last executing test programs: 5m55.599441819s ago: executing program 32 (id=528): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$nci(r1, &(0x7f0000000000)=@NCI_OP_NFCEE_DISCOVER_RSP={0x2, 0x0, 0x2, 0x0, 0x5, {0x0, 0x9}}, 0x5) perf_event_open(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1018a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5m28.313399955s ago: executing program 33 (id=1293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m25.184299547s ago: executing program 6 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 5m25.152872638s ago: executing program 6 (id=1354): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 5m24.981798648s ago: executing program 0 (id=1357): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) 5m24.926641072s ago: executing program 0 (id=1359): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x20c031, 0xffffffffffffffff, 0xec776000) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x80000003}) 5m24.877452964s ago: executing program 0 (id=1362): r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eab, 0x400, 0x1, 0x303}, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0x10, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r3, 0x0, 0x0, 0x0, 0x40010000, 0x1}) io_uring_enter(r0, 0x33f4, 0xaf43, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x11, {0x27fffffffffffff}, 0x57}, 0x1) 5m24.832009787s ago: executing program 0 (id=1364): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 5m24.814303108s ago: executing program 0 (id=1367): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', 0x0, 0x0, 0x0) r0 = syz_clone(0x25888200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) socket$nl_xfrm(0x10, 0x3, 0x6) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 5m24.417250521s ago: executing program 0 (id=1379): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m24.395229133s ago: executing program 34 (id=1379): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd40, 0x1d4) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r1, 0x2) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000c80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m23.119644807s ago: executing program 6 (id=1392): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m23.111839197s ago: executing program 35 (id=1392): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m18.75640476s ago: executing program 8 (id=1497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, @in6=@loopback, 0x10, 0x0, 0x100, 0x0, 0xa, 0x0, 0x20}, {0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x6e6bb9, 0x1}, {{@in=@empty, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x46, 0x5, 0xb1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 5m18.634801157s ago: executing program 8 (id=1498): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd144, 0x0, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd6, 0x4, 0x0, 0x0) close_range(r1, r1, 0x0) 5m18.563757611s ago: executing program 8 (id=1499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 5m18.538740733s ago: executing program 8 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x100) 5m18.520920873s ago: executing program 8 (id=1502): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000b40)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) 5m17.737790559s ago: executing program 8 (id=1520): preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0xffffffff, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="2500001500000000050000000000000024"], 0x24, 0x0) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0xfcd4, 0x80, 0x3, 0x20117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x20000}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 5m17.702961501s ago: executing program 36 (id=1520): preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0xffffffff, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="2500001500000000050000000000000024"], 0x24, 0x0) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0xfcd4, 0x80, 0x3, 0x20117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x20000}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 2m27.845044254s ago: executing program 5 (id=5071): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(0x0, 0x6f5e, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) 2m27.749975769s ago: executing program 5 (id=5072): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) 2m26.761753447s ago: executing program 5 (id=5090): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x8085}, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x9}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {0x0, 0xc}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x100}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000500)={'nat\x00', 0x0, [0x7f, 0x7, 0x20000004, 0x3, 0x100000c]}, &(0x7f0000000040)=0x54) 2m26.282732985s ago: executing program 5 (id=5095): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) ftruncate(r0, 0x7fff) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3bb5]}, 0x8) 2m26.077619597s ago: executing program 5 (id=5099): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1000}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) 2m25.5073293s ago: executing program 5 (id=5113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x6, 0xf8}}}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="83", 0x1}], 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x6, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x7, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x796, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x10001, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0xb, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0xe, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0xfffffffffffffffd, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d000071101d00000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m25.506968639s ago: executing program 37 (id=5113): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x6, 0xf8}}}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="83", 0x1}], 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x6, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x7, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x796, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x10001, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0xb, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0xe, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0xfffffffffffffffd, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d000071101d00000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m12.812526138s ago: executing program 3 (id=5301): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRES32], 0x15) 2m12.718036743s ago: executing program 3 (id=5303): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeaf, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x7, 0x7], 0x0, 0x0, 0x2, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 2m12.660805526s ago: executing program 3 (id=5305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 2m12.58578989s ago: executing program 3 (id=5308): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x26, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) io_setup(0x20, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2m11.72575317s ago: executing program 3 (id=5319): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 2m11.616963207s ago: executing program 3 (id=5320): unshare(0x2a020400) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005500e50226bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000180", @ANYRES32=0x0, @ANYBLOB="00010100fe8000000000000000000000000000aa08"], 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x20000100) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 1m56.606524129s ago: executing program 38 (id=5320): unshare(0x2a020400) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000005500e50226bd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000180", @ANYRES32=0x0, @ANYBLOB="00010100fe8000000000000000000000000000aa08"], 0x38}, 0x1, 0x0, 0x0, 0x40044}, 0x20000100) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 2.75172624s ago: executing program 9 (id=8022): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x1, 0x0, 0xffff, 0x8001, 0x400}, 0xa5, 0x3, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x71d}]}}]}, 0x68}}, 0x40088c4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2e, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.818651764s ago: executing program 7 (id=8029): perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, r0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) r2 = gettid() pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.776728467s ago: executing program 9 (id=8031): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r5], 0x50}}, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.701146522s ago: executing program 1 (id=8033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) 1.386822379s ago: executing program 4 (id=8036): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.243660358s ago: executing program 4 (id=8037): io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000008d40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 1.174512182s ago: executing program 4 (id=8039): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) gettid() unshare(0x2c020400) mount$9p_fd(0x0, 0x0, 0x0, 0x84, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.116904916s ago: executing program 1 (id=8042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 1.064630199s ago: executing program 7 (id=8043): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0x46ee, 0x400, 0xffffdffe, 0x32e}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x3516, 0x67f, 0x64, 0x0, 0x0) 1.064325218s ago: executing program 9 (id=8044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r0) 1.064033379s ago: executing program 2 (id=8045): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e22, 0x3, 'nq\x00', 0x15, 0x80005, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.03853654s ago: executing program 9 (id=8046): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.019174741s ago: executing program 2 (id=8047): socket(0x28, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x28, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 963.192675ms ago: executing program 1 (id=8048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x80}}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 949.139295ms ago: executing program 9 (id=8049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 946.614205ms ago: executing program 7 (id=8050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) pwrite64(r1, 0x0, 0x0, 0x100000000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 887.262269ms ago: executing program 2 (id=8051): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0xffff416e, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) close(r2) 886.833528ms ago: executing program 1 (id=8052): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x9}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setreuid(0x0, 0xee00) read(0xffffffffffffffff, 0x0, 0x0) getegid() getgid() getegid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) 885.249789ms ago: executing program 9 (id=8061): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 882.594839ms ago: executing program 2 (id=8053): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') 781.395265ms ago: executing program 1 (id=8054): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x20000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 495.601592ms ago: executing program 2 (id=8055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2", 0x20}], 0x1) 495.232332ms ago: executing program 2 (id=8056): connect$qrtr(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1ab, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/73, 0xfffffd8d}], 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) semop(0x0, 0x0, 0x0) 444.981284ms ago: executing program 4 (id=8057): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e22, 0x3, 'nq\x00', 0x15, 0x80005, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @empty}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 330.891052ms ago: executing program 7 (id=8058): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 287.652454ms ago: executing program 1 (id=8059): socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8424, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x100dc1, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) socket$tipc(0x1e, 0x2, 0x0) 275.702084ms ago: executing program 4 (id=8060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xe1be9d4373241510}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 125.601893ms ago: executing program 7 (id=8062): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@barrier}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd27, 0x25dfdbfe, {0x2, 0x20, 0x7b, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3d}}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 386.84µs ago: executing program 4 (id=8063): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x20000000016b, 0x2000000001a0, 0xfffffffffffffffd], 0x0, 0x0, 0x0}, 0x138) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) connect$qrtr(0xffffffffffffffff, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=8064): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) semop(0x0, 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) kernel console output (not intermixed with test programs): 19032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.765066][ T7607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.794061][ T7607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.830013][ T7607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.863259][ T7607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.979007][T19301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5590'. [ 297.053352][T19311] netlink: 'syz.1.5593': attribute type 15 has an invalid length. [ 297.079191][ T29] audit: type=1326 audit(2000000144.720:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.102996][ T29] audit: type=1326 audit(2000000144.720:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.127051][ T29] audit: type=1326 audit(2000000144.720:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.150882][ T29] audit: type=1326 audit(2000000144.720:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.175299][ T29] audit: type=1326 audit(2000000144.720:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.199347][ T29] audit: type=1326 audit(2000000144.720:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.223078][ T29] audit: type=1326 audit(2000000144.720:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.246769][ T29] audit: type=1326 audit(2000000144.720:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19313 comm="syz.2.5594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 297.276416][T19317] IPv6: NLM_F_REPLACE set, but no existing node found! [ 297.587670][T19339] xt_hashlimit: max too large, truncated to 1048576 [ 297.652917][T19349] netlink: 'syz.7.5602': attribute type 4 has an invalid length. [ 297.672315][T19349] netlink: 'syz.7.5602': attribute type 4 has an invalid length. [ 297.811590][T19349] ip6gre2: left promiscuous mode [ 297.816775][T19349] ip6gre2: left allmulticast mode [ 297.825987][T19349] team0: left promiscuous mode [ 297.830980][T19349] team0: left allmulticast mode [ 297.839389][T19349] bond6: left promiscuous mode [ 297.844428][T19349] bond6: left allmulticast mode [ 297.861053][T19349] ip6tnl4: left promiscuous mode [ 297.878635][ T7587] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.887095][ T7587] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 297.935306][ T7587] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.943819][ T7587] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 297.975668][ T7587] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.984136][ T7587] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 298.028769][ T7587] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.037361][ T7587] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 298.140941][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5613'. [ 298.172480][T19395] macvtap1: entered promiscuous mode [ 298.178230][T19395] gretap0: entered promiscuous mode [ 298.183902][T19395] macvtap1: entered allmulticast mode [ 298.189398][T19395] gretap0: entered allmulticast mode [ 298.996446][T19496] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 299.816746][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 299.816766][ T29] audit: type=1400 audit(2000000147.460:3797): avc: denied { relabelfrom } for pid=19570 comm="syz.1.5657" name="SCTPv6" dev="sockfs" ino=62586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 299.849462][T19573] SELinux: Context system_u: is not valid (left unmapped). [ 299.878105][ T29] audit: type=1400 audit(2000000147.500:3798): avc: denied { relabelto } for pid=19570 comm="syz.1.5657" name="SCTPv6" dev="sockfs" ino=62586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:" [ 299.932769][T19579] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.5658'. [ 299.960023][T19579] netlink: zone id is out of range [ 299.965354][T19579] netlink: zone id is out of range [ 299.986118][T19585] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5670'. [ 299.998055][T19579] netlink: zone id is out of range [ 300.013669][T19579] netlink: set zone limit has 8 unknown bytes [ 300.025098][ T29] audit: type=1326 audit(2000000147.570:3799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 300.049048][ T29] audit: type=1326 audit(2000000147.570:3800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 300.072674][ T29] audit: type=1326 audit(2000000147.570:3801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 300.096625][ T29] audit: type=1326 audit(2000000147.570:3802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 300.120299][ T29] audit: type=1326 audit(2000000147.570:3803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 300.144560][ T29] audit: type=1326 audit(2000000147.570:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 300.168209][ T29] audit: type=1326 audit(2000000147.570:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 300.191883][ T29] audit: type=1326 audit(2000000147.570:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19575 comm="syz.9.5658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 301.639199][T19663] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.5681'. [ 301.648792][T19663] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5681'. [ 302.193792][T19692] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5694'. [ 302.472803][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5702'. [ 302.510629][T19727] netlink: 'syz.7.5706': attribute type 15 has an invalid length. [ 302.565009][T19733] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5711'. [ 302.600420][T19727] IPv6: NLM_F_REPLACE set, but no existing node found! [ 302.637565][T19737] netlink: 'syz.7.5713': attribute type 1 has an invalid length. [ 302.677524][T19744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5716'. [ 302.692877][T19737] bond7: entered promiscuous mode [ 302.698690][T19737] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.707295][T19744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5716'. [ 302.753770][T19737] bond7: (slave bridge5): making interface the new active one [ 302.761414][T19737] bridge5: entered promiscuous mode [ 302.799248][T19737] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 302.846605][T19754] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 302.860377][T19754] sch_tbf: burst 22 is lower than device lo mtu (11337746) ! [ 302.991884][T19762] netlink: 'syz.2.5724': attribute type 1 has an invalid length. [ 303.135179][T19762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.186333][T19765] bond2: (slave veth11): Enslaving as an active interface with a down link [ 303.198923][T19762] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 303.208860][T19762] bond2: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 303.995561][T19805] netlink: 'syz.7.5740': attribute type 1 has an invalid length. [ 304.003496][T19805] netlink: 'syz.7.5740': attribute type 2 has an invalid length. [ 304.063687][T19808] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5742'. [ 304.072720][T19808] netlink: 'syz.7.5742': attribute type 7 has an invalid length. [ 304.080706][T19808] netlink: 'syz.7.5742': attribute type 8 has an invalid length. [ 304.088476][T19808] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5742'. [ 304.713289][T19844] netlink: 'syz.1.5758': attribute type 1 has an invalid length. [ 304.738598][T19844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.739684][T19848] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.5759'. [ 304.756853][T19848] netlink: zone id is out of range [ 304.762092][T19848] netlink: zone id is out of range [ 304.762677][T19844] bond1: (slave ip6erspan0): making interface the new active one [ 304.773274][T19848] netlink: zone id is out of range [ 304.785654][T19844] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 304.820270][T19848] netlink: set zone limit has 8 unknown bytes [ 304.828993][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 304.829011][ T29] audit: type=1326 audit(2000000152.480:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19847 comm="syz.7.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 304.869197][ T29] audit: type=1326 audit(2000000152.480:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19847 comm="syz.7.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 304.913014][T19860] gtp2: entered promiscuous mode [ 304.922873][T19862] netlink: 'syz.2.5766': attribute type 1 has an invalid length. [ 304.939676][T19862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.963596][T19862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 304.970963][T19862] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 304.983179][T19862] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 306.016696][ T29] audit: type=1326 audit(2000000153.660:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.040601][ T29] audit: type=1326 audit(2000000153.660:3881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.064632][ T29] audit: type=1326 audit(2000000153.660:3882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.088299][ T29] audit: type=1326 audit(2000000153.660:3883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.111895][ T29] audit: type=1326 audit(2000000153.660:3884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.135614][ T29] audit: type=1326 audit(2000000153.660:3885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.182833][ T29] audit: type=1326 audit(2000000153.800:3886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.206599][ T29] audit: type=1326 audit(2000000153.800:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19954 comm="syz.4.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 306.457590][T19970] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 306.464248][T19970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.471796][T19970] vhci_hcd vhci_hcd.0: Device attached [ 306.495480][T19979] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 306.502034][T19979] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.509679][T19979] vhci_hcd vhci_hcd.0: Device attached [ 306.540649][T19970] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 306.547305][T19970] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 306.555033][T19970] vhci_hcd vhci_hcd.0: Device attached [ 306.563821][T19970] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 306.592173][T19976] syz_tun (unregistering): left allmulticast mode [ 306.603128][T19970] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 306.609759][T19970] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.617624][T19970] vhci_hcd vhci_hcd.0: Device attached [ 306.633848][T19970] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(13) [ 306.640649][T19970] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 306.648484][T19970] vhci_hcd vhci_hcd.0: Device attached [ 306.666877][T19970] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 306.673529][T19970] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.681766][T19970] vhci_hcd vhci_hcd.0: Device attached [ 306.694424][T19970] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(17) [ 306.695726][T20000] __nla_validate_parse: 8 callbacks suppressed [ 306.695783][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5814'. [ 306.701451][T19970] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.701538][T19970] vhci_hcd vhci_hcd.0: Device attached [ 306.724364][ T3164] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 306.750808][T19999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5813'. [ 306.764416][T20007] netlink: 'syz.9.5815': attribute type 10 has an invalid length. [ 306.781286][T20002] vhci_hcd: connection closed [ 306.781605][ T37] vhci_hcd vhci_hcd.1: stop threads [ 306.791578][ T37] vhci_hcd vhci_hcd.1: release socket [ 306.797227][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 306.807268][T19995] vhci_hcd: connection closed [ 306.807416][T19993] vhci_hcd: connection closed [ 306.807533][ T37] vhci_hcd vhci_hcd.1: stop threads [ 306.812262][T19971] vhci_hcd: connection reset by peer [ 306.817083][ T37] vhci_hcd vhci_hcd.1: release socket [ 306.822430][T19990] vhci_hcd: connection closed [ 306.827680][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 306.844219][T19980] vhci_hcd: connection closed [ 306.844379][T19984] vhci_hcd: connection closed [ 306.849979][ T37] vhci_hcd vhci_hcd.1: stop threads [ 306.860202][ T37] vhci_hcd vhci_hcd.1: release socket [ 306.865759][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 306.877193][ T37] vhci_hcd vhci_hcd.1: stop threads [ 306.882524][ T37] vhci_hcd vhci_hcd.1: release socket [ 306.888111][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 306.947276][ T37] vhci_hcd vhci_hcd.1: stop threads [ 306.952557][ T37] vhci_hcd vhci_hcd.1: release socket [ 306.958019][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 306.982317][ T37] vhci_hcd vhci_hcd.1: stop threads [ 306.987815][ T37] vhci_hcd vhci_hcd.1: release socket [ 306.993271][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 307.038348][ T37] vhci_hcd vhci_hcd.1: stop threads [ 307.043651][ T37] vhci_hcd vhci_hcd.1: release socket [ 307.049133][ T37] vhci_hcd vhci_hcd.1: disconnect device [ 307.217890][T20047] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5831'. [ 307.248051][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5828'. [ 307.383793][T20069] loop1: detected capacity change from 0 to 512 [ 307.391909][T20069] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 307.409108][T20069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 307.424802][T20069] System zones: 1-12 [ 307.436080][T20069] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.5835: corrupted in-inode xattr: e_value size too large [ 307.450811][T20069] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.5835: couldn't read orphan inode 15 (err -117) [ 307.450830][T20072] wireguard0: entered promiscuous mode [ 307.450850][T20072] wireguard0: entered allmulticast mode [ 307.476519][T20069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.492370][T20069] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.5835: Unrecognised inode hash code 4 [ 307.503834][T20069] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.5835: Corrupt directory, running e2fsck is recommended [ 307.517658][T20069] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.5835: Unrecognised inode hash code 4 [ 307.529630][T20069] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.5835: Corrupt directory, running e2fsck is recommended [ 307.559545][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.570674][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5839'. [ 307.702008][T20091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5842'. [ 307.714767][T20091] hsr_slave_1 (unregistering): left promiscuous mode [ 308.089771][T20121] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5854'. [ 308.130056][T20124] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5858'. [ 308.151786][T20124] netlink: 'syz.9.5858': attribute type 1 has an invalid length. [ 308.241279][T20144] netlink: 'syz.4.5865': attribute type 1 has an invalid length. [ 308.260420][T20144] 8021q: adding VLAN 0 to HW filter on device bond11 [ 308.280299][T20144] bond11: (slave veth17): Enslaving as an active interface with a down link [ 308.311074][T20144] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 308.321002][T20144] bond11: (slave batadv1): making interface the new active one [ 308.332033][T20144] batadv1: entered promiscuous mode [ 308.338393][T20144] bond11: (slave batadv1): Enslaving as an active interface with an up link [ 308.480836][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5871'. [ 308.493480][T20159] vlan3: entered promiscuous mode [ 308.498656][T20159] dummy0: entered promiscuous mode [ 309.848530][T20283] loop1: detected capacity change from 0 to 128 [ 309.886795][T20283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5903'. [ 310.483462][ T7587] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.491901][ T7587] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 310.513571][ T7587] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.522407][ T7587] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 310.531219][ T7587] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.539836][ T7587] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 310.564263][ T7587] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.572747][ T7587] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 310.852802][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 310.852819][ T29] audit: type=1326 audit(2000000158.490:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 310.883480][ T29] audit: type=1326 audit(2000000158.490:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 310.980852][T20356] loop1: detected capacity change from 0 to 1024 [ 311.034240][T20356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 311.073505][T20356] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.110306][ T29] audit: type=1326 audit(2000000158.550:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 311.134560][ T29] audit: type=1326 audit(2000000158.560:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 311.158302][ T29] audit: type=1326 audit(2000000158.560:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 311.182052][ T29] audit: type=1326 audit(2000000158.570:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20353 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1d0d8eb78e code=0x7ffc0000 [ 311.205756][ T29] audit: type=1326 audit(2000000158.570:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 311.229528][ T29] audit: type=1326 audit(2000000158.570:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 311.253443][ T29] audit: type=1326 audit(2000000158.570:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 311.277109][ T29] audit: type=1326 audit(2000000158.570:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20350 comm="syz.7.5922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 311.361460][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 311.523885][T20386] 8021q: adding VLAN 0 to HW filter on device bond6 [ 311.546981][T20386] team0: Failed to send port change of device bond6 via netlink (err -105) [ 311.584417][T20386] team0: Failed to send options change via netlink (err -105) [ 311.592038][T20386] team0: Port device bond6 added [ 311.607053][T10620] team0: Failed to send port change of device bond6 via netlink (err -105) [ 311.705317][T20397] __nla_validate_parse: 2 callbacks suppressed [ 311.705335][T20397] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5934'. [ 311.734954][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5944'. [ 311.744340][ T3164] usb 3-1: enqueue for inactive port 0 [ 311.749838][ T3164] usb 3-1: enqueue for inactive port 0 [ 311.863388][ T3164] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 312.424783][T20472] syz_tun: entered allmulticast mode [ 312.437919][T20471] syz_tun: left allmulticast mode [ 312.605570][T20494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5963'. [ 312.620759][T20494] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5963'. [ 312.810490][T20509] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.955111][T20509] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.006218][T20521] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 313.034450][T20509] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.047689][T20528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5979'. [ 313.114949][T20509] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 313.191576][ T7613] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 313.206560][ T7613] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 313.227186][ T7613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 313.239998][ T7613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 313.340855][ T3480] kernel write not supported for file bpf-prog (pid: 3480 comm: kworker/1:6) [ 313.559492][T20571] loop1: detected capacity change from 0 to 512 [ 313.588967][T20571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 313.625128][T20571] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.653984][T20571] Invalid ELF header magic: != ELF [ 313.704586][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 313.942984][T20616] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6012'. [ 314.105689][T20636] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6021'. [ 314.120770][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6021'. [ 314.378269][T20660] loop1: detected capacity change from 0 to 512 [ 314.394828][T20660] EXT4-fs: Invalid want_extra_isize 64870 [ 314.451726][T20669] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 314.527370][T20669] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 314.584680][T20669] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 314.645208][T20669] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 314.725688][T10620] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 314.768208][T20688] xt_hashlimit: size too large, truncated to 1048576 [ 314.829986][T20684] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.837219][T20684] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.967304][T20684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.981528][T20684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.116610][T10620] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 315.143453][T10620] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 315.164833][T20699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6047'. [ 315.172169][T10620] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.193008][T10620] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.264534][T10620] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.283893][T20699] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6047'. [ 315.323257][T10620] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.360477][T10620] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 315.453539][T20721] dvmrp0: entered allmulticast mode [ 315.918017][T20760] netlink: 'syz.9.6070': attribute type 29 has an invalid length. [ 315.930035][T20760] netlink: 'syz.9.6070': attribute type 29 has an invalid length. [ 316.716937][T20805] __nla_validate_parse: 2 callbacks suppressed [ 316.717029][T20805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6091'. [ 316.944620][T20820] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6098'. [ 317.010707][T20828] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6100'. [ 317.163267][T20839] netlink: 'syz.9.6104': attribute type 10 has an invalid length. [ 317.270184][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 317.270201][ T29] audit: type=1400 audit(2000000164.910:4066): avc: denied { module_load } for pid=20844 comm="syz.9.6107" path="/889/bus" dev="tmpfs" ino=4628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 317.301974][T20845] Invalid ELF header magic: != ELF [ 317.375307][T20856] netlink: 'syz.9.6112': attribute type 4 has an invalid length. [ 317.385024][T20855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6111'. [ 317.435867][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6111'. [ 317.449317][T20858] IPVS: Error connecting to the multicast addr [ 317.568875][ T29] audit: type=1400 audit(2000000165.210:4067): avc: denied { nlmsg_write } for pid=20865 comm="syz.4.6117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 317.851792][T20888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6125'. [ 317.883902][T20888] netlink: 'syz.2.6125': attribute type 1 has an invalid length. [ 318.052395][ T29] audit: type=1326 audit(2000000165.690:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20895 comm="syz.7.6129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d0d92aeb9 code=0x0 [ 318.284842][ T29] audit: type=1326 audit(2000000165.930:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.1.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 318.308510][ T29] audit: type=1326 audit(2000000165.930:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.1.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 318.332082][ T29] audit: type=1326 audit(2000000165.930:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.1.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 318.410129][ T29] audit: type=1326 audit(2000000165.930:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.1.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 318.433875][ T29] audit: type=1326 audit(2000000165.930:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.1.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 318.457817][ T29] audit: type=1326 audit(2000000165.930:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.1.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 318.481432][ T29] audit: type=1326 audit(2000000165.930:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20913 comm="syz.1.6133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 318.544784][T20922] netem: incorrect ge model size [ 318.549790][T20922] netem: change failed [ 318.697526][T20937] loop1: detected capacity change from 0 to 1024 [ 318.715919][T20937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.735174][T20937] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.6143: inode #4294967293: comm syz.1.6143: iget: illegal inode # [ 318.749486][T20937] EXT4-fs (loop1): Remounting filesystem read-only [ 318.756310][T20937] EXT4-fs warning (device loop1): ext4_xattr_inode_inc_ref_all:1135: inode #19: comm syz.1.6143: cleanup dec ref error -30 [ 318.770747][T20937] EXT4-fs warning (device loop1): ext4_xattr_block_set:2200: inode #19: comm syz.1.6143: dec ref error=-30 [ 318.798714][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.147843][T20962] netlink: 596 bytes leftover after parsing attributes in process `syz.9.6152'. [ 319.250468][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6155'. [ 319.293487][T20966] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6155'. [ 319.339148][T20966] netlink: 3 bytes leftover after parsing attributes in process `syz.9.6155'. [ 319.385200][T20967] netlink: 'syz.7.6154': attribute type 6 has an invalid length. [ 321.168152][T21086] VFS: Mount too revealing [ 321.544878][T21136] netlink: 'syz.9.6222': attribute type 6 has an invalid length. [ 321.739463][T21154] tipc: New replicast peer: 255.255.255.255 [ 321.745793][T21154] tipc: Enabled bearer , priority 10 [ 322.425855][T21170] netlink: 'syz.2.6237': attribute type 6 has an invalid length. [ 322.558499][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 322.558518][ T29] audit: type=1326 audit(2000000426.199:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21201 comm="syz.1.6252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x0 [ 322.734569][T21215] __nla_validate_parse: 12 callbacks suppressed [ 322.734590][T21215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6256'. [ 322.874616][ T3164] tipc: Node number set to 670261931 [ 323.032220][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6258'. [ 323.072738][ T29] audit: type=1326 audit(2000000682.713:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 323.127524][ T29] audit: type=1326 audit(2000000682.713:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 323.151663][ T29] audit: type=1326 audit(2000000682.713:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 323.175351][ T29] audit: type=1326 audit(2000000682.723:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 323.199815][ T29] audit: type=1326 audit(2000000682.723:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 323.223959][ T29] audit: type=1326 audit(2000000682.723:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21225 comm="syz.4.6259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 323.370131][ T29] audit: type=1326 audit(2000000683.013:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.7.