last executing test programs: 3m38.32131673s ago: executing program 1 (id=66): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bind$inet(r2, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 3m37.383088855s ago: executing program 1 (id=82): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80000000000f36, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 3m35.492979485s ago: executing program 1 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10000, 0x7, 0x7f, 0x9, 0x6, 0x401}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 3m35.327240215s ago: executing program 1 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 3m35.24172616s ago: executing program 1 (id=105): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10010, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3m35.002260444s ago: executing program 1 (id=108): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x4}, 0x8) 3m34.986454575s ago: executing program 32 (id=108): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x4}, 0x8) 2m59.419531401s ago: executing program 0 (id=684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {}, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) 2m59.364611864s ago: executing program 0 (id=685): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000040)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x43, r1}) r3 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 2m59.333870326s ago: executing program 0 (id=688): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141042, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x10044, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) shutdown(r0, 0x0) 2m59.172395025s ago: executing program 0 (id=694): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x401, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r0, 0x0, 0xffdd) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 2m58.990954316s ago: executing program 0 (id=696): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x3, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) ppoll(&(0x7f0000000180)=[{r2, 0x2040}], 0x1, 0x0, 0x0, 0x0) 2m58.550567431s ago: executing program 0 (id=702): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x8, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r1, &(0x7f0000000000)=""/57, 0x39) 2m58.528583262s ago: executing program 33 (id=702): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x8, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r1, &(0x7f0000000000)=""/57, 0x39) 3.883336743s ago: executing program 5 (id=3051): capset(&(0x7f0000000100)={0x20071026}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1, 0x10}, 0xc) 3.798100858s ago: executing program 5 (id=3053): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x844c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x15, 0x4, 0xff, 0x1, 0x2, 0xb1d}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 3.352882845s ago: executing program 3 (id=3071): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0x43, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) 3.277166528s ago: executing program 3 (id=3063): capset(&(0x7f0000000100)={0x20071026}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1, 0x10}, 0xc) 3.267359159s ago: executing program 4 (id=3064): r0 = semget$private(0x0, 0x4, 0x208) semctl$SEM_STAT_ANY(r0, 0x5, 0x14, &(0x7f00000002c0)=""/219) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pipe2$9p(0x0, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa00000) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 3.239914561s ago: executing program 3 (id=3065): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xd, {0x0, 0x7f}, 0x1, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516337ce06bbace8017cbec4c2ee5a7cef4090000001fb79119d0d68898b8a722a2643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x60044084) 3.183255134s ago: executing program 3 (id=3067): socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x0, @fd, 0x11e, 0x5, 0x0, 0x5, 0x0, {0x3}}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x2, 0x4, r3, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.159401185s ago: executing program 3 (id=3068): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, 0x0, 0x4000050) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed721167228", 0xd) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 3.132307887s ago: executing program 2 (id=3069): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x10b, &(0x7f0000000280)=""/267, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r3, 0x4040099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.049818612s ago: executing program 2 (id=3070): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000a00)={0x7, 'syz_tun\x00', {0xffffffff}, 0x2}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={0x18, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@stripe={'stripe', 0x3d, 0x20ae}}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x91d, '\x00', r4, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) 2.951973298s ago: executing program 2 (id=3072): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb080001400000000314000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x5, 0xd, {{0x5, 0x4, 0x3, 0x1d, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @empty}}}}) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.894097961s ago: executing program 5 (id=3073): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) ftruncate(r2, 0x7f) sendmsg$nl_route(r0, 0x0, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) 2.765844389s ago: executing program 6 (id=3075): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x40004) sendmsg$nl_route_sched(r1, 0x0, 0x4000080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@local, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) semget(0x2, 0x1, 0x4a1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 2.710231952s ago: executing program 6 (id=3076): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 2.709618342s ago: executing program 2 (id=3077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r4, &(0x7f0000000340)="4dbbfe960dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) 2.646124046s ago: executing program 6 (id=3078): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0x0, 0x1}, {0xe}, 0x2, 0xbf000007, 0x2e}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) 2.536306212s ago: executing program 5 (id=3079): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) getpriority(0x2, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000140)="26eba9fdb4cbab48929e1af151000000000000000000000000000100", 0x1c}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") 1.973539515s ago: executing program 4 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2510"], 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.498114862s ago: executing program 2 (id=3081): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000143, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.155276752s ago: executing program 6 (id=3082): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) shutdown(r2, 0x1) socket(0x200000000000011, 0x2, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40000142, 0x0) fchown(r1, 0x0, 0x0) fchmod(r1, 0x50) 1.036451239s ago: executing program 4 (id=3083): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x68ac, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") ptrace(0x10, r0) 1.0349962s ago: executing program 5 (id=3093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db46}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x264, 0x7}, 0x3, 0x8, 0xf09}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0x6, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x403, 0x255, 0x6, 0x9, 0xd81, 0x8, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x4080, 0x90000010, 0x3800000, 0x0, 0xfffff309, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x3, 0x6, 0x9, 0x0, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x4000000, 0x5, 0xd5, 0x4, 0x6, 0x8, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x40, 0x80, 0xffbf7ffc, 0x0, 0x8, 0x7, 0x1, 0x2, 0x8008, 0xffffffff, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x81, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x6, 0x7fffffff, 0xfffffff7, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0xfffffff5, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x0, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0x3, 0x0, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x6, 0x1, 0x3, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x8001, 0x9, 0x401, 0x2, 0x8cc5, 0x8, 0x157, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x20000005, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x74, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x20000040) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = io_uring_setup(0x14cf, &(0x7f0000000080)={0x0, 0x2118}) io_uring_register$IORING_REGISTER_FILES2(r4, 0xf, &(0x7f0000000040)={0x46, 0x1, 0x0, 0x0, 0x0}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000e4000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000b80003800800014000000000a400038078000100776c616e3000000000000000000000001400010076657468305f746f5f62617461647600140001006d6163766c616e310000000000000000140001007665746831000000000000000000000014000100677265300000000000000000000000001400010069703665727370616e300000000000001400010076657468315f"], 0x340}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x6796, &(0x7f0000000180)={0x0, 0xfffffffb, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r5, @ANYRESDEC, @ANYRES32=r4, @ANYRES16=r7], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1.02710364s ago: executing program 3 (id=3084): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x844c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x8, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000540)={0x15, 0x4, 0xff, 0x1, 0x2, 0xb1d}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 538.252249ms ago: executing program 5 (id=3085): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x101, 0x0) close(r2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100010000f334, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0xf2, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x8, 0x9e, &(0x7f0000000180)=""/158, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) 462.364973ms ago: executing program 4 (id=3086): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0x43, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) 388.616907ms ago: executing program 4 (id=3087): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xd, {0x0, 0x7f}, 0x1, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516337ce06bbace8017cbec4c2ee5a7cef4090000001fb79119d0d68898b8a722a2643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x60044084) 217.989027ms ago: executing program 6 (id=3088): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x18400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1040022, &(0x7f00000003c0)={[{}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000031401002cbd7000f9dbdf250900020073797a31000000000800410072786500140033006c6f00000000000000000000000000000900020001000000000000000800410072786500140033006970766c616e3000"], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x810) 211.292377ms ago: executing program 4 (id=3089): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xf1}}]}}}]}, 0x78}}, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x42, 0x0) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb3", 0x11) socket$rxrpc(0x21, 0x2, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 174.79609ms ago: executing program 6 (id=3090): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xd, {0x0, 0x7f}, 0x1, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516337ce06bbace8017cbec4c2ee5a7cef4090000001fb79119d0d68898b8a722a2643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x60044084) 0s ago: executing program 2 (id=3091): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x284041a, &(0x7f0000000680), 0x1, 0x44e, &(0x7f0000000900)="$eJzs3M1vG0UbAPDHdpw0bfMmbykfDS0ECiLiI2nSD3rgUgQSB5CQ4FDEKSRpFeo2qAkSrSIIHMIRVeKOOCLxF3ChXBBwQuIKd4QUoVwonIzW3k3dxE7ixIlL/ftJm8x4xpp5dnfs8azXAXSsoeRPLuJgRPwaEf3V7J0Vhqr/bq0sTP69sjCZi3L5jT9zlXp/rSxMZlWz5x2oZsrlDdpdejtiolSavprmR+cvvzc6d+36czOXJy5OX5y+Mn727KmTx7rPjJ9uSZx9SV8HP5w9euSVt268Nnn+xjs/fp3092BaXhtHqwxV925dT7a6sTbrq0nnutrYEZpSiIjkcBUr478/CtG7WtYfL3/S1s4Bu6pczpd7GhcvloF7WDJRBzpR9kaffP7Ntj2aetwVls/F6jrGrXSrlnRFPq1TTD8j7YahiDi/+M8XyRa7tA4BAFDr5rmIeLbe/C8fD9TU+196bWggIv4fEYci4r6IOBwR90dU6j4YEQ812f7aKyTr5z/l/m0FtkXJ/O+F9NrWnfO/bPYXA4U011eJv5i7MFOaPpHuk+Eo9iT5sQ3a+O6lXz5rVFY7/0u2pP1sLpj244+uNQt0UxPzEzuJudbyxxGDXfXiz63OeZP58ZGIGNxmGzNPf3W0Udnm8W+gBZPy8pcRT1WP/2KsiT+Ta3h9cuz5M+OnR/dFafrEaHZWrPfTz0uvN2p/R/G3wPLNcuyve/6vxj+Q2xcxd+36pcr12rnm21j67dOGn2m2e/53596spLvTxz6YmJ+/OhbRnXt1/ePjt5+b5bP6yfk/fLz++D8Ut/fEwxGRnMTHIuKRiHg07ftjEfF4RBzfIP4fXnzi3ebj32BVvoWS+Kc2O/5Re/ybTxQuff9N8/FnkuN/qpIaTh/ZyuvfVju4k30HAAAA/xX5ynfgc/mR1XQ+PzJS/Q7/4difL83OzT9zYfb9K1PV78oPRDGfrXT116yHjqVrw1l+fE3+ZLpu/Hmht5IfmZwtTbU7eOhwBxqM/8TvhXb3Dth17teCzmX8Q+cy/qFzGf/QuYx/6Fz1xv9HbegHsPc2ef/v3at+AHvP/B86l/EPncv4h47U8N74/I5u+ZdoU+Lb7p39VsPWE5G/S0K+ZxLFqFvUteUfs9hmoqduUbtfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//j57jFA==") r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000340), 0x1, 0x7c3, &(0x7f0000001680)="$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") r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.379269][ T9047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.629974][ T9068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.674794][ T9068] vlan1: entered allmulticast mode [ 154.680412][ T9068] bond3: entered allmulticast mode [ 154.723949][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 154.810886][ T9075] lo speed is unknown, defaulting to 1000 [ 154.822797][ T9079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1898'. [ 154.900814][ T9086] netlink: 'syz.4.1900': attribute type 1 has an invalid length. [ 155.005976][ T9086] 8021q: adding VLAN 0 to HW filter on device bond8 [ 155.038457][ T9086] bond7: (slave bond8): making interface the new active one [ 155.047047][ T9086] bond7: (slave bond8): Enslaving as an active interface with an up link [ 155.218822][ T9100] netlink: 'syz.3.1904': attribute type 1 has an invalid length. [ 155.226762][ T9100] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1904'. [ 155.247782][ T9098] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 155.260228][ T9098] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 155.370811][ T9104] loop3: detected capacity change from 0 to 2048 [ 155.560855][ T9104] loop3: p1 < > p4 [ 155.566778][ T9104] loop3: p4 size 8388608 extends beyond EOD, truncated [ 155.979085][ T9121] syz.6.1912 (9121): attempted to duplicate a private mapping with mremap. This is not supported. [ 157.461271][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1922'. [ 157.516704][ T9152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9152 comm=syz.5.1922 [ 158.287727][ T9156] veth1_to_bond: entered allmulticast mode [ 158.312282][ T9156] veth1_to_bond: left allmulticast mode [ 158.414260][ T9175] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 158.523327][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1938'. [ 158.542422][ T9189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.577682][ T9189] macvlan0: entered promiscuous mode [ 158.583117][ T9189] macvlan0: entered allmulticast mode [ 159.183063][ T9215] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1947'. [ 159.382780][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1948'. [ 159.621771][ T9235] netlink: 'syz.4.1953': attribute type 16 has an invalid length. [ 159.732651][ T9239] netlink: 'syz.2.1955': attribute type 1 has an invalid length. [ 159.749562][ T9241] netlink: 'syz.4.1956': attribute type 39 has an invalid length. [ 159.788116][ T9239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.846897][ T9239] bond4: (slave dummy0): making interface the new active one [ 159.929736][ T9239] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 159.946017][ T9244] bond4: entered allmulticast mode [ 159.995558][ T9244] dummy0: entered allmulticast mode [ 160.199562][ T9252] netlink: 'syz.4.1959': attribute type 142 has an invalid length. [ 160.207795][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1959'. [ 160.589898][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 160.589968][ T29] audit: type=1400 audit(1768939050.593:2267): avc: denied { write } for pid=9254 comm="syz.3.1960" path="socket:[31480]" dev="sockfs" ino=31480 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 160.872222][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1965'. [ 160.979325][ T29] audit: type=1326 audit(1768939050.953:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 160.996664][ T9273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9273 comm=syz.4.1965 [ 161.003798][ T29] audit: type=1326 audit(1768939050.953:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.040185][ T29] audit: type=1326 audit(1768939050.953:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.045523][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1968'. [ 161.063695][ T29] audit: type=1326 audit(1768939050.953:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.063734][ T29] audit: type=1326 audit(1768939050.953:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.063804][ T29] audit: type=1326 audit(1768939050.953:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.063846][ T29] audit: type=1326 audit(1768939050.953:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.063881][ T29] audit: type=1326 audit(1768939050.953:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.063913][ T29] audit: type=1326 audit(1768939050.953:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9267 comm="syz.6.1966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 161.290168][ T9272] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 161.344306][ T9272] bond5: entered promiscuous mode [ 161.349585][ T9272] bridge2: entered promiscuous mode [ 161.355224][ T9272] bond5: entered allmulticast mode [ 161.360549][ T9272] bridge2: entered allmulticast mode [ 161.471986][ T9286] loop3: detected capacity change from 0 to 512 [ 161.643531][ T9286] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 161.965275][ T9286] EXT4-fs (loop3): mount failed [ 163.257615][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1978'. [ 163.494275][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1981'. [ 163.519855][ T9316] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 163.550612][ T9316] team1: entered promiscuous mode [ 163.558368][ T9316] team1: entered allmulticast mode [ 163.881003][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 164.692738][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 164.739029][ T9363] chnl_net:caif_netlink_parms(): no params data found [ 164.864612][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2002'. [ 164.876245][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2002'. [ 165.001859][ T9374] xt_hashlimit: size too large, truncated to 1048576 [ 165.516334][ T9377] –: renamed from vxcan1 [ 165.846020][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 165.846053][ T29] audit: type=1326 audit(1768939055.833:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 165.876844][ T29] audit: type=1326 audit(1768939055.833:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 165.901138][ T29] audit: type=1326 audit(1768939055.833:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 165.924960][ T29] audit: type=1326 audit(1768939055.833:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 165.948491][ T29] audit: type=1326 audit(1768939055.833:2313): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 165.972305][ T29] audit: type=1326 audit(1768939055.833:2314): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 165.996568][ T29] audit: type=1326 audit(1768939055.833:2315): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 166.020545][ T29] audit: type=1326 audit(1768939055.833:2316): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 166.044506][ T29] audit: type=1326 audit(1768939055.833:2317): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa58c2aaa22 code=0x7ffc0000 [ 166.068326][ T29] audit: type=1326 audit(1768939055.833:2318): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9386 comm="syz.2.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa58c26b58e code=0x7ffc0000 [ 166.298958][ T9401] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 166.324788][ T9404] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2013'. [ 166.334212][ T9404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2013'. [ 166.399411][ T9407] lo speed is unknown, defaulting to 1000 [ 166.652592][ T9407] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 166.782140][ T9407] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2016'. [ 167.050037][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 167.059193][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2023'. [ 167.550769][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2032'. [ 167.596667][ T9461] vlan0: entered promiscuous mode [ 167.602373][ T9461] bridge3: entered promiscuous mode [ 167.608156][ T9461] vlan0: entered allmulticast mode [ 167.614359][ T9461] bridge3: entered allmulticast mode [ 167.785947][ T9475] batman_adv: batadv0: Adding interface: dummy0 [ 167.792640][ T9475] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.820726][ T9475] batman_adv: batadv0: Interface activated: dummy0 [ 167.831368][ T9475] batadv0: mtu less than device minimum [ 167.837671][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.849005][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.860586][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.872232][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.883520][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.895072][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.906194][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.917635][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.929065][ T9475] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 168.002289][ T9479] netlink: 'syz.5.2040': attribute type 4 has an invalid length. [ 168.167461][ T9490] bond5: invalid ARP target 0.0.0.0 specified for addition [ 168.175067][ T9490] bond5: option arp_ip_target: invalid value (0) [ 168.182894][ T9490] bond5 (unregistering): Released all slaves [ 168.404070][ T9504] netlink: 'syz.3.2049': attribute type 10 has an invalid length. [ 168.440019][ T9504] team0 (unregistering): Port device team_slave_0 removed [ 168.466041][ T9504] team0 (unregistering): Port device team_slave_1 removed [ 168.490470][ T9504] team0 (unregistering): Port device dummy0 removed [ 169.035159][ T9526] __nla_validate_parse: 3 callbacks suppressed [ 169.035178][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 169.058151][ T9526] geneve2: entered promiscuous mode [ 169.063815][ T9526] geneve2: entered allmulticast mode [ 169.071302][ T2006] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 56451 - 0 [ 169.084116][ T2006] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 56451 - 0 [ 169.093183][ T2006] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 56451 - 0 [ 169.101997][ T2006] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 56451 - 0 [ 169.174029][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2062'. [ 169.203088][ T9539] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 169.224002][ T9539] macvlan2: entered promiscuous mode [ 169.230031][ T9539] macvlan2: entered allmulticast mode [ 169.237653][ T9539] bond4: entered promiscuous mode [ 169.243029][ T9539] bridge6: entered promiscuous mode [ 169.249894][ T9539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.258872][ T9539] bond4: left promiscuous mode [ 169.263805][ T9539] bridge6: left promiscuous mode [ 169.356610][ T9547] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2064'. [ 170.112312][ T9562] tipc: Enabling of bearer rejected, failed to enable media [ 170.616096][ T9582] netlink: 'syz.6.2077': attribute type 1 has an invalid length. [ 170.657530][ T9582] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 170.800336][ T9582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.814132][ T9585] netlink: 'syz.4.2078': attribute type 10 has an invalid length. [ 171.039090][ T9600] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2084'. [ 171.069731][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 171.158568][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 171.158587][ T29] audit: type=1326 audit(1768939061.163:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9603 comm="syz.5.2085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c6806acb9 code=0x0 [ 171.301533][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2087'. [ 171.331238][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2087'. [ 171.340424][ T9611] netlink: 'syz.3.2087': attribute type 1 has an invalid length. [ 171.505937][ T29] audit: type=1400 audit(1768939061.503:2555): avc: denied { accept } for pid=9593 comm="syz.4.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 171.612079][ T29] audit: type=1326 audit(1768939061.613:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9620 comm="syz.6.2090" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdf340acb9 code=0x0 [ 172.080994][ T29] audit: type=1326 audit(1768939062.083:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 172.105193][ T29] audit: type=1326 audit(1768939062.083:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 172.155602][ T29] audit: type=1326 audit(1768939062.133:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 172.179459][ T29] audit: type=1326 audit(1768939062.133:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 172.203945][ T29] audit: type=1326 audit(1768939062.133:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 172.228336][ T29] audit: type=1326 audit(1768939062.133:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 172.252101][ T29] audit: type=1326 audit(1768939062.133:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9647 comm="syz.2.2101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 172.318561][ T9653] loop3: detected capacity change from 0 to 256 [ 172.383709][ T9653] syzkaller1: entered promiscuous mode [ 172.389413][ T9653] syzkaller1: entered allmulticast mode [ 172.702340][ T9677] tipc: Started in network mode [ 172.707443][ T9677] tipc: Node identity 84e, cluster identity 4711 [ 172.713975][ T9677] tipc: Node number set to 2126 [ 172.733155][ T9675] netlink: 'syz.3.2111': attribute type 1 has an invalid length. [ 172.795859][ T9675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.844811][ T9681] ip6erspan0: entered promiscuous mode [ 172.883091][ T9681] bond2: (slave ip6erspan0): making interface the new active one [ 172.908686][ T9681] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 172.961599][ T9675] macvlan2: entered promiscuous mode [ 172.997909][ T9675] bond2: entered promiscuous mode [ 173.012885][ T9675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.032109][ T9675] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 173.070473][ T9675] bond2: left promiscuous mode [ 173.362526][ T9703] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2120'. [ 174.047318][ T9722] lo speed is unknown, defaulting to 1000 [ 174.132334][ T9723] lo speed is unknown, defaulting to 1000 [ 174.479350][ T9739] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 174.505804][ T9739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.532184][ T9739] veth5: entered promiscuous mode [ 174.541279][ T9739] bond3: (slave veth5): Enslaving as an active interface with a down link [ 174.565954][ T9739] veth7: entered promiscuous mode [ 174.573828][ T9739] bond3: (slave veth7): Enslaving as an active interface with a down link [ 174.605004][ T9743] futex_wake_op: syz.5.2131 tries to shift op by -1; fix this program [ 174.650165][ T9745] netlink: 'syz.3.2132': attribute type 1 has an invalid length. [ 174.690333][ T9750] unsupported nla_type 52263 [ 174.699338][ T9745] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.707459][ T9745] bond4: (slave bond5): making