last executing test programs: 11m12.160891906s ago: executing program 32 (id=1556): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000080)=0x8) 7m22.846707326s ago: executing program 33 (id=6046): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 7m1.082284125s ago: executing program 34 (id=6431): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101882) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x3, 0x179}, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 6m57.524007984s ago: executing program 35 (id=6485): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002400)={0x3, 'vlan0\x00', {0x40}, 0xc}) 4m9.306289043s ago: executing program 2 (id=10058): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) setpriority(0x2, 0x0, 0xffffffffffffffcd) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x120, 0x130, 0x26010000, 0x0, 0x130, 0x210, 0x220, 0x220, 0x210, 0x220, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [0x0, 0xff, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000], 'ip6_vti0\x00', 'vxcan1\x00', {}, {0x589b843e1c2c028}, 0x2e, 0xd4, 0x6, 0xa}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0x25e}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4, 0x2}}}, {{@ipv6={@dev, @mcast1, [], [], 'bridge_slave_0\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmmsg$inet6(r5, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000240)=0x4) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r9, &(0x7f0000000c40)=ANY=[], 0x13) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) 4m9.204850402s ago: executing program 36 (id=10059): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x1a8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x9, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x4, [0x5, 0x0, 0x2, 0x6, 0x2, 0x2], 0x3, 0x4}, {0x3, [0x6, 0x4, 0x2, 0x0, 0x2, 0x4], 0x4, 0xf5bd8247a5d786aa}}}}, {{@uncond, 0x0, 0x70, 0xfffffffffffffeea}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0x200af76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x8000000000000001) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 4m8.264781055s ago: executing program 2 (id=10070): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4m8.152936586s ago: executing program 2 (id=10071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4m7.980112101s ago: executing program 2 (id=10073): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 4m7.920698107s ago: executing program 2 (id=10074): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 4m7.388887393s ago: executing program 2 (id=10079): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m7.388673384s ago: executing program 37 (id=10079): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m49.05814205s ago: executing program 4 (id=13222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfa46}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x31}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m49.05794092s ago: executing program 4 (id=13223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 1m49.037736061s ago: executing program 4 (id=13225): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m49.011481694s ago: executing program 4 (id=13229): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1m48.750142807s ago: executing program 4 (id=13237): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100"], 0x1c}, 0x1, 0x0, 0x0, 0x40c89}, 0x8004) 1m48.089357556s ago: executing program 4 (id=13252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000c74c0000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 1m48.034650231s ago: executing program 38 (id=13252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000c74c0000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcd2, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) 32.43360047s ago: executing program 1 (id=15370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180)=0x7, 0x4) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)='<', 0x1}], 0x1}}], 0x1, 0x0) 32.362325916s ago: executing program 1 (id=15371): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd5, 0x0, &(0x7f0000000980)="b0ff04c66b0d698cb89e2fe086dd1f74ffff06000000ff05001000000000ac14140746647b7954c4c06b580febc28eb143d0f6c0bad62f67a04402ba4125c7024f63fdb0b6c8ee826b4dfe6042a2f057c66cad677d850ea9928bcfcb47e585e427746ed3b27c40060cbd030a6d675c9926af53cd3085b24f9b7a486775c4f284f8c5a572ca115bce90c0ee9d4e7a07f5f1518092cb1f156694036f6618a59196631e6303fd5307d1112601d3641c9492f7dc3503416836b14590c53b1fc1ac149b70cc1142d6bc57fc3a76839fa2f96878b520fedf", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 32.358803696s ago: executing program 1 (id=15373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x1, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0xfffffffc, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x0, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 32.216877609s ago: executing program 1 (id=15381): r0 = fsopen(0x0, 0x1) fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) fchdir(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="67a967dffc87add05fabb5401a0c8407f2022ed8d63bd7787b9aca197f86092b49f834a267f3b2289aed55bdee8ee6bfbe19fac42e1e2cbb5905b73614571f8251c2c13759eada"], 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) 32.09714821s ago: executing program 1 (id=15388): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x4) 31.381638543s ago: executing program 1 (id=15407): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) 31.361650785s ago: executing program 39 (id=15407): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0) 27.315744996s ago: executing program 8 (id=15523): io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) socket(0x8, 0x1, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) 26.845135918s ago: executing program 8 (id=15525): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x800000ff, 0x40, 0x1}, 0x50) 26.220023863s ago: executing program 8 (id=15534): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4}) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000200)}) syz_io_uring_submit(r1, r2, &(0x7f0000001700)=@IORING_OP_SPLICE={0x1e, 0x50, 0x0, @fd, 0x7, {0x0, r0}, 0xfff, 0x1, 0x0, {0x0, 0x0, r0}}) io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0) 26.14119192s ago: executing program 5 (id=15536): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x240c00, 0x0) flock(r0, 0x8) 26.14095601s ago: executing program 8 (id=15537): r0 = fsopen(0x0, 0x1) fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) fchdir(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="67a967dffc87add05fabb5401a0c8407f2022ed8d63bd7787b9aca197f86092b49f834a267f3b2289aed55bdee8ee6bfbe19fac42e1e2cbb5905b73614571f8251c2c13759eada"], 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) 26.13980494s ago: executing program 5 (id=15538): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000c40)={[{@dioread_nolock}, {@norecovery}, {@stripe={'stripe', 0x3d, 0x3ff}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@measure}, {@fsuuid={'fsuuid', 0x3d, {[0x36, 0x37, 0x38, 0x33, 0x38, 0x37, 0x66, 0x65], 0x2d, [0x38, 0x36, 0x66, 0x30], 0x2d, [0x32, 0x62, 0x34, 0x39], 0x2d, [0x33, 0x38, 0x65, 0x62], 0x2d, [0x33, 0x65, 0x35, 0x34, 0x61, 0x35, 0x30, 0x31]}}}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0800000002000000"], 0x0) 26.010105542s ago: executing program 8 (id=15539): rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) membarrier(0x4, 0x0) 25.949024237s ago: executing program 5 (id=15541): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x6f6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r9, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 24.844508916s ago: executing program 5 (id=15549): r0 = fsopen(0x0, 0x1) fsopen(&(0x7f0000000380)='rpc_pipefs\x00', 0x0) fchdir(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=ANY=[@ANYRES32=r0, @ANYRESOCT, @ANYBLOB="67a967dffc87add05fabb5401a0c8407f2022ed8d63bd7787b9aca197f86092b49f834a267f3b2289aed55bdee8ee6bfbe19fac42e1e2cbb5905b73614571f8251c2c13759eada"], 0x48) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901) 24.441043102s ago: executing program 8 (id=15552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYBLOB="0000000000000000b70200000000000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 24.440893452s ago: executing program 40 (id=15552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000600000018110000", @ANYBLOB="0000000000000000b70200000000000085000000860000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 24.387885356s ago: executing program 5 (id=15554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x4}]}, 0x48}}, 0x0) 23.024366058s ago: executing program 5 (id=15567): r0 = epoll_create1(0x80000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000000}) 22.988515251s ago: executing program 41 (id=15567): r0 = epoll_create1(0x80000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000000}) 2.779358532s ago: executing program 9 (id=15984): socket$kcm(0x2, 0x3, 0x106) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x6, 0x4, 0x5, 0x9, 0x0, 0x6, 0x90044, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xae7a, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x100200, 0x2800000, 0x8, 0x7, 0x5, 0x1, 0xfff7, 0x0, 0x0, 0x0, 0x45}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.669715882s ago: executing program 9 (id=15985): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="01980000000000002000128008", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x78, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3, 0x9}, {}, {0xffff, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b09, 0x20000000, 0x1, 0x2, 0x5, {0x92, 0x2, 0x2, 0x0, 0x3, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0xff}}]}]}}, @TCA_RATE={0x6, 0x5, {0x37, 0x3}}]}, 0x78}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4) 2.648442134s ago: executing program 9 (id=15987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) 1.901037251s ago: executing program 0 (id=15999): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x10, 0x27, 0x1, 0x70bd2a}, 0x10}], 0x1}, 0x0) 1.884892822s ago: executing program 0 (id=16000): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@usrquota}]}, 0x1, 0x565, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1.756449544s ago: executing program 9 (id=16005): fsopen(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) open(0x0, 0x981f40, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x6, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r4, 0xfffffff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1.666450562s ago: executing program 3 (id=16010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x80, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8001, 0x3151, 0x401, 0x6, 0xaa3c}, 0x3, 0x1, 0x6, 0x6, 0x7, 0x13, 0x11, 0xf, 0x7, 0x7f, {0x6, 0x407c, 0x7, 0x5, 0x2b52, 0x2}}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}]}, 0x80}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) 1.481852478s ago: executing program 3 (id=16012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.411509574s ago: executing program 3 (id=16013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x4000040) 1.394454105s ago: executing program 3 (id=16014): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 1.376335627s ago: executing program 3 (id=16015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000001040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000400)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) 1.084119104s ago: executing program 0 (id=16016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x2, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 813.136727ms ago: executing program 9 (id=16018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 812.828447ms ago: executing program 6 (id=16019): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0xa0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfffd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)}], 0x2}, 0x5) 683.187929ms ago: executing program 6 (id=16021): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 682.111719ms ago: executing program 9 (id=16022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)}], 0x1}}], 0x1, 0x0) 639.661343ms ago: executing program 6 (id=16023): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 628.915224ms ago: executing program 7 (id=16024): socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmmsg$sock(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) 609.652566ms ago: executing program 6 (id=16025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 469.663188ms ago: executing program 6 (id=16026): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@usrquota}]}, 0x1, 0x565, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) fallocate(r0, 0x0, 0x0, 0x8800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 430.886882ms ago: executing program 3 (id=16027): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40048000) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12120) 430.321012ms ago: executing program 0 (id=16028): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x2, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x6aa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r0, r6, 0x0) 340.7792ms ago: executing program 7 (id=16029): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x2800008, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x16, 0x10, &(0x7f00000018c0)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x8000000000000000}, 0x18) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300), &(0x7f0000000580)) 313.234552ms ago: executing program 6 (id=16030): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) shutdown(r3, 0x1) 270.142856ms ago: executing program 0 (id=16031): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 253.027308ms ago: executing program 0 (id=16032): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20850}, 0x49) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40086610, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x3bd) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) write(r1, &(0x7f0000004200)='t', 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x154}}, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 142.937987ms ago: executing program 7 (id=16033): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0xa0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfffd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)}], 0x2}, 0x5) 17.972798ms ago: executing program 7 (id=16034): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 17.541649ms ago: executing program 7 (id=16035): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) 0s ago: executing program 7 (id=16036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) kernel console output (not intermixed with test programs): ter_driver returned -16 [ 681.420437][ T6937] tipc: Enabled bearer , priority 0 [ 681.428840][ T6937] syzkaller0: entered promiscuous mode [ 681.434378][ T6937] syzkaller0: entered allmulticast mode [ 681.444969][ T6937] tipc: Resetting bearer [ 681.453954][ T6937] tipc: Disabling bearer [ 681.500710][ T6945] loop1: detected capacity change from 0 to 512 [ 681.507764][ T6945] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 681.517148][ T6945] EXT4-fs (loop1): couldn't read superblock of external journal [ 681.555408][ T6953] loop9: detected capacity change from 0 to 2048 [ 681.562472][ T6953] EXT4-fs (loop9): unsupported inode size: 84 [ 681.568594][ T6953] EXT4-fs (loop9): blocksize: 4096 [ 681.616441][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13975'. [ 681.625908][ T6963] bridge_slave_1: left allmulticast mode [ 681.632099][ T6963] bridge_slave_1: left promiscuous mode [ 681.639178][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.648030][ T6963] bridge_slave_0: left allmulticast mode [ 681.653772][ T6963] bridge_slave_0: left promiscuous mode [ 681.659520][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.806266][ T6979] tipc: Started in network mode [ 681.811283][ T6979] tipc: Node identity e65305a09d29, cluster identity 4711 [ 681.818583][ T6979] tipc: Enabled bearer , priority 0 [ 681.829111][ T6979] syzkaller0: entered promiscuous mode [ 681.834676][ T6979] syzkaller0: entered allmulticast mode [ 681.844782][ T6979] tipc: Resetting bearer [ 681.851682][ T6979] tipc: Resetting bearer [ 681.859272][ T6979] tipc: Disabling bearer [ 681.893373][ T6988] tipc: Enabled bearer , priority 0 [ 681.900486][ T6988] syzkaller0: entered promiscuous mode [ 681.906083][ T6988] syzkaller0: entered allmulticast mode [ 681.915832][ T6988] tipc: Resetting bearer [ 681.923001][ T6987] tipc: Resetting bearer [ 681.931293][ T6987] tipc: Disabling bearer [ 681.951843][ T6990] loop9: detected capacity change from 0 to 512 [ 681.959207][ T6990] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 681.968090][ T6990] EXT4-fs (loop9): couldn't read superblock of external journal [ 682.050158][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13993'. [ 682.061769][ T7006] bridge_slave_1: left allmulticast mode [ 682.067444][ T7006] bridge_slave_1: left promiscuous mode [ 682.073218][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.081745][ T7006] bridge_slave_0: left allmulticast mode [ 682.087504][ T7006] bridge_slave_0: left promiscuous mode [ 682.093393][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.154442][ T7013] tipc: Enabled bearer , priority 0 [ 682.161601][ T7013] syzkaller0: entered promiscuous mode [ 682.167079][ T7013] syzkaller0: entered allmulticast mode [ 682.175750][ T7013] tipc: Resetting bearer [ 682.182343][ T7013] tipc: Resetting bearer [ 682.189751][ T7013] tipc: Disabling bearer [ 682.243983][ T7017] netlink: 'syz.3.13999': attribute type 10 has an invalid length. [ 682.316074][ T7021] tipc: Enabled bearer , priority 0 [ 682.327636][ T7021] syzkaller0: entered promiscuous mode [ 682.333273][ T7021] syzkaller0: entered allmulticast mode [ 682.348898][ T7021] tipc: Resetting bearer [ 682.355683][ T7020] tipc: Resetting bearer [ 682.364505][ T7020] tipc: Disabling bearer [ 682.462493][ T7047] tipc: Enabled bearer , priority 0 [ 682.470076][ T7047] syzkaller0: entered promiscuous mode [ 682.475594][ T7047] syzkaller0: entered allmulticast mode [ 682.489377][ T7047] tipc: Resetting bearer [ 682.496464][ T7047] tipc: Resetting bearer [ 682.504570][ T7047] tipc: Disabling bearer [ 682.819426][ T7064] tipc: Enabled bearer , priority 0 [ 682.826486][ T7064] syzkaller0: entered promiscuous mode [ 682.832026][ T7064] syzkaller0: entered allmulticast mode [ 682.840847][ T7064] tipc: Resetting bearer [ 682.851346][ T7063] tipc: Resetting bearer [ 683.018996][ T7073] loop1: detected capacity change from 0 to 1024 [ 683.034490][ T7073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.292058][ T7063] tipc: Disabling bearer [ 683.343959][ T7079] tipc: Started in network mode [ 683.348922][ T7079] tipc: Node identity 1a1ebc0943a4, cluster identity 4711 [ 683.356122][ T7079] tipc: Enabled bearer , priority 0 [ 683.364217][ T7079] syzkaller0: entered promiscuous mode [ 683.369802][ T7079] syzkaller0: entered allmulticast mode [ 683.436472][ T7079] tipc: Resetting bearer [ 683.443592][ T7079] tipc: Resetting bearer [ 683.451579][ T7079] tipc: Disabling bearer [ 683.671724][ T7086] __nla_validate_parse: 2 callbacks suppressed [ 683.671741][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14029'. [ 683.792613][ T7099] syzkaller1: entered promiscuous mode [ 683.798253][ T7099] syzkaller1: entered allmulticast mode [ 683.805188][ T7099] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 683.899796][ T4845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.023992][ T7112] tipc: Enabled bearer , priority 0 [ 684.031098][ T7112] syzkaller0: entered promiscuous mode [ 684.036729][ T7112] syzkaller0: entered allmulticast mode [ 684.045927][ T7112] tipc: Resetting bearer [ 684.052381][ T7111] tipc: Resetting bearer [ 684.059663][ T7111] tipc: Disabling bearer [ 684.932889][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811be76800: rx timeout, send abort [ 684.941148][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811be76800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 684.990038][ T7127] loop8: detected capacity change from 0 to 4096 [ 685.046241][ T7133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14048'. [ 685.064595][ T7127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.091644][ T4316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.367947][ T7146] tipc: Enabled bearer , priority 0 [ 685.503857][ T7146] syzkaller0: entered promiscuous mode [ 685.509470][ T7146] syzkaller0: entered allmulticast mode [ 685.521254][ T7146] tipc: Resetting bearer [ 685.527773][ T7146] tipc: Resetting bearer [ 685.534986][ T7146] tipc: Disabling bearer [ 685.542849][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14055'. [ 685.619734][ T7168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14059'. [ 685.666905][ T7173] tipc: Enabled bearer , priority 0 [ 685.673907][ T7173] syzkaller0: entered promiscuous mode [ 685.679371][ T7173] syzkaller0: entered allmulticast mode [ 685.688796][ T7173] tipc: Resetting bearer [ 685.695462][ T7172] tipc: Resetting bearer [ 685.706419][ T7172] tipc: Disabling bearer [ 685.842621][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14070'. [ 685.896672][ T7199] tipc: Enabled bearer , priority 0 [ 685.904080][ T7199] syzkaller0: entered promiscuous mode [ 685.909605][ T7199] syzkaller0: entered allmulticast mode [ 685.918673][ T7199] tipc: Resetting bearer [ 685.925202][ T7198] tipc: Resetting bearer [ 685.933077][ T7198] tipc: Disabling bearer [ 686.000365][ T7202] loop3: detected capacity change from 0 to 1024 [ 686.017500][ T7202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.514600][ T7214] loop1: detected capacity change from 0 to 512 [ 686.932383][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.212730][ T7265] tipc: Enabled bearer , priority 0 [ 687.219785][ T7265] syzkaller0: entered promiscuous mode [ 687.225400][ T7265] syzkaller0: entered allmulticast mode [ 687.234622][ T7265] tipc: Resetting bearer [ 687.244994][ T7265] tipc: Resetting bearer [ 687.252354][ T7265] tipc: Disabling bearer [ 687.644105][ T7276] loop9: detected capacity change from 0 to 2048 [ 687.651702][ T7276] EXT4-fs (loop9): unsupported inode size: 84 [ 687.657820][ T7276] EXT4-fs (loop9): blocksize: 4096 [ 687.791638][ T7280] loop9: detected capacity change from 0 to 512 [ 687.799080][ T7280] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 687.812190][ T7280] EXT4-fs (loop9): 1 truncate cleaned up [ 687.818123][ T7280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.831957][ T29] audit: type=1400 audit(1767948993.025:6459): avc: denied { setattr } for pid=7279 comm="syz.9.14103" path="/387/bus/cgroup.controllers" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 688.022224][ T2810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.493882][ T7308] loop8: detected capacity change from 0 to 2048 [ 689.501596][ T7308] EXT4-fs (loop8): unsupported inode size: 84 [ 689.507772][ T7308] EXT4-fs (loop8): blocksize: 4096 [ 689.767620][ T7316] tipc: Enabled bearer , priority 0 [ 689.783224][ T7316] syzkaller0: entered promiscuous mode [ 689.788737][ T7316] syzkaller0: entered allmulticast mode [ 689.851868][ T7316] tipc: Resetting bearer [ 689.858601][ T7316] tipc: Resetting bearer [ 689.868332][ T7316] tipc: Disabling bearer [ 690.300706][ T29] audit: type=1400 audit(1767948995.485:6460): avc: denied { bind } for pid=7342 comm="syz.1.14126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 690.320268][ T29] audit: type=1400 audit(1767948995.485:6461): avc: denied { name_bind } for pid=7342 comm="syz.1.14126" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 690.341952][ T29] audit: type=1400 audit(1767948995.485:6462): avc: denied { node_bind } for pid=7342 comm="syz.1.14126" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 690.620407][ T7361] netlink: 'syz.8.14135': attribute type 1 has an invalid length. [ 690.628347][ T7361] netlink: 'syz.8.14135': attribute type 2 has an invalid length. [ 690.932036][ T29] audit: type=1400 audit(1767948996.125:6463): avc: denied { mount } for pid=7385 comm="syz.9.14146" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 690.975562][ T7390] netlink: 'syz.8.14148': attribute type 1 has an invalid length. [ 690.983470][ T7390] netlink: 'syz.8.14148': attribute type 2 has an invalid length. [ 691.222237][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14161'. [ 691.569106][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14164'. [ 691.731991][ T7432] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14166'. [ 691.856974][ T7449] loop3: detected capacity change from 0 to 512 [ 691.951727][ T7449] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 691.959671][ T7449] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 691.968499][ T7449] EXT4-fs (loop3): orphan cleanup on readonly fs [ 691.974973][ T7449] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 691.984517][ T7449] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 691.999183][ T7449] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 692.043847][ T7449] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.14173: bg 0: block 40: padding at end of block bitmap is not set [ 692.064615][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14172'. [ 692.073765][ T7453] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14172'. [ 692.089989][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14174'. [ 692.107553][ T7449] EXT4-fs (loop3): Remounting filesystem read-only [ 692.141253][ T7449] EXT4-fs (loop3): 1 truncate cleaned up [ 692.156331][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 692.170417][ T29] audit: type=1400 audit(1767948997.355:6464): avc: denied { watch watch_reads } for pid=7448 comm="syz.3.14173" path="/171/file2" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 692.203690][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.240532][ T7471] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14182'. [ 692.546583][ T7505] netlink: 'syz.0.14198': attribute type 10 has an invalid length. [ 692.554686][ T7505] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14198'. [ 692.585977][ T7508] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14200'. [ 692.664174][ T7525] loop3: detected capacity change from 0 to 2048 [ 692.671989][ T7525] EXT4-fs (loop3): unsupported inode size: 84 [ 692.678086][ T7525] EXT4-fs (loop3): blocksize: 4096 [ 692.722767][ T7537] netlink: 'syz.0.14212': attribute type 10 has an invalid length. [ 692.730881][ T7537] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14212'. [ 692.917968][ T7567] netlink: 'syz.0.14226': attribute type 10 has an invalid length. [ 692.994733][ T7582] loop1: detected capacity change from 0 to 2048 [ 693.002453][ T7582] EXT4-fs (loop1): unsupported inode size: 84 [ 693.008554][ T7582] EXT4-fs (loop1): blocksize: 4096 [ 693.149099][ T7603] netlink: 'syz.9.14244': attribute type 10 has an invalid length. [ 693.158275][ T29] audit: type=1400 audit(1767948998.345:6465): avc: denied { mounton } for pid=7600 comm="syz.1.14243" path="/proc/502/cgroup" dev="proc" ino=141963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 693.388137][ T7603] macvlan0 (unregistering): left promiscuous mode [ 693.503928][ T7628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7628 comm=syz.1.14255 [ 693.535275][ T29] audit: type=1400 audit(1767948998.725:6466): avc: denied { read } for pid=7630 comm="syz.1.14258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 693.703363][ T7644] loop1: detected capacity change from 0 to 2048 [ 693.710336][ T7644] EXT4-fs (loop1): unsupported inode size: 84 [ 693.716485][ T7644] EXT4-fs (loop1): blocksize: 4096 [ 693.989751][ T7667] bridge_slave_1: left allmulticast mode [ 693.995717][ T7667] bridge_slave_1: left promiscuous mode [ 694.001547][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.049053][ T7667] bridge_slave_0: left allmulticast mode [ 694.055102][ T7667] bridge_slave_0: left promiscuous mode [ 694.061115][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.548857][ T7684] loop8: detected capacity change from 0 to 2048 [ 694.555818][ T7684] EXT4-fs: Ignoring removed i_version option [ 694.573412][ T7684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.606962][ T4316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.299049][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ff6ba00: rx timeout, send abort [ 695.307649][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ff6ba00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 695.362959][ T7732] netlink: 'syz.3.14299': attribute type 10 has an invalid length. [ 695.387605][ T7732] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 695.432800][ T7740] loop9: detected capacity change from 0 to 2048 [ 695.440002][ T7740] EXT4-fs (loop9): unsupported inode size: 84 [ 695.446150][ T7740] EXT4-fs (loop9): blocksize: 4096 [ 695.563734][ T7751] tipc: Enabled bearer , priority 0 [ 695.568247][ T7753] loop8: detected capacity change from 0 to 256 [ 695.579929][ T7751] syzkaller0: entered promiscuous mode [ 695.585732][ T7751] syzkaller0: entered allmulticast mode [ 695.596669][ T29] audit: type=1400 audit(1767949000.775:6467): avc: denied { append } for pid=7752 comm="syz.8.14308" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 695.621806][ T7750] tipc: Resetting bearer [ 695.629978][ T7750] tipc: Disabling bearer [ 695.920847][ T7774] loop8: detected capacity change from 0 to 2048 [ 696.063477][ T7774] EXT4-fs (loop8): unsupported inode size: 84 [ 696.069622][ T7774] EXT4-fs (loop8): blocksize: 4096 [ 696.122925][ T7789] tipc: Enabled bearer , priority 0 [ 696.153155][ T7789] syzkaller0: entered promiscuous mode [ 696.158751][ T7789] syzkaller0: entered allmulticast mode [ 696.202440][ T7788] tipc: Resetting bearer [ 696.229830][ T7788] tipc: Disabling bearer [ 696.351682][ T7804] loop8: detected capacity change from 0 to 256 [ 696.370236][ T7804] FAT-fs (loop8): codepage cp949 not found [ 697.245530][ T7824] loop1: detected capacity change from 0 to 2048 [ 697.261449][ T7824] EXT4-fs (loop1): unsupported inode