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 323.394554][ T29] audit: type=1326 audit(2000000683.013:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.7.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 323.428726][ T29] audit: type=1326 audit(2000000683.073:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21238 comm="syz.7.6264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 324.259143][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6292'. [ 325.100820][T21360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6313'. [ 325.109968][T21360] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6313'. [ 325.132626][T21360] vlan2: entered allmulticast mode [ 325.428161][T21381] netlink: 'syz.4.6321': attribute type 39 has an invalid length. [ 325.899863][T21423] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6334'. [ 326.171489][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6349'. [ 326.180537][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6349'. [ 326.231660][T21469] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6353'. [ 326.243684][T21469] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6353'. [ 327.198138][T21518] bond12: entered promiscuous mode [ 327.230257][T21518] macvlan2: entered promiscuous mode [ 327.235715][T21518] macvlan2: entered allmulticast mode [ 327.253827][T21518] bond12: (slave macvlan2): Opening slave failed [ 327.646392][T21541] loop1: detected capacity change from 0 to 1024 [ 327.664981][T21541] EXT4-fs: Ignoring removed orlov option [ 327.707871][T21541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.207025][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6389'. [ 328.223088][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 328.223108][ T29] audit: type=1326 audit(2000000687.863:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.252911][ T29] audit: type=1326 audit(2000000687.863:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.276756][ T29] audit: type=1326 audit(2000000687.863:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.292714][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6392'. [ 328.300301][ T29] audit: type=1326 audit(2000000687.863:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.300338][ T29] audit: type=1326 audit(2000000687.863:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.300364][ T29] audit: type=1326 audit(2000000687.863:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.300394][ T29] audit: type=1326 audit(2000000687.863:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.300465][ T29] audit: type=1326 audit(2000000687.863:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.300494][ T29] audit: type=1326 audit(2000000687.863:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.300556][ T29] audit: type=1326 audit(2000000687.863:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 328.434316][ T3164] IPVS: starting estimator thread 0... [ 328.454363][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6392'. [ 328.515219][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6392'. [ 328.524177][T21584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6392'. [ 328.533755][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.573318][T21585] IPVS: using max 2448 ests per chain, 122400 per kthread [ 328.624627][T21594] batman_adv: batadv0: Adding interface: dummy0 [ 328.630924][T21594] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.668888][T21594] batman_adv: batadv0: Interface activated: dummy0 [ 328.687444][T21594] batadv0: mtu less than device minimum [ 328.693506][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.704570][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.716364][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.727575][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.738544][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.749571][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.760662][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.771589][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 328.782742][T21594] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 329.359462][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'. [ 329.369425][T21673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6428'. [ 329.423782][T21679] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6431'. [ 329.646966][T21695] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6437'. [ 329.891305][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6442'. [ 331.503777][T21784] 9p: Bad value for 'wfdno' [ 331.672224][T21794] team1: left promiscuous mode [ 331.677389][T21794] team1: left allmulticast mode [ 331.714280][T21794] vlan3: left promiscuous mode [ 331.719195][T21794] dummy0: left promiscuous mode [ 331.926502][T21818] netlink: 'syz.2.6487': attribute type 7 has an invalid length. [ 331.934961][T21818] netlink: 'syz.2.6487': attribute type 8 has an invalid length. [ 333.300546][T21866] loop1: detected capacity change from 0 to 512 [ 333.314506][T21866] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.6507: iget: bad i_size value: 38620345925642 [ 333.331856][T21866] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.6507: couldn't read orphan inode 15 (err -117) [ 333.348454][T21866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.424045][T21871] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6507: bg 0: block 5: invalid block bitmap [ 333.466078][T21871] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1832 with error 28 [ 333.478609][T21871] EXT4-fs (loop1): This should not happen!! Data will be lost [ 333.478609][T21871] [ 333.488301][T21871] EXT4-fs (loop1): Total free blocks count 0 [ 333.494388][T21871] EXT4-fs (loop1): Free/Dirty block details [ 333.500312][T21871] EXT4-fs (loop1): free_blocks=0 [ 333.505292][T21871] EXT4-fs (loop1): dirty_blocks=2040 [ 333.510678][T21871] EXT4-fs (loop1): Block reservation details [ 333.516823][T21871] EXT4-fs (loop1): i_reserved_data_blocks=2040 [ 333.627876][T10620] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1832 with max blocks 208 with error 28 [ 334.376795][T21922] net_ratelimit: 11 callbacks suppressed [ 334.376885][T21922] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 334.471818][T21928] __nla_validate_parse: 12 callbacks suppressed [ 334.471837][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6532'. [ 334.933888][T21960] loop1: detected capacity change from 0 to 128 [ 335.023463][T21960] syz.1.6548: attempt to access beyond end of device [ 335.023463][T21960] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 335.037083][T21960] syz.1.6548: attempt to access beyond end of device [ 335.037083][T21960] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 335.050846][T21960] syz.1.6548: attempt to access beyond end of device [ 335.050846][T21960] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 335.064866][T21960] syz.1.6548: attempt to access beyond end of device [ 335.064866][T21960] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 335.078506][T21960] syz.1.6548: attempt to access beyond end of device [ 335.078506][T21960] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 335.092172][T21960] syz.1.6548: attempt to access beyond end of device [ 335.092172][T21960] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 335.105797][T21960] syz.1.6548: attempt to access beyond end of device [ 335.105797][T21960] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 335.119394][T21960] syz.1.6548: attempt to access beyond end of device [ 335.119394][T21960] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 335.133083][T21960] syz.1.6548: attempt to access beyond end of device [ 335.133083][T21960] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 335.146759][T21960] syz.1.6548: attempt to access beyond end of device [ 335.146759][T21960] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 335.324553][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 335.324569][ T29] audit: type=1400 audit(2000000694.963:4298): avc: denied { write } for pid=21977 comm="syz.2.6554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 335.351698][ T29] audit: type=1400 audit(2000000694.973:4299): avc: denied { read } for pid=21977 comm="syz.2.6554" path="socket:[72285]" dev="sockfs" ino=72285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 335.389426][T21968] netlink: 199828 bytes leftover after parsing attributes in process `syz.9.6550'. [ 335.477795][T21990] batman_adv: batadv0: Interface deactivated: dummy0 [ 335.514284][ T29] audit: type=1400 audit(2000000695.153:4300): avc: denied { mount } for pid=21987 comm="syz.4.6557" name="/" dev="rpc_pipefs" ino=73091 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 335.538814][T21990] vlan2: left allmulticast mode [ 335.672022][ T29] audit: type=1326 audit(2000000695.313:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21997 comm="syz.1.6561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x0 [ 335.867257][ T29] audit: type=1326 audit(2000000695.503:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22013 comm="syz.7.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 335.891439][ T29] audit: type=1326 audit(2000000695.503:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22013 comm="syz.7.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 335.915673][ T29] audit: type=1326 audit(2000000695.513:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22013 comm="syz.7.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 335.939262][ T29] audit: type=1326 audit(2000000695.513:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22013 comm="syz.7.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 335.963607][ T29] audit: type=1326 audit(2000000695.513:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22013 comm="syz.7.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 335.987570][ T29] audit: type=1326 audit(2000000695.513:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22013 comm="syz.7.6568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f1d0d92aeb9 code=0x7ffc0000 [ 336.463127][T22030] xt_hashlimit: size too large, truncated to 1048576 [ 336.606272][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6575'. [ 336.646886][T22039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6575'. [ 337.174876][T22090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6599'. [ 337.985316][T22139] loop1: detected capacity change from 0 to 512 [ 337.999416][T22139] EXT4-fs: Ignoring removed i_version option [ 338.005478][T22139] EXT4-fs: Ignoring removed bh option [ 338.038389][T22139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.061110][T22139] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.078753][T22146] netlink: 'syz.7.6618': attribute type 10 has an invalid length. [ 338.086815][T22146] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6618'. [ 338.123191][T22146] dummy0: entered promiscuous mode [ 338.123216][T22146] dummy0: entered allmulticast mode [ 338.124100][T22146] bond0: (slave dummy0): Releasing backup interface [ 338.130266][T22146] bridge0: port 2(dummy0) entered blocking state [ 338.130335][T22146] bridge0: port 2(dummy0) entered disabled state [ 338.261015][T22156] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 338.819025][T22187] batman_adv: batadv0: Adding interface: dummy0 [ 338.825446][T22187] batman_adv: batadv0: The MTU of interface dummy0 is too small (9216) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 9248 would solve the problem. [ 338.903794][T22187] batman_adv: batadv0: Interface activated: dummy0 [ 338.913561][T22188] batadv0: mtu less than device minimum [ 338.914149][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.930387][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.930894][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.951991][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.963393][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.964028][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.964680][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 338.996313][T22188] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 339.151734][T22198] lo: Caught tx_queue_len zero misconfig [ 339.166815][T22198] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6638'. [ 339.303012][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.337005][T22204] xt_hashlimit: max too large, truncated to 1048576 [ 339.348617][T22204] No such timeout policy "syz1" [ 339.415103][T22211] netlink: 'syz.1.6644': attribute type 1 has an invalid length. [ 339.459047][T22211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.472636][T22216] vlan3: entered allmulticast mode [ 339.478002][T22216] veth0_to_bond: entered allmulticast mode [ 339.486820][T22216] bond2: (slave vlan3): Opening slave failed [ 339.498134][T22218] netlink: 176 bytes leftover after parsing attributes in process `syz.9.6647'. [ 339.549301][T22225] netlink: 'syz.9.6648': attribute type 1 has an invalid length. [ 339.561825][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6650'. [ 339.654070][T22234] loop1: detected capacity change from 0 to 128 [ 339.673761][T22234] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 339.708413][T22234] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.743965][T22234] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 339.751626][T22234] FAT-fs (loop1): Filesystem has been set read-only [ 