last executing test programs: 1m15.609894317s ago: executing program 1 (id=2552): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x38, 0x20}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e21, 0x71e61459, @mcast2}}, [0x6b, 0x7, 0x5, 0x8, 0x5, 0x0, 0x0, 0x800, 0x1, 0x4, 0xffffffffffffff73, 0x8, 0x401, 0xb46c]}, &(0x7f0000000280)=0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x4000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) 1m15.376763891s ago: executing program 1 (id=2548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) 1m15.052519074s ago: executing program 1 (id=2553): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1m14.980509961s ago: executing program 1 (id=2554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28010000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000ab0007"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000240)={[{@errors_remount}, {@nomblk_io_submit}]}, 0xfd, 0x4c3, &(0x7f0000000d80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x104) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0x3, [0x8, 0xfffffffffffffe01, 0xeee, 0x2, 0x8, 0x2]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1018488, 0x0) 1m14.328172067s ago: executing program 1 (id=2558): mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x183}, 0x28) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r2, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1m14.134635986s ago: executing program 1 (id=2565): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc015}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xc5bf) epoll_create1(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1m14.127279747s ago: executing program 32 (id=2565): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x1c, 0x1, 0x2, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40cc015}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xc5bf) epoll_create1(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 4.311539285s ago: executing program 2 (id=3335): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) write$sndseq(r0, &(0x7f0000000100)=[{0x5, 0x3, 0x0, 0xfd, @time, {}, {0xfd, 0x3}, @result={0x2, 0x63e}}], 0x1c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4048086) socket$inet6_sctp(0xa, 0x5, 0x84) fstat(r1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) 3.456955272s ago: executing program 2 (id=3353): socket$key(0xf, 0x3, 0x2) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) timer_gettime(r0, &(0x7f0000000000)) 3.357647102s ago: executing program 3 (id=3354): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) socket$inet6_udplite(0xa, 0x2, 0x88) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0x53, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x894) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) shmdt(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) 2.587876409s ago: executing program 2 (id=3356): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001dc0)) socket(0x1e, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000044c0)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd590b37a7379f0b9, 0xc, &(0x7f0000004280)=ANY=[@ANYRESOCT, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004540)={0x11, 0xc, &(0x7f0000004500)=ANY=[@ANYRES16, @ANYRES16=r2, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') setgroups(0x1, &(0x7f0000000000)=[0x0]) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 2.587010479s ago: executing program 2 (id=3359): sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 2.47850964s ago: executing program 3 (id=3363): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x9, 0xfed0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x46ab, &(0x7f0000000040)={0x0, 0x75f6, 0xc000, 0x2, 0x19d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2217, 0x7721, 0x16, 0x0, 0x0) 2.336560285s ago: executing program 3 (id=3365): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.261250212s ago: executing program 5 (id=3366): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x1, 0x8000002, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, r3, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) 2.123286136s ago: executing program 3 (id=3368): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.08814387s ago: executing program 4 (id=3369): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x10) 2.024819056s ago: executing program 5 (id=3370): mknod$loop(0x0, 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 1.944682674s ago: executing program 4 (id=3371): sched_setscheduler(0x0, 0x2, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 1.937613805s ago: executing program 5 (id=3372): socket$kcm(0x11, 0xa, 0x300) creat(&(0x7f0000000240)='./file1\x00', 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x124) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.899294298s ago: executing program 5 (id=3373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) syz_io_uring_setup(0x66e, 0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) close(r2) 1.692655939s ago: executing program 2 (id=3374): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0xc, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 1.532099136s ago: executing program 0 (id=3375): r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000240), &(0x7f0000000300)=r5}, 0x20) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 1.48559738s ago: executing program 0 (id=3376): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x81, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0xf00) 1.427695596s ago: executing program 4 (id=3377): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) kexec_load(0x8, 0x1, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x10000}], 0x3e0000) 1.427437266s ago: executing program 5 (id=3378): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 1.416010787s ago: executing program 4 (id=3379): setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000300)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.404157148s ago: executing program 0 (id=3380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 1.345445054s ago: executing program 0 (id=3381): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 1.260595993s ago: executing program 4 (id=3382): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff69}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.165985352s ago: executing program 0 (id=3383): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) 1.165634112s ago: executing program 3 (id=3384): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40012000, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.097963169s ago: executing program 0 (id=3385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) 666.914983ms ago: executing program 5 (id=3386): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) 220.331578ms ago: executing