_async+0x17b/0x2d0 [ 295.044490][T21704] swap_cluster_readahead+0x262/0x3c0 [ 295.044527][T21704] swapin_readahead+0xde/0x840 [ 295.044601][T21704] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 295.044630][T21704] ? lruvec_stat_mod_folio+0xd2/0x110 [ 295.044656][T21704] ? __rcu_read_unlock+0x4e/0x70 [ 295.044686][T21704] ? swap_cache_get_folio+0x26f/0x280 [ 295.044759][T21704] do_swap_page+0x59b/0x2a50 [ 295.044797][T21704] ? __rcu_read_lock+0x36/0x50 [ 295.044830][T21704] ? __pfx_default_wake_function+0x10/0x10 [ 295.044866][T21704] handle_mm_fault+0xb40/0x3030 [ 295.044922][T21704] ? vma_start_read+0x1c7/0x2c0 [ 295.044952][T21704] do_user_addr_fault+0x62f/0x1050 [ 295.044982][T21704] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 295.045087][T21704] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 295.045138][T21704] ? irqentry_exit+0x3c/0x510 [ 295.045225][T21704] exc_page_fault+0x62/0xa0 [ 295.045349][T21704] asm_exc_page_fault+0x26/0x30 [ 295.045372][T21704] RIP: 0033:0x7fcb43d0f6c8 [ 295.045391][T21704] Code: 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 11 95 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 48 89 58 f8 49 83 c5 01 <45> 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f 60 00 0f 84 4a 02 00 00 [ 295.045410][T21704] RSP: 002b:00007ffcd5c871a0 EFLAGS: 00010202 [ 295.045430][T21704] RAX: 0000001b2e720c00 RBX: ffffffff8465f15f RCX: 0000001b2e720bf8 [ 295.045517][T21704] RDX: 0000001b2e124220 RSI: 0000000000000008 RDI: 00007fcb44be5720 [ 295.045533][T21704] RBP: 0000000000000001 R08: 00007fcb440a0000 R09: 00007fcb440a2000 [ 295.045603][T21704] R10: 000000008465f163 R11: 0000000000000005 R12: 00007fcb440b6038 [ 295.045618][T21704] R13: 0000000000000001 R14: ffffffff8465f835 R15: 00007fcb44be5720 [ 295.045633][T21704] ? __x64_sys_sendmsg+0x25/0x160 [ 295.045656][T21704] ? ____sys_sendmsg+0x2af/0x600 [ 295.045681][T21704] [ 295.045689][T21704] memory: usage 307200kB, limit 307200kB, failcnt 964 [ 295.293267][T21704] memory+swap: usage 307992kB, limit 9007199254740988kB, failcnt 0 [ 295.301248][T21704] kmem: usage 239388kB, limit 9007199254740988kB, failcnt 0 [ 295.308588][T21704] Memory cgroup stats for /syz8: [ 295.309745][T21704] cache 69419008 [ 295.318391][T21704] rss 0 [ 295.321146][T21704] shmem 0 [ 295.324190][T21704] mapped_file 0 [ 295.327639][T21704] dirty 0 [ 295.330655][T21704] writeback 16384 [ 295.334596][T21704] workingset_refault_anon 2353 [ 295.339499][T21704] workingset_refault_file 2183 [ 295.344355][T21704] swap 811008 [ 295.347630][T21704] swapcached 20480 [ 295.351340][T21704] pgpgin 343262 [ 295.355120][T21704] pgpgout 326309 [ 295.358660][T21704] pgfault 255875 [ 295.362198][T21704] pgmajfault 391 [ 295.366083][T21704] inactive_anon 20480 [ 295.370098][T21704] active_anon 0 [ 295.373572][T21704] inactive_file 4096 [ 295.377475][T21704] active_file 0 [ 295.380923][T21704] unevictable 69414912 [ 295.385028][T21704] hierarchical_memory_limit 314572800 [ 295.390492][T21704] hierarchical_memsw_limit 9223372036854771712 [ 295.396722][T21704] total_cache 69419008 [ 295.400786][T21704] total_rss 0 [ 295.404103][T21704] total_shmem 0 [ 295.407554][T21704] total_mapped_file 0 [ 295.411561][T21704] total_dirty 0 [ 295.415075][T21704] total_writeback 16384 [ 295.419229][T21704] total_workingset_refault_anon 2353 [ 295.424682][T21704] total_workingset_refault_file 2183 [ 295.426987][T21714] lo speed is unknown, defaulting to 1000 [ 295.430132][T21704] total_swap 811008 [ 295.439563][T21704] total_swapcached 20480 [ 295.443883][T21704] total_pgpgin 343262 [ 295.447854][T21704] total_pgpgout 326309 [ 295.452016][T21704] total_pgfault 255875 [ 295.453383][T21714] lo speed is unknown, defaulting to 1000 [ 295.456130][T21704] total_pgmajfault 391 [ 295.465895][T21704] total_inactive_anon 20480 [ 295.470399][T21704] total_active_anon 0 [ 295.474381][T21704] total_inactive_file 4096 [ 295.478788][T21704] total_active_file 0 [ 295.482755][T21704] total_unevictable 69414912 [ 295.487368][T21704] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.6669,pid=21704,uid=0 [ 295.502154][T21704] Memory cgroup out of memory: Killed process 21704 (syz.8.6669) total-vm:96184kB, anon-rss:1204kB, file-rss:22172kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 296.169479][T21759] netlink: 596 bytes leftover after parsing attributes in process `syz.4.6690'. [ 297.169256][T21805] loop5: detected capacity change from 0 to 7 [ 297.185238][T21474] loop5: [ 297.199199][T21805] loop5: [ 297.267856][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6710'. [ 297.366072][T21824] lo speed is unknown, defaulting to 1000 [ 297.372414][T21824] lo speed is unknown, defaulting to 1000 [ 