339.881748][T19032] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.130075][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 340.139880][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6662'. [ 340.280824][T22265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6665'. [ 340.404429][T22272] netem: change failed [ 340.450213][T22274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6670'. [ 340.491522][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 340.491541][ T29] audit: type=1326 audit(2000000700.133:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.541739][ T29] audit: type=1326 audit(2000000700.133:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.566013][ T29] audit: type=1326 audit(2000000700.173:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.589735][ T29] audit: type=1326 audit(2000000700.173:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.613959][ T29] audit: type=1326 audit(2000000700.173:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.637670][ T29] audit: type=1326 audit(2000000700.173:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.662032][ T29] audit: type=1326 audit(2000000700.173:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.686659][ T29] audit: type=1326 audit(2000000700.173:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.710526][ T29] audit: type=1326 audit(2000000700.173:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.734774][ T29] audit: type=1326 audit(2000000700.173:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22275 comm="syz.9.6671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 340.960658][T22299] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6678'. [ 341.828294][T22338] netlink: 'syz.7.6695': attribute type 4 has an invalid length. [ 341.837759][T22338] netlink: 'syz.7.6695': attribute type 4 has an invalid length. [ 341.882832][T22343] netlink: 'syz.7.6697': attribute type 32 has an invalid length. [ 342.043606][T22361] batman_adv: batadv0: Removing interface: dummy0 [ 342.047624][T22363] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6703'. [ 342.059648][T22361] bridge_slave_0: left allmulticast mode [ 342.066180][T22361] bridge_slave_0: left promiscuous mode [ 342.072082][T22361] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.080397][T22361] bridge_slave_1: left allmulticast mode [ 342.086147][T22361] bridge_slave_1: left promiscuous mode [ 342.091820][T22361] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.104474][T22361] bond0: (slave bond_slave_0): Releasing backup interface [ 342.114857][T22361] bond0: (slave bond_slave_1): Releasing backup interface [ 342.124636][T22361] team0: Port device team_slave_0 removed [ 342.131281][T22361] team0: Port device team_slave_1 removed [ 342.137708][T22361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.146290][T22361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.154474][T22361] net_ratelimit: 11 callbacks suppressed [ 342.154488][T22361] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 342.178304][T22365] team0: Mode changed to "loadbalance" [ 342.241004][T22374] IPv6: sit2: Disabled Multicast RS [ 342.434330][T22390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6711'. [ 342.582193][T22395] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6713'. [ 342.647649][T22401] netlink: 'syz.9.6716': attribute type 1 has an invalid length. [ 342.669819][T22401] macvlan1: Device is already in use. [ 343.074878][T22420] uprobe: syz.1.6723:22420 failed to unregister, leaking uprobe [ 343.159794][T22423] can: request_module (can-proto-0) failed. [ 343.382344][T22441] 9p: Bad value for 'rfdno' [ 343.534236][T22449] sch_fq: defrate 7 ignored. [ 343.944870][T22466] loop1: detected capacity change from 0 to 128 [ 343.971599][T22466] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 344.432386][T22466] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.482809][T22466] ext2 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.538365][T22476] __nla_validate_parse: 2 callbacks suppressed [ 344.538423][T22476] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6741'. [ 344.615065][T19032] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 344.620793][T22480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6742'. [ 345.223730][T22544] netlink: 'syz.4.6770': attribute type 4 has an invalid length. [ 345.238316][T22544] netlink: 'syz.4.6770': attribute type 4 has an invalid length. [ 345.999219][T22579] loop1: detected capacity change from 0 to 512 [ 346.005930][T22579] EXT4-fs: Ignoring removed oldalloc option [ 346.014433][T22579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.124977][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.397346][T22593] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6788'. [ 347.126679][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 347.126710][ T29] audit: type=1400 audit(2000000706.773:4655): avc: denied { mounton } for pid=22629 comm="syz.1.6805" path="/" dev="configfs" ino=2010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 347.525186][T22647] geneve2: entered promiscuous mode [ 347.530510][T22647] geneve2: entered allmulticast mode [ 347.692622][T22650] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6812'. [ 347.727518][T22652] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 348.172459][T22685] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.257573][T22685] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 348.290771][ T37] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 348.443499][ T37] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 348.496018][ T29] audit: type=1326 audit(2000000708.143:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 348.520250][ T29] audit: type=1326 audit(2000000708.143:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 348.549270][T22707] loop1: detected capacity change from 0 to 512 [ 348.650928][T22707] EXT4-fs (loop1): 1 truncate cleaned up [ 348.661897][ T29] audit: type=1326 audit(2000000708.143:4658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 348.667423][T22707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.686249][ T29] audit: type=1326 audit(2000000708.143:4659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f921711ac22 code=0x7ffc0000 [ 348.722169][ T29] audit: type=1326 audit(2000000708.143:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92170db78e code=0x7ffc0000 [ 348.746273][ T29] audit: type=1326 audit(2000000708.143:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f921711ace7 code=0x7ffc0000 [ 348.769791][ T29] audit: type=1326 audit(2000000708.193:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92170db78e code=0x7ffc0000 [ 348.794112][ T29] audit: type=1326 audit(2000000708.193:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f921711ab4b code=0x7ffc0000 [ 348.817564][ T29] audit: type=1326 audit(2000000708.273:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.1.6837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f92170db78e code=0x7ffc0000 [ 348.994153][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.087038][T22721] loop1: detected capacity change from 0 to 1024 [ 349.101618][T22722] ref_ctr_offset mismatch. inode: 0x15f9 offset: 0x4 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x2 [ 349.123674][T22721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 349.136483][T22721] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.148828][T22721] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6841: bg 0: block 112: padding at end of block bitmap is not set [ 349.165016][T22721] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.6841: lblock 3 mapped to illegal pblock 3 (length 1) [ 349.179619][T22721] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.6841: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 349.214473][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 349.905119][T22776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6864'. [ 350.299090][T22818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6880'. [ 350.343889][T22818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6880'. [ 351.181674][T22872] netlink: 'syz.9.6904': attribute type 1 has an invalid length. [ 351.196798][T22872] 8021q: adding VLAN 0 to HW filter on device bond9 [ 351.248890][T22872] batman_adv: batadv0: Interface deactivated: dummy0 [ 351.276628][T22872] batman_adv: batadv0: Removing interface: dummy0 [ 351.337220][T22872] bond9: (slave dummy0): making interface the new active one [ 351.365962][T22872] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 351.375490][T22876] bond9: entered promiscuous mode [ 351.401713][T22876] dummy0: entered promiscuous mode [ 351.561006][T22896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6913'. [ 351.572110][T22896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6913'. [ 351.840013][T22923] 8021q: adding VLAN 0 to HW filter on device bond3 [ 351.862438][T22923] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 351.943127][T10620] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 351.979601][T22934] loop1: detected capacity change from 0 to 512 [ 352.017418][T22934] EXT4-fs (loop1): 1 orphan inode deleted [ 352.028909][T22934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.041835][ T37] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 352.073174][ T37] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 352.083484][T22934] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.305167][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.564567][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6939'. [ 352.573544][T22964] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6939'. [ 352.890344][T23002] ref_ctr increment failed for inode: 0x528 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810cc6de80 [ 352.902285][T23001] uprobe: syz.1.6950:23001 failed to unregister, leaking uprobe [ 353.953285][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6959'. [ 353.973718][T23038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6959'. [ 354.062274][T23053] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6962'. [ 354.071356][T23053] netlink: 'syz.9.6962': attribute type 5 has an invalid length. [ 354.079164][T23053] netlink: 'syz.9.6962': attribute type 6 has an invalid length. [ 354.100791][T23056] loop1: detected capacity change from 0 to 128 [ 354.136593][T23056] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 354.153633][T23056] ext4 filesystem being mounted at /256/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.210732][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 354.210748][ T29] audit: type=1326 audit(2000000713.853:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23065 comm="syz.9.6969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 354.273713][ T29] audit: type=1326 audit(2000000713.853:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23065 comm="syz.9.6969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 354.297732][ T29] audit: type=1326 audit(2000000713.853:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23065 comm="syz.9.6969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 354.322298][ T29] audit: type=1326 audit(2000000713.853:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23065 comm="syz.9.6969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 354.346458][ T29] audit: type=1326 audit(2000000713.853:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23065 comm="syz.9.6969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 354.499825][ T29] audit: type=1326 audit(2000000714.143:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23065 comm="syz.9.6969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 354.524226][ T29] audit: type=1326 audit(2000000714.143:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23065 comm="syz.9.6969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08b50aeb9 code=0x7ffc0000 [ 354.563422][T23056] EXT4-fs (loop1): shut down requested (1) [ 354.715982][T19032] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.784691][T23087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.794491][T23087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.805440][T23086] 8021q: adding VLAN 0 to HW filter on device bond13 [ 354.818661][T23086] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 354.843995][T23086] bond13: entered allmulticast mode [ 354.867038][T23086] dummy0: entered allmulticast mode [ 355.201537][ T29] audit: type=1326 audit(2000000714.843:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23116 comm="syz.2.6988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x0 [ 355.637905][ T29] audit: type=1400 audit(2000000715.283:4744): avc: denied { bind } for pid=23120 comm="syz.1.6989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 355.725647][T23129] loop1: detected capacity change from 0 to 512 [ 355.774129][T23129] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 355.790892][T23129] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 355.841274][T23129] EXT4-fs (loop1): mount failed [ 356.636536][T23166] loop1: detected capacity change from 0 to 2048 [ 356.721645][T19086] GPT:first_usable_lbas don't match. [ 356.727063][T19086] GPT:34 != 290 [ 356.730556][T19086] GPT: Use GNU Parted to correct GPT errors. [ 356.736862][T19086] loop1: p1 p2 p3 [ 356.803524][T23166] GPT:first_usable_lbas don't match. [ 356.808951][T23166] GPT:34 != 290 [ 356.812449][T23166] GPT: Use GNU Parted to correct GPT errors. [ 356.818581][T23166] loop1: p1 p2 p3 [ 356.925500][T23180] __nla_validate_parse: 4 callbacks suppressed [ 356.925516][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7009'. [ 356.975725][T19081] udevd[19081]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 