program 3 (id=3387): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f8b23fd"}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x7, 0x0, 0x1, 0x3, 0x82, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x108080, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 219.939908ms ago: executing program 4 (id=3388): r0 = memfd_secret(0x80000) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x2, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x40000) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3000046, &(0x7f0000000280), 0x1, 0x57b, &(0x7f0000000c00)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x58f4ef2b, 0x10580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x408, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 0s ago: executing program 2 (id=3389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x2) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): devsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.045392][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.094493][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.143610][ T9526] loop1: detected capacity change from 0 to 512 [ 155.162165][ T3451] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.188125][ T9526] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 155.196747][ T3451] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.196925][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 155.196938][ T29] audit: type=1326 audit(1693.169:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.234626][ T29] audit: type=1326 audit(1693.169:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.258006][ T29] audit: type=1326 audit(1693.169:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.258052][ T3451] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.280987][ T29] audit: type=1326 audit(1693.169:10337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.312421][ T29] audit: type=1326 audit(1693.169:10338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.316493][ T9526] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2247: inode has both inline data and extents flags [ 155.335398][ T29] audit: type=1326 audit(1693.169:10339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.335432][ T29] audit: type=1326 audit(1693.169:10340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.335458][ T29] audit: type=1326 audit(1693.169:10341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.398639][ T3451] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 155.417848][ T29] audit: type=1326 audit(1693.169:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.417875][ T29] audit: type=1326 audit(1693.169:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9528 comm="syz.0.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 155.473698][ T9526] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2247: couldn't read orphan inode 15 (err -117) [ 155.495591][ T9526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.518488][ T9502] syz.2.2240 (9502) used greatest stack depth: 7432 bytes left [ 155.605989][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.648552][ T9546] loop1: detected capacity change from 0 to 512 [ 155.662107][ T9546] EXT4-fs (loop1): 1 orphan inode deleted [ 155.668466][ T9546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.708071][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.811219][ T3451] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x60 [ 155.855530][ T9567] lo speed is unknown, defaulting to 1000 [ 155.861363][ T9567] lo speed is unknown, defaulting to 1000 [ 155.867572][ T9567] lo speed is unknown, defaulting to 1000 [ 155.873797][ T9567] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.912083][ T9567] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 155.965217][ T9567] lo speed is unknown, defaulting to 1000 [ 155.971464][ T9567] lo speed is unknown, defaulting to 1000 [ 155.977917][ T9567] lo speed is unknown, defaulting to 1000 [ 155.984200][ T9567] lo speed is unknown, defaulting to 1000 [ 155.992779][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2265'. [ 156.002736][ T9567] lo speed is unknown, defaulting to 1000 [ 156.111791][ T9591] netlink: 'syz.1.2272': attribute type 30 has an invalid length. [ 156.184137][ T9593] loop0: detected capacity change from 0 to 2048 [ 156.227323][ T9593] loop0: p1 < > p4 [ 156.231923][ T9593] loop0: p4 size 8388608 extends beyond EOD, truncated [ 156.471000][ T9603] loop1: detected capacity change from 0 to 512 [ 156.479114][ T9603] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.507583][ T9603] EXT4-fs (loop1): 1 truncate cleaned up [ 156.515038][ T9603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.698336][ T9624] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 156.740632][ T9626] netlink: 'syz.0.2287': attribute type 41 has an invalid length. [ 156.777421][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.849062][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 156.878469][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 157.013204][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2295'. [ 157.179612][ T9658] syzkaller0: entered promiscuous mode [ 157.185174][ T9658] syzkaller0: entered allmulticast mode [ 157.202932][ T9658] syzkaller0: tun_net_xmit 1280 [ 157.334614][ T9664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9664 comm=syz.1.2301 [ 157.515197][ T9675] siw: device registration error -23 [ 157.553649][ T9677] vlan0: entered allmulticast mode [ 158.254875][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 158.279066][ T9715] loop1: detected capacity change from 0 to 512 [ 158.296674][ T9715] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2321: Failed to acquire dquot type 1 [ 158.309125][ T9715] EXT4-fs (loop1): 1 truncate cleaned up [ 158.315284][ T9715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.344127][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.374120][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 158.411348][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 158.452521][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 158.570438][ T9734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2328'. [ 158.591476][ T9685] syz.2.2310 (9685) used greatest stack depth: 7304 bytes left [ 158.810925][ T9751] loop4: detected capacity change from 0 to 512 [ 158.827006][ T9757] netlink: 'syz.2.2337': attribute type 12 has an invalid length. [ 158.827141][ T9751] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2335: Failed to acquire dquot type 1 [ 158.855345][ T9751] EXT4-fs (loop4): 1 truncate cleaned up [ 158.861458][ T9751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.932183][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.042382][ T9786] lo speed is unknown, defaulting to 1000 [ 160.445019][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 