size: 84 [ 697.267611][ T7824] EXT4-fs (loop1): blocksize: 4096 [ 697.346045][ T7832] tipc: Enabled bearer , priority 0 [ 697.376287][ T7832] tipc: Resetting bearer [ 697.385645][ T7831] tipc: Disabling bearer [ 697.459160][ T7850] __nla_validate_parse: 7 callbacks suppressed [ 697.459173][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14347'. [ 697.475250][ T7857] netlink: 76 bytes leftover after parsing attributes in process `syz.3.14350'. [ 697.610995][ T29] audit: type=1400 audit(1767949002.795:6468): avc: denied { getopt } for pid=7864 comm="syz.3.14353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 697.753060][ T7876] loop1: detected capacity change from 0 to 256 [ 697.834531][ T7882] tipc: Enabled bearer , priority 0 [ 697.859775][ T7882] tipc: Resetting bearer [ 697.881231][ T7880] tipc: Disabling bearer [ 698.132677][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14385'. [ 698.159152][ T7940] netlink: 'syz.1.14389': attribute type 10 has an invalid length. [ 698.171875][ T7940] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 698.238556][ T7956] netlink: 'syz.3.14396': attribute type 5 has an invalid length. [ 698.246501][ T7956] netlink: 176 bytes leftover after parsing attributes in process `syz.3.14396'. [ 698.262038][ T7958] netlink: 'syz.1.14397': attribute type 4 has an invalid length. [ 698.276411][ T7958] netlink: 'syz.1.14397': attribute type 4 has an invalid length. [ 698.320803][ T7964] loop8: detected capacity change from 0 to 1024 [ 698.389338][ T7964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.401597][ T7970] loop3: detected capacity change from 0 to 8192 [ 699.201373][ T4316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.509760][ T8025] tipc: Enabled bearer , priority 0 [ 699.564428][ T8025] tipc: Resetting bearer [ 699.652628][ T8028] tipc: Disabling bearer [ 699.777565][ T8035] netlink: 'syz.1.14430': attribute type 10 has an invalid length. [ 699.785657][ T8035] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14430'. [ 700.018801][ T8053] syzkaller0: entered promiscuous mode [ 700.024473][ T8053] syzkaller0: entered allmulticast mode [ 700.125842][ T8058] loop3: detected capacity change from 0 to 2048 [ 700.147239][ T8058] EXT4-fs (loop3): unsupported inode size: 84 [ 700.153377][ T8058] EXT4-fs (loop3): blocksize: 4096 [ 700.313385][ T8069] netlink: 'syz.3.14444': attribute type 10 has an invalid length. [ 700.321437][ T8069] netlink: 55 bytes leftover after parsing attributes in process `syz.3.14444'. [ 700.758304][ T8094] syzkaller0: entered promiscuous mode [ 700.763937][ T8094] syzkaller0: entered allmulticast mode [ 700.818602][ T8098] netlink: 'syz.1.14457': attribute type 10 has an invalid length. [ 700.826565][ T8098] netlink: 55 bytes leftover after parsing attributes in process `syz.1.14457'. [ 700.959162][ T8123] loop1: detected capacity change from 0 to 2048 [ 700.966555][ T8123] EXT4-fs (loop1): unsupported inode size: 84 [ 700.972717][ T8123] EXT4-fs (loop1): blocksize: 4096 [ 701.057702][ T8130] syzkaller0: entered promiscuous mode [ 701.063308][ T8130] syzkaller0: entered allmulticast mode [ 701.198356][ T8148] loop1: detected capacity change from 0 to 2048 [ 701.206697][ T8148] EXT4-fs (loop1): unsupported inode size: 84 [ 701.212945][ T8148] EXT4-fs (loop1): blocksize: 4096 [ 701.413046][ T8163] syzkaller0: entered promiscuous mode [ 701.418576][ T8163] syzkaller0: entered allmulticast mode [ 701.509213][ T8171] loop1: detected capacity change from 0 to 2048 [ 701.519670][ T8171] EXT4-fs (loop1): unsupported inode size: 84 [ 701.525864][ T8171] EXT4-fs (loop1): blocksize: 4096 [ 701.591225][ T29] audit: type=1400 audit(1767949006.775:6469): avc: denied { connect } for pid=8176 comm="syz.1.14493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 701.612165][ T29] audit: type=1400 audit(1767949006.805:6470): avc: denied { write } for pid=8176 comm="syz.1.14493" path="socket:[144071]" dev="sockfs" ino=144071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 701.710845][ T8187] netlink: 'syz.1.14498': attribute type 10 has an invalid length. [ 701.773735][ T8193] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14501'. [ 701.855822][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14505'. [ 701.943206][ T8218] netlink: 'syz.0.14511': attribute type 10 has an invalid length. [ 702.001217][ T8218] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 702.016175][ T8220] netlink: 144 bytes leftover after parsing attributes in process `syz.8.14508'. [ 702.107601][ T8224] netlink: 'syz.3.14513': attribute type 10 has an invalid length. [ 702.345969][ T8230] loop3: detected capacity change from 0 to 2048 [ 702.370977][ T8230] EXT4-fs (loop3): unsupported inode size: 84 [ 702.377185][ T8230] EXT4-fs (loop3): blocksize: 4096 [ 702.420317][ T8235] syzkaller0: entered promiscuous mode [ 702.425872][ T8235] syzkaller0: entered allmulticast mode [ 702.504074][ T8239] __nla_validate_parse: 1 callbacks suppressed [ 702.504092][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14519'. [ 702.537030][ T8245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8245 comm=syz.3.14521 [ 702.557699][ T8248] syzkaller0: entered promiscuous mode [ 702.563368][ T8248] syzkaller0: entered allmulticast mode [ 702.615924][ T8251] loop3: detected capacity change from 0 to 8192 [ 702.772241][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14532'. [ 702.834019][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14543'. [ 702.959355][ T8321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14556'. [ 703.061508][ T8339] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 703.123384][ T29] audit: type=1400 audit(1767949008.315:6471): avc: denied { write } for pid=8330 comm="syz.1.14561" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 703.652289][ T8354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.14571'. [ 703.751318][ T8368] validate_nla: 3 callbacks suppressed [ 703.751336][ T8368] netlink: 'syz.8.14578': attribute type 10 has an invalid length. [ 703.838774][ T8380] netlink: 32 bytes leftover after parsing attributes in process `syz.9.14584'. [ 703.909375][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14588'. [ 704.050833][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14601'. [ 704.078016][ T8417] loop3: detected capacity change from 0 to 2048 [ 704.098986][ T8421] tipc: Enabled bearer , priority 0 [ 704.107365][ T8421] tipc: Resetting bearer [ 704.122151][ T8417] EXT4-fs (loop3): unsupported inode size: 84 [ 704.128361][ T8417] EXT4-fs (loop3): blocksize: 4096 [ 704.134800][ T8420] tipc: Disabling bearer [ 704.188647][ T8425] netlink: 'syz.3.14606': attribute type 10 has an invalid length. [ 704.196619][ T8425] netlink: 55 bytes leftover after parsing attributes in process `syz.3.14606'. [ 704.283360][ T8439] loop1: detected capacity change from 0 to 1024 [ 704.290553][ T8439] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 704.301503][ T8439] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 704.309540][ T8439] EXT4-fs (loop1): orphan cleanup on readonly fs [ 704.316808][ T8439] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #3: block 3: comm syz.1.14613: lblock 3 mapped to illegal pblock 3 (length 1) [ 704.330974][ T8439] Quota error (device loop1): write_blk: dquota write failed [ 704.338461][ T8439] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 704.348788][ T8439] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 704.359244][ T8439] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.14613: Failed to acquire dquot type 0 [ 704.372501][ T8439] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 3: comm syz.1.14613: lblock 3 mapped to illegal pblock 3 (length 1) [ 704.386711][ T8439] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 704.398334][ T8439] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.14613: Failed to acquire dquot type 0 [ 704.409919][ T8439] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.14613: Freeing blocks not in datazone - block = 0, count = 4096 [ 704.424423][ T8439] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 3: comm syz.1.14613: lblock 3 mapped to illegal pblock 3 (length 1) [ 704.438701][ T8439] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 704.448786][ T8439] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.14613: Failed to acquire dquot type 0 [ 704.460833][ T8439] EXT4-fs (loop1): 1 orphan inode deleted [ 704.467167][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14616'. [ 704.472137][ T8439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 704.509730][ T4845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.529555][ T8455] netlink: 'syz.8.14619': attribute type 10 has an invalid length. [ 704.543521][ T8457] tipc: Enabled bearer , priority 0 [ 704.559077][ T8459] netlink: 'syz.8.14620': attribute type 10 has an invalid length. [ 704.564470][ T8457] tipc: Resetting bearer [ 704.600456][ T8456] tipc: Disabling bearer [ 704.814005][ T8486] netlink: 'syz.8.14632': attribute type 10 has an invalid length. [ 704.840597][ T8490] tipc: Started in network mode [ 704.845582][ T8490] tipc: Node identity eae2ecdf6ed3, cluster identity 4711 [ 704.852800][ T8490] tipc: Enabled bearer , priority 0 [ 704.861649][ T8490] tipc: Resetting bearer [ 704.868873][ T8489] tipc: Disabling bearer [ 704.891978][ T8496] netlink: 'syz.3.14637': attribute type 10 has an invalid length. [ 704.981668][ T8511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.012575][ T8511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.038579][ T8516] netlink: 'syz.3.14645': attribute type 10 has an invalid length. [ 705.116205][ T8524] netlink: 'syz.3.14650': attribute type 10 has an invalid length. [ 705.151922][ T8528] tipc: Enabled bearer , priority 0 [ 705.171365][ T8528] tipc: Resetting bearer [ 705.178489][ T8527] tipc: Disabling bearer [ 705.272654][ T8554] netlink: 'syz.0.14663': attribute type 10 has an invalid length. [ 705.333224][ T8567] loop9: detected capacity change from 0 to 256 [ 705.437558][ T8589] netlink: 'syz.9.14680': attribute type 10 has an invalid length. [ 705.607200][ T8618] tipc: Enabled bearer , priority 0 [ 705.616621][ T8618] tipc: Resetting bearer [ 705.623993][ T8618] tipc: Disabling bearer [ 705.914826][ T8649] loop9: detected capacity change from 0 to 256 [ 705.976846][ T8653] tipc: Enabled bearer , priority 0 [ 705.985136][ T8653] tipc: Resetting bearer [ 705.997865][ T8653] tipc: Disabling bearer [ 706.313410][ T8670] loop3: detected capacity change from 0 to 1024 [ 706.335398][ T8670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.490162][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.593252][ T8692] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 706.830506][ T8722] loop9: detected capacity change from 0 to 2048 [ 706.839016][ T8722] EXT4-fs (loop9): unsupported inode size: 84 [ 706.845189][ T8722] EXT4-fs (loop9): blocksize: 4096 [ 706.867703][ T29] audit: type=1400 audit(1767949012.055:6472): avc: denied { nlmsg_read } for pid=8726 comm="syz.3.14740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 707.045506][ T8754] loop9: detected capacity change from 0 to 2048 [ 707.069697][ T8754] EXT4-fs (loop9): unsupported inode size: 84 [ 707.075837][ T8754] EXT4-fs (loop9): blocksize: 4096 [ 707.183705][ T8762] loop9: detected capacity change from 0 to 256 [ 707.274889][ T8771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.878040][ T8786] tipc: Enabled bearer , priority 0 [ 707.886184][ T8786] tipc: Resetting bearer [ 707.892885][ T8786] tipc: Disabling bearer [ 708.090825][ T2810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.145977][ T8795] set_capacity_and_notify: 1 callbacks suppressed [ 708.145992][ T8795] loop9: detected capacity change from 0 to 2048 [ 708.180960][ T8795] EXT4-fs (loop9): unsupported inode size: 84 [ 708.187099][ T8795] EXT4-fs (loop9): blocksize: 4096 [ 708.212705][ T8800] loop3: detected capacity change from 0 to 256 [ 708.314730][ T8815] loop3: detected capacity change from 0 to 2048 [ 708.352374][ T8815] loop3: p1 < > p3 p4 [ 708.357529][ T8815] loop3: p3 start 458752 is beyond EOD, truncated [ 708.364009][ T8815] loop3: p4 start 268435456 is beyond EOD, truncated [ 708.376239][ T29] audit: type=1400 audit(1767949013.565:6473): avc: denied { read write } for pid=8814 comm="syz.3.14774" name="loop3p1" dev="devtmpfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 708.399679][ T29] audit: type=1400 audit(1767949013.565:6474): avc: denied { open } for pid=8814 comm="syz.3.14774" path="/dev/loop3p1" dev="devtmpfs" ino=1589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 708.455076][ T8824] tipc: Failed to remove unknown binding: 66,1,1/0:4282600257/4282600259 [ 708.470004][ T8829] loop9: detected capacity change from 0 to 256 [ 708.479114][ T8827] loop3: detected capacity change from 0 to 2048 [ 708.487347][ T8827] EXT4-fs (loop3): unsupported inode size: 84 [ 708.493530][ T8827] EXT4-fs (loop3): blocksize: 4096 [ 708.566358][ T8839] __nla_validate_parse: 25 callbacks suppressed [ 708.566374][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14787'. [ 708.584415][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14787'. [ 708.629129][ T8854] tipc: Enabling of bearer rejected, failed to enable media [ 708.689247][ T8866] loop3: detected capacity change from 0 to 256 [ 708.729486][ T29] audit: type=1400 audit(1767949013.915:6475): avc: denied { mount } for pid=8871 comm="syz.8.14798" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 708.735500][ T8872] loop8: detected capacity change from 0 to 512 [ 708.758388][ T8872] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 708.767759][ T8872] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.14798: bad orphan inode 14 [ 708.778178][ T8872] ext4_test_bit(bit=13, block=18) = 1 [ 708.783593][ T8872] is_bad_inode(inode)=0 [ 708.787756][ T8872] NEXT_ORPHAN(inode)=0 [ 708.791870][ T8872] max_ino=32 [ 708.795131][ T8872] i_nlink=1 [ 708.798822][ T8872] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.813605][ T8872] ext2 filesystem being mounted at /281/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 708.838968][ T4316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.858827][ T8881] validate_nla: 5 callbacks suppressed [ 708.858849][ T8881] netlink: 'syz.1.14801': attribute type 10 has an invalid length. [ 708.905719][ T8887] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14804'. [ 708.934610][ T8891] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 708.942889][ T8891] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 709.055345][ T8905] netlink: 'syz.8.14813': attribute type 10 has an invalid length. [ 709.160856][ T8918] loop1: detected capacity change from 0 to 512 [ 709.182628][ T8920] netlink: 'syz.8.14820': attribute type 10 has an invalid length. [ 709.183845][ T8918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.190923][ T8920] netlink: 55 bytes leftover after parsing attributes in process `syz.8.14820'. [ 709.203552][ T8918] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.702502][ T8947] netlink: 'syz.8.14831': attribute type 10 has an invalid length. [ 