356.976087][T20675] udevd[20675]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 356.997661][T19086] udevd[19086]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 357.046526][T20675] udevd[20675]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 357.046836][T19081] udevd[19081]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 357.072809][T23187] bridge12: entered allmulticast mode [ 357.079932][T19086] udevd[19086]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 357.350310][T23199] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7018'. [ 357.444406][T23205] tipc: Enabling of bearer rejected, failed to enable media [ 357.709683][T23207] loop1: detected capacity change from 0 to 512 [ 357.798817][T23207] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7022: invalid indirect mapped block 256 (level 2) [ 357.854139][T23207] EXT4-fs (loop1): 2 truncates cleaned up [ 357.906841][T23207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.302778][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.449592][T23233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7031'. [ 358.739365][T23263] lo speed is unknown, defaulting to 1000 [ 358.783723][T23263] lo speed is unknown, defaulting to 1000 [ 358.794339][T23263] lo speed is unknown, defaulting to 1000 [ 358.831439][T23263] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 358.864809][T23263] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 358.915702][T23263] lo speed is unknown, defaulting to 1000 [ 358.939946][T23263] lo speed is unknown, defaulting to 1000 [ 358.972986][T23263] lo speed is unknown, defaulting to 1000 [ 359.002278][T23263] lo speed is unknown, defaulting to 1000 [ 359.036894][T23263] lo speed is unknown, defaulting to 1000 [ 359.064220][T23263] lo speed is unknown, defaulting to 1000 [ 359.089531][T23263] lo speed is unknown, defaulting to 1000 [ 359.177103][T23306] netlink: 'syz.9.7040': attribute type 27 has an invalid length. [ 359.221543][T23306] bond9: left promiscuous mode [ 359.228091][T23306] dummy0: left promiscuous mode [ 359.234586][T23306] bridge12: left allmulticast mode [ 359.342428][T23306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.362389][T23306] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.381924][T23306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 359.397845][ T5741] lo speed is unknown, defaulting to 1000 [ 359.404264][ T5741] syz2: Port: 1 Link ACTIVE [ 359.974599][T23388] uprobe: syz.1.7049:23388 failed to unregister, leaking uprobe [ 360.095044][T23417] netlink: 'syz.9.7053': attribute type 3 has an invalid length. [ 360.135440][T23417] netlink: 'syz.9.7053': attribute type 3 has an invalid length. [ 360.147626][T23427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=23427 comm=syz.9.7053 [ 360.329520][T23452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7064'. [ 360.582096][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 360.582115][ T29] audit: type=1400 audit(2000000720.223:4746): avc: denied { module_load } for pid=23448 comm="syz.7.7060" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=77122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 360.582673][T23467] Invalid ELF header magic: != ELF [ 361.198327][T23489] delete_channel: no stack [ 361.203180][ T29] audit: type=1400 audit(2000000720.843:4747): avc: denied { bind } for pid=23489 comm="syz.7.7079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 361.296904][T23495] lo speed is unknown, defaulting to 1000 [ 361.980739][T23535] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7095'. [ 362.264774][ T29] audit: type=1400 audit(2000000721.913:4748): avc: denied { read } for pid=23551 comm="syz.1.7102" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 362.452010][T23562] siw: device registration error -23 [ 362.495404][ T29] audit: type=1326 audit(2000000722.143:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.4.7105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 362.519208][ T29] audit: type=1326 audit(2000000722.143:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.4.7105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 362.543034][ T29] audit: type=1326 audit(2000000722.143:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.4.7105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 362.566777][ T29] audit: type=1326 audit(2000000722.143:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.4.7105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 362.590331][ T29] audit: type=1326 audit(2000000722.143:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.4.7105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 362.668495][ T29] audit: type=1326 audit(2000000722.223:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.4.7105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 362.692292][ T29] audit: type=1326 audit(2000000722.263:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.4.7105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 362.785207][T23583] netlink: 'syz.2.7109': attribute type 1 has an invalid length. [ 362.832711][T23583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 362.866255][T23587] bond4: (slave veth15): Enslaving as an active interface with a down link [ 362.904349][T23583] bond4: (slave dummy0): making interface the new active one [ 362.949285][T23583] dummy0: entered promiscuous mode [ 362.954876][T23583] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 362.987655][T23587] bond4 (unregistering): (slave veth15): Releasing active interface [ 363.007989][T23587] bond4 (unregistering): (slave dummy0): Releasing active interface [ 363.018921][T23587] bond4 (unregistering): Released all slaves [ 363.110196][T23608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7118'. [ 363.418566][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7125'. [ 363.427690][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7125'. [ 363.650254][T23640] openvswitch: netlink: Missing key (keys=40, expected=100) [ 363.991464][T23665] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=23665 comm=syz.9.7142 [ 364.310927][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7147'. [ 364.819547][T23727] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7158'. [ 365.020333][T23751] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.724641][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 365.724661][ T29] audit: type=1326 audit(2000000731.369:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.756372][ T29] audit: type=1326 audit(2000000731.369:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.792881][ T29] audit: type=1326 audit(2000000731.399:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.816881][ T29] audit: type=1326 audit(2000000731.409:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.840666][ T29] audit: type=1326 audit(2000000731.409:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.864749][ T29] audit: type=1326 audit(2000000731.409:4822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.888648][ T29] audit: type=1326 audit(2000000731.409:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.912376][ T29] audit: type=1326 audit(2000000731.409:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.936179][ T29] audit: type=1326 audit(2000000731.409:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 365.959958][ T29] audit: type=1326 audit(2000000731.409:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23788 comm="syz.2.7180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 366.070234][T23806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7186'. [ 366.076903][T23808] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7187'. [ 366.103722][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7186'. [ 366.110589][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7188'. [ 366.879578][T23856] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 367.090370][T23873] netlink: 'syz.2.7212': attribute type 13 has an invalid length. [ 367.144687][T23873] gretap0: left allmulticast mode [ 367.149886][T23873] gretap0: left promiscuous mode [ 367.206751][ T7613] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.357053][T23875] macvtap1: entered promiscuous mode [ 367.363918][T23875] team0: entered promiscuous mode [ 367.378728][T23875] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 367.410768][T23875] team0: Device macvtap1 is already an upper device of the team interface [ 367.454026][T23875] team0: left promiscuous mode [ 367.731906][ T7613] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.741201][ T7613] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.771852][ T7613] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 367.845102][T23897] netlink: 'syz.2.7223': attribute type 10 has an invalid length. [ 368.312704][T23925] __nla_validate_parse: 2 callbacks suppressed [ 368.312719][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7233'. [ 368.327908][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7233'. [ 368.474807][T23937] netlink: 'syz.1.7235': attribute type 1 has an invalid length. [ 368.632326][T23937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.647546][T23955] netlink: 'syz.2.7247': attribute type 1 has an invalid length. [ 368.688219][T23955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.708682][T23957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7247'. [ 368.717751][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7247'. [ 368.734662][T23957] macsec1: entered promiscuous mode [ 368.740113][T23957] bond4: entered promiscuous mode [ 368.745303][T23957] macsec1: entered allmulticast mode [ 368.750625][T23957] bond4: entered allmulticast mode [ 368.889009][T23959] macvtap1: entered promiscuous mode [ 368.895996][T23959] team0: entered promiscuous mode [ 368.914922][T23959] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 368.935202][T23959] team0: Device macvtap1 is already an upper device of the team interface [ 368.959251][T23959] team0: left promiscuous mode [ 369.248755][T23992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7261'. [ 369.257987][T23992] netlink: 'syz.9.7261': attribute type 12 has an invalid length. [ 369.294260][T23992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7261'. [ 369.303500][T23992] netlink: 'syz.9.7261': attribute type 12 has an invalid length. [ 369.312169][T23997] netlink: 'syz.1.7263': attribute type 4 has an invalid length. [ 369.322330][T23997] netlink: 'syz.1.7263': attribute type 4 has an invalid length. [ 369.421188][T24005] netlink: 'syz.9.7267': attribute type 2 has an invalid length. [ 369.762116][T24033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7276'. [ 369.771097][T24033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7276'. [ 369.843656][T24039] netlink: 'syz.1.7279': attribute type 2 has an invalid length. [ 369.851493][T24039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7279'. [ 370.150891][T24066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7289'. [ 370.441509][T24079] loop1: detected capacity change from 0 to 4096 [ 370.496104][T24079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.602344][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.034431][T24114] ref_ctr_offset mismatch. inode: 0x17eb offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 371.202153][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 371.202171][ T29] audit: type=1326 audit(2000000736.839:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24118 comm="syz.4.7311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fddb1dd4cd7 code=0x0 [ 373.150337][ T29] audit: type=1326 audit(2000000738.789:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 373.174121][ T29] audit: type=1326 audit(2000000738.789:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 373.198016][ T29] audit: type=1326 audit(2000000738.789:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 373.240760][ T29] audit: type=1326 audit(2000000738.839:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 373.264660][ T29] audit: type=1326 audit(2000000738.859:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 373.288462][ T29] audit: type=1326 audit(2000000738.859:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fddb1ddac22 code=0x7ffc0000 [ 373.312192][ T29] audit: type=1326 audit(2000000738.859:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fddb1ddacb7 code=0x7ffc0000 [ 373.335949][ T29] audit: type=1326 audit(2000000738.859:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fddb1d97c51 code=0x7ffc0000 [ 373.360020][ T29] audit: type=1326 audit(2000000738.859:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24180 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fddb1ddbcc9 code=0x7ffc0000 [ 373.397307][T24195] __nla_validate_parse: 5 callbacks suppressed [ 373.397327][T24195] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.7337'. [ 373.621159][T24211] bond10: entered promiscuous mode [ 373.646732][T24211] 8021q: adding VLAN 0 to HW filter on device bond10 [ 373.696169][T24211] bridge14: entered promiscuous mode [ 374.419991][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7370'. [ 374.431303][T24272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7370'. [ 374.441274][T24273] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7369'. [ 374.602769][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7373'. [ 374.843973][T24298] ref_ctr increment failed for inode: 0x17b8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810cc6d7c0 [ 376.426041][T24374] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7407'. [ 376.470759][T24374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24374 comm=syz.9.7407 [ 376.896368][T24385] validate_nla: 