last executing test programs: 1m42.950888156s ago: executing program 2 (id=4273): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000895"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) setpriority(0x2, 0xff, 0x0) 1m42.883583923s ago: executing program 2 (id=4276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) r3 = getpid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000100)={r1, r2}) 1m42.856899635s ago: executing program 2 (id=4278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 1m42.833655237s ago: executing program 2 (id=4279): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 1m42.812270199s ago: executing program 2 (id=4282): socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) 1m42.468672099s ago: executing program 2 (id=4292): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 1m42.468493419s ago: executing program 32 (id=4292): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r2}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 26.564265231s ago: executing program 4 (id=6336): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1}], 0x1}, 0x0) 26.452841351s ago: executing program 4 (id=6342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 26.385665477s ago: executing program 4 (id=6348): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) fchdir(r1) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 26.330284402s ago: executing program 4 (id=6351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x15, 0x10, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e7bd02000000000000000000000001", [0x1ff]}) r2 = open(0x0, 0x143142, 0x80) ftruncate(r2, 0x2007ffb) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file1'}, 0xb) 25.500213125s ago: executing program 4 (id=6375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 25.21902384s ago: executing program 4 (id=6388): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4048881) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) writev(r1, &(0x7f0000003700)=[{&(0x7f0000002380)="d3f5a8d10a", 0x5}], 0x1) 25.210392711s ago: executing program 33 (id=6388): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4048881) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) writev(r1, &(0x7f0000003700)=[{&(0x7f0000002380)="d3f5a8d10a", 0x5}], 0x1) 14.662918943s ago: executing program 6 (id=6700): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x2, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 14.48031914s ago: executing program 6 (id=6704): r0 = epoll_create(0x3ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000440)={0x2000000}) 14.453249192s ago: executing program 6 (id=6706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14.261567429s ago: executing program 6 (id=6708): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x15, 0x10, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e7bd02000000000000000000000001", [0x1ff]}) r2 = open(0x0, 0x143142, 0x80) ftruncate(r2, 0x2007ffb) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file1'}, 0xb) 13.68389747s ago: executing program 6 (id=6714): openat$hwrng(0xffffffffffffff9c, 0x0, 0x80800, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 13.331085342s ago: executing program 6 (id=6726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) 13.311633913s ago: executing program 34 (id=6726): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r1, r2, 0x0) 2.045458479s ago: executing program 0 (id=7045): setns(0xffffffffffffffff, 0x2000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xffffffffffff8001}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) 1.406293936s ago: executing program 1 (id=7062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x6ef2, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 1.405611076s ago: executing program 3 (id=7063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.319526794s ago: executing program 1 (id=7064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000003c0), 0x200044, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x100000000}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.319263193s ago: executing program 3 (id=7066): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) 1.215758923s ago: executing program 3 (id=7068): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1.188735355s ago: executing program 1 (id=7069): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1.188492475s ago: executing program 5 (id=7070): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 1.137823579s ago: executing program 5 (id=7072): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) io_setup(0x8f2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.106776262s ago: executing program 3 (id=7073): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x26, 0x0, &(0x7f00000003c0)=0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1.106165252s ago: executing program 0 (id=7074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x40000000000000) 1.011534311s ago: executing program 5 (id=7075): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f0000000580)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000480)='\xbd\x10\xe2\n\xc4\xa8\xf80\xce\x9cqa\xfeK\xc2;Y\x8b\xbbfd\xa5!\x95\x88V9g\x00\x00`V\xd5\x1c\xa8?\a\x9e[O<\xf4s\x85~\t\x00\x00\x00\x04a\xf8\xa6f\x96nB\x02\x10\xc0\xa8\xea\x16uq\xc4\xb0\xe2\xf4\x00\x00C$', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) close(r0) 998.009052ms ago: executing program 5 (id=7076): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 934.087848ms ago: executing program 5 (id=7077): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 842.986006ms ago: executing program 0 (id=7079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000140)=""/237, 0xfffffee1) r2 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) recvfrom$inet(0xffffffffffffffff, &(0x7f00000000c0)=""/91, 0x5b, 0x2, 0x0, 0x0) shmdt(r2) 791.49114ms ago: executing program 5 (id=7080): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") 791.17683ms ago: executing program 0 (id=7081): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000000900000044"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) r2 = epoll_create1(0x0) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20002017}) close_range(r2, 0xffffffffffffffff, 0x0) 555.770911ms ago: executing program 1 (id=7082): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 552.449521ms ago: executing program 0 (id=7092): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000500), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000000000100000008000100110000000400048008000200010000001800088014000780080006"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) add_key$keyring(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xfffffffffffffffd) 499.850846ms ago: executing program 1 (id=7084): socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x4048800}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffd80, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 462.707619ms ago: executing program 7 (id=7085): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 462.048979ms ago: executing program 0 (id=7096): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x1034, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 416.536593ms ago: executing program 7 (id=7086): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 359.842288ms ago: executing program 1 (id=7087): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000003664ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 252.725588ms ago: executing program 7 (id=7088): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r3, 0x1, 0x170bd29, 0x0, {0x1, 0x0, 0x6000}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}}]}]}, 0x3c}, 0x1, 0xff07, 0x0, 0x10044840}, 0x2000000) 229.37529ms ago: executing program 7 (id=7089): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x3}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close(r2) 196.281703ms ago: executing program 3 (id=7090): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 155.056346ms ago: executing program 7 (id=7091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000080000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") open(&(0x7f0000000200)='./file2\x00', 0x40840, 0xb4) 15.387259ms ago: executing program 3 (id=7093): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x2, 0x30, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xa577}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x0, 0x81}, {0x6, 0x24, 0x1a, 0xa2, 0x15}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x2, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xcb, 0x6, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x2, 0x3}}}}}}}]}}, 0x0) 0s ago: executing program 7 (id=7094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) kernel console output (not intermixed with test programs): 9] audit: type=1326 audit(1767659820.848:7416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 187.577107][ T29] audit: type=1326 audit(1767659820.848:7417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 187.600838][ T29] audit: type=1326 audit(1767659820.848:7418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 187.624602][ T29] audit: type=1326 audit(1767659820.848:7419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15410 comm="syz.0.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 187.669062][T15423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4687'. [ 187.777322][T15433] netlink: 'syz.4.4691': attribute type 1 has an invalid length. [ 187.808439][T15433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 187.839627][T15433] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 187.849285][T15433] bond1: (slave batadv1): making interface the new active one [ 187.860047][T15433] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 187.962770][T15433] netlink: 'syz.4.4691': attribute type 13 has an invalid length. [ 187.997786][ T3544] Bluetooth: hci0: command 0x1003 tx timeout [ 188.003858][ T3908] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 188.119233][T15433] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.126587][T15433] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.179812][T15433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.191284][T15433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.253032][ T4018] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.306424][ T4018] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.318319][ T4018] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.333805][ T4018] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.784733][T15513] loop4: detected capacity change from 0 to 512 [ 188.792212][T15513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.807407][T15513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.877248][T15513] ext4 filesystem being mounted at /929/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.122856][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.169190][T15542] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4733'. [ 189.220475][T15546] : renamed from veth0_to_bond (while UP) [ 189.546412][T15575] netlink: 'syz.5.4751': attribute type 1 has an invalid length. [ 189.581876][T15575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.602179][T15575] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.613037][T15575] bond1: (slave batadv1): making interface the new active one [ 189.622057][T15575] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 189.630802][T15581] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4752'. [ 189.643680][T15575] netlink: 'syz.5.4751': attribute type 13 has an invalid length. [ 189.712357][T15575] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.719586][T15575] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.813422][T15575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.824593][T15575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.897754][T15588] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4766'. [ 189.907363][ T343] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.916450][ T343] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.925486][ T343] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.934541][ T343] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.997996][T15579] SELinux: failed to load policy [ 190.535679][T15647] loop4: detected capacity change from 0 to 2048 [ 190.619097][T15647] loop4: unable to read partition table [ 190.626039][T15647] loop4: partition table beyond EOD, truncated [ 190.632259][T15647] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 190.761013][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4791'. [ 190.943842][ T3997] Bluetooth: hci0: Frame reassembly failed (-84) [ 191.149120][T15695] netlink: 'syz.0.4801': attribute type 1 has an invalid length. [ 191.182277][T15698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4803'. [ 192.106185][T15734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4815'. [ 192.855087][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 192.855103][ T29] audit: type=1400 audit(1767659826.278:7685): avc: denied { read } for pid=15838 comm="syz.5.4825" path="socket:[39765]" dev="sockfs" ino=39765 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 192.953401][T15851] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4825'. [ 192.955737][ T3544] Bluetooth: hci0: command 0x1003 tx timeout [ 192.965221][ T3908] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.268059][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4831'. [ 