160.445038][ T29] audit: type=1400 audit(1698.429:10766): avc: denied { connect } for pid=9802 comm="syz.0.2353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.473702][ T3726] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.544875][ T29] audit: type=1400 audit(1698.519:10767): avc: denied { read } for pid=9802 comm="syz.0.2353" path="socket:[30586]" dev="sockfs" ino=30586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.642680][ T29] audit: type=1400 audit(1698.619:10768): avc: denied { write } for pid=9802 comm="syz.0.2353" path="socket:[32169]" dev="sockfs" ino=32169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 160.710698][ T9813] loop0: detected capacity change from 0 to 1024 [ 160.720924][ T9813] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 160.731998][ T9813] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 160.756054][ T9813] JBD2: no valid journal superblock found [ 160.761867][ T9813] EXT4-fs (loop0): Could not load journal inode [ 160.793868][ T9815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2357'. [ 161.059740][ T9830] netlink: 14 bytes leftover after parsing attributes in process `+}[@'. [ 161.071398][ T9830] bond0 (unregistering): Released all slaves [ 161.139032][ T9835] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 161.175388][ T9835] team0: Port device team_slave_0 removed [ 161.248501][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2367'. [ 161.258065][ T9842] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2367'. [ 161.262090][ T29] audit: type=1326 audit(1699.239:10769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 161.291871][ T29] audit: type=1326 audit(1699.269:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 161.314868][ T29] audit: type=1326 audit(1699.269:10771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 161.338100][ T29] audit: type=1326 audit(1699.269:10772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 161.376640][ T29] audit: type=1326 audit(1699.359:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 161.399656][ T29] audit: type=1326 audit(1699.359:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 161.422638][ T29] audit: type=1326 audit(1699.359:10775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.1.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 161.517995][ T9844] xt_hashlimit: size too large, truncated to 1048576 [ 162.881185][ T9895] loop1: detected capacity change from 0 to 512 [ 162.916784][ T9895] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2387: inode has both inline data and extents flags [ 162.947116][ T9895] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2387: couldn't read orphan inode 15 (err -117) [ 163.000951][ T9895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.313758][ T9910] lo speed is unknown, defaulting to 1000 [ 163.517569][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.561903][ T9923] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 163.602454][ T9923] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.622328][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 163.640267][ T9928] lo speed is unknown, defaulting to 1000 [ 163.705600][ T9932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'. [ 163.736288][ T9929] bond5 (unregistering): Released all slaves [ 163.746694][ T9932] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 163.762133][ T9932] team1: entered promiscuous mode [ 163.767255][ T9932] team1: entered allmulticast mode [ 163.839290][ T9938] loop1: detected capacity change from 0 to 512 [ 163.848416][ T9938] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.867168][ T9938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 164.174163][ T9958] xt_hashlimit: size too large, truncated to 1048576 [ 164.352057][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 164.567178][ T9970] loop4: detected capacity change from 0 to 128 [ 164.678628][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 164.695019][ T9985] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 164.716620][ T9985] bond0: (slave dummy0): Releasing backup interface [ 164.738692][ T9985] dummy0: left allmulticast mode [ 164.745619][ T9985] dummy0: entered allmulticast mode [ 164.751195][ T9985] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.760306][ T9985] team0: Failed to send options change via netlink (err -105) [ 164.761592][ T9990] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 164.767833][ T9985] team0: Port device dummy0 added [ 164.781339][ T9990] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.790620][ T9990] dummy0: left allmulticast mode [ 164.796926][ T9990] team0: Failed to send options change via netlink (err -105) [ 164.814983][ T9990] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 164.832717][ T9990] team0: Port device dummy0 removed [ 164.851219][ T9990] dummy0: entered allmulticast mode [ 164.865005][ T9990] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 164.910180][T10001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2428'. [ 165.110161][T10011] loop4: detected capacity change from 0 to 2048 [ 165.156544][T10011] loop4: p1 < > p4 [ 165.160916][T10011] loop4: p4 size 8388608 extends beyond EOD, truncated [ 165.222168][T10020] loop4: detected capacity change from 0 to 128 [ 166.440196][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 166.440215][ T29] audit: type=1326 audit(1704.409:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.469920][ T29] audit: type=1326 audit(1704.409:11002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.493061][ T29] audit: type=1326 audit(1704.409:11003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.516144][ T29] audit: type=1326 audit(1704.409:11004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.539310][ T29] audit: type=1326 audit(1704.409:11005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.562366][ T29] audit: type=1326 audit(1704.409:11006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.585425][ T29] audit: type=1326 audit(1704.409:11007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.608381][ T29] audit: type=1326 audit(1704.409:11008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.631557][ T29] audit: type=1326 audit(1704.409:11009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 166.654968][ T29] audit: type=1326 audit(1704.409:11010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10049 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe91f54f703 code=0x7ffc0000 [ 166.985926][T10065] loop4: detected capacity change from 0 to 512 [ 167.044148][T10065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.171182][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.355791][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'. [ 167.854100][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 167.864904][T10115] team0 (unregistering): Port