interface the new active one [ 174.715814][ T9745] bond4: (slave bond5): Enslaving as an active interface with an up link [ 174.745823][ T9750] netlink: 'syz.6.2144': attribute type 21 has an invalid length. [ 174.753867][ T9750] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.764383][ T9745] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 174.778125][ T9745] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2132'. [ 174.789517][ T9745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 174.820615][ T9760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2135'. [ 174.835650][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2136'. [ 174.871726][ T9760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2135'. [ 174.896025][ T9765] netlink: 'syz.6.2137': attribute type 7 has an invalid length. [ 174.904673][ T9765] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2137'. [ 174.913265][ T9762] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 174.927969][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.974927][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2137'. [ 174.987747][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.005498][ T9771] netlink: 'syz.3.2139': attribute type 13 has an invalid length. [ 175.019257][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2136'. [ 175.029168][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.039285][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2137'. [ 175.054454][ T9771] gretap0: refused to change device tx_queue_len [ 175.062113][ T9771] net_ratelimit: 13 callbacks suppressed [ 175.062130][ T9771] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 175.090011][ T9773] bond5 (unregistering): (slave geneve2): Releasing backup interface [ 175.102190][ T9773] bond5 (unregistering): Released all slaves [ 175.115138][ T9771] netlink: 'syz.3.2139': attribute type 4 has an invalid length. [ 175.124702][ T12] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.142232][ T12] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.170397][ T12] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 175.204724][ T9780] loop3: detected capacity change from 0 to 2048 [ 175.218945][ T9780] EXT4-fs (loop3): unsupported inode size: 84 [ 175.225109][ T9780] EXT4-fs (loop3): blocksize: 4096 [ 175.322068][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 175.375930][ T9787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9787 comm=syz.3.2146 [ 175.393434][ T9795] macvlan1: entered promiscuous mode [ 175.410136][ T9795] dummy0: entered promiscuous mode [ 175.415402][ T9795] dummy0: left promiscuous mode [ 175.708782][ T9795] macvlan1: left promiscuous mode [ 175.847555][ T9849] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 175.914003][ T9849] bond6: (slave lo): Enslaving as a backup interface with an up link [ 175.922631][ T9849] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 175.948831][ T3520] lo speed is unknown, defaulting to 1000 [ 175.948839][ T3409] lo speed is unknown, defaulting to 1000 [ 175.948864][ T3480] lo speed is unknown, defaulting to 1000 [ 175.988677][ T9860] ÿÿÿÿ: renamed from bridge_slave_0 [ 176.003917][ T9862] loop3: detected capacity change from 0 to 512 [ 176.011076][ T9862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.018270][ T9862] EXT4-fs: Ignoring removed bh option [ 176.029293][ T9862] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 176.044641][ T9862] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.2153: corrupted inode contents [ 176.059175][ T9862] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #11: comm syz.3.2153: mark_inode_dirty error [ 176.071077][ T9862] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2153: invalid indirect mapped block 1 (level 1) [ 176.084546][ T9862] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.2153: corrupted inode contents [ 176.098865][ T9862] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 176.108152][ T9862] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.2153: corrupted inode contents [ 176.122897][ T9862] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.2153: mark_inode_dirty error [ 176.138747][ T9862] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 176.150383][ T9862] EXT4-fs (loop3): 1 truncate cleaned up [ 176.158921][ T9862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.180290][ T9862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.256890][ T9870] loop3: detected capacity change from 0 to 764 [ 176.288736][ T9868] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2156'. [ 176.340535][ T9868] bond4: (slave dummy0): Releasing active interface [ 176.347515][ T9868] dummy0 (unregistering): left allmulticast mode [ 176.393225][ T9872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9872 comm=syz.4.2158 [ 176.461659][ T9877] syzkaller0: entered promiscuous mode [ 176.467287][ T9877] syzkaller0: entered allmulticast mode [ 176.737831][ T9884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 176.746965][ T9884] IPv6: NLM_F_CREATE should be set when creating new route [ 176.771586][ T9884] batman_adv: batadv0: Interface deactivated: dummy0 [ 177.109003][ T9908] syz_tun: entered allmulticast mode [ 177.196481][ T9911] Set syz1 is full, maxelem 65536 reached [ 177.448824][ T9923] bond6: option mode: unable to set because the bond device has slaves [ 177.532684][ T9928] netlink: 'syz.6.2177': attribute type 39 has an invalid length. [ 177.572390][ T9933] netlink: 'syz.4.2179': attribute type 1 has an invalid length. [ 177.594873][ T9933] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 177.605878][ T9933] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 177.649408][ T9937] bond9: (slave bridge6): Enslaving as an active interface with a down link [ 177.674566][ T9937] macvlan2: entered promiscuous mode [ 177.680344][ T9937] macvlan2: entered allmulticast mode [ 177.692426][ T9937] bond9: entered promiscuous mode [ 177.698902][ T9937] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.708682][ T9937] bond9: left promiscuous mode [ 177.907076][ T3480] IPVS: starting estimator thread 0... [ 177.943529][ T9971] hsr_slave_1 (unregistering): left promiscuous mode [ 177.998466][ T9965] IPVS: using max 2208 ests per chain, 110400 per kthread [ 178.036390][ T9981] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 178.052751][ T9981] 8021q: adding VLAN 0 to HW filter on device bond7 [ 178.082025][ T9981] 8021q: adding VLAN 0 to HW filter on device bond7 [ 178.089566][ T9981] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 178.101099][ T9981] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 178.119435][ T9984] tipc: Started in network mode [ 178.124428][ T9984] tipc: Node identity ac14140f, cluster identity 4711 [ 178.132411][ T9984] tipc: New replicast peer: 255.255.255.255 [ 178.139235][ T9984] tipc: Enabled bearer , priority 10 [ 178.153607][ T9985] veth11: entered promiscuous mode [ 178.160806][ T9985] bond7: (slave veth11): Enslaving as an active interface with a down link [ 178.184929][ T9981] macvlan3: entered promiscuous mode [ 178.191068][ T9981] macvlan3: entered allmulticast mode [ 178.198200][ T9981] bond7: entered promiscuous mode [ 178.204010][ T9981] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 178.212887][ T9981] bond7: left promiscuous mode [ 178.518883][ T9991] lo speed is unknown, defaulting to 1000 [ 179.258407][ T3480] tipc: Node number set to 2886997007 [ 179.338398][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 179.338420][ T29] audit: type=1400 audit(1768939069.323:2598): avc: denied { ioctl } for pid=10036 comm="syz.3.2213" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 179.991244][T10055] __nla_validate_parse: 6 callbacks suppressed [ 179.991280][T10055] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2219'. [ 180.028379][ T29] audit: type=1326 audit(1768939070.023:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.052271][ T29] audit: type=1326 audit(1768939070.023:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.077241][ T29] audit: type=1326 audit(1768939070.023:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.104746][ T29] audit: type=1326 audit(1768939070.033:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.128683][ T29] audit: type=1326 audit(1768939070.033:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.152977][ T29] audit: type=1326 audit(1768939070.033:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.177583][ T29] audit: type=1326 audit(1768939070.033:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.201326][ T29] audit: type=1326 audit(1768939070.033:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 180.225381][ T29] audit: type=1326 audit(1768939070.033:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10003 comm="syz.2.2203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 181.078016][T10100] tipc: Enabling of bearer rejected, already enabled [ 182.090201][T10127] netlink: 'syz.3.2242': attribute type 27 has an invalid length. [ 182.176512][T10127] batadv_slave_0: left promiscuous mode [ 182.239705][T10127] bond1: left allmulticast mode [ 182.244734][T10127] ip6gretap1: left allmulticast mode [ 182.275808][T10127] ip6erspan0: left promiscuous mode [ 182.304945][T10127] veth5: left promiscuous mode [ 182.321856][T10127] veth7: left promiscuous mode [ 182.369450][T10131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.390972][T10131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 183.777261][T10185] bridge0: entered allmulticast mode [ 184.050475][T10187] loop3: detected capacity change from 0 to 8192 [ 184.796393][T10233] loop3: detected capacity change from 0 to 256 [ 184.814375][T10233] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.020494][T10236] netlink: 'syz.4.2274': attribute type 2 has an invalid length. [ 185.219602][T10248] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2280'. [ 185.497069][T10257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 185.981778][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 185.991115][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2289'. [ 186.125322][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2293'. [ 186.305218][T10281] raw_sendmsg: syz.2.2292 forgot to set AF_INET. Fix it! [ 186.321549][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 186.321625][ T29] audit: type=1400 audit(1768939076.323:2688): avc: denied { cpu } for pid=10290 comm="syz.5.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 186.414681][ T29] audit: type=1400 audit(1768939076.413:2689): avc: denied { create } for pid=10294 comm="syz.5.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.442339][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2297'. [ 186.478647][ T29] audit: type=1400 audit(1768939076.413:2690): avc: denied { connect } for pid=10294 comm="syz.5.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 186.498752][ T29] audit: type=1326 audit(1768939076.473:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.6.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 186.522949][ T29] audit: type=1326 audit(1768939076.473:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.6.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 186.548237][ T29] audit: type=1326 audit(1768939076.473:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.6.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 186.572601][ T29] audit: type=1326 audit(1768939076.473:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.6.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 186.596359][ T29] audit: type=1326 audit(1768939076.473:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.6.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 186.621179][ T29] audit: type=1326 audit(1768939076.473:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10293 comm="syz.6.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 186.981693][T10344] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.2304'. [ 187.096459][T10359] bond10: invalid ARP target 0.0.0.0 specified for addition [ 187.104173][T10359] bond10: option arp_ip_target: invalid value (0) [ 187.112208][T10359] bond10 (unregistering): Released all slaves [ 187.149308][ T29] audit: type=1400 audit(1768939077.153:2697): avc: denied { setopt } for pid=10371 comm="syz.3.