193.340662][T15896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4833'. [ 193.725037][ T29] audit: type=1107 audit(1767659827.128:7686): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 193.756632][T15920] netlink: 'syz.5.4839': attribute type 30 has an invalid length. [ 193.864307][T15873] Set syz1 is full, maxelem 65536 reached [ 194.139425][T15933] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4844'. [ 194.240773][ T29] audit: type=1326 audit(1767659827.658:7687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 194.300159][ T29] audit: type=1326 audit(1767659827.688:7688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 194.324579][ T29] audit: type=1326 audit(1767659827.688:7689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 194.348978][ T29] audit: type=1326 audit(1767659827.688:7690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 194.372959][ T29] audit: type=1326 audit(1767659827.688:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 194.397366][ T29] audit: type=1326 audit(1767659827.688:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 194.420988][ T29] audit: type=1326 audit(1767659827.688:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15941 comm="syz.5.4850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 194.725696][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4861'. [ 195.158357][T15959] Set syz1 is full, maxelem 65536 reached [ 195.292601][T16000] dvmrp0: entered allmulticast mode [ 195.378930][T16009] loop5: detected capacity change from 0 to 128 [ 195.415279][ T3370] Process accounting resumed [ 195.420203][ T3370] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 195.427799][ T3370] FAT-fs (loop5): Filesystem has been set read-only [ 195.996529][T16048] netlink: 'syz.1.4892': attribute type 30 has an invalid length. [ 196.117508][T16052] sch_tbf: burst 22 is lower than device lo mtu (2305) ! [ 196.127801][T16052] sch_tbf: burst 22 is lower than device lo mtu (2305) ! [ 196.545057][ T29] audit: type=1400 audit(1767659829.958:7694): avc: denied { mounton } for pid=16082 comm="syz.5.4906" path="/file0" dev="rootfs" ino=41113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 196.599389][T16087] vlan2: entered allmulticast mode [ 196.610015][T16087] dummy0: entered allmulticast mode [ 196.772184][T16103] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 196.802348][T16103] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 197.072663][T16122] vlan2: entered allmulticast mode [ 197.091739][T16122] dummy0: entered allmulticast mode [ 197.329885][T16145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4933'. [ 198.174630][T16188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16188 comm=syz.0.4951 [ 198.187379][T16188] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16188 comm=syz.0.4951 [ 198.220085][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 198.220104][ T29] audit: type=1326 audit(1767659831.638:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.270169][ T29] audit: type=1326 audit(1767659831.638:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.293889][ T29] audit: type=1326 audit(1767659831.638:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.317461][ T29] audit: type=1326 audit(1767659831.638:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.341149][ T29] audit: type=1326 audit(1767659831.638:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.365027][ T29] audit: type=1326 audit(1767659831.638:7712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.388598][ T29] audit: type=1326 audit(1767659831.638:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.412172][ T29] audit: type=1326 audit(1767659831.638:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.435812][ T29] audit: type=1326 audit(1767659831.638:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.459399][ T29] audit: type=1326 audit(1767659831.648:7716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16189 comm="syz.5.4954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 198.492247][T16195] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4955'. [ 198.641190][T16202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4969'. [ 199.172570][T16274] netlink: 'syz.5.4972': attribute type 3 has an invalid length. [ 200.321341][T16402] vlan0: entered allmulticast mode [ 200.371478][T16402] dummy0: entered allmulticast mode [ 200.419506][T16409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4997'. [ 200.497414][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5000'. [ 200.510126][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4998'. [ 200.542301][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5000'. [ 200.542289][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.558228][T16419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4998'. [ 200.577476][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.701039][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.728492][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.327283][T16463] vlan2: entered allmulticast mode [ 201.332942][T16463] dummy0: entered allmulticast mode [ 201.467971][T16489] bridge: RTM_NEWNEIGH with invalid ether address [ 201.690177][T16518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5033'. [ 201.733906][T16527] syzkaller0: entered allmulticast mode [ 201.742729][T16527] syzkaller0: entered promiscuous mode [ 201.750427][T16527] syzkaller0 (unregistering): left allmulticast mode [ 201.757255][T16527] syzkaller0 (unregistering): left promiscuous mode [ 202.579798][T16622] syzkaller0: entered allmulticast mode [ 202.589803][T16622] syzkaller0: entered promiscuous mode [ 202.598114][T16622] syzkaller0 (unregistering): left allmulticast mode [ 202.604990][T16622] syzkaller0 (unregistering): left promiscuous mode [ 202.689706][T16639] netlink: 'syz.3.5055': attribute type 30 has an invalid length. [ 202.714791][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5057'. [ 203.589355][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 203.589372][ T29] audit: type=1326 audit(1767659837.008:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16647 comm="syz.5.5060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1682765e7 code=0x7fc00000 [ 203.627609][T16711] netlink: 'syz.4.5066': attribute type 3 has an invalid length. [ 203.705231][T16719] syzkaller0: entered allmulticast mode [ 203.727952][T16719] syzkaller0: entered promiscuous mode [ 203.735480][T16719] syzkaller0 (unregistering): left allmulticast mode [ 203.742319][T16719] syzkaller0 (unregistering): left promiscuous mode [ 204.206836][ T29] audit: type=1326 audit(1767659837.628:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.230917][ T29] audit: type=1326 audit(1767659837.638:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.254740][ T29] audit: type=1326 audit(1767659837.638:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.278305][ T29] audit: type=1326 audit(1767659837.638:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.302062][ T29] audit: type=1326 audit(1767659837.638:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.325743][ T29] audit: type=1326 audit(1767659837.638:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.349443][ T29] audit: type=1326 audit(1767659837.638:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.373028][ T29] audit: type=1326 audit(1767659837.638:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.396822][ T29] audit: type=1326 audit(1767659837.638:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16763 comm="syz.4.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0a373f749 code=0x7ffc0000 [ 204.548274][T16787] smc: net device hsr0 applied user defined pnetid SYZ2 [ 204.563182][T16787] smc: net device hsr0 erased user defined pnetid SYZ2 [ 205.118302][T16825] netlink: 'syz.0.5117': attribute type 3 has an invalid length. [ 205.212622][T16836] netlink: 'syz.5.5122': attribute type 30 has an invalid length. [ 206.146789][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5156'. [ 206.155832][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5156'. [ 206.185032][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5156'. [ 206.194021][T16909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5156'. [ 207.741358][T16996] pim6reg: entered allmulticast mode [ 207.757813][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5189'. [ 207.766904][T16998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5189'. [ 207.787940][T16996] pim6reg: left allmulticast mode [ 207.854177][T17004] netlink: 'syz.3.5192': attribute type 1 has an invalid length. [ 208.674420][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5204'. [ 208.683611][T17034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5204'. [ 208.740421][T17038] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5206'. [ 208.911947][T17055] pim6reg: entered allmulticast mode [ 208.927268][T17055] pim6reg: left allmulticast mode [ 209.013804][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 209.013823][ T29] audit: type=1400 audit(1767659842.428:8028): avc: denied { name_bind } for pid=17064 comm="syz.0.5216" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 209.056149][ T29] audit: type=1400 audit(1767659842.468:8029): avc: denied { listen } for pid=17064 comm="syz.0.5216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.157799][ T29] audit: type=1326 audit(1767659842.578:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17077 comm="syz.5.5223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa16827f749 code=0x0 [ 209.215341][ T29] audit: type=1326 audit(1767659842.638:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.3.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 209.286998][ T29] audit: type=1326 audit(1767659842.638:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.3.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 209.310718][ T29] audit: type=1326 audit(1767659842.638:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.3.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 209.334432][ T29] audit: type=1326 audit(1767659842.638:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.3.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 209.358123][ T29] audit: type=1326 audit(1767659842.638:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.3.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 209.381817][ T29] audit: type=1326 audit(1767659842.638:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.3.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 209.405432][ T29] audit: type=1326 audit(1767659842.638:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17074 comm="syz.3.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 209.668037][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5235'. [ 209.734823][T17116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5239'. [ 210.067993][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5250'. [ 210.168763][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5252'. [ 210.359213][T17167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5262'. [ 210.700127][T17175] bridge1: left promiscuous mode [ 210.705427][T17175] bridge1: left allmulticast mode [ 211.246430][T17231] netlink: 'syz.0.5288': attribute type 1 has an invalid length. [ 211.276233][T17231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.317041][T17231] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 211.337031][T17231] bond3: (slave batadv1): making interface the new active one [ 211.361937][T17231] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 212.016572][T17263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17263 comm=syz.0.5311 [ 212.077081][T17271] bridge0: left allmulticast mode [ 212.177898][T17279] loop4: detected capacity change from 0 to 512 [ 212.224192][T17279] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 212.232981][T17279] FAT-fs (loop4): Filesystem has been set read-only [ 212.243188][T17279] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 212.440707][T17279] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 212.636227][T17279] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 212.844306][T17279] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 213.063654][T17279] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 213.294372][T17279] FAT-fs (loop4): error, fat_get_cluster: detected the cluster chain loop (i_pos 548) [ 213.639020][T17328] SELinux: failed to load policy [ 213.791718][T17311] __nla_validate_parse: 3 callbacks suppressed [ 213.791754][T17311] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5323'. [ 213.807054][T17311] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5323'. [ 213.852390][T17311] geneve0: entered promiscuous mode [ 213.857763][T17311] geneve0: entered allmulticast mode [ 214.156912][T17358] loop4: detected capacity change from 0 to 8192 [ 214.305216][ T3316] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 214.313113][ T3316] FAT-fs (loop4): Filesystem has been set read-only [ 214.571397][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 214.571414][ T29] audit: type=1326 audit(1767659847.988:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.634887][ T29] audit: type=1326 audit(1767659848.018:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.658573][ T29] audit: type=1326 audit(1767659848.018:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.682581][ T29] audit: type=1326 audit(1767659848.018:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.706108][ T29] audit: type=1326 audit(1767659848.018:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.729777][ T29] audit: type=1326 audit(1767659848.018:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.753377][ T29] audit: type=1326 audit(1767659848.018:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.776929][ T29] audit: type=1326 audit(1767659848.018:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.800460][ T29] audit: type=1326 audit(1767659848.018:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.824069][ T29] audit: type=1326 audit(1767659848.018:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17385 comm="syz.5.5356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 214.868542][T17392] wg2: entered promiscuous mode [ 214.873524][T17392] wg2: entered allmulticast mode [ 216.512313][T17497] chnl_net:caif_netlink_parms(): no params data found [ 216.604477][T17497] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.611766][T17497] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.629107][T17497] bridge_slave_0: entered allmulticast mode [ 216.635800][T17497] bridge_slave_0: entered promiscuous mode [ 216.642701][T17497] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.650004][T17497] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.657498][T17497] bridge_slave_1: entered allmulticast mode [ 216.664431][T17497] bridge_slave_1: entered promiscuous mode [ 216.686461][T17497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.710040][T17497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.754728][T17497] team0: Port device team_slave_0 added [ 216.769174][T17497] team0: Port device team_slave_1 added [ 216.816243][T17497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.823240][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.849206][T17497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.906954][T17497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.913996][T17497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.940020][T17497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.989925][T17497] hsr_slave_0: entered promiscuous mode [ 216.996314][T17497] hsr_slave_1: entered promiscuous mode [ 217.003406][T17497] debugfs: 'hsr0' already exists in 'hsr' [ 217.009210][T17497] Cannot create hsr debugfs directory [ 217.121479][T17497] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.168445][T17497] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.227011][T17563] syzkaller0: entered promiscuous mode [ 217.246763][T17563] syzkaller0 (unregistering): left promiscuous mode [ 217.300518][T17497] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.366542][T17497] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.544198][T17497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.567195][T17497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.593037][T17497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.622204][T17497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.731949][T17497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.766293][T17497] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.774236][T17562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5425'. [ 217.783287][T17562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5425'. [ 217.793538][ T4018] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.800738][ T4018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.816382][ T4018] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.823493][ T4018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.841064][T17562] geneve0: entered promiscuous mode [ 217.846473][T17562] geneve0: entered allmulticast mode [ 218.012529][T17497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.182421][T17633] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5448'. [ 218.191563][T17633] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5448'. [ 218.200645][T17633] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5448'. [ 218.280244][T17497] veth0_vlan: entered promiscuous mode [ 218.298270][T17497] veth1_vlan: entered promiscuous mode [ 218.321073][T17497] veth0_macvtap: entered promiscuous mode [ 218.331989][T17497] veth1_macvtap: entered promiscuous mode [ 218.352680][T17497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.364237][T17497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.378714][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.395805][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.408740][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.446265][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.464720][T17649] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5455'. [ 218.495479][T17649] hsr_slave_0: left promiscuous mode [ 218.509859][T17649] hsr_slave_1: left promiscuous mode [ 218.877091][T17682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5469'. [ 219.461438][T17716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5483'. [ 219.735234][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 219.735250][ T29] audit: type=1326 audit(1767659853.148:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.765284][ T29] audit: type=1326 audit(1767659853.148:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.788951][ T29] audit: type=1326 audit(1767659853.148:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.812668][ T29] audit: type=1326 audit(1767659853.148:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.836461][ T29] audit: type=1326 audit(1767659853.148:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.860076][ T29] audit: type=1326 audit(1767659853.148:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.883783][ T29] audit: type=1326 audit(1767659853.148:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.920175][ T29] audit: type=1326 audit(1767659853.338:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.943756][ T29] audit: type=1326 audit(1767659853.338:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17742 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 219.967503][ T29] audit: type=1326 audit(1767659853.368:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17745 comm="syz.5.5494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa1682b2005 code=0x7ffc0000 [ 220.035231][T17730] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5489'. [ 220.085008][T17730] hsr_slave_0: left promiscuous mode [ 220.091095][T17730] hsr_slave_1: left promiscuous mode [ 220.150873][T17756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5498'. [ 220.564205][T17781] loop4: detected capacity change from 0 to 1024 [ 220.577337][T17781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.590243][T17781] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.613184][T17497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 220.787275][T17803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5517'. [ 220.876974][T17817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5525'. [ 220.928793][T17823] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.127382][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5536'. [ 221.145709][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5536'. [ 221.184140][T17847] 9p: Bad value for 'wfdno' [ 221.339129][T17859] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎e饴W啢肍ct虧3 鞮;-n睚龗9鐬;=鏐9g=g&K"鯠腻$bきY醁愀;靠:輶ㄕ^-$圩<>嚦'=颀7I.wn彡ju鯦枱樋pybn彡乻ο螢澖.) failed with errno=-22 [ 221.472738][T17876] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5563'. [ 221.541907][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5556'. [ 221.894196][ T1039] Process accounting resumed [ 222.079160][T17823] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.143441][T17823] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.167110][T17921] veth6: entered promiscuous mode [ 222.172206][T17921] veth6: entered allmulticast mode [ 222.241361][T17823] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.313629][ T4020] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.351184][ T4020] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.365682][ T4020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.395439][ T4020] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.849836][T17990] veth8: entered promiscuous mode [ 222.855090][T17990] veth8: entered allmulticast mode [ 223.941216][T18088] smc: net device hsr0 applied user defined pnetid SYZ2 [ 223.960707][ T3450] Process accounting resumed [ 223.971040][T18088] smc: net device hsr0 erased user defined pnetid SYZ2 [ 224.748284][ T29] kauditd_printk_skb: 1072 callbacks suppressed [ 224.748303][ T29] audit: type=1326 audit(1767659858.168:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f5d765e7 code=0x7ffc0000 [ 224.778146][ T29] audit: type=1326 audit(1767659858.168:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4f5d1b829 code=0x7ffc0000 [ 224.801633][ T29] audit: type=1326 audit(1767659858.168:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 224.824959][ T29] audit: type=1326 audit(1767659858.178:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f5d765e7 code=0x7ffc0000 [ 224.848404][ T29] audit: type=1326 audit(1767659858.178:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4f5d1b829 code=0x7ffc0000 [ 224.871960][ T29] audit: type=1326 audit(1767659858.178:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 224.895377][ T29] audit: type=1326 audit(1767659858.178:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f5d765e7 code=0x7ffc0000 [ 224.918871][ T29] audit: type=1326 audit(1767659858.178:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4f5d1b829 code=0x7ffc0000 [ 224.942556][ T29] audit: type=1326 audit(1767659858.178:9538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 224.966017][ T29] audit: type=1326 audit(1767659858.208:9539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18106 comm="syz.1.5655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f5d765e7 code=0x7ffc0000 [ 225.048465][T18141] loop4: detected capacity change from 0 to 512 [ 225.084281][T18141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.097329][T18141] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.120345][T18148] netlink: 'syz.0.5670': attribute type 3 has an invalid length. [ 225.128409][T18148] netlink: 'syz.0.5670': attribute type 1 has an invalid length. [ 225.136200][T18148] __nla_validate_parse: 3 callbacks suppressed [ 225.136218][T18148] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.5670'. [ 225.154603][T18141] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 225.201403][T18141] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 10 with max blocks 23 with error 28 [ 225.213883][T18141] EXT4-fs (loop4): This should not happen!! Data will be lost [ 225.213883][T18141] [ 225.223895][T18141] EXT4-fs (loop4): Total free blocks count 0 [ 225.230218][T18141] EXT4-fs (loop4): Free/Dirty block details [ 225.236177][T18141] EXT4-fs (loop4): free_blocks=65280 [ 225.241602][T18141] EXT4-fs (loop4): dirty_blocks=23 [ 225.246847][T18141] EXT4-fs (loop4): Block reservation details [ 225.252841][T18141] EXT4-fs (loop4): i_reserved_data_blocks=23 [ 225.280398][T18158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.290787][T18158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.342375][T17497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.361178][T18158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.371559][T18158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.418646][T18158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.429151][T18158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.455702][ T3450] IPVS: starting estimator thread 0... [ 225.479039][T18158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 225.489481][T18158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.547751][ T4000] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.556117][ T4000] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.565201][T18174] IPVS: using max 2208 ests per chain, 110400 per kthread [ 225.582206][ T4000] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.590602][ T4000] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.623270][ T4000] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.631637][ T4000] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.640114][ T4000] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.648363][ T4000] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.715981][T18191] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.723571][T18191] vhci_hcd vhci_hcd.2: invalid port number 96 [ 225.729866][T18191] vhci_hcd vhci_hcd.2: default hub control req: 4000 vfffa i0060 l0 [ 225.811578][T18199] loop4: detected capacity change from 0 to 1024 [ 225.833406][T18199] EXT4-fs: Ignoring removed orlov option [ 225.845251][T18203] veth12: entered promiscuous mode [ 225.850424][T18203] veth12: entered allmulticast mode [ 225.860655][T18199] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 225.881357][T18199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.916807][T18199] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 225.979101][T17497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.076190][ T3517] Process accounting resumed [ 226.087631][T18223] netlink: 'syz.1.5705': attribute type 3 has an invalid length. [ 226.095528][T18223] netlink: 'syz.1.5705': attribute type 1 has an invalid length. [ 