device team_slave_0 removed [ 169.182346][T10143] netlink: 'syz.0.2485': attribute type 3 has an invalid length. [ 169.201021][T10143] netlink: 'syz.0.2485': attribute type 3 has an invalid length. [ 169.299992][T10150] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.376336][T10150] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.456129][T10150] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.529483][T10150] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 169.629262][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.844895][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.858564][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.884836][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 170.266324][T10169] lo speed is unknown, defaulting to 1000 [ 170.615898][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 170.624867][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 170.706244][T10206] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2507'. [ 170.746775][T10210] xt_hashlimit: max too large, truncated to 1048576 [ 170.840768][T10217] lo speed is unknown, defaulting to 1000 [ 171.118020][T10235] lo speed is unknown, defaulting to 1000 [ 171.445046][ T29] kauditd_printk_skb: 922 callbacks suppressed [ 171.445065][ T29] audit: type=1326 audit(1709.429:11933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.488401][ T29] audit: type=1326 audit(1709.449:11934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.511647][ T29] audit: type=1326 audit(1709.459:11935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.534842][ T29] audit: type=1326 audit(1709.469:11936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.558467][ T29] audit: type=1326 audit(1709.479:11937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.581816][ T29] audit: type=1326 audit(1709.489:11938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.605057][ T29] audit: type=1326 audit(1709.499:11939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.628407][ T29] audit: type=1326 audit(1709.509:11940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.651625][ T29] audit: type=1326 audit(1709.519:11941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 171.674814][ T29] audit: type=1326 audit(1709.529:11942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.1.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7ff5893af6c9 code=0x7ffc0000 [ 172.275498][T10289] netlink: 'syz.1.2539': attribute type 10 has an invalid length. [ 172.524602][T10310] veth22: entered promiscuous mode [ 172.529906][T10310] veth22: entered allmulticast mode [ 172.574859][T10315] veth24: entered promiscuous mode [ 172.580102][T10315] veth24: entered allmulticast mode [ 172.640418][T10317] bridge0: entered allmulticast mode [ 172.656052][T10317] bridge_slave_1: left allmulticast mode [ 172.661786][T10317] bridge_slave_1: left promiscuous mode [ 172.667651][T10317] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.688362][T10317] bridge_slave_0: left allmulticast mode [ 172.694094][T10317] bridge_slave_0: left promiscuous mode [ 172.699822][T10317] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.713546][T10317] team0: Port device bridge0 removed [ 172.849533][T10327] netlink: 'syz.0.2551': attribute type 4 has an invalid length. [ 172.896630][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2553'. [ 172.980604][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2554'. [ 173.026514][T10331] xt_time: unknown flags 0xf4 [ 173.068296][T10332] loop1: detected capacity change from 0 to 512 [ 173.075244][T10332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.212351][T10332] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.1.2554: corrupted xattr block 95: invalid header [ 173.238795][T10337] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.252511][T10332] EXT4-fs (loop1): Remounting filesystem read-only [ 173.259217][T10332] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 173.302841][T10332] EXT4-fs (loop1): 1 orphan inode deleted [ 173.318056][T10332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.347655][T10331] EXT4-fs (loop1): shut down requested (1) [ 173.357634][T10337] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.388449][T10331] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 173.411695][T10331] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 173.448102][T10337] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.656816][T10337] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.668110][ T4713] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.696025][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 173.917081][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 174.005973][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2568'. [ 174.009107][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.065125][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 174.081155][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.094069][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2568'. [ 174.104989][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.143534][T10359] lo speed is unknown, defaulting to 1000 [ 174.150889][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 174.166915][ T60] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 174.427767][T10379] lo speed is unknown, defaulting to 1000 [ 174.791491][ T31] dvmrp8 (unregistering): left allmulticast mode [ 174.810839][ T31] bond3 (unregistering): (slave geneve2): Releasing active interface [ 174.919246][ T31] bond1 (unregistering): (slave bridge3): Releasing active interface [ 175.123090][T10382] netlink: 536 bytes leftover after parsing attributes in process `syz.0.2570'. [ 175.229298][ T31] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.253357][ T31] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.272797][ T31] $H (unregistering): Released all slaves [ 175.293091][ T31] bond1 (unregistering): Released all slaves [ 175.306450][ T31] bond2 (unregistering): Released all slaves [ 175.323865][ T31] bond0 (unregistering): Released all slaves [ 175.341979][ T31] bond3 (unregistering): Released all slaves [ 175.361948][ T31] bond4 (unregistering): (slave dummy0): Releasing active interface [ 175.377960][ T31] dummy0: left promiscuous mode [ 175.391144][ T31] bond4 (unregistering): Released all slaves [ 175.445743][T10382] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2570'. [ 175.467314][T10359] chnl_net:caif_netlink_parms(): no params data found [ 175.560188][ T31] tipc: Left network mode [ 175.570655][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.598655][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.672043][ T3401] lo speed is unknown, defaulting to 1000 [ 175.677861][ T3401] infiniband syz2: ib_query_port failed (-19) [ 