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 187.195622][ T8848] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.546473][T10432] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 187.631728][T10425] vlan3: entered promiscuous mode [ 187.638263][T10425] team0: entered promiscuous mode [ 187.737577][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2319'. [ 187.769867][T10437] syz_tun (unregistering): left allmulticast mode [ 187.895251][T10447] netlink: 'syz.2.2323': attribute type 1 has an invalid length. [ 187.911271][T10447] bond8: entered promiscuous mode [ 187.916782][T10447] bond8: entered allmulticast mode [ 187.922760][T10447] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.935449][T10447] erspan1: entered allmulticast mode [ 187.944696][T10447] bond8: (slave erspan1): making interface the new active one [ 187.952359][T10447] erspan1: entered promiscuous mode [ 187.959594][T10447] bond8: (slave erspan1): Enslaving as an active interface with an up link [ 187.970925][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 187.982995][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2324'. [ 188.007892][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2324'. [ 188.008283][T10447] bond8 (unregistering): (slave erspan1): Releasing active interface [ 188.025981][T10447] erspan1: left promiscuous mode [ 188.040474][T10447] bond8 (unregistering): Released all slaves [ 188.256715][T10464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10464 comm=syz.2.2329 [ 189.211171][ T3532] Bluetooth: hci0: command 0x1003 tx timeout [ 189.268467][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.078743][T10491] infiniband : set down [ 190.083255][T10491] infiniband : added ipvlan0 [ 190.103156][T10491] RDS/IB: : added [ 190.107075][T10491] smc: adding ib device  with port count 1 [ 190.113656][T10491] smc: ib device  port 1 has no pnetid [ 190.304162][T10495] syzkaller0: entered promiscuous mode [ 190.310126][T10495] syzkaller0: entered allmulticast mode [ 190.657076][T10507] lo speed is unknown, defaulting to 1000 [ 191.428683][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 191.428702][ T29] audit: type=1400 audit(1768939081.433:2737): avc: denied { mac_admin } for pid=10533 comm="syz.3.2348" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 191.457109][T10534] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 191.476895][ T29] audit: type=1400 audit(1768939081.463:2738): avc: denied { relabelto } for pid=10533 comm="syz.3.2348" name="428" dev="tmpfs" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 191.478250][T10523] __nla_validate_parse: 1 callbacks suppressed [ 191.478833][T10523] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2346'. [ 191.505698][ T29] audit: type=1400 audit(1768939081.463:2739): avc: denied { associate } for pid=10533 comm="syz.3.2348" name="428" dev="tmpfs" ino=2252 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 191.512766][T10523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.560808][T10534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2348'. [ 191.578565][ T29] audit: type=1400 audit(1768939081.573:2740): avc: denied { add_name } for pid=10533 comm="syz.3.2348" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 191.604213][ T29] audit: type=1400 audit(1768939081.573:2741): avc: denied { create } for pid=10533 comm="syz.3.2348" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 191.625616][ T29] audit: type=1400 audit(1768939081.573:2742): avc: denied { associate } for pid=10533 comm="syz.3.2348" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 191.758151][ T29] audit: type=1400 audit(1768939081.673:2743): avc: denied { remove_name } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 191.785358][ T29] audit: type=1400 audit(1768939081.673:2744): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=2257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 191.808138][ T29] audit: type=1400 audit(1768939081.673:2745): avc: denied { rmdir } for pid=3321 comm="syz-executor" name="428" dev="tmpfs" ino=2252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 191.834413][ T29] audit: type=1326 audit(1768939081.683:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10536 comm="syz.3.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92068bacb9 code=0x7ffc0000 [ 191.866265][T10544] loop3: detected capacity change from 0 to 128 [ 191.955260][T10544] syz.3.2351: attempt to access beyond end of device [ 191.955260][T10544] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 191.987692][T10544] syz.3.2351: attempt to access beyond end of device [ 191.987692][T10544] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 192.030836][T10544] syz.3.2351: attempt to access beyond end of device [ 192.030836][T10544] loop3: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 192.101390][T10560] syz.3.2351: attempt to access beyond end of device [ 192.101390][T10560] loop3: rw=2049, sector=305, nr_sectors = 80 limit=128 [ 192.169591][T10544] syz.3.2351: attempt to access beyond end of device [ 192.169591][T10544] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 192.208417][T10560] syz.3.2351: attempt to access beyond end of device [ 192.208417][T10560] loop3: rw=2049, sector=393, nr_sectors = 8 limit=128 [ 192.231495][T10560] syz.3.2351: attempt to access beyond end of device [ 192.231495][T10560] loop3: rw=2049, sector=409, nr_sectors = 8 limit=128 [ 192.254335][T10544] syz.3.2351: attempt to access beyond end of device [ 192.254335][T10544] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 192.338830][T10544] syz.3.2351: attempt to access beyond end of device [ 192.338830][T10544] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 192.363086][T10544] syz.3.2351: attempt to access beyond end of device [ 192.363086][T10544] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 193.054363][T10607] netlink: 'syz.6.2371': attribute type 1 has an invalid length. [ 193.071379][T10610] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2372'. [ 193.074496][T10607] bond6: entered promiscuous mode [ 193.086848][T10607] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.124285][T10607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2371'. [ 193.135635][T10607] bond6: entered allmulticast mode [ 193.175768][T10607] bond6: (slave bridge0): making interface the new active one [ 193.183645][T10607] bridge0: entered promiscuous mode [ 193.189149][T10607] bridge0: entered allmulticast mode [ 193.206591][T10607] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 193.219269][T10617] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2374'. [ 193.530318][T10632] syzkaller0: entered promiscuous mode [ 193.536260][T10632] syzkaller0: entered allmulticast mode [ 193.937179][T10654] netlink: 'syz.6.2387': attribute type 1 has an invalid length. [ 193.958971][T10654] 8021q: adding VLAN 0 to HW filter on device bond7 [ 193.994859][T10654] bond7: (slave ip6gretap2): making interface the new active one [ 194.005216][T10654] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 194.028554][T10654] veth11: entered promiscuous mode [ 194.038601][T10654] bond7: (slave veth11): Enslaving as an active interface with a down link [ 194.099573][T10654] erspan0: entered allmulticast mode [ 194.114475][T10654] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 194.148666][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2389'. [ 194.402776][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 194.547952][T10684] netlink: 'syz.5.2396': attribute type 1 has an invalid length. [ 194.647949][T10684] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.722117][T10685] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.767897][T10685] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.844939][T10685] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 194.862359][T10687] gretap1: entered promiscuous mode [ 194.881337][T10687] bond5: (slave gretap1): making interface the new active one [ 194.932335][T10687] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 195.663255][T10710] lo speed is unknown, defaulting to 1000 [ 195.706585][T10713] lo speed is unknown, defaulting to 1000 [ 196.666006][T10769] tipc: Enabling of bearer rejected, failed to enable media [ 196.767628][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2420'. [ 196.845437][T10788] lo speed is unknown, defaulting to 1000 [ 196.939019][T10792] lo speed is unknown, defaulting to 1000 [ 197.083133][T10797] syzkaller0: entered promiscuous mode [ 197.088747][T10797] syzkaller0: entered allmulticast mode [ 197.143165][ T29] kauditd_printk_skb: 144 callbacks suppressed [ 197.143182][ T29] audit: type=1326 audit(1768939343.146:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.4.2429" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f655167acb9 code=0x0 [ 197.253767][ T29] audit: type=1326 audit(1768939343.256:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 197.277609][ T29] audit: type=1326 audit(1768939343.256:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 197.301611][ T29] audit: type=1326 audit(1768939343.256:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 197.325522][ T29] audit: type=1326 audit(1768939343.256:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10798 comm="syz.4.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 197.433139][T10806] netlink: 'syz.6.2432': attribute type 1 has an invalid length. [ 197.472720][ T29] audit: type=1400 audit(1768939343.476:2896): avc: denied { ioctl } for pid=10805 comm="syz.6.2432" path="socket:[37997]" dev="sockfs" ino=37997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.513706][T10811] syzkaller0: entered promiscuous mode [ 197.519560][T10811] syzkaller0: entered allmulticast mode [ 197.547152][ T29] audit: type=1400 audit(1768939343.476:2897): avc: denied { bind } for pid=10805 comm="syz.6.2432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 197.710903][T10819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2437'. [ 197.734574][T10819] macvlan2: entered promiscuous mode [ 197.740142][T10819] bond0: entered promiscuous mode [ 197.745235][T10819] bond_slave_0: entered promiscuous mode [ 197.751185][T10819] bond_slave_1: entered promiscuous mode [ 197.765768][T10819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.868387][ T29] audit: type=1400 audit(1768939343.866:2898): avc: denied { nlmsg_write } for pid=10816 comm="syz.5.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 197.963395][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 198.253226][ T29] audit: type=1400 audit(1768939344.256:2899): avc: denied { ioctl } for pid=10831 comm="syz.4.2441" path="socket:[38059]" dev="sockfs" ino=38059 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 198.323688][T10827] loop3: detected capacity change from 0 to 1024 [ 198.359832][T10827] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.427016][T10827] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.2438: Bad quota inum: 1, type: 0 [ 198.443988][T10842] 9p: Bad value for 'wfdno' [ 198.458602][T10827] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=1). Please run e2fsck to fix. [ 198.473831][T10842] netlink: 'syz.2.2442': attribute type 4 has an invalid length. [ 198.556729][T10827] EXT4-fs (loop3): mount failed [ 199.583968][T10878] ªªªªªª: renamed from hsr0 [ 199.658265][ T29] audit: type=1326 audit(1768939600.651:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.2.2453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 199.720250][T10882] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2454'. [ 199.744733][T10882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10882 comm=syz.5.2454 [ 199.792748][T10888] vlan0: entered promiscuous mode [ 199.997127][T10903] netlink: 'syz.6.2462': attribute type 1 has an invalid length. [ 200.035501][T10905] tipc: Enabled bearer , priority 0 [ 200.052962][T10905] syzkaller0: entered promiscuous mode [ 200.058711][T10905] syzkaller0: entered allmulticast mode [ 200.098777][T10903] bond8: (slave gretap1): making interface the new active one [ 200.125926][T10903] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 200.139201][T10908] tipc: Resetting bearer [ 200.160481][T10904] tipc: Resetting bearer [ 200.186640][T10904] tipc: Disabling bearer [ 200.610440][T10916] loop3: detected capacity change from 0 to 8192 [ 200.967858][T10927] loop3: detected capacity change from 0 to 512 [ 200.998433][T10927] EXT4-fs: inline encryption not supported [ 201.052624][T10927] EXT4-fs (loop3): 1 orphan inode deleted [ 201.060146][T10931] tipc: Enabling of bearer rejected, failed to enable media [ 201.079335][ T2375] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 1 [ 201.096191][T10927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.129389][T10927] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.310442][T10944] netlink: 'syz.6.2471': attribute type 10 has an invalid length. [ 201.320223][T10944] dummy0: entered promiscuous mode [ 201.326466][T10944] team0: Failed to send options change via netlink (err -105) [ 201.334002][T10944] team0: Port device dummy0 added [ 201.340602][T10944] netlink: 'syz.6.2471': attribute type 10 has an invalid length. [ 201.349776][T10944] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.359205][T10944] dummy0: left promiscuous mode [ 201.366057][T10944] team0: Failed to send options change via netlink (err -105) [ 201.373750][T10944] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 201.382845][T10944] team0: Port device dummy0 removed [ 201.389633][T10944] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 201.398467][T10942] lo speed is unknown, defaulting to 1000 [ 201.547148][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.609962][T10957] netlink: 'syz.2.2478': attribute type 1 has an invalid length. [ 201.755583][T10962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10962 comm=syz.2.2478 [ 201.814340][T10957] 8021q: adding VLAN 0 to HW filter on device bond8 [ 201.886919][T10961] bond8: (slave gretap1): making interface the new active one [ 201.908530][T10961] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 201.954568][T10967] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.001088][T10967] bond9: (slave lo): Enslaving as a backup interface with an up link [ 202.028470][T10967] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 202.430170][T10984] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10984 comm=syz.5.2485 [ 202.677869][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 202.677889][ T29] audit: type=1400 audit(1768939603.671:2914): avc: denied { getopt } for pid=10995 comm="syz.5.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.946346][ T29] audit: type=1326 audit(1768939603.941:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11013 comm="syz.2.2493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x0 [ 203.688044][T11028] lo speed is unknown, defaulting to 1000 [ 205.096780][ T29] audit: type=1326 audit(1768939606.092:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="syz.3.2501" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f92068b4ad7 code=0x0 [ 205.141735][T11068] tipc: Enabling of bearer rejected, failed to enable media [ 205.344139][ T29] audit: type=1326 audit(1768939606.152:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 205.367949][ T29] audit: type=1326 audit(1768939606.152:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 205.392274][ T29] audit: type=1326 audit(1768939606.152:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 205.416900][ T29] audit: type=1326 audit(1768939606.162:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 205.440947][ T29] audit: type=1326 audit(1768939606.162:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 205.465234][ T29] audit: type=1326 audit(1768939606.162:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 205.488957][ T29] audit: type=1326 audit(1768939606.162:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11065 comm="syz.5.