297.407670][T21828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6715'. [ 297.465951][T21824] netlink: 'syz.0.6714': attribute type 13 has an invalid length. [ 297.490488][T21824] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 297.606347][T21824] netlink: 'syz.0.6714': attribute type 4 has an invalid length. [ 297.933070][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 297.933087][ T29] audit: type=1326 audit(2000000407.984:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 297.963140][ T29] audit: type=1326 audit(2000000407.984:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 297.986797][ T29] audit: type=1326 audit(2000000407.984:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 298.010726][ T29] audit: type=1326 audit(2000000407.984:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 298.035005][ T29] audit: type=1326 audit(2000000407.984:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 298.058572][ T29] audit: type=1326 audit(2000000407.984:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 298.082935][ T29] audit: type=1326 audit(2000000407.984:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 298.107154][ T29] audit: type=1326 audit(2000000407.984:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 298.130792][ T29] audit: type=1326 audit(2000000407.984:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 298.155118][ T29] audit: type=1326 audit(2000000407.984:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21864 comm="syz.4.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadebecaeb9 code=0x7ffc0000 [ 299.127316][T21886] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 300.898153][T21861] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.908521][T21904] netlink: 'syz.1.6734': attribute type 4 has an invalid length. [ 300.951647][ T3374] lo speed is unknown, defaulting to 1000 [ 300.957516][ T3374] syz0: Port: 1 Link DOWN [ 300.970932][T21904] netlink: 'syz.1.6734': attribute type 4 has an invalid length. [ 302.073162][T21914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.144724][T21914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.542291][T21921] ================================================================== [ 302.550431][T21921] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 302.557393][T21921] [ 302.559732][T21921] read-write to 0xffff88812189496c of 4 bytes by task 21916 on cpu 1: [ 302.567905][T21921] fifo_open+0x86/0x5d0 [ 302.572084][T21921] do_dentry_open+0x54b/0xa60 [ 302.576796][T21921] vfs_open+0x37/0x1e0 [ 302.580892][T21921] path_openat+0x1de9/0x23c0 [ 302.585513][T21921] do_filp_open+0x15d/0x280 [ 302.590053][T21921] do_sys_openat2+0xa6/0x150 [ 302.594669][T21921] __x64_sys_openat+0xf2/0x120 [ 302.599469][T21921] x64_sys_call+0x2b07/0x3000 [ 302.604526][T21921] do_syscall_64+0xc0/0x2a0 [ 302.609060][T21921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.614968][T21921] [ 302.617288][T21921] read to 0xffff88812189496c of 4 bytes by task 21921 on cpu 0: [ 302.624927][T21921] wait_for_partner+0xd5/0x1e0 [ 302.629698][T21921] fifo_open+0x4b1/0x5d0 [ 302.633944][T21921] do_dentry_open+0x54b/0xa60 [ 302.638636][T21921] vfs_open+0x37/0x1e0 [ 302.642801][T21921] path_openat+0x1de9/0x23c0 [ 302.647404][T21921] do_filp_open+0x15d/0x280 [ 302.651945][T21921] do_sys_openat2+0xa6/0x150 [ 302.656563][T21921] __x64_sys_openat+0xf2/0x120 [ 302.661345][T21921] x64_sys_call+0x2b07/0x3000 [ 302.666123][T21921] do_syscall_64+0xc0/0x2a0 [ 302.670646][T21921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.676548][T21921] [ 302.678863][T21921] value changed: 0x00000001 -> 0x00000002 [ 302.684571][T21921] [ 302.686889][T21921] Reported by Kernel Concurrency Sanitizer on: [ 302.693030][T21921] CPU: 0 UID: 0 PID: 21921 Comm: syz.4.6739 Not tainted syzkaller #0 PREEMPT(voluntary) [ 302.702926][T21921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.713172][T21921] ================================================================== [ 303.567703][ T10] lo speed is unknown, defaulting to 1000 [ 303.567709][ T3374] lo speed is unknown, defaulting to 1000 [ 303.584856][ T41] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.593906][ T41] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.602812][ T41] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.611948][ T41] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.622886][ T41] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.631783][ T41] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.641103][ T41] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.650051][ T41] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.113385][T16471] page_pool_release_retry() stalled pool shutdown: id 146, 1 inflight 60 sec