175.684933][T10359] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.692069][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.702367][T10359] bridge_slave_0: entered allmulticast mode [ 175.710697][T10359] bridge_slave_0: entered promiscuous mode [ 175.720546][T10359] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.727853][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.735106][T10359] bridge_slave_1: entered allmulticast mode [ 175.741773][T10359] bridge_slave_1: entered promiscuous mode [ 175.789376][T10359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.814622][T10359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.864834][T10359] team0: Port device team_slave_0 added [ 175.883748][T10359] team0: Port device team_slave_1 added [ 175.983823][T10359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.990880][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.016816][T10359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.101015][T10359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.108074][T10359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.134104][T10359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.249723][T10359] hsr_slave_0: entered promiscuous mode [ 176.257478][T10359] hsr_slave_1: entered promiscuous mode [ 176.264626][T10359] debugfs: 'hsr0' already exists in 'hsr' [ 176.270420][T10359] Cannot create hsr debugfs directory [ 176.493276][T10412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2580'. [ 176.519703][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 176.592820][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2580'. [ 176.602478][T10359] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.625499][T10359] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.634205][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 176.634222][ T29] audit: type=1400 audit(1714.609:12105): avc: denied { connect } for pid=10417 comm="syz.0.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.673028][T10416] veth14: left promiscuous mode [ 176.678364][T10416] veth18: left promiscuous mode [ 176.678813][T10419] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2582'. [ 176.683340][T10416] veth20: left promiscuous mode [ 176.706038][T10416] veth22: left promiscuous mode [ 176.713201][ T29] audit: type=1400 audit(1714.689:12106): avc: denied { write } for pid=10417 comm="syz.0.2583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 176.776544][T10359] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.823699][T10359] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 176.909387][T10359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.932080][T10359] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.982342][T10359] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.992830][T10359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.028758][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.035910][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.054344][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.061489][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.091972][T10436] vlan3: entered allmulticast mode [ 177.238246][T10359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.302798][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2592'. [ 177.321105][T10458] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10458 comm=syz.3.2592 [ 177.405652][T10448] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.509696][T10359] veth0_vlan: entered promiscuous mode [ 177.534146][T10359] veth1_vlan: entered promiscuous mode [ 177.564561][T10359] veth0_macvtap: entered promiscuous mode [ 177.579827][T10359] veth1_macvtap: entered promiscuous mode [ 177.604746][T10359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.626769][T10359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.645869][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.748183][ T29] audit: type=1400 audit(1715.669:12107): avc: denied { mounton } for pid=10359 comm="syz-executor" path="/root/syzkaller.u49fex/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 177.772592][ T29] audit: type=1400 audit(1715.669:12108): avc: denied { mount } for pid=10359 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 177.794183][ T29] audit: type=1400 audit(1715.669:12109): avc: denied { mounton } for pid=10359 comm="syz-executor" path="/root/syzkaller.u49fex/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 177.820606][ T29] audit: type=1400 audit(1715.669:12110): avc: denied { mounton } for pid=10359 comm="syz-executor" path="/root/syzkaller.u49fex/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=36261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 177.847922][ T29] audit: type=1400 audit(1715.679:12111): avc: denied { mounton } for pid=10359 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 177.870461][ T29] audit: type=1400 audit(1715.679:12112): avc: denied { mount } for pid=10359 comm="syz-executor" name="/" dev="gadgetfs" ino=3998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 177.899879][T10477] netlink: 24 bytes leftover after parsing attributes in process `wޣ'. [ 177.911490][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.920636][ T29] audit: type=1400 audit(1715.869:12113): avc: denied { add_name } for pid=10359 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 177.944947][ T29] audit: type=1400 audit(1715.869:12114): avc: denied { associate } for pid=10359 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 177.971576][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.990866][T10477] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 178.003941][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.155009][T10491] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2602'. [ 178.167525][T10491] 0X: renamed from caif0 [ 178.174726][T10491] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 178.245692][T10510] netlink: 'syz.2.2610': attribute type 12 has an invalid length. [ 178.304075][T10513] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2611'. [ 178.325542][T10513] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2611'. [ 178.538240][T10529] IPv6: sit2: Disabled Multicast RS [ 178.658534][T10538] xfrm0: left allmulticast mode [ 178.801556][T10547] macvtap0: entered promiscuous mode [ 178.833588][T10547] macvtap0: left promiscuous mode [ 179.909458][T10575] netlink: 'syz.4.2634': attribute type 1 has an invalid length. [ 179.925187][T10575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.941093][T10575] bond3 (unregistering): Released all slaves [ 180.082998][T10590] sctp: [Deprecated]: syz.3.2637 (pid 10590) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.082998][T10590] Use struct sctp_sack_info instead [ 180.208846][T10599] xt_connbytes: Forcing CT accounting to be enabled [ 180.222854][T10598] loop4: detected capacity change from 0 to 512 [ 180.233579][T10599] set match dimension