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 205.705223][T11083] lo speed is unknown, defaulting to 1000 [ 205.754439][T11089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2509'. [ 205.765385][T11089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2509'. [ 205.785243][T11085] lo speed is unknown, defaulting to 1000 [ 205.978537][T11102] loop3: detected capacity change from 0 to 128 [ 206.081961][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 206.128758][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 206.138326][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 206.189789][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 206.227014][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 206.250729][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 206.354968][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2522'. [ 206.603807][T11121] netlink: 'syz.2.2524': attribute type 1 has an invalid length. [ 206.886667][T11125] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.916259][T11125] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 206.982884][T11127] bond9: (slave bridge4): Enslaving as an active interface with a down link [ 207.000493][T11121] macvlan3: entered promiscuous mode [ 207.006067][T11121] macvlan3: entered allmulticast mode [ 207.013121][T11121] bond9: entered promiscuous mode [ 207.019070][T11121] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 207.029409][T11121] bond9: left promiscuous mode [ 207.105845][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2526'. [ 207.296539][T11142] syzkaller0: entered promiscuous mode [ 207.302170][T11142] syzkaller0: entered allmulticast mode [ 207.323655][T11142] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 208.047555][T11157] syz.3.2536 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 208.061731][T11173] syz_tun (unregistering): left allmulticast mode [ 208.175938][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 208.175957][ T29] audit: type=1400 audit(1768939609.172:2965): avc: denied { getattr } for pid=11163 comm="syz.6.2539" lport=53054 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 208.423043][ T29] audit: type=1326 audit(1768939609.422:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11183 comm="syz.6.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 208.531600][T11188] syzkaller0: entered promiscuous mode [ 208.537154][T11188] syzkaller0: entered allmulticast mode [ 208.576558][ T29] audit: type=1326 audit(1768939609.442:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11183 comm="syz.6.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 208.600797][ T29] audit: type=1326 audit(1768939609.442:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11183 comm="syz.6.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 208.624616][ T29] audit: type=1326 audit(1768939609.452:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11183 comm="syz.6.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 208.829585][T11200] netlink: 'syz.6.2550': attribute type 27 has an invalid length. [ 208.846467][T11200] erspan0: left allmulticast mode [ 208.900911][T11200] veth0_vlan: left allmulticast mode [ 208.907410][T11200] veth2: left promiscuous mode [ 208.912375][T11200] veth2: left allmulticast mode [ 208.918216][T11200] macsec1: left promiscuous mode [ 208.923204][T11200] macsec1: left allmulticast mode [ 208.928640][T11200] bond2: left promiscuous mode [ 208.933453][T11200] veth5: left promiscuous mode [ 208.938482][T11200] bond2: left allmulticast mode [ 208.943579][T11200] veth5: left allmulticast mode [ 208.969772][T11206] netlink: 'syz.3.2551': attribute type 4 has an invalid length. [ 208.978168][T11200] team1: left promiscuous mode [ 208.979057][T11204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.982985][T11200] team1: left allmulticast mode [ 208.984470][T11200] bond6: left promiscuous mode [ 208.990341][T11204] IPv6: NLM_F_CREATE should be set when creating new route [ 208.990390][T11204] IPv6: NLM_F_CREATE should be set when creating new route [ 208.998512][T11204] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.001839][T11200] bridge0: left promiscuous mode [ 209.029610][T11200] bond6: left allmulticast mode [ 209.034505][T11200] bridge0: left allmulticast mode [ 209.071291][T11200] veth11: left promiscuous mode [ 209.162261][T11203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.196175][T11203] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.226505][T11203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.251718][T11206] .`: renamed from bond0 (while UP) [ 209.475932][T11226] loop3: detected capacity change from 0 to 1024 [ 209.489194][T11226] EXT4-fs: Ignoring removed orlov option [ 209.496440][ T29] audit: type=1326 audit(1768939610.492:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 209.543820][ T29] audit: type=1326 audit(1768939610.492:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 209.567425][ T29] audit: type=1326 audit(1768939610.492:2972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 209.569706][T11226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.591114][ T29] audit: type=1326 audit(1768939610.502:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11228 comm="syz.2.2561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 209.627335][ T29] audit: type=1326 audit(1768939610.592:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11214 comm="syz.5.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 209.904166][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.949598][T11243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.986234][T11243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.059594][T11248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.067078][T11248] IPv6: NLM_F_CREATE should be set when creating new route [ 210.169329][T11256] netlink: 'syz.2.2568': attribute type 27 has an invalid length. [ 210.186991][T11256] bond3: left promiscuous mode [ 210.191915][T11256] wireguard0: left promiscuous mode [ 210.259988][T11256] bond5: left promiscuous mode [ 210.264887][T11256] bridge2: left promiscuous mode [ 210.270078][T11256] bond5: left allmulticast mode [ 210.275019][T11256] bridge2: left allmulticast mode [ 210.284100][T11256] vlan0: left promiscuous mode [ 210.289006][T11256] bridge3: left promiscuous mode [ 210.294150][T11256] vlan0: left allmulticast mode [ 210.299107][T11256] bridge3: left allmulticast mode [ 210.307103][T11256] geneve2: left promiscuous mode [ 210.312110][T11256] geneve2: left allmulticast mode [ 210.319530][T11256] veth11: left promiscuous mode [ 210.325581][T11256] erspan1: left allmulticast mode [ 210.369630][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.379783][T11259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.395501][ T8844] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 56451 - 0 [ 210.405498][ T8844] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 56451 - 0 [ 210.415136][ T8844] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 56451 - 0 [ 210.428264][ T8844] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 56451 - 0 [ 210.832422][T11273] lo speed is unknown, defaulting to 1000 [ 211.336959][T11284] __nla_validate_parse: 13 callbacks suppressed [ 211.337060][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2577'. [ 211.586429][T11297] batman_adv: batadv0: Adding interface: ipvlan0 [ 211.592917][T11297] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.618967][T11297] batman_adv: batadv0: Interface activated: ipvlan0 [ 211.668992][T11307] netlink: 'syz.5.2583': attribute type 27 has an invalid length. [ 211.678152][T11307] bond2: left promiscuous mode [ 211.683105][T11307] bridge3: left promiscuous mode [ 211.688475][T11307] bond2: left allmulticast mode [ 211.693372][T11307] bridge3: left allmulticast mode [ 211.702089][T11307] macvlan0: left promiscuous mode [ 211.707696][T11307] macvlan0: left allmulticast mode [ 211.723517][T11307] gretap1: left promiscuous mode [ 211.739678][T11307] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 211.784805][T11311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.792938][T11311] batman_adv: batadv0: Interface activated: dummy0 [ 211.799598][T11311] batadv0: mtu less than device minimum [ 211.805743][T11311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.816898][T11311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.828106][T11311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.839239][T11311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.850307][T11311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.861701][T11311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.872738][T11311] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 212.329448][T11325] tipc: Enabled bearer , priority 10 [ 212.407216][T11328] lo speed is unknown, defaulting to 1000 [ 213.151686][T11346] syzkaller0: entered promiscuous mode [ 213.157277][T11346] syzkaller0: entered allmulticast mode [ 213.228205][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 213.228223][ T29] audit: type=1326 audit(1768939614.233:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.6.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 213.360567][T11355] netlink: 'syz.3.2601': attribute type 1 has an invalid length. [ 213.392693][T11355] bond0: entered promiscuous mode [ 213.399341][ T29] audit: type=1326 audit(1768939614.263:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11339 comm="syz.6.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf340acb9 code=0x7ffc0000 [ 213.412069][T11355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.423313][ T29] audit: type=1326 audit(1768939614.343:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.5.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 213.453308][ T29] audit: type=1326 audit(1768939614.343:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11336 comm="syz.5.2593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 213.534589][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2601'. [ 213.562988][T11361] bond0: left promiscuous mode [ 213.588004][T11355] bond0: (slave bridge6): making interface the new active one [ 213.608487][T11355] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 213.752431][T11373] netlink: 'syz.5.2603': attribute type 4 has an invalid length. [ 213.768184][T11373] netlink: 'syz.5.2603': attribute type 4 has an invalid length. [ 214.307569][T11387] lo speed is unknown, defaulting to 1000 [ 214.946243][T11398] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.2611'. [ 214.955797][T11398] net_ratelimit: 13 callbacks suppressed [ 214.955817][T11398] netlink: zone id is out of range [ 214.966709][T11398] netlink: zone id is out of range [ 214.972386][T11398] netlink: zone id is out of range [ 214.997178][T11398] netlink: set zone limit has 8 unknown bytes [ 215.044290][T11397] lo speed is unknown, defaulting to 1000 [ 215.816191][ T29] audit: type=1326 audit(1768939616.813:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 215.951379][T11410] loop3: detected capacity change from 0 to 128 [ 215.981477][ T29] audit: type=1326 audit(1768939616.853:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 216.005420][ T29] audit: type=1326 audit(1768939616.863:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 216.029218][ T29] audit: type=1326 audit(1768939616.863:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 216.053381][ T29] audit: type=1326 audit(1768939616.863:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 216.076964][ T29] audit: type=1326 audit(1768939616.863:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11407 comm="syz.5.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6806acb9 code=0x7ffc0000 [ 216.252777][T11412] loop3: detected capacity change from 0 to 512 [ 216.414795][T11412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.474807][T11412] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.099113][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.479456][T11459] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11459 comm=syz.4.2629 [ 217.731135][T11481] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2636'. [ 218.156517][T11505] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2642'. [ 218.191406][T11510] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11510 comm=syz.2.2643 [ 218.525600][T11516] loop3: detected capacity change from 0 to 2048 [ 218.537951][T11516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.588383][T11516] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.625689][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2645'. [ 218.636764][T11516] netlink: 'syz.3.2645': attribute type 10 has an invalid length. [ 218.647391][T11516] bridge0: entered promiscuous mode [ 218.653077][T11516] .`: (slave bridge0): Enslaving as an active interface with an up link [ 218.687211][T11533] netlink: 'syz.2.2649': attribute type 4 has an invalid length. [ 218.706604][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.790525][T11541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11541 comm=syz.3.2650 [ 218.819744][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 218.819762][ T29] audit: type=1326 audit(1768939619.823:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92068bacb9 code=0x7ffc0000 [ 218.886328][ T29] audit: type=1326 audit(1768939619.823:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92068bacb9 code=0x7ffc0000 [ 218.910053][ T29] audit: type=1326 audit(1768939619.823:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92068bacb9 code=0x7ffc0000 [ 218.933921][ T29] audit: type=1326 audit(1768939619.823:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f92068bacb9 code=0x7ffc0000 [ 218.957738][ T29] audit: type=1326 audit(1768939619.873:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92068bacb9 code=0x7ffc0000 [ 218.981416][ T29] audit: type=1326 audit(1768939619.873:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92068bacb9 code=0x7ffc0000 [ 219.005089][ T29] audit: type=1326 audit(1768939619.873:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f920687b58e code=0x7ffc0000 [ 219.029280][ T29] audit: type=1326 audit(1768939619.873:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f920687b58e code=0x7ffc0000 [ 219.052917][ T29] audit: type=1326 audit(1768939619.873:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f920687b58e code=0x7ffc0000 [ 219.076668][ T29] audit: type=1326 audit(1768939619.883:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11540 comm="syz.3.2650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f920687b58e code=0x7ffc0000 [ 219.162491][T11547] loop3: detected capacity change from 0 to 1024 [ 219.215591][T11547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.705994][T11555] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 219.713725][T11574] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2660'. [ 219.757549][T11576] netlink: 'syz.2.2661': attribute type 4 has an invalid length. [ 219.765375][T11576] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2661'. [ 219.794551][T11576] .