226.103341][T18223] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.5705'. [ 226.488301][T18252] netlink: 'syz.5.5717': attribute type 3 has an invalid length. [ 226.496275][T18252] netlink: 'syz.5.5717': attribute type 1 has an invalid length. [ 226.504012][T18252] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.5717'. [ 226.842155][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5729'. [ 227.304751][T18317] geneve3: entered promiscuous mode [ 227.310081][T18317] geneve3: entered allmulticast mode [ 227.656177][T18353] netlink: 'syz.4.5761': attribute type 3 has an invalid length. [ 227.664022][T18353] netlink: 'syz.4.5761': attribute type 1 has an invalid length. [ 227.671935][T18353] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.5761'. [ 227.808793][T18365] netlink: 'syz.1.5766': attribute type 3 has an invalid length. [ 227.816717][T18365] netlink: 'syz.1.5766': attribute type 1 has an invalid length. [ 227.824521][T18365] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.5766'. [ 227.864100][T18367] vlan2: entered allmulticast mode [ 228.091464][T18390] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5777'. [ 228.223312][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5782'. [ 228.729926][T18430] geneve2: entered promiscuous mode [ 228.735325][T18430] geneve2: entered allmulticast mode [ 228.860107][T18432] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5794'. [ 228.940767][T18441] vlan2: entered allmulticast mode [ 228.953461][T18444] loop4: detected capacity change from 0 to 128 [ 228.975145][T18444] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.991183][T18444] ext4 filesystem being mounted at /48/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.046859][T17497] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.544744][T18487] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5817'. [ 230.320197][T18537] vlan0: entered allmulticast mode [ 230.334655][T18539] __nla_validate_parse: 2 callbacks suppressed [ 230.334688][T18539] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5838'. [ 230.372665][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 230.372701][ T29] audit: type=1326 audit(1767659863.788:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.4.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.417325][ T29] audit: type=1326 audit(1767659863.788:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.4.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.441119][ T29] audit: type=1326 audit(1767659863.788:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.4.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.464769][ T29] audit: type=1326 audit(1767659863.788:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.4.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.488522][ T29] audit: type=1326 audit(1767659863.788:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.4.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.512209][ T29] audit: type=1326 audit(1767659863.808:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.4.5839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.548685][T18546] vlan2: entered allmulticast mode [ 230.553902][T18546] dummy0: entered allmulticast mode [ 230.667216][ T29] audit: type=1326 audit(1767659864.088:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.720280][ T29] audit: type=1326 audit(1767659864.088:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.744034][ T29] audit: type=1326 audit(1767659864.088:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 230.767812][ T29] audit: type=1326 audit(1767659864.088:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18553 comm="syz.4.5846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98d7b7f749 code=0x7ffc0000 [ 231.585677][T18599] loop4: detected capacity change from 0 to 256 [ 231.594804][T18599] FAT-fs (loop4): bogus number of FAT sectors [ 231.601042][T18599] FAT-fs (loop4): Can't find a valid FAT filesystem [ 231.666139][T18607] vlan2: entered allmulticast mode [ 232.345993][T18655] vlan2: entered allmulticast mode [ 232.453365][T18665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18665 comm=syz.4.5888 [ 232.466132][T18665] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18665 comm=syz.4.5888 [ 232.641085][T18682] validate_nla: 1 callbacks suppressed [ 232.641100][T18682] netlink: 'syz.4.5897': attribute type 33 has an invalid length. [ 232.654511][T18682] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5897'. [ 232.695369][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5897'. [ 233.550234][T18696] vlan2: entered allmulticast mode [ 233.569292][T18698] loop4: detected capacity change from 0 to 256 [ 233.611002][T18702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=18702 comm=syz.3.5902 [ 233.623733][T18702] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=18702 comm=syz.3.5902 [ 234.345763][T18727] netem: change failed [ 234.535680][T18739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5922'. [ 234.792269][T18771] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5933'. [ 234.850241][T18779] netlink: 'syz.0.5938': attribute type 3 has an invalid length. [ 234.853814][T18780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5936'. [ 234.982255][ T1039] IPVS: starting estimator thread 0... [ 235.080183][T18805] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5950'. [ 235.092156][T18806] loop4: detected capacity change from 0 to 128 [ 235.095065][T18795] IPVS: using max 2304 ests per chain, 115200 per kthread [ 235.126052][T18806] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.138829][T18806] ext4 filesystem being mounted at /file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.171436][T18806] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.207806][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5954'. [ 235.231781][T18816] sctp: [Deprecated]: syz.4.5955 (pid 18816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.231781][T18816] Use struct sctp_sack_info instead [ 235.254598][T18816] sctp: [Deprecated]: syz.4.5955 (pid 18816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.254598][T18816] Use struct sctp_sack_info instead [ 235.385526][T18830] vlan2: entered allmulticast mode [ 235.622348][T18843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5968'. [ 235.825648][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 235.825665][ T29] audit: type=1326 audit(1767659869.248:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1682765e7 code=0x7ffc0000 [ 235.875441][ T29] audit: type=1326 audit(1767659869.278:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa16821b829 code=0x7ffc0000 [ 235.899231][ T29] audit: type=1326 audit(1767659869.278:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa1682765e7 code=0x7ffc0000 [ 235.922780][ T29] audit: type=1326 audit(1767659869.278:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa16821b829 code=0x7ffc0000 [ 235.946422][ T29] audit: type=1326 audit(1767659869.278:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 235.970307][ T29] audit: type=1326 audit(1767659869.278:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 235.994082][ T29] audit: type=1326 audit(1767659869.278:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 236.018064][ T29] audit: type=1326 audit(1767659869.278:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 236.041756][ T29] audit: type=1326 audit(1767659869.278:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 236.065384][ T29] audit: type=1326 audit(1767659869.278:10368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18854 comm="syz.5.5973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 236.388323][T18892] netlink: 'syz.1.5988': attribute type 21 has an invalid length. [ 236.396669][T18892] netlink: 'syz.1.5988': attribute type 1 has an invalid length. [ 236.404416][T18892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5988'. [ 237.131036][T18909] loop4: detected capacity change from 0 to 1024 [ 237.144456][T18909] EXT4-fs: Ignoring removed orlov option [ 237.175786][T18909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.318181][T18931] ip6gre2: entered promiscuous mode [ 237.323476][T18931] ip6gre2: entered allmulticast mode [ 237.343134][T17497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.367347][ T4001] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 237.375216][ T4001] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 237.395027][ T3517] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 237.625102][ T3517] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.025043][T18974] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 238.074981][ T3517] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 238.346625][T18984] netlink: 'syz.5.6028': attribute type 33 has an invalid length. [ 238.354566][T18984] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6028'. [ 238.382302][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6028'. [ 238.517083][T18997] tipc: Enabling of bearer rejected, failed to enable media [ 238.972946][T19016] loop4: detected capacity change from 0 to 512 [ 238.976067][T19017] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6050'. [ 238.998812][T19017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6050'. [ 239.067295][T19016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.083871][T19016] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.200629][T19036] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6056'. [ 239.210111][T19036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6056'. [ 239.249195][T19041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19041 comm=syz.5.6048 [ 239.294578][T19046] ip6gre1: entered promiscuous mode [ 239.300099][T19046] ip6gre1: entered allmulticast mode [ 239.310347][ T3996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.318176][ T3996] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.349101][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.379720][T19052] tipc: Started in network mode [ 239.384722][T19052] tipc: Node identity ac14140f, cluster identity 4711 [ 239.409719][T19052] tipc: New replicast peer: 255.255.255.32 [ 239.415828][T19052] tipc: Enabled bearer , priority 10 [ 239.424978][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.457670][T19056] tipc: Enabling of bearer rejected, failed to enable media [ 239.497550][T17497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.574796][T19069] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6063'. [ 239.602973][T19069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6063'. [ 239.735525][ T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 239.990735][T19101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19101 comm=syz.1.6085 [ 240.016335][T19103] usb usb4: usbfs: interface 0 claimed by hub while 'syz.4.6075' sets config #0 [ 240.250738][T19130] tipc: Enabling of bearer rejected, failed to enable media [ 240.534876][ T3517] tipc: Node number set to 2886997007 [ 241.218155][T19172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19172 comm=syz.4.6107 [ 241.313211][ T23] Process accounting resumed [ 241.430775][T19186] __nla_validate_parse: 2 callbacks suppressed [ 241.430796][T19186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6112'. [ 241.446170][T19186] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6112'. [ 241.458068][T19186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6112'. [ 241.467559][T19186] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6112'. [ 241.476876][T19186] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6112'. [ 241.617024][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6118'. [ 241.626073][T19200] netlink: 'syz.3.6118': attribute type 11 has an invalid length. [ 241.633913][T19200] netlink: 'syz.3.6118': attribute type 13 has an invalid length. [ 241.680865][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 241.680883][ T29] audit: type=1400 audit(1767659875.098:10674): avc: denied { write } for pid=19204 comm="syz.4.6121" path="socket:[54891]" dev="sockfs" ino=54891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.942597][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6124'. [ 242.006253][T19217] .`: (slave vlan2): Opening slave failed [ 242.565426][ T1039] Process accounting resumed [ 242.824052][T19248] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6138'. [ 242.833224][T19248] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6138'. [ 243.023708][T19264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6141'. [ 243.032880][T19264] netlink: 'syz.3.6141': attribute type 30 has an invalid length. [ 243.077723][ T3983] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.086246][ T3983] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.094468][ T3983] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.104306][ T3983] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.123455][ T29] audit: type=1400 audit(1767659876.538:10675): avc: denied { create } for pid=19269 comm="syz.5.6147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 243.155983][ T29] audit: type=1400 audit(1767659876.578:10676): avc: denied { create } for pid=19271 comm="syz.4.6148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.176051][ T29] audit: type=1400 audit(1767659876.578:10677): avc: denied { connect } for pid=19271 comm="syz.4.6148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 243.289552][ T3450] Process accounting resumed [ 243.685001][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 243.685019][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 243.956883][ T3450] Process accounting resumed [ 244.440808][T19373] bond0: (slave vlan2): Opening slave failed [ 245.805609][ T29] audit: type=1326 audit(1767659879.228:10678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.1.