is over the limit! [ 180.260518][T10598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.315980][T10609] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 180.338683][T10609] 0X: renamed from caif0 [ 180.347071][T10609] 0X: entered allmulticast mode [ 180.352344][T10609] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 180.369402][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.569375][T10616] vlan0: entered allmulticast mode [ 180.574891][T10616] dummy0: entered allmulticast mode [ 181.536242][T10656] random: crng reseeded on system resumption [ 181.635286][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 181.635305][ T29] audit: type=1326 audit(1719.619:12379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e3106567 code=0x7ffc0000 [ 181.689645][T10661] __nla_validate_parse: 9 callbacks suppressed [ 181.689661][T10661] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2663'. [ 181.704862][ T29] audit: type=1326 audit(1719.619:12380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30e30ab789 code=0x7ffc0000 [ 181.728126][ T29] audit: type=1326 audit(1719.619:12381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 181.751389][ T29] audit: type=1326 audit(1719.619:12382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e3106567 code=0x7ffc0000 [ 181.774475][ T29] audit: type=1326 audit(1719.619:12383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30e30ab789 code=0x7ffc0000 [ 181.797586][ T29] audit: type=1326 audit(1719.619:12384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 181.820638][ T29] audit: type=1326 audit(1719.619:12385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e3106567 code=0x7ffc0000 [ 181.843745][ T29] audit: type=1326 audit(1719.619:12386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30e30ab789 code=0x7ffc0000 [ 181.866799][ T29] audit: type=1326 audit(1719.619:12387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 181.890416][ T29] audit: type=1326 audit(1719.649:12388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.4.2660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f30e3106567 code=0x7ffc0000 [ 181.932792][T10663] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2664'. [ 182.387797][T10719] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 182.466770][T10719] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 182.727000][T10719] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 182.845940][T10719] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 183.561715][T10787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 183.621242][T10787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 183.691096][T10787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 183.750029][T10787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 184.428706][T10869] syz_tun: entered allmulticast mode [ 184.449515][T10869] dvmrp8: entered allmulticast mode [ 184.457039][T10868] syz_tun: left allmulticast mode [ 184.516955][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'. [ 184.562167][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2697'. [ 184.627855][T10872] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2691'. [ 184.642222][T10872] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2691'. [ 184.955538][T10880] futex_wake_op: syz.0.2700 tries to shift op by -1; fix this program [ 184.977727][T10895] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.088122][T10895] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.148271][T10895] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.199155][T10895] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.233313][T10915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2712'. [ 185.263089][T10785] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.280543][T10785] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.288881][T10785] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.297168][T10785] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.352335][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'. [ 185.361393][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2715'. [ 185.472000][T10929] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2719'. [ 185.529556][T10933] loop4: detected capacity change from 0 to 2048 [ 185.577648][T10933] Alternate GPT is invalid, using primary GPT. [ 185.584221][T10933] loop4: p2 p3 p7 [ 186.429049][T10975] netlink: 'syz.5.2737': attribute type 83 has an invalid length. [ 186.642421][T10985] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 186.686800][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 186.686819][ T29] audit: type=1400 audit(1724.669:13166): avc: denied { rename } for pid=10984 comm="syz.5.2741" name="file1" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 186.725130][ T29] audit: type=1400 audit(1724.689:13167): avc: denied { unlink } for pid=10359 comm="syz-executor" name="file7" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 187.037941][ T29] audit: type=1400 audit(1725.019:13168): avc: denied { setopt } for pid=10989 comm="syz.5.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.057710][ T29] audit: type=1400 audit(1725.019:13169): avc: denied { write } for pid=10989 comm="syz.5.2744" path="socket:[37245]" dev="sockfs" ino=37245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 187.400360][T11003] __nla_validate_parse: 5 callbacks suppressed [ 187.400377][T11003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2746'. [ 187.429186][T11008] netlink: 'syz.0.2748': attribute type 1 has an invalid length. [ 187.442931][T11009] loop5: detected capacity change from 0 to 128 [ 187.452233][T11008] bond3: entered promiscuous mode [ 187.459364][T11008] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.476928][T11008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2748'. [ 187.486169][T11008] bond3: entered allmulticast mode [ 187.503627][T11008] bond3: (slave bridge3): making interface the new active one [ 187.511194][T11008] bridge3: entered promiscuous mode [ 187.516638][T11008] bridge3: entered allmulticast mode [ 187.524020][T11008] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 187.556795][T11020] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2755'. [ 187.610292][T11026] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.631038][T11028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.732156][T11026] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.881667][T11026] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.001399][T11046] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 188.058483][T11026] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.144407][T11046] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 188.662835][T11046] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 188.706658][T11054] netlink: 'syz.0.2768': attribute type 30 has an invalid length. [ 