`: renamed from bond0 (while UP) [ 220.026704][T11558] syz.6.2655 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 220.041147][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.6.2655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.041211][T11558] Tainted: [W]=WARN [ 220.041218][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.041232][T11558] Call Trace: [ 220.041239][T11558] [ 220.041248][T11558] __dump_stack+0x1d/0x30 [ 220.041347][T11558] dump_stack_lvl+0x95/0xd0 [ 220.041372][T11558] dump_stack+0x15/0x1b [ 220.041394][T11558] dump_header+0x80/0x240 [ 220.041422][T11558] oom_kill_process+0x295/0x350 [ 220.041448][T11558] out_of_memory+0x97d/0xb80 [ 220.041493][T11558] try_charge_memcg+0x62e/0xa10 [ 220.041540][T11558] obj_cgroup_charge_pages+0xa6/0x150 [ 220.041589][T11558] __memcg_kmem_charge_page+0x9e/0x170 [ 220.041622][T11558] __alloc_frozen_pages_noprof+0x18a/0x350 [ 220.041711][T11558] alloc_pages_mpol+0xb3/0x260 [ 220.041746][T11558] alloc_pages_noprof+0x8f/0x130 [ 220.041779][T11558] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 220.041866][T11558] __kvmalloc_node_noprof+0x471/0x680 [ 220.041894][T11558] ? ip_set_alloc+0x24/0x30 [ 220.041930][T11558] ? ip_set_alloc+0x24/0x30 [ 220.042041][T11558] ip_set_alloc+0x24/0x30 [ 220.042076][T11558] hash_netiface_create+0x282/0x740 [ 220.042188][T11558] ? __pfx_hash_netiface_create+0x10/0x10 [ 220.042227][T11558] ip_set_create+0x3cf/0x970 [ 220.042261][T11558] ? __nla_parse+0x40/0x60 [ 220.042318][T11558] nfnetlink_rcv_msg+0x509/0x5d0 [ 220.042378][T11558] netlink_rcv_skb+0x123/0x220 [ 220.042476][T11558] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 220.042521][T11558] nfnetlink_rcv+0x167/0x1720 [ 220.042616][T11558] ? __kfree_skb+0x109/0x150 [ 220.042649][T11558] ? nlmon_xmit+0x4f/0x60 [ 220.042720][T11558] ? consume_skb+0x49/0x140 [ 220.042754][T11558] ? nlmon_xmit+0x4f/0x60 [ 220.042780][T11558] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 220.042818][T11558] ? __dev_queue_xmit+0x139a/0x1f20 [ 220.042897][T11558] ? __dev_queue_xmit+0x148/0x1f20 [ 220.042935][T11558] ? vma_wants_writenotify+0x148/0x1a0 [ 220.042970][T11558] ? ref_tracker_free+0x37d/0x3e0 [ 220.043059][T11558] ? __netlink_deliver_tap+0x4dc/0x500 [ 220.043101][T11558] netlink_unicast+0x5c0/0x690 [ 220.043133][T11558] netlink_sendmsg+0x5c8/0x6f0 [ 220.043252][T11558] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.043276][T11558] __sock_sendmsg+0x145/0x170 [ 220.043298][T11558] ____sys_sendmsg+0x31e/0x4a0 [ 220.043358][T11558] ___sys_sendmsg+0x195/0x1e0 [ 220.043409][T11558] __x64_sys_sendmsg+0xd4/0x160 [ 220.043471][T11558] x64_sys_call+0x17ba/0x3000 [ 220.043503][T11558] do_syscall_64+0xc0/0x2a0 [ 220.043531][T11558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.043605][T11558] RIP: 0033:0x7fcdf340acb9 [ 220.043638][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.043668][T11558] RSP: 002b:00007fcdf1e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.043753][T11558] RAX: ffffffffffffffda RBX: 00007fcdf3685fa0 RCX: 00007fcdf340acb9 [ 220.043767][T11558] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 220.043810][T11558] RBP: 00007fcdf3478bf7 R08: 0000000000000000 R09: 0000000000000000 [ 220.043825][T11558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.043838][T11558] R13: 00007fcdf3686038 R14: 00007fcdf3685fa0 R15: 00007fff65b8d358 [ 220.043860][T11558] [ 220.043870][T11558] memory: usage 307200kB, limit 307200kB, failcnt 208 [ 220.384469][T11558] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 220.392470][T11558] kmem: usage 238532kB, limit 9007199254740988kB, failcnt 0 [ 220.399842][T11558] Memory cgroup stats for /syz6: [ 220.411068][ T1615] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 220.429081][ T1615] EXT4-fs (loop3): This should not happen!! Data will be lost [ 220.429081][ T1615] [ 220.437780][T11558] cache 69668864 [ 220.438986][ T1615] EXT4-fs (loop3): Total free blocks count 0 [ 220.442406][T11558] rss 647168 [ 220.448399][ T1615] EXT4-fs (loop3): Free/Dirty block details [ 220.451630][T11558] shmem 69668864 [ 220.451644][T11558] mapped_file 208896 [ 220.457613][ T1615] EXT4-fs (loop3): free_blocks=68451041280 [ 220.461138][T11558] dirty 0 [ 220.465052][ T1615] EXT4-fs (loop3): dirty_blocks=11248 [ 220.470949][T11558] writeback 0 [ 220.470959][T11558] workingset_refault_anon 1306 [ 220.470968][T11558] workingset_refault_file 0 [ 220.473932][ T1615] EXT4-fs (loop3): Block reservation details [ 220.473947][ T1615] EXT4-fs (loop3): i_reserved_data_blocks=703 [ 220.504412][T11558] swap 0 [ 220.507593][T11558] swapcached 0 [ 220.511015][T11558] pgpgin 262477 [ 220.514652][T11558] pgpgout 245310 [ 220.518465][T11558] pgfault 220941 [ 220.522266][T11558] pgmajfault 196 [ 220.526071][T11558] inactive_anon 0 [ 220.529828][T11558] active_anon 70316032 [ 220.534066][T11558] inactive_file 0 [ 220.537784][T11558] active_file 0 [ 220.541314][T11558] unevictable 0 [ 220.544839][T11558] hierarchical_memory_limit 314572800 [ 220.550281][T11558] hierarchical_memsw_limit 9223372036854771712 [ 220.556932][T11558] total_cache 69668864 [ 220.561125][T11558] total_rss 647168 [ 220.564905][T11558] total_shmem 69668864 [ 220.569150][T11558] total_mapped_file 208896 [ 220.573606][T11558] total_dirty 0 [ 220.577209][T11558] total_writeback 0 [ 220.581096][T11558] total_workingset_refault_anon 1306 [ 220.586117][ T1615] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 220.586459][T11558] total_workingset_refault_file 0 [ 220.604409][T11558] total_swap 0 [ 220.607851][T11558] total_swapcached 0 [ 220.611899][T11558] total_pgpgin 262477 [ 220.616041][T11558] total_pgpgout 245310 [ 220.620395][T11558] total_pgfault 220941 [ 220.624739][T11558] total_pgmajfault 196 [ 220.628904][T11558] total_inactive_anon 0 [ 220.633098][T11558] total_active_anon 70316032 [ 220.637847][T11558] total_inactive_file 0 [ 220.642184][T11558] total_active_file 0 [ 220.646230][T11558] total_unevictable 0 [ 220.650234][T11558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2655,pid=11556,uid=0 [ 220.665674][T11558] Memory cgroup out of memory: Killed process 11556 (syz.6.2655) total-vm:96384kB, anon-rss:1204kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 220.939007][T11602] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2673'. [ 221.017017][T11603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.037904][T11603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.740645][T11634] netlink: 'syz.4.2683': attribute type 3 has an invalid length. [ 221.748533][T11634] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2683'. [ 222.312626][T11650] netlink: 'syz.6.2690': attribute type 4 has an invalid length. [ 222.320820][T11650] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2690'. [ 222.396375][T11650] .`: renamed from bond0 (while UP) [ 223.335904][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2708'. [ 223.398796][T11765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2697'. [ 223.513291][T11775] tipc: Enabling of bearer rejected, failed to enable media [ 223.746901][T11789] ------------[ cut here ]------------ [ 223.752632][T11789] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 223.777903][T11789] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.2704/11789 [ 223.789205][T11789] Modules linked in: [ 223.793144][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.2.2704 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 223.804615][T11789] Tainted: [W]=WARN [ 223.808584][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.818764][T11789] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 223.825108][T11789] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 223.845771][T11789] RSP: 0018:ffffc900015f73a0 EFLAGS: 00010246 [ 223.851895][T11789] RAX: ffff88817b693c10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 223.859965][T11789] RDX: ffffffff867fcb93 RSI: ffffffff866c6e27 RDI: ffffffff86fb6fe0 [ 223.868302][T11789] RBP: ffff88811a50ba70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 223.876472][T11789] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a50ba30 [ 223.884487][T11789] R13: 00000000ffffdfcc R14: ffff88811a50ba7c R15: ffff88811a50ba68 [ 223.892632][T11789] FS: 00007fa58ad076c0(0000) GS:ffff8882aec78000(0000) knlGS:0000000000000000 [ 223.901744][T11789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.908473][T11789] CR2: 0000200000001000 CR3: 000000015ddac000 CR4: 00000000003506f0 [ 223.916635][T11789] DR0: fffffffffffffffe DR1: 0000200000000300 DR2: 0000000000000000 [ 223.925731][T11789] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 223.935299][T11789] Call Trace: [ 223.938653][T11789] [ 223.941974][T11789] reg_set_min_max+0x1c8/0x260 [ 223.946911][T11789] check_cond_jmp_op+0x13bd/0x1a80 [ 223.952263][T11789] do_check+0x3356/0x8250 [ 223.956791][T11789] do_check_common+0xccf/0x1300 [ 223.962070][T11789] bpf_check+0x2f85/0xc890 [ 223.966662][T11789] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 223.972933][T11789] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 223.979041][T11789] ? pcpu_block_update+0x232/0x3b0 [ 223.984566][T11789] ? pcpu_block_refresh_hint+0x157/0x170 [ 223.990562][T11789] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 223.996726][T11789] ? css_rstat_updated+0xbb/0x280 [ 224.001929][T11789] ? mod_memcg_state+0x182/0x260 [ 224.007504][T11789] ? __rcu_read_unlock+0x4e/0x70 [ 224.012838][T11789] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 224.019007][T11789] ? pcpu_alloc_noprof+0xd18/0x1210 [ 224.024779][T11789] ? should_fail_ex+0x30/0x280 [ 224.029712][T11789] ? __kmalloc_noprof+0x2a3/0x580 [ 224.035090][T11789] ? security_bpf_prog_load+0x60/0x140 [ 224.040653][T11789] ? selinux_bpf_prog_load+0xac/0xd0 [ 224.046053][T11789] ? security_bpf_prog_load+0x9e/0x140 [ 224.051640][T11789] bpf_prog_load+0xf76/0x1140 [ 224.056514][T11789] ? security_bpf+0x2b/0x90 [ 224.061118][T11789] __sys_bpf+0x469/0x7b0 [ 224.065532][T11789] __x64_sys_bpf+0x41/0x50 [ 224.070067][T11789] x64_sys_call+0x28e1/0x3000 [ 224.074824][T11789] do_syscall_64+0xc0/0x2a0 [ 224.079476][T11789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.085472][T11789] RIP: 0033:0x7fa58c2aacb9 [ 224.089940][T11789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.110024][T11789] RSP: 002b:00007fa58ad07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.118577][T11789] RAX: ffffffffffffffda RBX: 00007fa58c525fa0 RCX: 00007fa58c2aacb9 [ 224.126920][T11789] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 224.135145][T11789] RBP: 00007fa58c318bf7 R08: 0000000000000000 R09: 0000000000000000 [ 224.143434][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.151840][T11789] R13: 00007fa58c526038 R14: 00007fa58c525fa0 R15: 00007ffe523cfab8 [ 224.160257][T11789] [ 224.163431][T11789] ---[ end trace 0000000000000000 ]--- [ 224.274185][T11760] loop3: detected capacity change from 0 to 2048 [ 224.291060][T11760] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11760 comm=syz.3.2697 [ 224.439808][T11807] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.449293][T11808] ªªªªªª: renamed from wg2 [ 224.465469][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 224.560381][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2710'. [ 224.640291][T11817] netlink: 'syz.6.2713': attribute type 1 has an invalid length. [ 224.674998][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 224.675015][ T29] audit: type=1400 audit(1768939625.674:3335): avc: denied { ioctl } for pid=11816 comm="syz.5.2712" path="socket:[40321]" dev="sockfs" ino=40321 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 224.760278][T11817] bond0: entered promiscuous mode [ 224.765547][T11817] bond0: entered allmulticast mode [ 224.773875][T11817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.792595][T11823] erspan1: entered allmulticast mode [ 224.804931][T11823] bond0: (slave erspan1): making interface the new active one [ 224.812671][T11823] erspan1: entered promiscuous mode [ 224.838962][T11823] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 224.871896][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2713'. [ 224.900048][T11817] bond0 (unregistering): (slave erspan1): Releasing active interface [ 224.908475][T11817] erspan1: left promiscuous mode [ 224.922876][T11817] bond0 (unregistering): Released all slaves [ 224.995415][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 225.557116][T11844] loop3: detected capacity change from 0 to 2048 [ 225.567218][T11843] netlink: 'syz.6.2730': attribute type 4 has an invalid length. [ 225.575050][T11843] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2730'. [ 225.590095][T11844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.836006][T11842] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 225.985522][T11842] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 7 with error 28 [ 225.998067][T11842] EXT4-fs (loop3): This should not happen!! Data will be lost [ 225.998067][T11842] [ 226.008087][T11842] EXT4-fs (loop3): Total free blocks count 0 [ 226.014524][T11842] EXT4-fs (loop3): Free/Dirty block details [ 226.020610][T11842] EXT4-fs (loop3): free_blocks=2415919504 [ 226.026553][T11842] EXT4-fs (loop3): dirty_blocks=16 [ 226.031700][T11842] EXT4-fs (loop3): Block reservation details [ 226.037791][T11842] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 226.060162][T11864] netlink: 'syz.2.2723': attribute type 4 has an invalid length. [ 226.075635][T11864] netlink: 'syz.2.2723': attribute type 4 has an invalid length. [ 226.175028][ T29] audit: type=1326 audit(1768939627.174:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11866 comm="syz.5.2737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c6806acb9 code=0x0 [ 226.201731][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.405229][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 227.056734][T11875] ªªªªªª: renamed from wg2 [ 227.520949][T11886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2732'. [ 227.950946][T11897] netlink: 'syz.4.2735': attribute type 4 has an invalid length. [ 227.958841][T11897] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2735'. [ 228.116740][T11897] .