1 callbacks suppressed [ 376.896390][T24385] netlink: 'syz.7.7411': attribute type 1 has an invalid length. [ 376.935698][T24380] loop1: detected capacity change from 0 to 512 [ 377.020862][T24385] bond8: (slave bridge10): Enslaving as a backup interface with an up link [ 377.050971][T24380] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 377.072887][T24380] EXT4-fs (loop1): orphan cleanup on readonly fs [ 377.106424][T24380] EXT4-fs (loop1): 1 orphan inode deleted [ 377.125474][ T7587] __quota_error: 82 callbacks suppressed [ 377.125492][ T7587] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 377.141087][ T7587] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 377.210091][T24380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 377.295697][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.523730][ T29] audit: type=1400 audit(2000000743.169:4991): avc: denied { mounton } for pid=24409 comm="syz.9.7420" path="/" dev="hugetlbfs" ino=81943 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 377.616303][T24419] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7423'. [ 377.928585][T24449] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7433'. [ 377.951077][T24449] chnl_net:caif_netlink_parms(): no params data found [ 378.165418][ T29] audit: type=1326 audit(2000000743.809:4992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24462 comm="syz.4.7437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fddb1ddaeb9 code=0x0 [ 378.410856][T24485] 8021q: VLANs not supported on ip6gre0 [ 378.480944][T24497] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7450'. [ 378.808169][ T29] audit: type=1326 audit(2000000744.449:4993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.7464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 378.886043][ T29] audit: type=1326 audit(2000000744.449:4994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.7464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 378.909835][ T29] audit: type=1326 audit(2000000744.449:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.7464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 378.933446][ T29] audit: type=1326 audit(2000000744.469:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.7464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 378.957128][ T29] audit: type=1326 audit(2000000744.469:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.7464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 378.980828][ T29] audit: type=1326 audit(2000000744.519:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.7464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 379.004511][ T29] audit: type=1326 audit(2000000744.519:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24527 comm="syz.1.7464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 379.078410][T24552] loop1: detected capacity change from 0 to 512 [ 379.087503][T24552] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 379.101390][T24552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7472'. [ 379.243376][T24563] RDS: rds_bind could not find a transport for ::ffff:172.20.20.26, load rds_tcp or rds_rdma? [ 379.289707][T24569] geneve5: entered promiscuous mode [ 379.296136][T10620] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 57010 - 0 [ 379.346097][T10620] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 57010 - 0 [ 379.354883][T10620] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 57010 - 0 [ 379.364031][T10620] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 57010 - 0 [ 379.489326][T24578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7484'. [ 379.637660][T24594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7489'. [ 379.646744][T24594] netlink: 'syz.2.7489': attribute type 7 has an invalid length. [ 379.654547][T24594] netlink: 'syz.2.7489': attribute type 8 has an invalid length. [ 379.656314][T24596] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7490'. [ 379.662289][T24594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7489'. [ 379.729011][T24601] tipc: Started in network mode [ 379.734041][T24601] tipc: Node identity 4246, cluster identity 4711 [ 379.740519][T24601] tipc: Node number set to 16966 [ 379.801687][T24605] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7493'. [ 379.879622][T24614] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7498'. [ 379.997837][T24620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7500'. [ 380.010858][T24618] netlink: 'syz.9.7501': attribute type 39 has an invalid length. [ 380.021189][T24620] chnl_net:caif_netlink_parms(): no params data found [ 380.521096][T24640] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7510'. [ 380.888553][T24666] xt_hashlimit: size too large, truncated to 1048576 [ 383.074891][T24729] loop1: detected capacity change from 0 to 1024 [ 383.115626][T24729] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 383.135024][T24729] System zones: 0-1, 3-8 [ 383.145583][T24729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 383.158133][T24729] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.237636][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 383.403270][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 383.403290][ T29] audit: type=1326 audit(2000000749.039:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 383.433219][ T29] audit: type=1326 audit(2000000749.039:5040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 383.467147][ T29] audit: type=1326 audit(2000000749.079:5041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 383.491645][ T29] audit: type=1326 audit(2000000749.139:5042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f921711ac22 code=0x7ffc0000 [ 383.590490][ T29] audit: type=1326 audit(2000000749.139:5043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f921711ac22 code=0x7ffc0000 [ 383.614060][ T29] audit: type=1326 audit(2000000749.139:5044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 383.637903][ T29] audit: type=1326 audit(2000000749.139:5045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 383.663231][ T29] audit: type=1326 audit(2000000749.289:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24753 comm="syz.1.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 383.835496][T24775] __nla_validate_parse: 3 callbacks suppressed [ 383.835515][T24775] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7549'. [ 383.850831][T24775] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 384.358395][ T29] audit: type=1326 audit(2000000749.999:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24789 comm="syz.1.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 384.382067][ T29] audit: type=1326 audit(2000000749.999:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24789 comm="syz.1.7556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 384.420842][T24796] SET target dimension over the limit! [ 384.677428][T24810] netlink: 'syz.1.7564': attribute type 1 has an invalid length. [ 384.685304][T24810] netlink: 'syz.1.7564': attribute type 4 has an invalid length. [ 384.693594][T24810] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7564'. [ 386.278193][T24868] tipc: Failed to remove unknown binding: 66,0,0/670261931:3606157361/3606157362 [ 386.296677][T24868] tipc: Failed to remove unknown binding: 66,0,0/670261931:3606157361/3606157362 [ 386.666239][T24883] bond4: left allmulticast mode [ 386.671232][T24883] bond4: left promiscuous mode [ 386.787481][T24894] netlink: 'syz.2.7595': attribute type 4 has an invalid length. [ 386.905391][T24901] netlink: 'syz.1.7598': attribute type 12 has an invalid length. [ 386.913545][T24901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7598'. [ 386.966187][T24904] loop1: detected capacity change from 0 to 512 [ 386.994123][T24904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 387.007994][T24904] EXT4-fs (loop1): 1 truncate cleaned up [ 387.024780][T24904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.183979][T24904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7599'. [ 387.193143][T24904] C: renamed from team_slave_0 [ 387.200068][T24904] netlink: 'syz.1.7599': attribute type 3 has an invalid length. [ 387.207958][T24904] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7599'. [ 387.217113][T24904] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 387.411877][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.451368][T24922] tipc: Started in network mode [ 387.456375][T24922] tipc: Node identity ac14140f, cluster identity 4711 [ 387.472441][T24922] tipc: New replicast peer: 255.255.255.255 [ 387.478719][T24922] tipc: Enabled bearer , priority 10 [ 388.110303][T24955] lo speed is unknown, defaulting to 1000 [ 388.120225][T24955] lo speed is unknown, defaulting to 1000 [ 388.127759][T24955] lo speed is unknown, defaulting to 1000 [ 388.144132][T24955] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 388.169220][T24955] lo speed is unknown, defaulting to 1000 [ 388.180856][T24955] lo speed is unknown, defaulting to 1000 [ 388.187702][T24955] lo speed is unknown, defaulting to 1000 [ 388.195296][T24955] lo speed is unknown, defaulting to 1000 [ 388.203386][T24955] lo speed is unknown, defaulting to 1000 [ 388.210499][T24955] lo speed is unknown, defaulting to 1000 [ 388.217375][T24955] lo speed is unknown, defaulting to 1000 [ 388.266499][T24966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7623'. [ 388.296270][T24966] syzkaller0: entered promiscuous mode [ 388.301860][T24966] syzkaller0: entered allmulticast mode [ 388.615439][ T3374] tipc: Node number set to 2886997007 [ 388.636213][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 388.636228][ T29] audit: type=1326 audit(2000000754.279:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 388.665984][ T29] audit: type=1326 audit(2000000754.279:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 388.690214][ T29] audit: type=1326 audit(2000000754.279:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 388.692329][T24983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7630'. [ 388.863119][ T29] audit: type=1326 audit(2000000754.279:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 388.886935][ T29] audit: type=1326 audit(2000000754.329:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 388.910517][ T29] audit: type=1326 audit(2000000754.329:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f37e4ffac22 code=0x7ffc0000 [ 388.934055][ T29] audit: type=1326 audit(2000000754.329:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f37e4ffacb7 code=0x7ffc0000 [ 388.957634][ T29] audit: type=1326 audit(2000000754.329:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f37e4fb7c51 code=0x7ffc0000 [ 388.981259][ T29] audit: type=1326 audit(2000000754.329:5077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f37e4ffbcc9 code=0x7ffc0000 [ 389.004968][ T29] audit: type=1326 audit(2000000754.329:5078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24981 comm="syz.2.7630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f37e4fb7cbb code=0x7ffc0000 [ 389.473972][T25006] netlink: 'syz.2.7640': attribute type 1 has an invalid length. [ 389.558176][T25006] bond5: (slave veth19): Enslaving as an active interface with a down link [ 389.585957][T25014] bond5: entered promiscuous mode [ 389.591122][T25014] bond5: entered allmulticast mode [ 389.615223][T25014] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.725351][T25026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7645'. [ 389.753097][T25028] netlink: 'syz.9.7646': attribute type 4 has an invalid length. [ 389.802727][T25031] netlink: 'syz.9.7646': attribute type 4 has an invalid length. [ 390.324759][T25055] netlink: 'syz.9.7655': attribute type 12 has an invalid length. [ 390.820047][T25066] netlink: 'syz.4.7659': attribute type 2 has an invalid length. [ 390.827982][T25066] netlink: 199792 bytes leftover after parsing attributes in process `syz.4.7659'. [ 390.907114][T25073] bond14: entered allmulticast mode [ 390.918670][T25073] bridge15: entered promiscuous mode [ 390.924185][T25073] bridge15: entered allmulticast mode [ 390.934812][T25073] bond14: (slave bridge15): Enslaving as an active interface with an up link [ 391.096637][T25081] tipc: Failed to remove unknown binding: 66,0,0/0:2832225857/2832225858 [ 391.123441][T25081] tipc: Failed to remove unknown binding: 66,0,0/0:2832225857/2832225858 [ 391.186321][T25084] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 391.810338][T25112] tipc: Enabling of bearer rejected, failed to enable media [ 392.408703][T25143] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 57010 - 0 [ 392.461537][T25142] netlink: 'syz.1.7688': attribute type 11 has an invalid length. [ 392.514517][T25143] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 57010 - 0 [ 392.623800][T25143] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 57010 - 0 [ 392.685191][T25143] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 57010 - 0 [ 392.739943][ T7613] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 57010 - 0 [ 392.759061][ T7613] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 57010 - 0 [ 392.787596][ T7613] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 57010 - 0 [ 392.808938][ T7613] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 57010 - 0 [ 392.875439][T25157] netlink: 'syz.4.7694': attribute type 13 has an invalid length. [ 393.050569][ T7613] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 57010 - 0 [ 393.065623][ T7613] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 57010 - 0 [ 393.089184][ T7613] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 57010 - 0 [ 393.106848][ T7613] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 57010 - 