188.766211][T11046] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 188.914100][T10778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 188.964736][T10778] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 188.983520][T10778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 188.995581][T10778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 189.020637][T11064] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2771'. [ 189.314571][T11087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2780'. [ 189.830870][T10787] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.854222][T10787] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.884867][T10787] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.922457][T10787] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.967627][ T29] audit: type=1400 audit(1727.949:13170): avc: denied { map } for pid=11103 comm="syz.5.2785" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 190.026996][ T29] audit: type=1400 audit(1727.989:13171): avc: denied { append } for pid=11103 comm="syz.5.2785" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 190.075736][T11104] vhci_hcd: invalid port number 96 [ 190.080983][T11104] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 190.501102][ T29] audit: type=1400 audit(1728.479:13172): avc: denied { write } for pid=11126 comm="syz.4.2794" name="ip_vs" dev="proc" ino=4026532677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 190.682443][T11129] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11129 comm=syz.4.2795 [ 190.724211][ T29] audit: type=1400 audit(1728.659:13173): avc: denied { nlmsg_write } for pid=11128 comm="syz.4.2795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 190.888067][T11133] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 190.918563][T11133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.936418][T11133] macvlan0: entered promiscuous mode [ 190.941765][T11133] macvlan0: entered allmulticast mode [ 191.270167][T11148] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.326663][T11148] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.358695][ T29] audit: type=1326 audit(1729.339:13174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11153 comm="syz.0.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 191.384372][ T29] audit: type=1326 audit(1729.339:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11153 comm="syz.0.2805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 191.423142][T11158] macsec0: entered promiscuous mode [ 191.428561][T11158] macsec0: left allmulticast mode [ 191.435434][T11148] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.501986][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 191.575581][T11148] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.687888][T11178] loop4: detected capacity change from 0 to 512 [ 191.705722][T11178] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 191.719008][T11178] EXT4-fs (loop4): 1 truncate cleaned up [ 191.725891][T11178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.184675][T11182] netlink: 'syz.0.2815': attribute type 1 has an invalid length. [ 192.207338][T11182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 192.273542][T11182] veth27: entered promiscuous mode [ 192.283452][T11182] bond4: (slave veth27): Enslaving as an active interface with a down link [ 192.646293][T11182] veth29: entered promiscuous mode [ 192.655138][T11182] bond4: (slave veth29): Enslaving as an active interface with a down link [ 192.673795][T11189] netlink: 'syz.2.2817': attribute type 4 has an invalid length. [ 193.241618][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.395954][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 193.395972][ T29] audit: type=1400 audit(1731.379:13196): avc: denied { mounton } for pid=11222 comm="syz.3.2829" path="/file0" dev="rootfs" ino=39188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 193.425927][ T29] audit: type=1400 audit(1731.409:13197): avc: denied { unmount } for pid=11222 comm="syz.3.2829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 193.455913][T11225] netlink: 'syz.2.2830': attribute type 1 has an invalid length. [ 193.472224][T11225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.484964][T11225] ip6erspan0: entered promiscuous mode [ 193.493464][T11225] bond0: (slave ip6erspan0): making interface the new active one [ 193.502721][T11225] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 193.508557][ T29] audit: type=1326 audit(1731.479:13198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.517011][T11225] macvlan2: entered promiscuous mode [ 193.540773][T11225] bond0: entered promiscuous mode [ 193.546458][T11225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.554457][T11225] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 193.570708][T11225] bond0: left promiscuous mode [ 193.576692][ T29] audit: type=1326 audit(1731.519:13199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.599886][ T29] audit: type=1326 audit(1731.519:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.623149][ T29] audit: type=1326 audit(1731.519:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.646373][ T29] audit: type=1326 audit(1731.519:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.669509][ T29] audit: type=1326 audit(1731.519:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.692666][ T29] audit: type=1326 audit(1731.519:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.715854][ T29] audit: type=1326 audit(1731.519:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11231 comm="syz.3.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 193.777896][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2834'. [ 193.787726][T11234] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2834'. [ 194.176789][ T380] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.196444][ T380] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.234941][ T380] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.249949][ T380] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.509378][T11262] netlink: 'syz.2.2846': attribute type 4 has an invalid length. [ 194.535238][T11262] netlink: 'syz.2.2846': attribute type 4 has an invalid length. [ 195.952713][T11299] pim6reg1: entered promiscuous mode [ 195.958121][T11299] pim6reg1: entered allmulticast mode [ 195.987858][T11297] loop4: detected capacity change from 0 to 1024 [ 196.140538][T11306] tipc: Enabling of bearer rejected, failed to enable media [ 196.170357][T11308] wg2: left promiscuous mode [ 196.175126][T11308] wg2: left allmulticast mode [ 196.252295][T11308] wg2: entered promiscuous mode [ 196.257343][T11308] wg2: entered allmulticast mode [ 196.310904][T11312] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.353360][T11318] sctp: [Deprecated]: syz.2.2869 (pid 