`: renamed from bond0 [ 228.381414][ T29] audit: type=1400 audit(1768939629.384:3337): avc: denied { ioctl } for pid=11914 comm="syz.5.2744" path="socket:[41567]" dev="sockfs" ino=41567 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.856712][T11906] loop3: detected capacity change from 0 to 512 [ 229.052236][T11906] EXT4-fs (loop3): 1 orphan inode deleted [ 229.065313][ T12] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 229.074606][T11906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.075634][ T12] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 229.116550][T11906] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.203544][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.233020][T11951] : rxe_newlink: already configured on ipvlan0 [ 229.262176][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.274274][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.773805][ T29] audit: type=1326 audit(1768939630.775:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 229.813434][ T29] audit: type=1326 audit(1768939630.775:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 229.837154][ T29] audit: type=1326 audit(1768939630.775:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 229.861642][ T29] audit: type=1326 audit(1768939630.775:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 229.885267][ T29] audit: type=1326 audit(1768939630.775:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 229.909045][ T29] audit: type=1326 audit(1768939630.775:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 229.932764][ T29] audit: type=1326 audit(1768939630.775:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 229.956583][ T29] audit: type=1326 audit(1768939630.775:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa58c2aaa22 code=0x7ffc0000 [ 229.980172][ T29] audit: type=1326 audit(1768939630.805:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa58c26b58e code=0x7ffc0000 [ 230.003891][ T29] audit: type=1326 audit(1768939630.815:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11981 comm="syz.2.2765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa58c2aaae7 code=0x7ffc0000 [ 231.085561][T12016] loop3: detected capacity change from 0 to 512 [ 231.232850][T12016] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 231.405972][T12016] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 231.421797][T12016] EXT4-fs (loop3): 1 truncate cleaned up [ 231.438322][T12016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.742647][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.163187][T12111] netlink: 'syz.6.2788': attribute type 1 has an invalid length. [ 232.257820][T12111] bond0: (slave bridge7): making interface the new active one [ 232.290692][T12111] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 232.332790][T12119] macvlan2: entered promiscuous mode [ 232.338819][T12119] macvlan2: entered allmulticast mode [ 232.358036][T12119] bond0: entered promiscuous mode [ 232.363512][T12119] bridge7: entered promiscuous mode [ 232.414491][T12119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 232.446200][T12119] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 232.479795][T12119] bond0: left promiscuous mode [ 232.484932][T12119] bridge7: left promiscuous mode [ 232.985098][T12140] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2796'. [ 233.106067][T12150] netlink: 'syz.6.2811': attribute type 4 has an invalid length. [ 233.114001][T12150] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2811'. [ 233.181921][T12162] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2804'. [ 233.191298][T12162] 0ªî{X¹¦: renamed from gretap0 [ 233.201857][T12162] 0ªî{X¹¦: entered allmulticast mode [ 233.208603][T12162] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 233.243165][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2806'. [ 233.283024][T12168] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 233.291933][T10408] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.306524][T10408] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.321435][T10408] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.336098][T10408] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 233.485807][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2806'. [ 233.495572][T12174] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 233.577273][T12168] bond0 (unregistering): (slave geneve3): Releasing backup interface [ 233.802670][T12168] bond0 (unregistering): Released all slaves [ 233.916023][T10408] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 233.988262][T10408] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 234.196510][T10408] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 234.246035][T10408] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 234.370314][T12204] netlink: 'syz.4.2816': attribute type 1 has an invalid length. [ 234.442177][T12204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.479433][T12211] bond0: (slave ip6gretap1): making interface the new active one [ 234.492228][T12211] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 234.704587][T12204] veth25: entered promiscuous mode [ 234.712010][T12204] bond0: (slave veth25): Enslaving as an active interface with a down link [ 234.722502][T12210] syzkaller0: entered promiscuous mode [ 234.728112][T12210] syzkaller0: entered allmulticast mode [ 234.826545][T12204] erspan0: entered allmulticast mode [ 234.847520][T12204] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 236.149033][T12244] loop3: detected capacity change from 0 to 512 [ 236.658243][T12251] loop3: detected capacity change from 0 to 512 [ 236.698856][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 236.727528][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 236.891419][T12251] loop3: detected capacity change from 0 to 2048 [ 237.043184][T12262] lo speed is unknown, defaulting to 1000 [ 237.121841][T12251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.169600][T12263] lo speed is unknown, defaulting to 1000 [ 237.392576][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.556603][T12270] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 237.975607][T12300] syzkaller0: entered promiscuous mode [ 237.981278][T12300] syzkaller0: entered allmulticast mode [ 238.220552][T12307] netlink: 'syz.5.2842': attribute type 4 has an invalid length. [ 238.228463][T12307] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2842'. [ 238.441432][T12307] .`: renamed from bond0 (while UP) [ 238.692288][T12313] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 238.842983][T12323] tipc: Enabled bearer , priority 0 [ 238.935690][T12326] syzkaller0: entered promiscuous mode [ 238.941414][T12326] syzkaller0: entered allmulticast mode [ 238.990651][T12323] tipc: Resetting bearer [ 239.009015][T12321] tipc: Resetting bearer [ 239.031665][T12321] tipc: Disabling bearer [ 239.119573][T12337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2851'. [ 239.147090][T12337] macvlan2: entered promiscuous mode [ 239.152616][T12337] bond0: entered promiscuous mode [ 239.157825][T12337] bridge7: entered promiscuous mode [ 239.172476][T12337] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.430459][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 239.430536][ T29] audit: type=1326 audit(1768939896.437:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12341 comm="syz.3.2854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92068bacb9 code=0x0 [ 239.708069][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2855'. [ 239.764826][T12353] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 239.796459][T12353] macvlan1: entered promiscuous mode [ 239.802038][T12353] macvlan1: entered allmulticast mode [ 239.809221][T12353] bond0: entered promiscuous mode [ 239.814360][T12353] bridge5: entered promiscuous mode [ 239.833852][T12353] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 239.857472][T12353] bond0: left promiscuous mode [ 239.862562][T12353] bridge5: left promiscuous mode [ 240.208498][T12366] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 240.298118][T12389] loop3: detected capacity change from 0 to 128 [ 240.331228][T12389] bio_check_eod: 3 callbacks suppressed [ 240.331275][T12389] syz.3.2863: attempt to access beyond end of device [ 240.331275][T12389] loop3: rw=2049, sector=138, nr_sectors = 4 limit=128 [ 240.390223][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 240.402948][T12397] ip6gretap1: entered promiscuous mode [ 240.409967][T12397] macvlan2: entered promiscuous mode [ 240.415507][T12397] bond0: entered promiscuous mode [ 240.422891][T12389] syz.3.2863: attempt to access beyond end of device [ 240.422891][T12389] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 240.437456][T12389] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 240.447108][T12397] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 240.454350][T12389] syz.3.2863: attempt to access beyond end of device [ 240.454350][T12389] loop3: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 240.468180][T12389] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 240.478108][T12399] syz.3.2863: attempt to access beyond end of device [ 240.478108][T12399] loop3: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 240.492473][T12399] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 240.502610][T12399] syz.3.2863: attempt to access beyond end of device [ 240.502610][T12399] loop3: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 240.517230][T12399] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 240.529512][T12389] syz.3.2863: attempt to access beyond end of device [ 240.529512][T12389] loop3: rw=2049, sector=146, nr_sectors = 60 limit=128 [ 240.550160][T12399] syz.3.2863: attempt to access beyond end of device [ 240.550160][T12399] loop3: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 240.565718][T12399] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 240.589840][T12399] syz.3.2863: attempt to access beyond end of device [ 240.589840][T12399] loop3: rw=8390657, sector=144, nr_sectors = 2 limit=128 [ 240.604187][T12399] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 240.636555][T12389] syz.3.2863: attempt to access beyond end of device [ 240.636555][T12389] loop3: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 240.650681][T12389] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 240.674426][T12389] syz.3.2863: attempt to access beyond end of device [ 240.674426][T12389] loop3: rw=8390657, sector=140, nr_sectors = 2 limit=128 [ 240.689371][T12389] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 240.730279][T12389] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 240.810213][T12389] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 241.030318][T12414] netlink: 'syz.6.2875': attribute type 4 has an invalid length. [ 241.038237][T12414] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2875'. [ 241.255335][T12416] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 241.354500][T12429] netlink: 'syz.2.2880': attribute type 4 has an invalid length. [ 241.362388][T12429] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2880'. [ 241.599010][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 241.931877][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 241.955628][T12462] macvlan1: entered promiscuous mode [ 241.961142][T12462] bond0: entered promiscuous mode [ 241.966391][T12462] bridge5: entered promiscuous mode [ 241.974748][T12462] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 242.085905][T12468] lo speed is unknown, defaulting to 1000 [ 242.761505][T12490] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 242.849077][T12473] loop3: detected capacity change from 0 to 1024 [ 242.877267][T12473] EXT4-fs: inline encryption not supported [ 242.883347][T12473] EXT4-fs: Ignoring removed mblk_io_submit option [ 242.978829][T12473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.033009][T12473] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2890: bg 0: block 281: padding at end of block bitmap is not set [ 243.149782][T12473] EXT4-fs (loop3): Remounting filesystem read-only [ 243.177727][T12473] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.3.2890: cleanup dec ref error -28 [ 243.684412][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 243.989186][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2903'. [ 244.110214][T12528] netlink: 'syz.2.2906': attribute type 4 has an invalid length. [ 244.118131][T12528] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2906'. [ 244.216294][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.622594][T12543] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 244.887741][T12576] netlink: 'syz.4.2920': attribute type 1 has an invalid length. [ 244.906942][T12576] ip6tnl0: Caught tx_queue_len zero misconfig [ 245.169166][T12591] loop3: detected capacity change from 0 to 512 [ 245.183872][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 245.201003][T12591] loop3: detected capacity change from 0 to 2048 [ 245.208038][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 245.236623][T12591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.449615][T12597] netlink: 'syz.4.2927': attribute