709.710469][ T8947] netlink: 55 bytes leftover after parsing attributes in process `syz.8.14831'. [ 709.958297][ T8974] loop9: detected capacity change from 0 to 2048 [ 709.965595][ T8974] EXT4-fs (loop9): unsupported inode size: 84 [ 709.971809][ T8974] EXT4-fs (loop9): blocksize: 4096 [ 710.041423][ T4845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.447539][ T8978] Set syz1 is full, maxelem 65536 reached [ 710.473246][ T8984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.481851][ T8984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.516010][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14846'. [ 710.525793][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14846'. [ 710.685565][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14851'. [ 710.707397][ T9004] loop8: detected capacity change from 0 to 2048 [ 710.716545][ T9004] EXT4-fs (loop8): unsupported inode size: 84 [ 710.722682][ T9004] EXT4-fs (loop8): blocksize: 4096 [ 710.755187][ T9010] tipc: Enabling of bearer rejected, failed to enable media [ 710.802804][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14857'. [ 710.814141][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14857'. [ 710.869222][ T9032] netlink: 'syz.3.14862': attribute type 10 has an invalid length. [ 711.116123][ T9042] EXT4-fs (loop8): unsupported inode size: 84 [ 711.122423][ T9042] EXT4-fs (loop8): blocksize: 4096 [ 711.416853][ T9055] tipc: Enabling of bearer rejected, failed to enable media [ 711.711801][ T9074] loop8: p1 < > p3 p4 [ 711.716383][ T9074] loop8: p3 start 458752 is beyond EOD, truncated [ 711.722948][ T9074] loop8: p4 start 268435456 is beyond EOD, truncated [ 712.263096][ T9096] msdos: Bad value for 'dmask' [ 712.333008][ T9098] tipc: Enabling of bearer rejected, failed to enable media [ 712.634931][ T29] audit: type=1400 audit(1767949017.825:6476): avc: denied { setopt } for pid=9111 comm="syz.9.14887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 712.823314][ T9120] netlink: 'syz.3.14890': attribute type 10 has an invalid length. [ 714.253867][ T9172] syz_tun: entered allmulticast mode [ 714.263591][ T9172] dvmrp9: entered allmulticast mode [ 714.270970][ T9172] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 714.279578][ T9172] mroute: pending queue full, dropping entries [ 714.286295][ T9171] syz_tun: left allmulticast mode [ 714.344107][ T9180] netlink: 'syz.1.14915': attribute type 10 has an invalid length. [ 714.374423][ T9183] set_capacity_and_notify: 3 callbacks suppressed [ 714.374444][ T9183] loop1: detected capacity change from 0 to 1024 [ 714.388023][ T9183] EXT4-fs (loop1): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 714.403123][ T9183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.429500][ T4845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.583756][ T9205] loop1: detected capacity change from 0 to 512 [ 714.606526][ T9207] netlink: 'syz.3.14927': attribute type 10 has an invalid length. [ 714.737995][ T9233] __nla_validate_parse: 3 callbacks suppressed [ 714.738014][ T9233] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14939'. [ 714.930856][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14953'. [ 715.311891][ T9309] tipc: Enabling of bearer rejected, failed to enable media [ 715.411658][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14970'. [ 715.726306][ T9334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.776378][ T9258] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 715.915040][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14984'. [ 715.941566][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14984'. [ 716.191322][ T9393] syzkaller0: entered promiscuous mode [ 716.196919][ T9393] syzkaller0: entered allmulticast mode [ 716.496844][ T9425] xt_cgroup: path and classid specified [ 716.717083][ T9438] loop8: detected capacity change from 0 to 512 [ 716.741577][ T9438] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 716.938957][ T9448] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15029'. [ 716.995734][ T9454] netlink: 'syz.8.15032': attribute type 10 has an invalid length. [ 717.003825][ T9454] netlink: 55 bytes leftover after parsing attributes in process `syz.8.15032'. [ 717.007731][ T9453] loop9: detected capacity change from 0 to 1024 [ 717.022420][ T9453] EXT4-fs (loop9): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 717.047710][ T9453] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.073877][ T9459] syzkaller0: entered promiscuous mode [ 717.079458][ T9459] syzkaller0: entered allmulticast mode [ 717.087151][ T2810] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.291835][ T9478] netlink: 'syz.9.15043': attribute type 10 has an invalid length. [ 717.299786][ T9478] netlink: 55 bytes leftover after parsing attributes in process `syz.9.15043'. [ 717.329109][ T9481] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15044'. [ 717.831206][ T29] audit: type=1400 audit(1767949022.935:6477): avc: denied { create } for pid=9485 comm="syz.1.15046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 717.851109][ T29] audit: type=1400 audit(1767949022.935:6478): avc: denied { sys_admin } for pid=9485 comm="syz.1.15046" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 717.872433][ T29] audit: type=1400 audit(1767949022.935:6479): avc: denied { checkpoint_restore } for pid=9485 comm="syz.1.15046" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 717.963392][ T9497] syzkaller0: entered promiscuous mode [ 717.968938][ T9497] syzkaller0: entered allmulticast mode [ 718.147006][ T29] audit: type=1400 audit(1767949023.335:6480): avc: denied { connect } for pid=9503 comm="syz.0.15052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 718.176678][ T29] audit: type=1400 audit(1767949023.345:6481): avc: denied { read } for pid=9503 comm="syz.0.15052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 718.202914][ T9508] netlink: 'syz.9.15054': attribute type 10 has an invalid length. [ 718.210841][ T9508] netlink: 55 bytes leftover after parsing attributes in process `syz.9.15054'. [ 718.540064][ T9524] syzkaller0: entered promiscuous mode [ 718.545669][ T9524] syzkaller0: entered allmulticast mode [ 718.700275][ T9534] netlink: 'syz.8.15065': attribute type 10 has an invalid length. [ 718.784835][ T9538] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 719.467678][ T9562] syz_tun: entered allmulticast mode [ 719.476848][ T9562] dvmrp9: entered allmulticast mode [ 719.483296][ T9561] syz_tun: left allmulticast mode [ 719.512598][ T9564] syzkaller0: entered promiscuous mode [ 719.518129][ T9564] syzkaller0: entered allmulticast mode [ 719.562221][ T9571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.570850][ T9571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.716838][ T9594] syz_tun: entered allmulticast mode [ 719.728127][ T9594] dvmrp9: entered allmulticast mode [ 719.779701][ T9593] syz_tun: left allmulticast mode [ 719.792892][ T55] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.816116][ T55] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.830783][ T9598] macvtap0: entered promiscuous mode [ 719.836928][ T9598] macvtap0: left promiscuous mode [ 719.848604][ T9574] chnl_net:caif_netlink_parms(): no params data found [ 719.857725][ T9600] syzkaller0: entered promiscuous mode [ 719.863345][ T9600] syzkaller0: entered allmulticast mode [ 719.890847][ T55] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.926176][ T9574] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.933362][ T9574] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.940621][ T9574] bridge_slave_0: entered allmulticast mode [ 719.947299][ T9574] bridge_slave_0: entered promiscuous mode [ 719.954172][ T9574] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.961345][ T9574] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.968771][ T9574] bridge_slave_1: entered allmulticast mode [ 719.975650][ T9574] bridge_slave_1: entered promiscuous mode [ 719.995106][ T55] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.022884][ T9574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.035718][ T9574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.051027][ T9610] syzkaller0: entered promiscuous mode [ 720.056557][ T9610] syzkaller0: entered allmulticast mode [ 720.070771][ T9574] team0: Port device team_slave_0 added [ 720.078064][ T9574] team0: Port device team_slave_1 added [ 720.100143][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.107180][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.133076][ T9574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.506331][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.568042][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.611562][ T55] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 720.620863][ T55] bond0 (unregistering): Released all slaves [ 720.637334][ T9638] __nla_validate_parse: 3 callbacks suppressed [ 720.637349][ T9638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15104'. [ 720.638538][ T9574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.659579][ T9574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.685505][ T9574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.689380][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15104'. [ 720.714929][ T55] tipc: Left network mode [ 720.726688][ T9647] netlink: 'syz.8.15107': attribute type 10 has an invalid length. [ 720.731952][ T9574] hsr_slave_0: entered promiscuous mode [ 720.734647][ T9647] netlink: 55 bytes leftover after parsing attributes in process `syz.8.15107'. [ 720.741924][ T9574] hsr_slave_1: entered promiscuous mode [ 720.755539][ T9574] debugfs: 'hsr0' already exists in 'hsr' [ 720.761375][ T9574] Cannot create hsr debugfs directory [ 720.776378][ T55] hsr_slave_0: left promiscuous mode [ 720.786450][ T55] hsr_slave_1: left promiscuous mode [ 720.794426][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.801896][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.819912][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.827376][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.839722][ T55] veth0_macvtap: left promiscuous mode [ 720.933558][ T55] team0 (unregistering): Port device team_slave_1 removed [ 720.945468][ T55] team0 (unregistering): Port device team_slave_0 removed [ 720.957373][ T9669] netlink: 'syz.3.15117': attribute type 10 has an invalid length. [ 720.965342][ T9669] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15117'. [ 720.996829][ T9670] syzkaller0: entered promiscuous mode [ 721.002369][ T9670] syzkaller0: entered allmulticast mode [ 721.064575][ T9674] netlink: 48 bytes leftover after parsing attributes in process `syz.8.15119'. [ 721.101505][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15119'. [ 721.226037][ T9686] tmpfs: Unsupported parameter 'huge' [ 721.260982][ T9692] syzkaller0: entered promiscuous mode [ 721.266522][ T9692] syzkaller0: entered allmulticast mode [ 721.370713][ T9697] netlink: 'syz.1.15128': attribute type 10 has an invalid length. [ 721.378688][ T9697] netlink: 55 bytes leftover after parsing attributes in process `syz.1.15128'. [ 721.453560][ T9574] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 721.461736][ T9707] loop1: detected capacity change from 0 to 4096 [ 721.463942][ T9574] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 721.477072][ T9574] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 721.486069][ T9574] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 721.530338][ T9574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.542284][ T9574] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.564645][ T9574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.575061][ T9574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.595218][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.602359][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.613294][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.620487][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.764718][ T9574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.929284][ T9574] veth0_vlan: entered promiscuous mode [ 721.953192][ T9574] veth1_vlan: entered promiscuous mode [ 721.973823][ T9574] veth0_macvtap: entered promiscuous mode [ 721.982214][ T9574] veth1_macvtap: entered promiscuous mode [ 721.997323][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.007241][ T9574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.292388][ T9755] netlink: 'syz.9.15140': attribute type 10 has an invalid length. [ 722.300436][ T9755] netlink: 55 bytes leftover after parsing attributes in process `syz.9.15140'. [ 722.487391][T32753] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.510370][T32753] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.527179][T32753] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.536121][T32753] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.648648][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.8.15150'. [ 722.765503][ T9790] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15157'. [ 723.559036][ T9827] loop8: detected capacity change from 0 to 1024 [ 723.566388][ T9827] EXT4-fs (loop8): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 723.606058][ T9827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 723.898948][ T29] audit: type=1400 audit(1767949029.055:6482): avc: denied { read open } for pid=9834 comm="syz.3.15175" path="/" dev="configfs" ino=187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 723.941465][ T4316] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.398413][ T29] audit: type=1326 audit(1767949029.565:6483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.8.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 724.422127][ T29] audit: type=1326 audit(1767949029.565:6484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.8.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 724.445463][ T29] audit: type=1326 audit(1767949029.565:6485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.8.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 724.469033][ T29] audit: type=1326 audit(1767949029.565:6486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.8.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 724.492564][ T29] audit: type=1326 audit(1767949029.565:6487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.8.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 724.516083][ T29] audit: type=1326 audit(1767949029.565:6488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.8.