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 245.842649][ T29] audit: type=1326 audit(1767659879.228:10679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.1.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 245.866527][ T29] audit: type=1326 audit(1767659879.228:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.1.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 245.890313][ T29] audit: type=1326 audit(1767659879.258:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.1.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 245.914075][ T29] audit: type=1326 audit(1767659879.258:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.1.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 245.937721][ T29] audit: type=1326 audit(1767659879.258:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19479 comm="syz.1.6238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 246.517276][T19507] ref_ctr_offset mismatch. inode: 0x808 offset: 0x4 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 246.717349][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 246.717464][ T29] audit: type=1326 audit(1767659880.138:10716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.795847][ T29] audit: type=1326 audit(1767659880.178:10717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.812644][T19527] __nla_validate_parse: 18 callbacks suppressed [ 246.812697][T19527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6256'. [ 246.819754][ T29] audit: type=1326 audit(1767659880.178:10718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.858587][ T29] audit: type=1326 audit(1767659880.178:10719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.859738][T19527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6256'. [ 246.882403][ T29] audit: type=1326 audit(1767659880.178:10720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.915328][ T29] audit: type=1326 audit(1767659880.178:10721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.939099][ T29] audit: type=1326 audit(1767659880.178:10722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.962851][ T29] audit: type=1326 audit(1767659880.178:10723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 246.986568][ T29] audit: type=1326 audit(1767659880.178:10724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 247.010219][ T29] audit: type=1326 audit(1767659880.178:10725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19520 comm="syz.5.6255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 247.079106][T19530] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6259'. [ 247.315835][T19537] bridge0: entered promiscuous mode [ 247.322688][T19537] bridge0: port 3(macvtap1) entered blocking state [ 247.329355][T19537] bridge0: port 3(macvtap1) entered disabled state [ 247.336228][T19537] macvtap1: entered allmulticast mode [ 247.341642][T19537] bridge0: entered allmulticast mode [ 247.395869][T19537] macvtap1: left allmulticast mode [ 247.401074][T19537] bridge0: left allmulticast mode [ 247.418199][T19537] bridge0: left promiscuous mode [ 247.494558][T19544] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.504493][T19544] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.578849][T19544] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.588969][T19544] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.736846][T19544] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.746864][T19544] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.806761][T19544] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.816678][T19544] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.872552][ T4002] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.881122][ T4002] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.893245][ T4002] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.901639][ T4002] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.913833][ T4002] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.922142][ T4002] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.936874][ T4002] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.945206][ T4002] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.093574][T19589] netlink: 304 bytes leftover after parsing attributes in process `syz.0.6285'. [ 248.124632][T19593] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6287'. [ 248.563548][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6301'. [ 248.714918][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 248.761188][T19646] loop4: detected capacity change from 0 to 512 [ 248.792495][T19646] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 248.815666][T19646] EXT4-fs (loop4): mount failed [ 249.336201][T19713] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6334'. [ 249.569587][T19746] loop4: detected capacity change from 0 to 512 [ 249.585961][T19746] EXT4-fs: Ignoring removed oldalloc option [ 249.612633][T19746] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.623247][T19749] vlan2: entered allmulticast mode [ 249.716605][T19746] EXT4-fs (loop4): 1 truncate cleaned up [ 249.722869][T19746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.805318][T19746] loop4: detected capacity change from 512 to 2 [ 249.813994][T19746] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Out of memory [ 249.827532][T19746] bio_check_eod: 89 callbacks suppressed [ 249.827553][T19746] syz.4.6351: attempt to access beyond end of device [ 249.827553][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 249.846812][T19746] buffer_io_error: 42 callbacks suppressed [ 249.846837][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 249.861449][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 249.868408][T19746] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.6351: mark_inode_dirty error [ 249.880440][T19746] syz.4.6351: attempt to access beyond end of device [ 249.880440][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 249.893929][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 249.911549][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 249.920735][T19746] EXT4-fs error (device loop4): ext4_get_max_inline_size:121: inode #18: comm syz.4.6351: can't get inode location 18 [ 249.933992][T19746] syz.4.6351: attempt to access beyond end of device [ 249.933992][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 249.947503][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 249.956385][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 249.963472][T19746] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Out of memory [ 249.973134][T19746] syz.4.6351: attempt to access beyond end of device [ 249.973134][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 249.986637][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 250.018631][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 250.025528][T19746] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.6351: mark_inode_dirty error [ 250.037385][T19746] syz.4.6351: attempt to access beyond end of device [ 250.037385][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 250.050772][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 250.060946][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 250.069195][T19746] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.6351: Error while async write back metadata [ 250.082270][T19746] syz.4.6351: attempt to access beyond end of device [ 250.082270][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 250.095821][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 250.104383][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 250.111674][T19746] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.6351: Error while async write back metadata [ 250.124616][T19746] syz.4.6351: attempt to access beyond end of device [ 250.124616][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 250.138216][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 250.162386][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 250.174146][T19746] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Out of memory [ 250.183488][T19746] syz.4.6351: attempt to access beyond end of device [ 250.183488][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 250.197013][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 250.205919][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 250.212809][T19746] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #18: comm syz.4.6351: mark_inode_dirty error [ 250.224684][T19746] syz.4.6351: attempt to access beyond end of device [ 250.224684][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 250.238134][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 250.256100][T19784] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.6368'. [ 250.257157][T19746] EXT4-fs (loop4): I/O error while writing superblock [ 250.281948][T19746] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz.4.6351: Error while async write back metadata [ 250.295429][T19746] syz.4.6351: attempt to access beyond end of device [ 250.295429][T19746] loop4: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 250.297448][T19784] netlink: zone id is out of range [ 250.308926][T19746] Buffer I/O error on dev loop4, logical block 1, lost sync page write [ 250.314048][T19784] netlink: zone id is out of range [ 250.335261][T19784] netlink: zone id is out of range [ 250.348617][T19784] netlink: zone id is out of range [ 250.354705][T19784] netlink: zone id is out of range [ 250.355674][T17497] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 250.360249][T19784] netlink: del zone limit has 8 unknown bytes [ 250.510912][T19808] netlink: 'syz.5.6381': attribute type 1 has an invalid length. [ 250.543722][T19808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.564615][T19808] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.572693][T19808] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 250.578446][T19817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6384'. [ 250.592906][T19808] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 250.628048][ T4002] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.644251][T19821] atomic_op ffff88813f027128 conn xmit_atomic 0000000000000000 [ 250.710598][ T4002] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.802838][ T4002] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.860412][ T4002] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.961716][ T4002] bridge_slave_1: left allmulticast mode [ 250.967628][ T4002] bridge_slave_1: left promiscuous mode [ 250.973350][ T4002] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.002375][ T4002] bridge_slave_0: left promiscuous mode [ 251.008155][ T4002] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.167661][ T4002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.183212][ T4002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.200050][ T4002] bond0 (unregistering): Released all slaves [ 251.365812][T19885] netlink: 'syz.0.6411': attribute type 13 has an invalid length. [ 251.514317][ T4002] hsr_slave_0: left promiscuous mode [ 251.523337][ T4002] hsr_slave_1: left promiscuous mode [ 251.530013][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.537502][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.545338][ T23] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 251.553495][ T4002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.561157][ T4002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.585227][ T4002] veth1_vlan: left promiscuous mode [ 251.602730][ T4002] veth0_vlan: left promiscuous mode [ 251.634960][ T23] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 251.735190][T19924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6427'. [ 251.780217][ T4002] team0 (unregistering): Port device team_slave_1 removed [ 251.791887][ T4002] team0 (unregistering): Port device team_slave_0 removed [ 251.828192][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 251.828284][ T29] audit: type=1326 audit(251.807:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19934 comm="syz.0.6432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f96a305f749 code=0x0 [ 251.903190][ T29] audit: type=1326 audit(251.877:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19942 comm="syz.1.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 251.933085][ T29] audit: type=1326 audit(251.877:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19942 comm="syz.1.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 251.953518][T19832] chnl_net:caif_netlink_parms(): no params data found [ 251.956238][ T29] audit: type=1326 audit(251.877:10883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19942 comm="syz.1.