0 [ 393.113274][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7697'. [ 393.124239][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7697'. [ 393.208265][T25169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7700'. [ 393.394464][T25187] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 393.608782][T25208] netlink: 'syz.4.7717': attribute type 83 has an invalid length. [ 393.719827][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 393.719846][ T29] audit: type=1326 audit(2000000759.359:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25213 comm="syz.4.7718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x0 [ 393.870099][T25226] loop1: detected capacity change from 0 to 1024 [ 393.887210][T25226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.378424][ T29] audit: type=1400 audit(2000000760.019:5150): avc: denied { listen } for pid=25231 comm="syz.2.7723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 394.427337][ T29] audit: type=1326 audit(2000000760.069:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.456904][ T29] audit: type=1326 audit(2000000760.069:5152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.481088][ T29] audit: type=1326 audit(2000000760.069:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.504825][ T29] audit: type=1326 audit(2000000760.069:5154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.528349][ T29] audit: type=1326 audit(2000000760.069:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.552186][ T29] audit: type=1326 audit(2000000760.069:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.575721][ T29] audit: type=1326 audit(2000000760.069:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.599474][ T29] audit: type=1326 audit(2000000760.069:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25235 comm="syz.2.7725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e4ffaeb9 code=0x7ffc0000 [ 394.792603][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.883457][T25267] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7737'. [ 394.975281][T25275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7741'. [ 395.169321][T25303] loop1: detected capacity change from 0 to 2048 [ 395.236783][T25305] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 395.248164][T25303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.281179][T25313] netlink: 'syz.7.7753': attribute type 1 has an invalid length. [ 395.296024][T25313] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.309442][T25313] vlan3: entered promiscuous mode [ 395.314634][T25313] bond9: entered promiscuous mode [ 395.327940][T25313] bond9: (slave geneve4): making interface the new active one [ 395.335725][T25313] geneve4: entered promiscuous mode [ 395.353936][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.363982][T25313] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 395.373910][ T7587] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.384912][ T7587] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.393247][ T7587] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.401467][ T7587] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.177893][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7767'. [ 396.186845][T25349] loop1: detected capacity change from 0 to 1024 [ 396.187042][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7767'. [ 396.194032][T25342] lo speed is unknown, defaulting to 1000 [ 396.223161][T25349] EXT4-fs: Ignoring removed nobh option [ 396.237680][T25349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.277802][T25349] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.7768: Allocating blocks 385-513 which overlap fs metadata [ 396.332328][T25347] EXT4-fs (loop1): pa ffff8881004a88c0: logic 16, phys. 129, len 24 [ 396.340466][T25347] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 396.352077][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.389711][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7774'. [ 396.535423][T25378] dummy0: Caught tx_queue_len zero misconfig [ 396.560214][T25378] netlink: 'syz.9.7777': attribute type 1 has an invalid length. [ 396.689716][T25389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7782'. [ 397.402028][T25440] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7802'. [ 397.934627][T25493] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7821'. [ 397.974538][T25493] bond11: (slave bridge16): Enslaving as an active interface with an up link [ 397.985576][T25493] bond11: entered promiscuous mode [ 397.990758][T25493] bridge16: entered promiscuous mode [ 397.996417][T25493] bond11: entered allmulticast mode [ 398.001651][T25493] bridge16: entered allmulticast mode [ 398.008704][T25493] 8021q: adding VLAN 0 to HW filter on device bond11 [ 399.214721][T25579] netlink: 'syz.7.7850': attribute type 1 has an invalid length. [ 399.445631][T25614] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7862'. [ 399.454701][T25614] openvswitch: netlink: Message has 8 unknown bytes. [ 399.845751][T25628] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7868'. [ 399.962507][T25636] loop1: detected capacity change from 0 to 512 [ 399.969682][T25636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 399.984419][T25636] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.7872: bad orphan inode 131083 [ 399.996087][T25636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.020335][T19032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.644839][T25669] tipc: Failed to remove unknown binding: 66,0,0/16966:673868984/673868985 [ 400.800213][T25674] lo speed is unknown, defaulting to 1000 [ 402.475620][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 402.475639][ T29] audit: type=1326 audit(2000000768.119:5211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.570178][ T29] audit: type=1326 audit(2000000768.159:5212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.593770][ T29] audit: type=1326 audit(2000000768.159:5213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fddb1d9b78e code=0x7ffc0000 [ 402.617322][ T29] audit: type=1326 audit(2000000768.159:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.641500][ T29] audit: type=1326 audit(2000000768.159:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.665339][ T29] audit: type=1326 audit(2000000768.159:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.688937][ T29] audit: type=1326 audit(2000000768.159:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.712547][ T29] audit: type=1326 audit(2000000768.159:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.736084][ T29] audit: type=1326 audit(2000000768.199:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.759946][ T29] audit: type=1326 audit(2000000768.199:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25754 comm="syz.4.7913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb1ddaeb9 code=0x7ffc0000 [ 402.916008][T25778] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 402.948988][T25778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7918'. [ 403.926953][T25854] loop1: detected capacity change from 0 to 256 [ 404.056116][T25854] FAT-fs (loop1): Directory bread(block 64) failed [ 404.066708][T25854] FAT-fs (loop1): Directory bread(block 65) failed [ 404.074316][T25854] FAT-fs (loop1): Directory bread(block 66) failed [ 404.081141][T25854] FAT-fs (loop1): Directory bread(block 67) failed [ 404.092848][T25854] FAT-fs (loop1): Directory bread(block 68) failed [ 404.104827][T25854] FAT-fs (loop1): Directory bread(block 69) failed [ 404.111656][T25854] FAT-fs (loop1): Directory bread(block 70) failed [ 404.118569][T25854] FAT-fs (loop1): Directory bread(block 71) failed [ 404.125433][T25854] FAT-fs (loop1): Directory bread(block 72) failed [ 404.132334][T25854] FAT-fs (loop1): Directory bread(block 73) failed [ 404.161436][T25854] lo speed is unknown, defaulting to 1000 [ 404.260017][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7949'. [ 404.369467][T25880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7953'. [ 404.394407][T25882] netlink: 108 bytes leftover after parsing attributes in process `syz.7.7954'. [ 404.767672][T25915] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7966'. [ 404.780046][T25915] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7966'. [ 405.096740][T25934] lo speed is unknown, defaulting to 1000 [ 406.375841][ T3374] IPVS: starting estimator thread 0... [ 406.463096][T25984] IPVS: using max 2496 ests per chain, 124800 per kthread [ 406.568446][T26009] tipc: Enabling of bearer rejected, failed to enable media [ 406.750368][T26030] syz_tun: entered allmulticast mode [ 406.821047][T26034] bond3: option mode: unable to set because the bond device has slaves [ 406.891463][T26038] lo speed is unknown, defaulting to 1000 [ 407.199777][T26073] ref_ctr_offset mismatch. inode: 0x1b20 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 407.324486][T26080] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 407.335504][T26080] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8022'. [ 407.562910][T26085] bridge0: port 2(dummy0) entered disabled state [ 407.573785][T26085] batman_adv: batadv0: Adding interface: dummy0 [ 407.580067][T26085] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.606329][T26085] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 407.979821][T26091] tipc: Enabled bearer , priority 0 [ 407.992238][T26091] tipc: Resetting bearer [ 408.020071][T26091] tipc: Disabling bearer [ 408.180715][T26095] Invalid option length (64821) for dns_resolver key [ 408.362715][T26106] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8031'. [ 408.418782][T26106] 8021q: adding VLAN 0 to HW filter on device bond12 [ 408.598346][T26106] bond12: (slave ip6tnl4): refused to change device type [ 408.872728][T26125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8037'. [ 409.065916][ T5741] IPVS: starting estimator thread 0... [ 409.156934][T26146] 8021q: VLANs not supported on ip6gre0 [ 409.176672][T26142] IPVS: using max 2112 ests per chain, 105600 per kthread [ 409.231269][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 409.231286][ T29] audit: type=1326 audit(2000000774.869:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.329719][ T29] audit: type=1326 audit(2000000774.909:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.353957][ T29] audit: type=1326 audit(2000000774.909:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.377575][ T29] audit: type=1326 audit(2000000774.909:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.401787][ T29] audit: type=1326 audit(2000000774.909:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.426576][ T29] audit: type=1326 audit(2000000774.909:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.450179][ T29] audit: type=1326 audit(2000000774.909:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.474512][ T29] audit: type=1326 audit(2000000774.909:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.498212][ T29] audit: type=1326 audit(2000000774.909:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.522652][ T29] audit: type=1326 audit(2000000774.909:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26157 comm="syz.1.8052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921711aeb9 code=0x7ffc0000 [ 409.572201][T26171] tipc: Enabling of bearer rejected, failed to enable media [ 410.028504][T26193] netlink: 75 bytes leftover after parsing attributes in process `syz.7.8062'. [ 410.108698][T26197] ================================================================== [ 410.116833][T26197] BUG: KCSAN: data-race in __d_drop / fast_dput [ 410.123104][T26197] [ 410.125439][T26197] write to 0xffff88814910c550 of 8 bytes by task 26199 on cpu 1: [ 410.133177][T26197] __d_drop+0x14d/0x240 [ 410.137359][T26197] __dentry_kill+0x122/0x460 [ 410.141984][T26197] finish_dput+0x2b/0x200 [ 410.146434][T26197] dput+0x52/0x60 [ 410.150096][T26197] step_into_slowpath+0x38c/0x4c0 [ 410.155143][T26197] path_lookupat+0x330/0x500 [ 410.159760][T26197] filename_lookup+0x190/0x390 [ 410.164546][T26197] filename_setxattr+0x56/0x420 [ 410.169418][T26197] io_setxattr+0x4e/0xe0 [ 410.173688][T26197] __io_issue_sqe+0xfd/0x2d0 [ 410.178299][T26197] io_issue_sqe+0x20b/0xc20 [ 410.183269][T26197] io_wq_submit_work+0x574/0x770 [ 410.188238][T26197] io_worker_handle_work+0x41e/0x950 [ 410.193547][T26197] io_wq_worker+0x233/0x910 [ 410.198065][T26197] ret_from_fork+0x148/0x280 [ 410.202924][T26197] ret_from_fork_asm+0x1a/0x30 [ 410.207784][T26197] [ 410.210110][T26197] read to 0xffff88814910c550 of 8 bytes by task 26197 on cpu 0: [ 410.217853][T26197] fast_dput+0x5f/0x2c0 [ 410.222017][T26197] dput+0x24/0x60 [ 410.225659][T26197] step_into_slowpath+0x38c/0x4c0 [ 410.230701][T26197] path_lookupat+0x330/0x500 [ 410.235302][T26197] filename_lookup+0x190/0x390 [ 410.240079][T26197] filename_setxattr+0x56/0x420 [ 410.244939][T26197] io_setxattr+0x4e/0xe0 [ 410.249200][T26197] __io_issue_sqe+0xfd/0x2d0 [ 410.253804][T26197] io_issue_sqe+0x20b/0xc20 [ 410.258317][T26197] io_wq_submit_work+0x574/0x770 [ 410.263275][T26197] io_worker_handle_work+0x41e/0x950 [ 410.268584][T26197] io_wq_worker+0x233/0x910 [ 410.273186][T26197] ret_from_fork+0x148/0x280 [ 410.277784][T26197] ret_from_fork_asm+0x1a/0x30 [ 410.282562][T26197] [ 410.284969][T26197] value changed: 0xffff888237535218 -> 0x0000000000000000 [ 410.292162][T26197] [ 410.294485][T26197] Reported by Kernel Concurrency Sanitizer on: [ 410.300645][T26197] CPU: 0 UID: 0 PID: 26197 Comm: iou-wrk-26196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 410.310729][T26197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 410.320821][T26197] ==================================================================