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 724.539915][ T29] audit: type=1326 audit(1767949029.565:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.8.15202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 724.849959][ T29] audit: type=1400 audit(1767949030.035:6490): avc: denied { watch } for pid=9913 comm="syz.3.15212" path="/394/file1" dev="tmpfs" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 724.928081][ T9917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 724.948136][ T9917] bond_slave_0: entered promiscuous mode [ 724.953887][ T9917] bond_slave_1: entered promiscuous mode [ 724.960871][ T9917] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 724.970273][ T9917] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 725.020432][ T9920] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 725.340799][ T9942] syz_tun: entered allmulticast mode [ 725.351934][ T9941] syz_tun: left allmulticast mode [ 725.412943][ T29] audit: type=1400 audit(1767949030.605:6491): avc: denied { nlmsg_read } for pid=9949 comm="syz.8.15228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 726.333198][ T9977] syzkaller0: entered promiscuous mode [ 726.338728][ T9977] syzkaller0: entered allmulticast mode [ 726.418493][ T9979] __nla_validate_parse: 4 callbacks suppressed [ 726.418506][ T9979] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15239'. [ 726.449037][ T9981] loop1: detected capacity change from 0 to 512 [ 726.455769][ T9981] EXT4-fs: Ignoring removed mblk_io_submit option [ 726.464727][ T9981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.490469][ T4845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.875505][T10002] netlink: 72 bytes leftover after parsing attributes in process `syz.9.15248'. [ 726.925603][T10006] netlink: 'syz.3.15250': attribute type 10 has an invalid length. [ 726.933601][T10006] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15250'. [ 727.141547][T10027] syzkaller0: entered promiscuous mode [ 727.147092][T10027] syzkaller0: entered allmulticast mode [ 727.337223][T10012] chnl_net:caif_netlink_parms(): no params data found [ 727.470255][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.477394][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.490789][T10012] bridge_slave_0: entered allmulticast mode [ 727.502295][T10012] bridge_slave_0: entered promiscuous mode [ 727.509130][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.516426][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.524024][T10012] bridge_slave_1: entered allmulticast mode [ 727.531104][T10012] bridge_slave_1: entered promiscuous mode [ 727.552733][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.564022][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.592563][ T2136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.610946][T10012] team0: Port device team_slave_0 added [ 727.617984][T10012] team0: Port device team_slave_1 added [ 727.635891][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.642974][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.668896][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.683445][ T2136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.695126][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.702149][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.728212][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.755636][T10012] hsr_slave_0: entered promiscuous mode [ 727.761948][T10012] hsr_slave_1: entered promiscuous mode [ 727.768009][T10012] debugfs: 'hsr0' already exists in 'hsr' [ 727.773894][T10012] Cannot create hsr debugfs directory [ 727.787625][ T2136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.841064][ T2136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.855283][T10058] netlink: 72 bytes leftover after parsing attributes in process `syz.3.15263'. [ 727.968547][ T2136] dvmrp9 (unregistering): left allmulticast mode [ 727.981732][ T2136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.992859][ T2136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.002963][ T2136] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 728.014338][ T2136] bond0 (unregistering): Released all slaves [ 728.083299][ T2136] tipc: Left network mode [ 728.089187][ T2136] hsr_slave_0: left promiscuous mode [ 728.095667][ T2136] hsr_slave_1: left promiscuous mode [ 728.101533][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 728.108913][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.116616][ T2136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 728.124289][ T2136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.135262][ T2136] veth0_macvtap: left promiscuous mode [ 728.187864][ T2136] team0 (unregistering): Port device team_slave_1 removed [ 728.197802][ T2136] team0 (unregistering): Port device team_slave_0 removed [ 728.374744][T10078] netlink: 72 bytes leftover after parsing attributes in process `syz.9.15273'. [ 728.421053][T10081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15274'. [ 728.430733][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15274'. [ 728.519147][T10012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 728.533678][T10012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 728.556871][T10012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 728.565794][T10012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 728.574761][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15283'. [ 728.638506][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.651985][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.661046][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.668155][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.681259][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.688394][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.725755][T10012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 728.794641][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.845792][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15295'. [ 728.902115][T10012] veth0_vlan: entered promiscuous mode [ 728.910283][T10012] veth1_vlan: entered promiscuous mode [ 728.927335][T10151] loop9: detected capacity change from 0 to 2048 [ 728.928371][T10012] veth0_macvtap: entered promiscuous mode [ 728.944013][T10012] veth1_macvtap: entered promiscuous mode [ 728.956713][T10012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.968401][T10151] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.970884][T10012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.988256][T10151] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 729.009420][T27702] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.028339][ T9574] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.030994][T27702] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.049656][T27702] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.062995][T27702] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.173883][T10174] netlink: 'syz.3.15305': attribute type 10 has an invalid length. [ 729.182024][T10174] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15305'. [ 729.214788][T10168] loop9: detected capacity change from 0 to 8192 [ 729.238312][T10168] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 729.247264][T10168] FAT-fs (loop9): Filesystem has been set read-only [ 729.257335][T10168] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 2068) [ 729.265879][T10168] FAT-fs (loop9): error, fat_free: invalid cluster chain (i_pos 2068) [ 730.547516][T10203] netlink: 'syz.3.15318': attribute type 10 has an invalid length. [ 730.591869][T10215] syzkaller0: entered promiscuous mode [ 730.597397][T10215] syzkaller0: entered allmulticast mode [ 730.706879][T10230] loop9: detected capacity change from 0 to 1024 [ 730.714283][T10230] EXT4-fs (loop9): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 730.746350][T10230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.805345][ T9574] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.849365][T10247] netlink: 'syz.9.15335': attribute type 10 has an invalid length. [ 730.899862][T10255] syzkaller0: entered promiscuous mode [ 730.905506][T10255] syzkaller0: entered allmulticast mode [ 730.957699][T10265] loop9: detected capacity change from 0 to 1024 [ 730.965292][T10265] EXT4-fs (loop9): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 730.983325][T10265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.007591][ T9574] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.042828][T10273] netlink: 'syz.9.15346': attribute type 12 has an invalid length. [ 731.190571][T10289] syzkaller0: entered promiscuous mode [ 731.196122][T10289] syzkaller0: entered allmulticast mode [ 731.500799][T10292] loop8: detected capacity change from 0 to 128 [ 731.603774][T10296] loop3: detected capacity change from 0 to 1024 [ 731.630166][T10296] EXT4-fs (loop3): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 731.643299][T10298] __nla_validate_parse: 2 callbacks suppressed [ 731.643317][T10298] netlink: 68 bytes leftover after parsing attributes in process `syz.8.15356'. [ 731.711844][T10296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.740264][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.786902][T10311] netlink: 96 bytes leftover after parsing attributes in process `syz.1.15361'. [ 731.812432][T10319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.821005][T10319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.013431][T10322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 732.750759][T10329] netlink: 'syz.8.15368': attribute type 10 has an invalid length. [ 732.758749][T10329] netlink: 55 bytes leftover after parsing attributes in process `syz.8.15368'. [ 732.784489][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 732.784521][ T29] audit: type=1326 audit(1767949037.975:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.831324][ T29] audit: type=1326 audit(1767949038.005:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.854951][ T29] audit: type=1326 audit(1767949038.005:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.878555][ T29] audit: type=1326 audit(1767949038.005:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.902245][ T29] audit: type=1326 audit(1767949038.005:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.925833][ T29] audit: type=1326 audit(1767949038.005:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.949471][ T29] audit: type=1326 audit(1767949038.005:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.973292][ T29] audit: type=1326 audit(1767949038.005:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 732.997046][ T29] audit: type=1326 audit(1767949038.005:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 733.020675][ T29] audit: type=1326 audit(1767949038.005:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10330 comm="syz.8.15369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f81e25df749 code=0x7ffc0000 [ 733.101899][T10348] bond1: option mode: unable to set because the bond device has slaves [ 733.170803][T10356] netlink: 'syz.9.15379': attribute type 10 has an invalid length. [ 733.178776][T10356] netlink: 55 bytes leftover after parsing attributes in process `syz.9.15379'. [ 733.207106][T10360] loop1: detected capacity change from 0 to 512 [ 733.220474][T10360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.243654][T10360] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.396260][T10384] netlink: 'syz.9.15393': attribute type 10 has an invalid length. [ 733.404335][T10384] netlink: 55 bytes leftover after parsing attributes in process `syz.9.15393'. [ 733.630066][T10404] xt_l2tp: v2 doesn't support IP mode [ 733.762240][T28289] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.857373][T10369] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.918804][T10414] netlink: 'syz.3.15405': attribute type 10 has an invalid length. [ 733.926862][T10414] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15405'. [ 733.937474][T10412] netlink: 148 bytes leftover after parsing attributes in process `syz.9.15404'. [ 733.950248][T28289] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.011939][T28289] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.056741][T10425] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 734.083002][T28289] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.203691][T28289] dvmrp9 (unregistering): left allmulticast mode [ 734.216924][T28289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.227349][T28289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.237764][T28289] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 734.247183][T28289] bond0 (unregistering): Released all slaves [ 734.255228][T10445] syz_tun: entered allmulticast mode [ 734.265917][T10442] dvmrp9: entered allmulticast mode [ 734.333511][T28289] tipc: Left network mode [ 734.355149][T28289] hsr_slave_0: left promiscuous mode [ 734.361194][T28289] hsr_slave_1: left promiscuous mode [ 734.367042][T28289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.374479][T28289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.382173][T28289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.389573][T28289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.400712][T28289] veth0_macvtap: left promiscuous mode [ 734.453264][T28289] team0 (unregistering): Port device team_slave_1 removed [ 734.463046][T28289] team0 (unregistering): Port device team_slave_0 removed [ 734.476555][T10465] netlink: 'syz.9.15424': attribute type 10 has an invalid length. [ 734.515363][T10465] syz_tun: entered promiscuous mode [ 734.524331][T10465] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 734.588557][T10426] chnl_net:caif_netlink_parms(): no params data found [ 734.637829][T10475] syz_tun: entered allmulticast mode [ 734.650874][T10480] syzkaller0: entered promiscuous mode [ 734.656453][T10480] syzkaller0: entered allmulticast mode [ 734.690887][T10475] dvmrp9: entered allmulticast mode [ 734.729833][T10426] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.737299][T10426] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.745582][T10426] bridge_slave_0: entered allmulticast mode [ 734.752510][T10426] bridge_slave_0: entered promiscuous mode [ 734.759997][T10426] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.767224][T10426] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.774632][T10426] bridge_slave_1: entered allmulticast mode [ 734.782777][T10426] bridge_slave_1: entered promiscuous mode [ 734.965912][T10426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.977754][T10426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.050772][T10426] team0: Port device team_slave_0 added [ 735.091621][T10426] team0: Port device team_slave_1 added [ 735.157526][T10426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.164524][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.190555][T10426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.213773][T10426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.220775][T10426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.246789][T10426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.277394][T10426] hsr_slave_0: entered promiscuous mode [ 735.283798][T10426] hsr_slave_1: entered promiscuous mode [ 735.312334][T10505] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15438'. [ 735.356830][T10426] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.404188][T10426] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.505886][T10510] netlink: 'syz.9.15440': attribute type 10 has an invalid length. [ 735.514029][T10510] netlink: 55 bytes leftover after parsing attributes in process `syz.9.15440'. [ 