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 251.986783][ T29] audit: type=1326 audit(251.877:10884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19942 comm="syz.1.6435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 252.070096][T19832] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.077400][T19832] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.102288][T19832] bridge_slave_0: entered allmulticast mode [ 252.114723][T19832] bridge_slave_0: entered promiscuous mode [ 252.128633][T19832] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.136083][T19832] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.160045][T19832] bridge_slave_1: entered allmulticast mode [ 252.167084][T19832] bridge_slave_1: entered promiscuous mode [ 252.190893][T19832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.201945][T19832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.228793][ T4002] IPVS: stop unused estimator thread 0... [ 252.267534][T19832] team0: Port device team_slave_0 added [ 252.281105][T19832] team0: Port device team_slave_1 added [ 252.289091][ T29] audit: type=1326 audit(252.257:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 252.312231][ T29] audit: type=1326 audit(252.267:10886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 252.335263][ T29] audit: type=1326 audit(252.267:10887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 252.358482][ T29] audit: type=1326 audit(252.267:10888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 252.381562][ T29] audit: type=1326 audit(252.267:10889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19961 comm="syz.5.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 252.432738][T19832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.439799][T19832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.465906][T19832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.492440][T19832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.499594][T19832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.525650][T19832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.562762][T19832] hsr_slave_0: entered promiscuous mode [ 252.571887][T19832] hsr_slave_1: entered promiscuous mode [ 252.664993][T19832] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 252.678017][T19832] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 252.688637][T19832] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 252.708457][T19832] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 252.823993][T19832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.842299][T19832] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.859015][ T4002] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.866263][ T4002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.896527][ T4002] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.903696][ T4002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.015993][T19832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.287449][T19832] veth0_vlan: entered promiscuous mode [ 253.299339][T19832] veth1_vlan: entered promiscuous mode [ 253.313998][T20014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6452'. [ 253.358381][T19832] veth0_macvtap: entered promiscuous mode [ 253.370005][T19832] veth1_macvtap: entered promiscuous mode [ 253.395085][T19832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.428306][T19832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.449929][ T3997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.468956][ T3997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.508711][ T3997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.546212][ T3997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.590851][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6460'. [ 253.697272][T20042] bridge0: entered promiscuous mode [ 253.719685][T20042] bridge0: port 3(macvtap1) entered blocking state [ 253.726443][T20042] bridge0: port 3(macvtap1) entered disabled state [ 253.764656][T20042] macvtap1: entered allmulticast mode [ 253.770227][T20042] bridge0: entered allmulticast mode [ 253.783128][T20042] macvtap1: left allmulticast mode [ 253.788371][T20042] bridge0: left allmulticast mode [ 253.794120][T20042] bridge0: left promiscuous mode [ 254.024696][T20056] netlink: 'syz.6.6468': attribute type 1 has an invalid length. [ 254.364614][T20068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6474'. [ 254.416413][T20071] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6474'. [ 254.447643][T20072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6475'. [ 254.579511][T20086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6481'. [ 254.620699][T20090] bridge0: port 3(gretap0) entered blocking state [ 254.627266][T20090] bridge0: port 3(gretap0) entered disabled state [ 254.635760][T20090] gretap0: entered allmulticast mode [ 254.644885][T20090] gretap0: entered promiscuous mode [ 254.754540][T20104] loop6: detected capacity change from 0 to 512 [ 254.786966][T20104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.850691][T19832] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.907484][T20124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6497'. [ 254.979529][T20129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.032687][T20135] loop6: detected capacity change from 0 to 1024 [ 255.051207][T20135] EXT4-fs: Ignoring removed nobh option [ 255.057064][T20135] ext4: Unknown parameter 'smackfsdef' [ 255.103870][T20145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6506'. [ 255.188271][T20155] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6513'. [ 255.197442][T20155] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6513'. [ 255.240785][T20160] lo: Caught tx_queue_len zero misconfig [ 255.318683][T20174] loop6: detected capacity change from 0 to 512 [ 255.340753][T20174] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 255.378556][T20174] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.6521: inode has both inline data and extents flags [ 255.405950][T20174] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6521: couldn't read orphan inode 15 (err -117) [ 255.431114][T20174] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.491273][T19832] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.809559][T20224] loop6: detected capacity change from 0 to 2048 [ 255.827113][T20224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 256.128631][T20247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20247 comm=syz.3.6553 [ 256.377432][T20224] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 256.393821][T20224] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 256.406551][T20224] EXT4-fs (loop6): This should not happen!! Data will be lost [ 256.406551][T20224] [ 256.416505][T20224] EXT4-fs (loop6): Total free blocks count 0 [ 256.422624][T20224] EXT4-fs (loop6): Free/Dirty block details [ 256.428621][T20224] EXT4-fs (loop6): free_blocks=2415919104 [ 256.434487][T20224] EXT4-fs (loop6): dirty_blocks=8208 [ 256.439984][T20224] EXT4-fs (loop6): Block reservation details [ 256.446115][T20224] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 256.506094][ T3991] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 256.987519][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 256.987534][ T29] audit: type=1400 audit(256.967:11050): avc: denied { map } for pid=20318 comm="syz.3.6584" path="socket:[60774]" dev="sockfs" ino=60774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.016580][ T29] audit: type=1400 audit(256.967:11051): avc: denied { read } for pid=20318 comm="syz.3.6584" path="socket:[60774]" dev="sockfs" ino=60774 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 258.212099][ T29] audit: type=1326 audit(258.187:11052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.254456][ T29] audit: type=1326 audit(258.187:11053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.277657][ T29] audit: type=1326 audit(258.187:11054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.300762][ T29] audit: type=1326 audit(258.187:11055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.323993][ T29] audit: type=1326 audit(258.187:11056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.347463][ T29] audit: type=1326 audit(258.187:11057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.370649][ T29] audit: type=1326 audit(258.198:11058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.393833][ T29] audit: type=1326 audit(258.198:11059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20403 comm="syz.0.6616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96a305f749 code=0x7ffc0000 [ 258.452325][T20414] bridge0: port 1(30{X功) entered blocking state [ 258.459131][T20414] bridge0: port 1(30{X功) entered disabled state [ 258.467155][T20414] 0{X功: entered promiscuous mode [ 258.543098][T20425] __nla_validate_parse: 9 callbacks suppressed [ 258.543117][T20425] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6628'. [ 258.628209][T20430] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.6639'. [ 258.638958][T20430] netlink: zone id is out of range [ 258.644150][T20430] netlink: zone id is out of range [ 258.651212][T20430] netlink: zone id is out of range [ 258.656806][T20430] netlink: zone id is out of range [ 258.662084][T20430] netlink: zone id is out of range [ 258.678482][T20430] netlink: zone id is out of range [ 258.683991][T20430] netlink: zone id is out of range [ 258.689635][T20430] netlink: zone id is out of range [ 258.792319][T20430] netlink: set zone limit has 8 unknown bytes [ 258.916161][T20450] vlan0: entered allmulticast mode [ 258.994628][T20452] bridge0: port 1(gretap0) entered blocking state [ 259.001474][T20452] bridge0: port 1(gretap0) entered disabled state [ 259.043450][T20452] gretap0: entered allmulticast mode [ 259.070272][T20452] gretap0: entered promiscuous mode [ 259.099632][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6654'. [ 259.394632][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6652'. [ 259.480911][T20486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6655'. [ 259.596090][T20496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6660'. [ 260.099712][T20527] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6672'. [ 260.133721][T20527] loop6: detected capacity change from 0 to 512 [ 260.155609][T20527] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.164714][T20527] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 260.880057][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6686'. [ 261.028178][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6691'. [ 261.207764][T20590] geneve2: entered promiscuous mode [ 261.213106][T20590] geneve2: entered allmulticast mode [ 261.450253][T20614] netlink: 'syz.6.6706': attribute type 1 has an invalid length. [ 261.464325][T20614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.505620][T20614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.518125][T20614] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 261.537109][T20614] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 261.633787][T20619] loop6: detected capacity change from 0 to 512 [ 261.640752][T20619] EXT4-fs: Ignoring removed oldalloc option [ 261.647214][T20619] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 261.662139][T20619] EXT4-fs (loop6): 1 truncate cleaned up [ 261.668641][T20619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.705357][T20619] loop6: detected capacity change from 512 to 2 [ 261.713174][T20619] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Out of memory [ 261.722728][T20619] bio_check_eod: 11 callbacks suppressed [ 261.722743][T20619] syz.6.6708: attempt to access beyond end of device [ 261.722743][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 261.742050][T20619] buffer_io_error: 11 callbacks suppressed [ 261.742068][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 261.756919][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 261.763772][T20619] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.6708: mark_inode_dirty error [ 261.775885][T20619] syz.6.6708: attempt to access beyond end of device [ 261.775885][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 261.789307][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 261.798586][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 261.805764][T20619] EXT4-fs error (device loop6): ext4_get_max_inline_size:121: inode #18: comm syz.6.6708: can't get inode location 18 [ 261.818708][T20619] syz.6.6708: attempt to access beyond end of device [ 261.818708][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 261.832130][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 261.841193][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 261.848234][T20619] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Out of memory [ 261.857628][T20619] syz.6.6708: attempt to access beyond end of device [ 261.857628][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 261.871069][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 261.879831][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 261.886689][T20619] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #18: comm syz.6.6708: mark_inode_dirty error [ 261.901888][T20619] syz.6.6708: attempt to access beyond end of device [ 261.901888][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 261.915361][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 261.923707][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 261.926896][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6709'. [ 261.932368][T20619] EXT4-fs error (device loop6): ext4_check_bdev_write_error:227: comm syz.6.6708: Error while async write back metadata [ 261.952499][T20619] syz.6.6708: attempt to access beyond end of device [ 261.952499][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 261.965899][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 261.974426][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 261.981619][T20619] EXT4-fs error (device loop6): ext4_check_bdev_write_error:227: comm syz.6.6708: Error while async write back metadata [ 261.994688][T20619] syz.6.6708: attempt to access beyond end of device [ 261.994688][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 262.008201][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 262.016560][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 262.023689][T20619] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Out of memory [ 262.032975][T20619] syz.6.6708: attempt to access beyond end of device [ 262.032975][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 262.046505][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 262.054865][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 262.061657][T20619] EXT4-fs error (device loop6): ext4_splice_branch:479: inode #18: comm syz.6.6708: mark_inode_dirty error [ 262.073176][T20619] syz.6.6708: attempt to access beyond end of device [ 262.073176][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 262.086592][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 262.097692][T20619] EXT4-fs (loop6): I/O error while writing superblock [ 262.104658][T20619] EXT4-fs error (device loop6): ext4_check_bdev_write_error:227: comm syz.6.6708: Error while async write back metadata [ 262.117944][T20619] syz.6.6708: attempt to access beyond end of device [ 262.117944][T20619] loop6: rw=8534017, sector=2, nr_sectors = 2 limit=2 [ 262.131408][T20619] Buffer I/O error on dev loop6, logical block 1, lost sync page write [ 262.188523][T19832] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 262.272180][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 262.272199][ T29] audit: type=1326 audit(262.248:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.3.