type 1 has an invalid length. [ 245.474288][T12597] bond10: (slave gretap0): making interface the new active one [ 245.483168][T12597] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 245.655146][T12605] tipc: Enabling of bearer rejected, failed to enable media [ 246.424818][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2928'. [ 246.622225][T12614] netlink: 'syz.5.2931': attribute type 1 has an invalid length. [ 246.637026][T12614] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.657814][T12614] bond6: (slave gretap2): making interface the new active one [ 246.681387][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.731553][T12619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12619 comm=syz.5.2931 [ 246.750137][T12614] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 246.875800][T12632] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.919376][T12632] bond3: (slave lo): Enslaving as a backup interface with an up link [ 246.954799][T12632] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 247.033822][ T29] audit: type=1400 audit(1768939904.037:3377): avc: denied { append } for pid=12642 comm="syz.3.2942" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 247.036115][T12643] usb usb1: usbfs: process 12643 (syz.3.2942) did not claim interface 0 before use [ 248.403116][T12676] tipc: Enabling of bearer rejected, failed to enable media [ 249.285043][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2949'. [ 249.744657][T12692] bond11: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.779821][T12692] bond11: (slave lo): Enslaving as a backup interface with an up link [ 249.805675][T12692] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 250.346907][T12728] loop3: detected capacity change from 0 to 1024 [ 250.377954][T12728] EXT4-fs: Ignoring removed orlov option [ 250.455282][T12728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.548992][T12728] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12728 comm=syz.3.2965 [ 250.626051][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.679268][T12742] loop3: detected capacity change from 0 to 512 [ 250.905029][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 250.921965][T12742] loop3: detected capacity change from 0 to 2048 [ 250.928560][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.976897][T12742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.037502][T12751] netlink: 'syz.6.2970': attribute type 4 has an invalid length. [ 251.045631][T12751] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2970'. [ 251.062225][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.359814][T12780] lo speed is unknown, defaulting to 1000 [ 251.545984][T12784] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 251.819814][T12797] netlink: 'syz.2.2985': attribute type 4 has an invalid length. [ 251.827901][T12797] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2985'. [ 252.044712][T12809] netlink: 'syz.2.2991': attribute type 4 has an invalid length. [ 252.052573][T12809] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2991'. [ 252.187235][T12816] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 252.245994][ T29] audit: type=1326 audit(1768939909.257:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.270403][ T29] audit: type=1326 audit(1768939909.257:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.312056][T12823] loop3: detected capacity change from 0 to 512 [ 252.364506][ T29] audit: type=1326 audit(1768939909.257:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.388198][ T29] audit: type=1326 audit(1768939909.257:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.412139][ T29] audit: type=1326 audit(1768939909.257:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.435901][ T29] audit: type=1326 audit(1768939909.257:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.459562][ T29] audit: type=1326 audit(1768939909.257:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.483196][ T29] audit: type=1326 audit(1768939909.257:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.507293][ T29] audit: type=1326 audit(1768939909.257:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.531052][ T29] audit: type=1326 audit(1768939909.257:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12821 comm="syz.2.2996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58c2aacb9 code=0x7ffc0000 [ 252.556667][T12823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.569439][T12823] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.612941][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.706453][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2999'. [ 252.715658][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2999'. [ 252.817463][T12837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3000'. [ 252.892183][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'. [ 253.035308][T12845] netlink: 'syz.5.3003': attribute type 4 has an invalid length. [ 253.043269][T12845] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3003'. [ 253.123475][T12853] netlink: 'syz.5.3007': attribute type 4 has an invalid length. [ 253.131594][T12853] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3007'. [ 253.165771][T12856] loop3: detected capacity change from 0 to 128 [ 253.255779][T12856] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.297452][T12858] : rxe_newlink: already configured on ipvlan0 [ 253.304683][T12856] ext4 filesystem being mounted at /553/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 254.107324][ T3321] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.217793][T12889] netlink: 'syz.3.3013': attribute type 10 has an invalid length. [ 254.473176][T12897] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 254.615301][T12898] netlink: 'syz.6.3019': attribute type 4 has an invalid length. [ 254.623203][T12898] __nla_validate_parse: 1 callbacks suppressed [ 254.623221][T12898] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3019'. [ 254.866004][T12910] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.917342][T12910] bond6: (slave lo): Enslaving as a backup interface with an up link [ 254.937205][T12910] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 255.223137][T12920] syzkaller0: entered promiscuous mode [ 255.228799][T12920] syzkaller0: entered allmulticast mode [ 255.336489][T12928] netlink: 'syz.3.3031': attribute type 21 has an invalid length. [ 255.358211][T12928] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 255.366256][T12928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3031'. [ 255.421560][T12931] netlink: 'syz.5.3032': attribute type 4 has an invalid length. [ 255.429496][T12931] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3032'. [ 255.672505][T12934] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 255.744254][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3034'. [ 255.806292][T12944] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3036'. [ 255.850592][T12948] loop3: detected capacity change from 0 to 512 [ 255.860245][ T3409] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 255.868942][ T3409] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.912181][T12949] fido_id[12949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 255.973117][T12953] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3049'. [ 255.974301][T12954] bond6: option mode: unable to set because the bond device has slaves [ 256.013590][T12954] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 256.048433][T12964] loop3: detected capacity change from 0 to 1024 [ 256.061559][T12964] EXT4-fs: Ignoring removed orlov option [ 256.088692][T12964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.145110][T12971] lo speed is unknown, defaulting to 1000 [ 256.156602][T12955] xt_connbytes: Forcing CT accounting to be enabled [ 256.197391][T12978] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3044'. [ 256.217962][T12976] lo speed is unknown, defaulting to 1000 [ 256.238975][T12979] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3041'. [ 256.283315][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.471523][T12985] syzkaller0: entered promiscuous mode [ 256.477187][T12985] syzkaller0: entered allmulticast mode [ 256.501108][T12971] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3041'. [ 256.606750][T12993] loop3: detected capacity change from 0 to 512 [ 256.695554][T12993] loop3: detected capacity change from 0 to 2048 [ 256.756956][T12993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.813026][T13006] validate_nla: 2 callbacks suppressed [ 256.813048][T13006] netlink: 'syz.6.3054': attribute type 4 has an invalid length. [ 256.828931][T13006] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3054'. [ 256.839302][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.873169][T13008] syzkaller0: entered promiscuous mode [ 256.878922][T13008] syzkaller0: entered allmulticast mode [ 257.009070][T13016] loop3: detected capacity change from 0 to 512 [ 257.019382][ T3409] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 257.044112][ T3409] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.077513][T13017] fido_id[13017]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 257.344432][T13039] netlink: 'syz.3.3065': attribute type 4 has an invalid length. [ 257.379160][T13041] netlink: 'syz.2.3066': attribute type 4 has an invalid length. [ 257.428095][T13046] loop3: detected capacity change from 0 to 128 [ 257.929624][T13046] bio_check_eod: 2 callbacks suppressed [ 257.929776][T13046] syz.3.3068: attempt to access beyond end of device [ 257.929776][T13046] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 257.949559][T13046] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 257.960295][T13053] syz.3.3068: attempt to access beyond end of device [ 257.960295][T13053] loop3: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 257.974167][T13053] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 259.579290][T13086] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001158 ! [ 259.593760][T13090] loop3: detected capacity change from 0 to 1024 [ 259.615630][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 259.615647][ T29] audit: type=1326 audit(1768939916.627:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.645965][ T29] audit: type=1326 audit(1768939916.627:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.669668][ T29] audit: type=1326 audit(1768939916.627:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.677132][T13086] __nla_validate_parse: 9 callbacks suppressed [ 259.677190][T13086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3093'. [ 259.693968][ T29] audit: type=1326 audit(1768939916.627:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.732650][ T29] audit: type=1326 audit(1768939916.627:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.756409][ T29] audit: type=1326 audit(1768939916.627:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.845479][T13090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 259.867406][ T29] audit: type=1326 audit(1768939916.877:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.895024][T13090] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.897079][ T29] audit: type=1326 audit(1768939916.907:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.973569][ T29] audit: type=1326 audit(1768939916.967:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 259.997488][ T29] audit: type=1326 audit(1768939916.977:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.4.3083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f655167acb9 code=0x7ffc0000 [ 260.224128][T13107] netlink: 'syz.4.3087': attribute type 4 has an invalid length. [ 260.232261][T13107] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3087'. [ 260.374396][T13110] : rxe_newlink: already configured on ipvlan0 [ 260.463450][T13113] netlink: 'syz.6.3090': attribute type 4 has an invalid length. [ 260.471315][T13113] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3090'. [ 260.623861][T13114] ================================================================== [ 260.632030][T13114] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 260.640692][T13114] [ 260.643048][T13114] write to 0xffff8881162db0a8 of 8 bytes by task 13111 on cpu 0: [ 260.650887][T13114] shmem_file_splice_read+0x470/0x600 [ 260.656345][T13114] splice_direct_to_actor+0x26e/0x670 [ 260.661772][T13114] do_splice_direct+0x119/0x1a0 [ 260.666840][T13114] do_sendfile+0x380/0x650 [ 260.671304][T13114] __x64_sys_sendfile64+0x105/0x150 [ 260.676600][T13114] x64_sys_call+0x2db1/0x3000 [ 260.681334][T13114] do_syscall_64+0xc0/0x2a0 [ 260.686134][T13114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.692100][T13114] [ 260.694459][T13114] write to 0xffff8881162db0a8 of 8 bytes by task 13114 on cpu 1: [ 260.702291][T13114] shmem_file_splice_read+0x470/0x600 [ 260.707712][T13114] splice_direct_to_actor+0x26e/0x670 [ 260.713207][T13114] do_splice_direct+0x119/0x1a0 [ 260.718258][T13114] do_sendfile+0x380/0x650 [ 260.722702][T13114] __x64_sys_sendfile64+0x105/0x150 [ 260.727960][T13114] x64_sys_call+0x2db1/0x3000 [ 260.732802][T13114] do_syscall_64+0xc0/0x2a0 [ 260.737330][T13114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.743347][T13114] [ 260.745698][T13114] value changed: 0x000000000003a49c -> 0x000000000003a502 [ 260.752920][T13114] [ 260.755260][T13114] Reported by Kernel Concurrency Sanitizer on: [ 260.761547][T13114] CPU: 1 UID: 0 PID: 13114 Comm: syz.4.3089 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.773151][T13114] Tainted: [W]=WARN [ 260.777097][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.787353][T13114] ================================================================== [ 261.094503][T10408] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:24: bg 0: block 112: padding at end of block bitmap is not set [ 261.109692][T10408] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 24 with max blocks 4 with error 117 [ 261.123453][T10408] EXT4-fs (loop3): This should not happen!! Data will be lost [ 261.123453][T10408] [ 261.137588][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.