735.525174][T10426] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.594276][T10426] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.648377][T10426] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.657347][T10426] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 735.666390][T10426] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 735.675564][T10426] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 735.720478][T10426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.733845][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.743060][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.750132][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.761140][T32753] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.768259][T32753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.835324][T10426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.938770][T10426] veth0_vlan: entered promiscuous mode [ 735.946843][T10426] veth1_vlan: entered promiscuous mode [ 735.963460][T10426] veth0_macvtap: entered promiscuous mode [ 735.971287][T10426] veth1_macvtap: entered promiscuous mode [ 735.983285][T10426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.995611][T10426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.007414][ T297] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.016865][T32758] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.027629][T32758] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.036777][T32758] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.083332][T10543] netlink: 'syz.8.15443': attribute type 12 has an invalid length. [ 736.210884][T10559] netlink: 'syz.3.15450': attribute type 10 has an invalid length. [ 736.218962][T10559] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15450'. [ 736.255369][T10564] tipc: Enabled bearer , priority 0 [ 736.263175][T10564] syzkaller0: entered promiscuous mode [ 736.268670][T10564] syzkaller0: entered allmulticast mode [ 736.280233][T10564] tipc: Resetting bearer [ 736.287965][T10563] tipc: Resetting bearer [ 736.296193][T10563] tipc: Disabling bearer [ 736.407093][T10588] netlink: 'syz.9.15463': attribute type 10 has an invalid length. [ 736.435892][T10592] loop3: detected capacity change from 0 to 2048 [ 736.453586][T10592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.465858][T10592] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 736.501535][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.718292][T10629] loop3: detected capacity change from 0 to 2048 [ 736.738287][T10629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.762360][T10629] ext4 filesystem being mounted at /450/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 736.793387][T10637] __nla_validate_parse: 1 callbacks suppressed [ 736.793403][T10637] netlink: 124 bytes leftover after parsing attributes in process `syz.0.15482'. [ 736.817131][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.854200][T10639] netlink: 'syz.0.15484': attribute type 12 has an invalid length. [ 736.869971][T10641] loop3: detected capacity change from 0 to 1024 [ 736.904249][T10641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.379339][T10675] netlink: 124 bytes leftover after parsing attributes in process `syz.0.15495'. [ 737.637241][ C1] vcan0: j1939_tp_rxtimer: 0xffff888137480600: rx timeout, send abort [ 737.646176][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888137480600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 737.676610][T10704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.685108][T10704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.723968][T10706] syz_tun: entered allmulticast mode [ 737.729932][T10706] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 737.738494][T10706] mroute: pending queue full, dropping entries [ 737.758142][T10705] syz_tun: left allmulticast mode [ 737.812105][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.858752][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.8.15511'. [ 737.926140][T10730] syz_tun: entered allmulticast mode [ 737.932702][T10729] syz_tun: left allmulticast mode [ 737.944674][T10732] syzkaller1: entered promiscuous mode [ 737.950159][T10732] syzkaller1: entered allmulticast mode [ 738.020490][T10740] netlink: 'syz.3.15520': attribute type 12 has an invalid length. [ 738.063261][T10745] netlink: 'syz.3.15521': attribute type 10 has an invalid length. [ 738.071251][T10745] netlink: 55 bytes leftover after parsing attributes in process `syz.3.15521'. [ 738.096299][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 738.096399][ T29] audit: type=1400 audit(1767949043.285:6506): avc: denied { create } for pid=10746 comm="syz.8.15523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 738.122555][T10749] loop3: detected capacity change from 0 to 1764 [ 738.586507][T10758] loop3: detected capacity change from 0 to 1024 [ 738.595859][T10758] EXT4-fs (loop3): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 738.623106][T10758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 738.646704][ T4316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 738.657795][ T4316] CPU: 0 UID: 0 PID: 4316 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 738.657874][ T4316] Tainted: [W]=WARN [ 738.657937][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 738.657955][ T4316] Call Trace: [ 738.657992][ T4316] [ 738.658002][ T4316] __dump_stack+0x1d/0x30 [ 738.658027][ T4316] dump_stack_lvl+0x95/0xd0 [ 738.658051][ T4316] dump_stack+0x15/0x1b [ 738.658078][ T4316] dump_header+0x81/0x240 [ 738.658133][ T4316] oom_kill_process+0x295/0x350 [ 738.658164][ T4316] out_of_memory+0x97b/0xb80 [ 738.658188][ T4316] try_charge_memcg+0x610/0xa10 [ 738.658233][ T4316] charge_memcg+0x51/0xc0 [ 738.658281][ T4316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 738.658334][ T4316] __read_swap_cache_async+0x17b/0x2d0 [ 738.658451][ T4316] swap_cluster_readahead+0x262/0x3c0 [ 738.658488][ T4316] swapin_readahead+0xde/0x820 [ 738.658521][ T4316] ? __rcu_read_unlock+0x4f/0x70 [ 738.658541][ T4316] ? swap_cache_get_folio+0x277/0x280 [ 738.658591][ T4316] do_swap_page+0x2b4/0x21e0 [ 738.658621][ T4316] ? _raw_spin_unlock+0x26/0x50 [ 738.658644][ T4316] ? __schedule+0x85f/0xcd0 [ 738.658668][ T4316] ? __pfx_default_wake_function+0x10/0x10 [ 738.658746][ T4316] handle_mm_fault+0x9d8/0x2c60 [ 738.658787][ T4316] do_user_addr_fault+0x630/0x1080 [ 738.658821][ T4316] exc_page_fault+0x62/0xa0 [ 738.658915][ T4316] asm_exc_page_fault+0x26/0x30 [ 738.658981][ T4316] RIP: 0033:0x7f81e2611fc5 [ 738.659007][ T4316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 738.659027][ T4316] RSP: 002b:00007ffeda2f7718 EFLAGS: 00010246 [ 738.659041][ T4316] RAX: 0000000000000000 RBX: 00000000000003f9 RCX: 00007f81e2611fc3 [ 738.659053][ T4316] RDX: 00007ffeda2f7730 RSI: 0000000000000000 RDI: 0000000000000000 [ 738.659124][ T4316] RBP: 00007ffeda2f779c R08: 0000000024aa3b0c R09: 0000000000000000 [ 738.659135][ T4316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 738.659163][ T4316] R13: 00000000000927c0 R14: 00000000000b44e2 R15: 00007ffeda2f77f0 [ 738.659179][ T4316] [ 738.659194][ T4316] memory: usage 307192kB, limit 307200kB, failcnt 126 [ 738.856985][T10762] syz_tun: entered allmulticast mode [ 738.860473][ T4316] memory+swap: usage 271408kB, limit 9007199254740988kB, failcnt 0 [ 738.860490][ T4316] kmem: usage 271112kB, limit 9007199254740988kB, failcnt 0 [ 738.880678][T10762] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 738.883582][ T4316] Memory cgroup stats for /syz8: [ 738.887522][ T4316] cache 0 [ 738.891522][T10762] mroute: pending queue full, dropping entries [ 738.892503][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.898848][ T4316] rss 20480 [ 738.898856][ T4316] shmem 0 [ 738.898862][ T4316] mapped_file 0 [ 738.898869][ T4316] dirty 0 [ 738.898874][ T4316] writeback 8192 [ 738.898881][ T4316] workingset_refault_anon 13 [ 738.898905][ T4316] workingset_refault_file 0 [ 738.898912][ T4316] swap 90112 [ 738.898918][ T4316] swapcached 12288 [ 738.898924][ T4316] pgpgin 456755 [ 738.898932][ T4316] pgpgout 456748 [ 738.934314][T10761] syz_tun: left allmulticast mode [ 738.936699][ T4316] pgfault 536477 [ 738.936709][ T4316] pgmajfault 10 [ 738.982102][ T4316] inactive_anon 12288 [ 738.986089][ T4316] active_anon 8192 [ 738.989835][ T4316] inactive_file 8192 [ 738.993798][ T4316] active_file 0 [ 738.997413][ T4316] unevictable 0 [ 739.000872][ T4316] hierarchical_memory_limit 314572800 [ 739.006261][ T4316] hierarchical_memsw_limit 9223372036854771712 [ 739.012460][ T4316] total_cache 0 [ 739.015939][ T4316] total_rss 20480 [ 739.019589][ T4316] total_shmem 0 [ 739.023092][ T4316] total_mapped_file 0 [ 739.027140][ T4316] total_dirty 0 [ 739.030618][ T4316] total_writeback 8192 [ 739.034726][ T4316] total_workingset_refault_anon 13 [ 739.039907][ T4316] total_workingset_refault_file 0 [ 739.044970][ T4316] total_swap 90112 [ 739.048699][ T4316] total_swapcached 12288 [ 739.053126][ T4316] total_pgpgin 456755 [ 739.057181][ T4316] total_pgpgout 456748 [ 739.061286][ T4316] total_pgfault 536477 [ 739.065364][ T4316] total_pgmajfault 10 [ 739.069391][ T4316] total_inactive_anon 12288 [ 739.073933][ T4316] total_active_anon 8192 [ 739.078186][ T4316] total_inactive_file 8192 [ 739.079222][T10767] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15530'. [ 739.082626][ T4316] total_active_file 0 [ 739.082636][ T4316] total_unevictable 0 [ 739.082643][ T4316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.15525,pid=10753,uid=0 [ 739.114558][ T4316] Memory cgroup out of memory: Killed process 10753 (syz.8.15525) total-vm:93836kB, anon-rss:1120kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 739.139897][T10769] loop5: detected capacity change from 0 to 512 [ 739.157323][T10769] FAT-fs (loop5): unable to read block(512) for building NFS inode [ 739.275136][T10779] loop8: detected capacity change from 0 to 512 [ 739.290499][T10782] loop5: detected capacity change from 0 to 1024 [ 739.306032][T10779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.318954][T10782] EXT4-fs (loop5): stripe (1023) is not aligned with cluster size (16), stripe is disabled [ 739.342306][T10779] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 739.373151][T10782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 739.417755][T10426] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.470921][T10785] syz_tun (unregistering): left allmulticast mode [ 739.515563][T10800] tipc: Cannot configure node identity twice [ 740.568405][T10814] loop5: detected capacity change from 0 to 512 [ 740.813057][ T29] audit: type=1400 audit(1767949045.995:6507): avc: denied { execmod } for pid=10808 comm="syz.3.15547" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=153255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 740.845558][T31769] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.860140][T10814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.877663][T10785] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.890170][T10817] tipc: Started in network mode [ 740.892067][T10814] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 740.904037][T10817] tipc: Node identity 6a377998d197, cluster identity 4711 [ 740.912842][T10817] tipc: Enabled bearer , priority 0 [ 740.926760][T31769] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.953668][T10817] syzkaller0: entered promiscuous mode [ 740.959191][T10817] syzkaller0: entered allmulticast mode [ 740.985765][T10817] tipc: Resetting bearer [ 741.012313][T10823] macvtap0: entered promiscuous mode [ 741.018909][T10823] macvtap0: left promiscuous mode [ 741.026420][T10816] tipc: Resetting bearer [ 741.050644][T10816] tipc: Disabling bearer [ 741.071669][T31769] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.187266][T10833] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15558'. [ 741.246236][T31769] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.043081][T31769] bond_slave_0: left promiscuous mode [ 742.048599][T31769] bond_slave_1: left promiscuous mode [ 742.203527][T31769] dvmrp9 (unregistering): left allmulticast mode [ 742.228056][T31769] bond1 (unregistering): (slave macvlan0): Removing an active aggregator [ 742.246465][T31769] bond1 (unregistering): (slave macvlan0): Releasing backup interface [ 742.279241][T31769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.295080][T31769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.309828][T31769] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 742.319357][T31769] bond0 (unregistering): Released all slaves [ 742.332754][T10820] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.336079][T31769] bond1 (unregistering): Released all slaves [ 742.402935][T10862] netlink: 96 bytes leftover after parsing attributes in process `syz.0.15568'. [ 742.416773][T31769] tipc: Left network mode [ 742.430663][T31769] hsr_slave_0: left promiscuous mode [ 742.441778][T31769] hsr_slave_1: left promiscuous mode [ 742.447570][T31769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.454994][T31769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.560939][T10872] loop9: detected capacity change from 0 to 1024 [ 742.588864][T31769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.596330][T31769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.607968][T31769] veth0_macvtap: left promiscuous mode [ 742.620212][T10872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.758135][ T9574] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.831986][T31769] team0 (unregistering): Port device team_slave_1 removed [ 742.867090][T31769] team0 (unregistering): Port device team_slave_0 removed [ 743.072343][T10886] tipc: Enabling of bearer rejected, failed to enable media [ 743.085022][T10824] chnl_net:caif_netlink_parms(): no params data found [ 743.094223][T10886] syzkaller0: entered promiscuous mode [ 743.099716][T10886] syzkaller0: entered allmulticast mode [ 743.155746][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.162906][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.170115][T10824] bridge_slave_0: entered allmulticast mode [ 743.176726][T10824] bridge_slave_0: entered promiscuous mode [ 743.183982][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.191121][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.198386][T10824] bridge_slave_1: entered allmulticast mode [ 743.205222][T10824] bridge_slave_1: entered promiscuous mode [ 743.225998][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.236550][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.258203][T10824] team0: Port device team_slave_0 added [ 743.561819][T10824] team0: Port device team_slave_1 added [ 743.577079][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15576'. [ 743.691902][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.698911][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.725027][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.852749][T10910] netlink: 'syz.9.15579': attribute type 12 has an invalid length. [ 743.861760][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.868743][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.894755][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.994396][T10824] hsr_slave_0: entered promiscuous mode [ 744.011210][T10824] hsr_slave_1: entered promiscuous mode [ 744.017279][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 744.023051][T10824] Cannot create hsr debugfs directory [ 744.033301][T10868] chnl_net:caif_netlink_parms(): no params data found [ 744.055546][T10921] syzkaller0: entered promiscuous mode [ 744.061120][T10921] syzkaller0: entered allmulticast mode [ 744.067741][T31769] IPVS: stop unused estimator thread 0... [ 744.219169][T10868] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.226367][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.247825][T10868] bridge_slave_0: entered allmulticast mode [ 744.254513][T10868] bridge_slave_0: entered promiscuous mode [ 744.261397][T10868] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.268450][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.275719][T10868] bridge_slave_1: entered allmulticast mode [ 744.282399][T10868] bridge_slave_1: entered promiscuous mode [ 744.302003][T31769] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.348390][T10941] netlink: 'syz.9.15589': attribute type 12 has an invalid length. [ 744.364716][T31769] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.384947][T10868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.401832][T10868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.425291][T31769] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.564253][T31769] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.584110][T10868] team0: Port device team_slave_0 added [ 744.593094][T10868] team0: Port device team_slave_1 added [ 744.625086][T10868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.632082][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.658118][T10868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.979361][T10868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.986390][T10868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.012379][T10868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.172855][T10868] hsr_slave_0: entered promiscuous mode [ 745.179377][T10868] hsr_slave_1: entered promiscuous mode [ 745.206022][T10868] debugfs: 'hsr0' already exists in 'hsr' [ 745.211844][T10868] Cannot create hsr debugfs directory [ 745.228039][T31769] bridge_slave_1: left allmulticast mode [ 745.233797][T31769] bridge_slave_1: left promiscuous mode [ 745.239455][T31769] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.267803][T31769] bridge_slave_0: left allmulticast mode [ 745.273582][T31769] bridge_slave_0: left promiscuous mode [ 745.279289][T31769] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.633712][T31769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.643920][T31769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.653787][T31769] bond0 (unregistering): Released all slaves [ 745.895976][T11034] netlink: 'syz.3.15603': attribute type 12 has an invalid length. [ 745.905858][T10824] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 745.932399][T31769] hsr_slave_0: left promiscuous mode [ 745.954935][T31769] hsr_slave_1: left promiscuous mode [ 745.986464][T11041] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15605'. [ 745.999788][T31769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.007261][T31769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.103946][T31769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.111432][T31769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.123271][T31769] veth1_macvtap: left promiscuous mode [ 746.128785][T31769] veth0_macvtap: left promiscuous mode [ 746.134491][T31769] veth1_vlan: left promiscuous mode [ 746.140043][T31769] veth0_vlan: left promiscuous mode [ 746.284061][T31769] team0 (unregistering): Port device team_slave_1 removed [ 746.294372][T31769] team0 (unregistering): Port device team_slave_0 removed [ 746.725724][T10824] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 746.745809][T10824] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 746.759759][T10824] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 746.778610][T10868] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.788990][T10868] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.865042][T10868] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.875401][T10868] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.893238][T11095] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 746.912053][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.939267][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.951970][T10868] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.962308][T10868] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.980999][T11106] tipc: Enabling of bearer rejected, failed to enable media [ 747.052287][T11119] syzkaller0: entered promiscuous mode [ 747.057830][T11119] syzkaller0: entered allmulticast mode [ 747.071174][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.078357][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.088377][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.095529][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.118271][T10868] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.128659][T10868] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.207571][T10868] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 747.218565][T10868] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 747.230004][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.270112][T10868] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 747.289252][T10868] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 747.360281][T11175] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 747.415389][T10868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.436776][T10868] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.460278][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.467487][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.487979][T28289] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.495103][T28289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.584995][T10824] veth0_vlan: entered promiscuous mode [ 747.596161][T11211] tipc: Enabling of bearer rejected, failed to enable media [ 747.607888][T10824] veth1_vlan: entered promiscuous mode [ 747.620550][T11211] syzkaller0: entered promiscuous mode [ 747.626188][T11211] syzkaller0: entered allmulticast mode [ 747.667108][T10824] veth0_macvtap: entered promiscuous mode [ 747.678004][T10824] veth1_macvtap: entered promiscuous mode [ 747.686971][T10868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.700671][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.713776][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.734905][T27702] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.759800][T27702] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.786382][T27702] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.808019][T27702] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.836821][T11232] loop9: detected capacity change from 0 to 8192 [ 747.941093][T11263] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 747.954041][T11266] loop6: detected capacity change from 0 to 512 [ 747.991088][T11266] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 748.012297][T10868] veth0_vlan: entered promiscuous mode [ 748.029838][T10868] veth1_vlan: entered promiscuous mode [ 748.037780][T11266] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.15642: corrupted in-inode xattr: e_value out of bounds [ 748.065398][T11266] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.15642: couldn't read orphan inode 15 (err -117) [ 748.078429][T10868] veth0_macvtap: entered promiscuous mode [ 748.086603][T10868] veth1_macvtap: entered promiscuous mode [ 748.098275][T10868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.106785][T11266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.120605][T10868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.138073][T32741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.169161][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.187494][T32741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.217302][T32741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.353034][ T2136] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.603037][T11335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 748.611225][ T29] audit: type=1400 audit(1767949053.625:6508): avc: denied { shutdown } for pid=11296 comm="syz.6.15646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 748.899049][T11372] 9p: Bad value for 'rfdno' [ 749.193420][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15664'. [ 749.233265][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15665'. [ 749.251619][T11389] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 749.266005][T11391] netlink: 20 bytes leftover after parsing attributes in process `syz.6.15667'. [ 749.287100][T11393] loop7: detected capacity change from 0 to 1024 [ 749.312779][T11393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 749.325658][T11397] loop6: detected capacity change from 0 to 1024 [ 749.333337][T11393] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.15668: Allocating blocks 385-513 which overlap fs metadata [ 749.349872][T11397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.352748][T11393] EXT4-fs (loop7): pa ffff888107eb2ee0: logic 16, phys. 129, len 24 [ 749.369890][T11393] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 749.401936][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.077066][T11432] tmpfs: Too few inodes for current use [ 750.122709][T11440] loop9: detected capacity change from 0 to 512 [ 750.195242][T11440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.210385][T11440] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 750.221789][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.248934][ T9574] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.269068][T11445] netlink: 'syz.6.15687': attribute type 11 has an invalid length. [ 750.359560][ T29] audit: type=1400 audit(1767949055.545:6509): avc: denied { getopt } for pid=11455 comm="syz.6.15690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 750.540567][T11471] loop7: detected capacity change from 0 to 1024 [ 750.553590][T11471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.678332][T11476] netlink: 96 bytes leftover after parsing attributes in process `syz.6.15698'. [ 751.092124][T11493] syzkaller0: entered promiscuous mode [ 751.097655][T11493] syzkaller0: entered allmulticast mode [ 751.164837][T11500] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15709'. [ 751.186029][T11502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15710'. [ 751.210963][T11506] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 751.442761][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.672818][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15722'. [ 751.800238][T11533] loop7: detected capacity change from 0 to 1024 [ 751.814895][T11533] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.327078][T11548] loop9: detected capacity change from 0 to 512 [ 752.343762][T11548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.356576][T11548] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.369483][T11548] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 752.395169][ T9574] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.476613][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15733'. [ 752.627250][T11580] loop9: detected capacity change from 0 to 164 [ 752.667594][T11580] Unable to read rock-ridge attributes [ 752.778219][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.799289][T11589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15745'. [ 752.808557][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15745'. [ 753.372432][T11596] Unable to read rock-ridge attributes [ 753.646410][ T29] audit: type=1326 audit(1767949058.835:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a7d8f749 code=0x7ffc0000 [ 753.670061][ T29] audit: type=1326 audit(1767949058.835:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a7d8f749 code=0x7ffc0000 [ 753.704334][T11612] loop6: detected capacity change from 0 to 512 [ 753.720598][T11612] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 753.743308][ T29] audit: type=1326 audit(1767949058.895:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f85a7d8f749 code=0x7ffc0000 [ 753.766912][ T29] audit: type=1326 audit(1767949058.895:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f85a7d8f783 code=0x7ffc0000 [ 753.790463][ T29] audit: type=1326 audit(1767949058.895:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85a7d8e1ff code=0x7ffc0000 [ 753.813968][ T29] audit: type=1326 audit(1767949058.895:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f85a7d8f7d7 code=0x7ffc0000 [ 753.837541][ T29] audit: type=1326 audit(1767949058.895:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85a7d8df90 code=0x7ffc0000 [ 753.861279][ T29] audit: type=1326 audit(1767949058.895:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85a7d8f34b code=0x7ffc0000 [ 753.884850][ T29] audit: type=1326 audit(1767949058.895:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85a7d8e3aa code=0x7ffc0000 [ 753.908293][ T29] audit: type=1326 audit(1767949058.895:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.6.15755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f85a7d8e3aa code=0x7ffc0000 [ 753.945062][T11612] EXT4-fs (loop6): 1 truncate cleaned up [ 753.952073][T11612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 753.971138][T11624] netlink: 'syz.3.15758': attribute type 12 has an invalid length. [ 754.283676][T11629] netlink: 'syz.0.15759': attribute type 1 has an invalid length. [ 754.291574][T11629] netlink: 220 bytes leftover after parsing attributes in process `syz.0.15759'. [ 754.300725][T11629] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15759'. [ 754.315533][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.367253][T11637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 754.384387][T11639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 754.390260][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15763'. [ 754.516709][T11655] syzkaller0: entered promiscuous mode [ 754.522245][T11655] syzkaller0: entered allmulticast mode [ 754.804242][T11663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 755.685631][T11701] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 756.214100][T11734] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 756.256599][T31068] bridge_slave_1: left allmulticast mode [ 756.262410][T31068] bridge_slave_1: left promiscuous mode [ 756.268073][T31068] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.302846][T31068] bridge_slave_0: left allmulticast mode [ 756.308534][T31068] bridge_slave_0: left promiscuous mode [ 756.314272][T31068] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.454069][T31068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.773128][T11746] loop3: detected capacity change from 0 to 512 [ 