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 262.314059][ T29] audit: type=1326 audit(262.278:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.3.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 262.337448][ T29] audit: type=1326 audit(262.278:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.3.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 262.360899][ T29] audit: type=1326 audit(262.278:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.3.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 262.383842][ T29] audit: type=1326 audit(262.278:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.3.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 262.406965][ T29] audit: type=1326 audit(262.278:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.3.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 262.430260][ T29] audit: type=1326 audit(262.278:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20640 comm="syz.3.6719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 262.517421][T20655] netlink: 'syz.0.6725': attribute type 1 has an invalid length. [ 262.531065][T20655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.555936][T20655] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.569913][T20655] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.582138][T20655] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 262.608685][ T4016] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.684938][ T4016] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.725316][T20667] netlink: 'syz.0.6729': attribute type 1 has an invalid length. [ 262.748918][T20667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.760243][ T4016] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.797438][T20667] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.804797][T20667] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.816541][T20667] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 262.835167][T20675] bridge0: port 1(macvtap1) entered blocking state [ 262.841752][T20675] bridge0: port 1(macvtap1) entered disabled state [ 262.848563][T20675] macvtap1: entered allmulticast mode [ 262.853945][T20675] bridge0: entered allmulticast mode [ 262.859793][T20675] macvtap1: left allmulticast mode [ 262.865153][T20675] bridge0: left allmulticast mode [ 262.878749][ T4016] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.966909][ T4016] bridge_slave_1: left allmulticast mode [ 262.972653][ T4016] bridge_slave_1: left promiscuous mode [ 262.978455][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.986754][ T4016] bridge_slave_0: left allmulticast mode [ 262.992439][ T4016] bridge_slave_0: left promiscuous mode [ 262.998266][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.078034][ T4016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.088442][ T4016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.098391][ T4016] bond0 (unregistering): Released all slaves [ 263.107704][ T4016] bond1 (unregistering): Released all slaves [ 263.130067][T20685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.137999][T20685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.212658][ T4016] hsr_slave_0: left promiscuous mode [ 263.218794][ T4016] hsr_slave_1: left promiscuous mode [ 263.224556][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.232199][ T4016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.253691][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.261149][ T4016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.272357][ T4016] veth1_macvtap: left promiscuous mode [ 263.278188][ T4016] veth0_macvtap: left promiscuous mode [ 263.283799][ T4016] veth1_vlan: left promiscuous mode [ 263.289221][ T4016] veth0_vlan: left promiscuous mode [ 263.389769][ T4016] team0 (unregistering): Port device team_slave_1 removed [ 263.411176][ T4016] team0 (unregistering): Port device team_slave_0 removed [ 263.449134][ T29] audit: type=1326 audit(263.428:11186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20704 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 263.472436][T20705] netlink: 'syz.1.6742': attribute type 1 has an invalid length. [ 263.478328][ T29] audit: type=1326 audit(263.458:11187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20704 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 263.509164][T20658] chnl_net:caif_netlink_parms(): no params data found [ 263.518932][ T29] audit: type=1326 audit(263.458:11188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20704 comm="syz.5.6752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16827f749 code=0x7ffc0000 [ 263.552227][T20705] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.589598][T20708] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.597170][T20708] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 263.608711][T20708] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 263.665599][T20658] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.672754][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.695066][T20658] bridge_slave_0: entered allmulticast mode [ 263.701820][T20658] bridge_slave_0: entered promiscuous mode [ 263.709154][T20658] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.716354][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.729402][T20658] bridge_slave_1: entered allmulticast mode [ 263.736143][T20658] bridge_slave_1: entered promiscuous mode [ 263.758242][T20658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.770301][T20658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.798313][T20658] team0: Port device team_slave_0 added [ 263.804958][T20728] __nla_validate_parse: 7 callbacks suppressed [ 263.804977][T20728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6751'. [ 263.816153][T20658] team0: Port device team_slave_1 added [ 263.843062][T20728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6751'. [ 263.895746][T20658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.902779][T20658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.928789][T20658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.968607][T20737] bridge0: port 2(batadv2) entered blocking state [ 263.975267][T20737] bridge0: port 2(batadv2) entered disabled state [ 263.983416][T20737] batadv2: entered allmulticast mode [ 263.989472][T20737] batadv2: entered promiscuous mode [ 263.996294][T20658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.003317][T20658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.029477][T20658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.074933][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 264.135875][T20658] hsr_slave_0: entered promiscuous mode [ 264.142132][T20658] hsr_slave_1: entered promiscuous mode [ 264.207873][T20752] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.6762'. [ 264.217495][T20752] netlink: zone id is out of range [ 264.222653][T20752] netlink: zone id is out of range [ 264.233645][T20752] netlink: zone id is out of range [ 264.254875][T20752] netlink: zone id is out of range [ 264.272171][T20752] netlink: zone id is out of range [ 264.277470][T20752] netlink: zone id is out of range [ 264.282699][T20752] netlink: zone id is out of range [ 264.288046][T20752] netlink: zone id is out of range [ 264.293291][T20752] netlink: zone id is out of range [ 264.298436][T20752] netlink: zone id is out of range [ 264.425638][T20658] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 264.454916][ T3986] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 264.463612][T20658] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 264.464181][ T3986] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 264.487554][T20658] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 264.524143][T20658] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 264.594364][T20658] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.601498][T20658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.608939][T20658] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.616108][T20658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.642889][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.655660][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.708123][T20658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.746820][T20658] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.767261][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.774606][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.782746][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6775'. [ 264.840881][ T4016] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.848053][ T4016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.892523][T20658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.080997][T20658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.249632][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6791'. [ 265.339972][T20658] veth0_vlan: entered promiscuous mode [ 265.350949][T20827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20827 comm=syz.0.6783 [ 265.369877][T20830] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6785'. [ 265.381437][T20658] veth1_vlan: entered promiscuous mode [ 265.423699][T20658] veth0_macvtap: entered promiscuous mode [ 265.460847][T20658] veth1_macvtap: entered promiscuous mode [ 265.482891][T20658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.513053][T20658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.549522][ T3986] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.570581][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6794'. [ 265.583479][ T3986] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.637738][ T3986] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.655335][ T3986] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.687769][T20859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6727'. [ 266.558109][T20943] infiniband syz!: set down [ 266.562682][T20943] infiniband syz!: added team_slave_0 [ 266.574286][T20943] RDS/IB: syz!: added [ 266.578820][T20943] smc: adding ib device syz! with port count 1 [ 266.585049][T20943] smc: ib device syz! port 1 has no pnetid [ 266.939220][T20957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20957 comm=syz.1.6835 [ 267.042218][T20965] .`: (slave bond_slave_0): Releasing backup interface [ 267.051513][T20965] .`: (slave bond_slave_1): Releasing backup interface [ 267.081590][T20965] netlink: 'syz.1.6838': attribute type 10 has an invalid length. [ 267.090078][T20965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6838'. [ 267.101233][T20969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20969 comm=syz.7.6839 [ 267.302078][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 267.302170][ T29] audit: type=1326 audit(267.278:11299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.372573][ T29] audit: type=1326 audit(267.308:11300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.395717][ T29] audit: type=1326 audit(267.308:11301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.418839][ T29] audit: type=1326 audit(267.308:11302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.442053][ T29] audit: type=1326 audit(267.318:11303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.465227][ T29] audit: type=1326 audit(267.318:11304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.488222][ T29] audit: type=1326 audit(267.328:11305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.511843][ T29] audit: type=1326 audit(267.328:11306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.535002][ T29] audit: type=1326 audit(267.328:11307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feb7544f749 code=0x7ffc0000 [ 267.558105][ T29] audit: type=1326 audit(267.328:11308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20990 comm="syz.3.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb7544f783 code=0x7ffc0000 [ 267.760498][T21008] bridge0: port 2(batadv0) entered blocking state [ 267.767121][T21008] bridge0: port 2(batadv0) entered disabled state [ 267.783048][T21008] batadv0: entered allmulticast mode [ 267.789423][T21008] batadv0: entered promiscuous mode [ 268.265168][ T4002] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 268.274467][ T4002] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 268.563081][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6881'. [ 268.683226][T21072] netlink: 'syz.5.6888': attribute type 1 has an invalid length. [ 268.706131][T21072] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.753852][T21083] bond3: (slave ip6gretap0): making interface the new active one [ 268.782823][T21083] bond3: (slave ip6gretap0): Enslaving as an active interface with an up link [ 268.848412][T21092] __nla_validate_parse: 1 callbacks suppressed [ 268.848480][T21092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6897'. [ 269.014591][T21119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=21119 comm=syz.1.6908 [ 269.027317][T21119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21119 comm=syz.1.6908 [ 269.811507][T21128] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6921'. [ 269.839034][T21128] batadv2: left allmulticast mode [ 269.844124][T21128] batadv2: left promiscuous mode [ 269.849264][T21128] bridge0: port 2(batadv2) entered disabled state [ 269.879169][T21136] loop7: detected capacity change from 0 to 1024 [ 269.895120][T21128] 0{X功: left promiscuous mode [ 269.896624][T21136] EXT4-fs: Ignoring removed nobh option [ 269.900670][T21128] bridge0: port 1(30{X功) entered disabled state [ 269.906041][T21136] EXT4-fs: Ignoring removed bh option [ 269.947489][T21136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.990598][T20658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.067805][T21160] atomic_op ffff88811bb83928 conn xmit_atomic 0000000000000000 [ 270.160136][T21173] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6932'. [ 270.191417][T21174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6928'. [ 270.246972][T21176] netlink: 92 bytes leftover after parsing attributes in process `syz.7.6933'. [ 270.475217][ T9] page_pool_release_retry() stalled pool shutdown: id 131, 1 inflight 60 sec [ 271.011563][T21193] loop7: detected capacity change from 0 to 1024 [ 271.018628][T21193] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 271.035094][T21193] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 271.044913][T21193] EXT4-fs (loop7): orphan cleanup on readonly fs [ 271.061655][T21193] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.6941: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.075983][T21193] EXT4-fs (loop7): 1 orphan inode deleted [ 271.082410][T21193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.120998][T20658] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.263655][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6951'. [ 271.274411][T21218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6951'. [ 271.386963][T21233] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6954'. [ 271.536207][ T9] page_pool_release_retry() stalled pool shutdown: id 132, 1 inflight 60 sec [ 271.660861][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6962'. [ 271.678811][T21243] hsr_slave_1 (unregistering): left promiscuous mode [ 271.906341][T21264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6971'. [ 272.479261][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 272.479296][ T29] audit: type=1400 audit(272.458:11435): avc: denied { setopt } for pid=21325 comm="syz.5.6996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 272.568873][T21334] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.578752][T21334] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.666924][T21334] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.676890][T21334] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.736745][T21334] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.746639][T21334] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.798100][T21334] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.808064][T21334] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.883063][ T4017] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.891452][ T4017] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.912045][ T4017] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.920573][ T4017] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.937580][ T4017] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.945883][ T4017] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.962331][ T4017] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.970679][ T4017] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.995676][T21341] bridge_slave_0: left allmulticast mode [ 273.001493][T21341] bridge_slave_0: left promiscuous mode [ 273.007275][T21341] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.036195][T21341] bridge_slave_1: left allmulticast mode [ 273.041901][T21341] bridge_slave_1: left promiscuous mode [ 273.047664][T21341] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.050906][T21344] netlink: 'syz.7.7001': attribute type 10 has an invalid length. [ 273.067621][T21341] bond0: (slave bond_slave_0): Releasing backup interface [ 273.079079][T21341] bond0: (slave bond_slave_1): Releasing backup interface [ 273.116429][T21341] team0: Port device team_slave_0 removed [ 273.134255][T21341] team0: Port device team_slave_1 removed [ 273.156304][T21341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.163753][T21341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.183249][T21341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.190723][T21341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.218338][T21341] net_ratelimit: 5 callbacks suppressed [ 273.218413][T21341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.243825][T21343] bridge0: port 3(batadv2) entered blocking state [ 273.250392][T21343] bridge0: port 3(batadv2) entered disabled state [ 273.271497][T21343] batadv2: entered allmulticast mode [ 273.290631][T21343] batadv2: entered promiscuous mode [ 273.306156][T21344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.314193][T21344] team0: Port device bond0 added [ 273.326105][T21350] team0 (unregistering): Port device bond0 removed [ 273.550806][T21394] sctp: [Deprecated]: syz.1.7023 (pid 21394) Use of int in max_burst socket option. [ 273.550806][T21394] Use struct sctp_assoc_value instead [ 273.744905][ T4014] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 273.754193][ T4014] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 273.775857][T21422] netlink: 'syz.7.7037': attribute type 3 has an invalid length. [ 273.783645][T21422] netlink: 'syz.7.7037': attribute type 1 has an invalid length. [ 273.897679][T21447] __nla_validate_parse: 6 callbacks suppressed [ 273.897741][T21447] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7048'. [ 273.965469][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7049'. [ 274.006346][ T3409] IPVS: starting estimator thread 0... [ 274.104884][T21458] IPVS: using max 2112 ests per chain, 105600 per kthread [ 274.132536][ T29] audit: type=1326 audit(274.108:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f5d765e7 code=0x7ffc0000 [ 274.155766][ T29] audit: type=1326 audit(274.108:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4f5d1b829 code=0x7ffc0000 [ 274.178991][ T29] audit: type=1326 audit(274.108:11438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f5d765e7 code=0x7ffc0000 [ 274.201933][ T29] audit: type=1326 audit(274.108:11439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4f5d1b829 code=0x7ffc0000 [ 274.225036][ T29] audit: type=1326 audit(274.108:11440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 274.253090][ T29] audit: type=1326 audit(274.108:11441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 274.276216][ T29] audit: type=1326 audit(274.148:11442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4f5d7f749 code=0x7ffc0000 [ 274.299336][ T29] audit: type=1326 audit(274.148:11443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4f5d765e7 code=0x7ffc0000 [ 274.322592][ T29] audit: type=1326 audit(274.148:11444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21470 comm="syz.1.7057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4f5d1b829 code=0x7ffc0000 [ 275.409273][T21539] hub 9-0:1.0: USB hub found [ 275.429722][T21539] hub 9-0:1.0: 8 ports detected [ 275.707799][T21558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7090'. [ 275.854731][T21561] loop7: detected capacity change from 0 to 8192 [ 275.906954][T21565] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7094'. [ 275.920116][T21563] ================================================================== [ 275.928265][T21563] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 275.934998][T21563] [ 275.937356][T21563] write to 0xffff88811b747b50 of 8 bytes by task 21567 on cpu 0: [ 275.945093][T21563] __dentry_kill+0x142/0x4b0 [ 275.949735][T21563] finish_dput+0x2b/0x200 [ 275.954098][T21563] dput+0x52/0x60 [ 275.957763][T21563] step_into_slowpath+0x36b/0x480 [ 275.962942][T21563] link_path_walk+0x974/0xe30 [ 275.967649][T21563] path_openat+0x1c0/0x23b0 [ 275.972189][T21563] do_filp_open+0x109/0x230 [ 275.976733][T21563] io_openat2+0x272/0x390 [ 275.981089][T21563] io_openat+0x1b/0x30 [ 275.985185][T21563] __io_issue_sqe+0xfe/0x2e0 [ 275.989814][T21563] io_issue_sqe+0x56/0xa80 [ 275.994347][T21563] io_wq_submit_work+0x3f7/0x5f0 [ 275.999316][T21563] io_worker_handle_work+0x44e/0x9b0 [ 276.004631][T21563] io_wq_worker+0x22e/0x860 [ 276.009167][T21563] ret_from_fork+0x149/0x290 [ 276.013784][T21563] ret_from_fork_asm+0x1a/0x30 [ 276.018575][T21563] [ 276.020909][T21563] read to 0xffff88811b747b50 of 8 bytes by task 21563 on cpu 1: [ 276.028550][T21563] fast_dput+0x5f/0x2c0 [ 276.032744][T21563] dput+0x24/0x60 [ 276.036407][T21563] step_into_slowpath+0x36b/0x480 [ 276.041452][T21563] link_path_walk+0x974/0xe30 [ 276.046154][T21563] path_openat+0x1c0/0x23b0 [ 276.050682][T21563] do_filp_open+0x109/0x230 [ 276.055216][T21563] io_openat2+0x272/0x390 [ 276.059570][T21563] io_openat+0x1b/0x30 [ 276.063664][T21563] __io_issue_sqe+0xfe/0x2e0 [ 276.068286][T21563] io_issue_sqe+0x56/0xa80 [ 276.072746][T21563] io_submit_sqes+0x78b/0x11b0 [ 276.077536][T21563] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 276.083146][T21563] __x64_sys_io_uring_enter+0x78/0x90 [ 276.088547][T21563] x64_sys_call+0x27e4/0x3000 [ 276.093251][T21563] do_syscall_64+0xca/0x2b0 [ 276.097784][T21563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.103697][T21563] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.106030][T21563] value changed: 0xffff8882376b1400 -> 0x0000000000000000 [ 276.113153][T21563] [ 276.115491][T21563] Reported by Kernel Concurrency Sanitizer on: [ 276.121661][T21563] CPU: 1 UID: 0 PID: 21563 Comm: syz.3.7093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.131489][T21563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.141568][T21563] ================================================================== [ 276.171691][T21569] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7094'. [ 276.637144][ T4033] gretap0: left allmulticast mode [ 276.642221][ T4033] gretap0: left promiscuous mode [ 276.647453][ T4033] bridge0: port 3(gretap0) entered disabled state [ 276.662239][ T4033] bridge_slave_1: left allmulticast mode [ 276.667975][ T4033] bridge_slave_1: left promiscuous mode [ 276.673809][ T4033] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.684041][ T4033] bridge_slave_0: left promiscuous mode [ 276.689826][ T4033] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.705221][ T4033] bond3 (unregistering): (slave ip6gretap0): Releasing active interface [ 276.728935][ T4033] dvmrp0 (unregistering): left allmulticast mode [ 276.846901][ T4033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.856311][ T4033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.865499][ T4033] bond0 (unregistering): Released all slaves [ 276.874140][ T4033] bond1 (unregistering): (slave batadv1): Releasing active interface [ 276.883006][ T4033] bond1 (unregistering): Released all slaves [ 276.891615][ T4033] bond2 (unregistering): Released all slaves [ 276.900386][ T4033] bond3 (unregistering): Released all slaves [ 277.052358][ T4033] team0 (unregistering): Port device team_slave_1 removed [ 277.062677][ T4033] team0 (unregistering): Port device team_slave_0 removed [ 277.318380][ T4033] IPVS: stop unused estimator thread 0... [ 277.378352][ T4033] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.427674][ T4033] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.467999][ T4033] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.527961][ T4033] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.657002][ T4033] bond0 (unregistering): Released all slaves [ 277.730782][ T4033] hsr_slave_0: left promiscuous mode [ 277.739431][ T4033] veth1_macvtap: left promiscuous mode [ 277.745153][ T4033] veth0_macvtap: left promiscuous mode [ 277.750806][ T4033] veth1_vlan: left promiscuous mode [ 277.756236][ T4033] veth0_vlan: left promiscuous mode [ 278.067265][ T4033] IPVS: stop unused estimator thread 0...