756.831471][T31068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.840734][T31068] bond0 (unregistering): Released all slaves [ 756.850596][T11746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.865465][T11741] netlink: 'syz.9.15806': attribute type 12 has an invalid length. [ 756.893877][T11754] netlink: 72 bytes leftover after parsing attributes in process `syz.7.15811'. [ 756.913814][T31068] tipc: Left network mode [ 756.932144][T31068] hsr_slave_0: left promiscuous mode [ 756.958931][T31068] hsr_slave_1: left promiscuous mode [ 756.964767][T11746] ext4 filesystem being mounted at /538/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 756.990769][T31068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 757.015163][T31068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.015674][T11765] netlink: 'syz.9.15815': attribute type 1 has an invalid length. [ 757.030298][T11765] netlink: 220 bytes leftover after parsing attributes in process `syz.9.15815'. [ 757.039463][T11765] netlink: 16 bytes leftover after parsing attributes in process `syz.9.15815'. [ 757.196989][T11746] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 757.414126][T31068] team0 (unregistering): Port device team_slave_1 removed [ 757.471329][T31068] team0 (unregistering): Port device team_slave_0 removed [ 757.617811][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.672219][T11777] netlink: 96 bytes leftover after parsing attributes in process `syz.3.15820'. [ 757.685084][T11781] tipc: Started in network mode [ 757.689979][T11781] tipc: Node identity a641ffdbcaf7, cluster identity 4711 [ 757.697166][T11781] tipc: Enabled bearer , priority 0 [ 757.704730][T11781] syzkaller0: entered promiscuous mode [ 757.710309][T11781] syzkaller0: entered allmulticast mode [ 757.719700][T11778] tipc: Resetting bearer [ 757.728366][T11778] tipc: Disabling bearer [ 757.739847][T11782] serio: Serial port ttyS3 [ 757.768303][T11786] netlink: 'syz.3.15824': attribute type 12 has an invalid length. [ 757.819437][T11791] loop3: detected capacity change from 0 to 1024 [ 757.847326][T11793] netlink: 72 bytes leftover after parsing attributes in process `syz.7.15827'. [ 757.912269][T11791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.974059][T11791] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.15826: Allocating blocks 385-513 which overlap fs metadata [ 757.988587][T11790] EXT4-fs (loop3): pa ffff888107eb2ee0: logic 16, phys. 129, len 24 [ 757.996650][T11790] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 758.053160][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.169455][T11818] tipc: Started in network mode [ 758.174580][T11818] tipc: Node identity 62b2cc65ac32, cluster identity 4711 [ 758.181815][T11818] tipc: Enabled bearer , priority 0 [ 758.217956][T11822] loop3: detected capacity change from 0 to 512 [ 758.246940][T11822] EXT4-fs: Ignoring removed oldalloc option [ 758.277902][T11823] syzkaller0: entered promiscuous mode [ 758.283518][T11823] syzkaller0: entered allmulticast mode [ 758.300142][T11817] tipc: Resetting bearer [ 758.309590][T11817] tipc: Disabling bearer [ 758.324552][T11822] EXT4-fs (loop3): 1 truncate cleaned up [ 758.346225][T11822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.508267][T11830] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15841'. [ 758.548434][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.588886][T11832] loop7: detected capacity change from 0 to 1024 [ 758.626923][T11832] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.643189][T11832] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.15842: Allocating blocks 385-513 which overlap fs metadata [ 758.657807][T11831] EXT4-fs (loop7): pa ffff888107eb2e70: logic 16, phys. 129, len 24 [ 758.665917][T11831] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 758.687055][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.707130][T11845] netlink: 124 bytes leftover after parsing attributes in process `syz.7.15846'. [ 758.853111][T11867] loop7: detected capacity change from 0 to 1024 [ 758.882820][T11867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.934068][T11867] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.15856: Allocating blocks 385-513 which overlap fs metadata [ 758.948837][T11866] EXT4-fs (loop7): pa ffff888107eb2e70: logic 16, phys. 129, len 24 [ 758.956958][T11866] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 759.014460][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.074514][T11885] loop9: detected capacity change from 0 to 512 [ 759.081280][T11885] EXT4-fs: Ignoring removed oldalloc option [ 759.088685][T11885] EXT4-fs (loop9): 1 truncate cleaned up [ 759.094887][T11885] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.126259][ T9574] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.316305][T11893] __nla_validate_parse: 2 callbacks suppressed [ 759.316332][T11893] netlink: 96 bytes leftover after parsing attributes in process `syz.7.15866'. [ 759.349295][T11901] netlink: 124 bytes leftover after parsing attributes in process `syz.0.15870'. [ 759.665996][T11916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15873'. [ 759.818966][T11922] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 759.885624][T11929] netlink: 124 bytes leftover after parsing attributes in process `syz.7.15881'. [ 759.991012][T11945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15888'. [ 760.036048][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 760.036064][ T29] audit: type=1326 audit(1767949065.225:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.7.15889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd684f749 code=0x7ffc0000 [ 760.066051][ T29] audit: type=1326 audit(1767949065.255:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.7.15889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd684f749 code=0x7ffc0000 [ 760.089689][ T29] audit: type=1326 audit(1767949065.255:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.7.15889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcd684f749 code=0x7ffc0000 [ 760.114237][ T29] audit: type=1326 audit(1767949065.255:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.7.15889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd684f749 code=0x7ffc0000 [ 760.138391][ T29] audit: type=1326 audit(1767949065.255:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.7.15889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd684f749 code=0x7ffc0000 [ 760.148044][T11951] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15891'. [ 760.162039][ T29] audit: type=1326 audit(1767949065.255:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.7.15889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fdcd684f749 code=0x7ffc0000 [ 760.194616][ T29] audit: type=1326 audit(1767949065.255:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11946 comm="syz.7.15889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcd684f749 code=0x7ffc0000 [ 760.250112][T11964] netlink: 124 bytes leftover after parsing attributes in process `syz.0.15894'. [ 760.295503][T11973] netlink: 44 bytes leftover after parsing attributes in process `syz.7.15899'. [ 760.320500][T11975] syzkaller0: entered promiscuous mode [ 760.326104][T11975] syzkaller0: entered allmulticast mode [ 760.345958][T11977] tipc: Enabled bearer , priority 0 [ 760.353117][T11977] syzkaller0: entered promiscuous mode [ 760.358618][T11977] syzkaller0: entered allmulticast mode [ 760.366797][T11976] tipc: Resetting bearer [ 760.374977][T11976] tipc: Disabling bearer [ 760.487722][T11982] loop3: detected capacity change from 0 to 512 [ 760.501221][T11982] EXT4-fs: Ignoring removed oldalloc option [ 760.508834][T11982] EXT4-fs (loop3): 1 truncate cleaned up [ 760.515181][T11982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.540554][ T5039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.702443][T11997] netlink: 124 bytes leftover after parsing attributes in process `syz.7.15910'. [ 760.751034][T11999] netlink: 44 bytes leftover after parsing attributes in process `syz.7.15911'. [ 760.813801][T12001] syzkaller0: entered promiscuous mode [ 760.819309][T12001] syzkaller0: entered allmulticast mode [ 760.991499][T12005] tipc: Started in network mode [ 760.996424][T12005] tipc: Node identity 86bf9ae72049, cluster identity 4711 [ 761.003737][T12005] tipc: Enabled bearer , priority 0 [ 761.029523][T12005] syzkaller0: entered promiscuous mode [ 761.035222][T12005] syzkaller0: entered allmulticast mode [ 761.046821][T12004] tipc: Resetting bearer [ 761.055126][T12004] tipc: Disabling bearer [ 761.065301][T12012] syzkaller0: entered promiscuous mode [ 761.070887][T12012] syzkaller0: entered allmulticast mode [ 761.223481][T12032] loop7: detected capacity change from 0 to 512 [ 761.230804][T12032] EXT4-fs: Ignoring removed oldalloc option [ 761.232269][T12017] loop6: detected capacity change from 0 to 8192 [ 761.301331][T12032] EXT4-fs (loop7): 1 truncate cleaned up [ 761.307606][T12032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.335395][T10868] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.364876][T12044] tipc: Enabled bearer , priority 0 [ 761.374613][T12044] syzkaller0: entered promiscuous mode [ 761.380191][T12044] syzkaller0: entered allmulticast mode [ 761.388423][T12048] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 761.400513][T12044] tipc: Resetting bearer [ 761.410459][T12043] tipc: Resetting bearer [ 761.417924][T12043] tipc: Disabling bearer [ 761.575954][ T29] audit: type=1326 audit(1767949066.765:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.6.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a7d8f749 code=0x7ffc0000 [ 761.616022][ T29] audit: type=1326 audit(1767949066.785:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.6.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85a7d8f749 code=0x7ffc0000 [ 761.639704][ T29] audit: type=1326 audit(1767949066.785:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.6.15943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a7d8f749 code=0x7ffc0000 [ 761.803403][T12085] tipc: Enabled bearer , priority 0 [ 761.828813][T12085] syzkaller0: entered promiscuous mode [ 761.834444][T12085] syzkaller0: entered allmulticast mode [ 761.868574][T12085] tipc: Resetting bearer [ 761.894754][T12084] tipc: Resetting bearer [ 761.921988][T12084] tipc: Disabling bearer [ 761.970625][T12093] loop6: detected capacity change from 0 to 1024 [ 761.983854][T12093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.235760][T12117] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 762.254097][T12118] serio: Serial port ttyS3 [ 762.442720][T12143] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 762.630448][T12163] netlink: 'syz.9.15984': attribute type 39 has an invalid length. [ 762.675686][T12161] loop3: detected capacity change from 0 to 8192 [ 763.366942][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.435185][T12190] netlink: 'syz.6.15996': attribute type 39 has an invalid length. [ 763.588106][T12203] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 763.669327][T12212] netlink: 'syz.7.16006': attribute type 1 has an invalid length. [ 763.702695][T12216] tipc: Enabled bearer , priority 0 [ 763.713242][T12216] syzkaller0: entered promiscuous mode [ 763.718723][T12216] syzkaller0: entered allmulticast mode [ 763.741064][T12216] tipc: Resetting bearer [ 763.750305][T12216] tipc: Disabling bearer [ 764.599180][T12241] syzkaller0: entered promiscuous mode [ 764.604739][T12241] syzkaller0: entered allmulticast mode [ 764.724152][T12243] __nla_validate_parse: 15 callbacks suppressed [ 764.724173][T12243] netlink: 96 bytes leftover after parsing attributes in process `syz.7.16020'. [ 764.742359][T12246] netlink: 'syz.6.16021': attribute type 12 has an invalid length. [ 764.855821][T12256] tipc: Enabled bearer , priority 0 [ 764.862794][T12256] syzkaller0: entered promiscuous mode [ 764.868294][T12256] syzkaller0: entered allmulticast mode [ 764.892301][T12256] tipc: Resetting bearer [ 764.899218][T12255] tipc: Resetting bearer [ 764.908540][T12255] tipc: Disabling bearer [ 764.946631][T12259] loop6: detected capacity change from 0 to 1024 [ 764.977559][T12259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.996319][T12265] tipc: Enabled bearer , priority 0 [ 765.005059][T12259] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.16026: Allocating blocks 385-513 which overlap fs metadata [ 765.019542][T12265] syzkaller0: entered promiscuous mode [ 765.025119][T12265] syzkaller0: entered allmulticast mode [ 765.038702][T12259] EXT4-fs (loop6): pa ffff888107eb2ee0: logic 16, phys. 129, len 24 [ 765.046964][T12259] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 765.058519][T12265] tipc: Resetting bearer [ 765.065306][T12265] tipc: Resetting bearer [ 765.072554][T12265] tipc: Disabling bearer [ 765.092267][T10824] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.272255][T12278] syzkaller0: entered promiscuous mode [ 765.277793][T12278] syzkaller0: entered allmulticast mode [ 765.367263][T12280] netlink: 'syz.7.16034': attribute type 12 has an invalid length. [ 765.431277][T12274] ================================================================== [ 765.439417][T12274] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 765.447796][T12274] [ 765.450143][T12274] write to 0xffff88811c201834 of 4 bytes by task 12275 on cpu 0: [ 765.457888][T12274] inode_update_timestamps+0x147/0x270 [ 765.463403][T12274] file_update_time_flags+0x26c/0x310 [ 765.468814][T12274] file_update_time+0x17/0x20 [ 765.473530][T12274] shmem_file_write_iter+0x9c/0xf0 [ 765.478695][T12274] iter_file_splice_write+0x66b/0xa20 [ 765.484086][T12274] direct_splice_actor+0x156/0x2a0 [ 765.489227][T12274] splice_direct_to_actor+0x312/0x680 [ 765.494628][T12274] do_splice_direct+0xda/0x150 [ 765.499421][T12274] do_sendfile+0x380/0x650 [ 765.503864][T12274] __x64_sys_sendfile64+0x105/0x150 [ 765.509099][T12274] x64_sys_call+0x2db1/0x3000 [ 765.513826][T12274] do_syscall_64+0xca/0x2b0 [ 765.518380][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.524317][T12274] [ 765.526662][T12274] read to 0xffff88811c201834 of 4 bytes by task 12274 on cpu 1: [ 765.534325][T12274] atime_needs_update+0x2a8/0x3e0 [ 765.539394][T12274] touch_atime+0x4a/0x340 [ 765.543753][T12274] shmem_file_splice_read+0x5b1/0x600 [ 765.549181][T12274] splice_direct_to_actor+0x26f/0x680 [ 765.554583][T12274] do_splice_direct+0xda/0x150 [ 765.559371][T12274] do_sendfile+0x380/0x650 [ 765.563821][T12274] __x64_sys_sendfile64+0x105/0x150 [ 765.569052][T12274] x64_sys_call+0x2db1/0x3000 [ 765.573769][T12274] do_syscall_64+0xca/0x2b0 [ 765.578314][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.584229][T12274] [ 765.586570][T12274] value changed: 0x24b610cd -> 0x254ea74d [ 765.592307][T12274] [ 765.594656][T12274] Reported by Kernel Concurrency Sanitizer on: [ 765.600825][T12274] CPU: 1 UID: 0 PID: 12274 Comm: syz.0.16032 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 765.612315][T12274] Tainted: [W]=WARN [ 765.616116][T12274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.626189][T12274] ==================================================================