11318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.353360][T11318] Use struct sctp_sack_info instead [ 196.406173][T11312] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.456414][T11312] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.546076][T11312] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 196.632199][T10782] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.650546][T10782] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.659401][T10782] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.684830][T10782] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 196.710797][T11325] lo: left allmulticast mode [ 196.716396][T11325] tunl0: left allmulticast mode [ 196.722094][T11325] gre0: left allmulticast mode [ 196.728693][T11325] gretap0: left allmulticast mode [ 196.734958][T11325] erspan0: left allmulticast mode [ 196.740917][T11325] ip_vti0: left allmulticast mode [ 196.746912][T11325] ip6_vti0: left allmulticast mode [ 196.752900][T11325] sit0: left allmulticast mode [ 196.760605][T11325] ip6tnl0: left allmulticast mode [ 196.767514][T11325] ip6gre0: left allmulticast mode [ 196.773825][T11325] ip6gretap0: left allmulticast mode [ 196.780217][T11325] vcan0: left allmulticast mode [ 196.786194][T11325] $H: left allmulticast mode [ 196.791837][T11325] 8021q: adding VLAN 0 to HW filter on device $H [ 196.799615][T11325] team0: left allmulticast mode [ 196.805041][T11325] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.814273][T11325] nlmon0: left allmulticast mode [ 196.820064][T11325] caif0: left allmulticast mode [ 196.825149][T11325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 198.288740][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2877'. [ 198.459754][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2890'. [ 198.469382][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 198.469400][ T29] audit: type=1400 audit(1736.449:13291): avc: denied { accept } for pid=11353 comm="syz.2.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.911439][T11361] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2892'. [ 198.935084][T11362] sctp: [Deprecated]: syz.4.2881 (pid 11362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.935084][T11362] Use struct sctp_sack_info instead [ 198.966212][T11365] tipc: Bearer : already 2 bearers with priority 10 [ 198.973787][T11365] tipc: Bearer : trying with adjusted priority [ 198.981419][T11365] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 198.989586][T11365] tipc: Enabled bearer , priority 9 [ 199.039109][ T29] audit: type=1400 audit(1737.019:13292): avc: denied { mounton } for pid=11369 comm="syz.4.2885" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 199.220152][ T29] audit: type=1326 audit(1737.199:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.243528][ T29] audit: type=1326 audit(1737.199:13294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.266613][ T29] audit: type=1326 audit(1737.199:13295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.290021][ T29] audit: type=1326 audit(1737.199:13296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.313273][ T29] audit: type=1326 audit(1737.199:13297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.336674][ T29] audit: type=1326 audit(1737.199:13298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.360046][ T29] audit: type=1326 audit(1737.199:13299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.365030][T11356] syz.3.2880 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 199.383758][ T29] audit: type=1326 audit(1737.199:13300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11372 comm="syz.0.2886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 199.397069][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.3.2880 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 199.397103][T11356] Tainted: [W]=WARN [ 199.397110][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.397194][T11356] Call Trace: [ 199.397201][T11356] [ 199.397209][T11356] __dump_stack+0x1d/0x30 [ 199.397232][T11356] dump_stack_lvl+0xe8/0x140 [ 199.397260][T11356] dump_stack+0x15/0x1b [ 199.397278][T11356] dump_header+0x81/0x220 [ 199.397297][T11356] oom_kill_process+0x342/0x400 [ 199.397390][T11356] out_of_memory+0x979/0xb80 [ 199.397496][T11356] try_charge_memcg+0x610/0xa10 [ 199.397586][T11356] obj_cgroup_charge_pages+0xa6/0x150 [ 199.397607][T11356] __memcg_kmem_charge_page+0x9f/0x170 [ 199.397629][T11356] __alloc_frozen_pages_noprof+0x188/0x360 [ 199.397712][T11356] alloc_pages_mpol+0xb3/0x260 [ 199.397735][T11356] alloc_pages_noprof+0x90/0x130 [ 199.397757][T11356] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 199.397816][T11356] ? mas_max_gap+0x2b4/0x390 [ 199.397842][T11356] __kvmalloc_node_noprof+0x483/0x670 [ 199.397890][T11356] ? ip_set_alloc+0x24/0x30 [ 199.397967][T11356] ? ip_set_alloc+0x24/0x30 [ 199.397995][T11356] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 199.398087][T11356] ip_set_alloc+0x24/0x30 [ 199.398115][T11356] hash_netiface_create+0x282/0x740 [ 199.398176][T11356] ? __pfx_hash_netiface_create+0x10/0x10 [ 199.398282][T11356] ip_set_create+0x3cc/0x970 [ 199.398308][T11356] ? __nla_parse+0x40/0x60 [ 199.398355][T11356] nfnetlink_rcv_msg+0x4c6/0x590 [ 199.398398][T11356] netlink_rcv_skb+0x123/0x220 [ 199.398439][T11356] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 199.398471][T11356] nfnetlink_rcv+0x167/0x16c0 [ 199.398563][T11356] ? kmem_cache_free+0xe4/0x3d0 [ 199.398593][T11356] ? __kfree_skb+0x109/0x150 [ 199.398622][T11356] ? nlmon_xmit+0x4f/0x60 [ 199.398693][T11356] ? consume_skb+0x49/0x150 [ 199.398721][T11356] ? nlmon_xmit+0x4f/0x60 [ 199.398745][T11356] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 199.398778][T11356] ? __dev_queue_xmit+0x1200/0x2000 [ 199.398796][T11356] ? __dev_queue_xmit+0x182/0x2000 [ 199.398895][T11356] ? ref_tracker_free+0x37d/0x3e0 [ 199.398991][T11356] ? __netlink_deliver_tap+0x4dc/0x500 [ 199.399025][T11356] netlink_unicast+0x5c0/0x690 [ 199.399131][T11356] netlink_sendmsg+0x58b/0x6b0 [ 199.399152][T11356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.399172][T11356] __sock_sendmsg+0x145/0x180 [ 199.399237][T11356] ____sys_sendmsg+0x31e/0x4e0 [ 199.399272][T11356] ___sys_sendmsg+0x17b/0x1d0 [ 199.399301][T11356] __x64_sys_sendmsg+0xd4/0x160 [ 199.399324][T11356] x64_sys_call+0x191e/0x3000 [ 199.399366][T11356] do_syscall_64+0xd2/0x200 [ 199.399387][T11356] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.399414][T11356] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.399448][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.399470][T11356] RIP: 0033:0x7f1aa627f6c9 [ 199.399519][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.399537][T11356] RSP: 002b:00007f1aa4cdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.399572][T11356] RAX: ffffffffffffffda RBX: 00007f1aa64d5fa0 RCX: 00007f1aa627f6c9 [ 199.399630][T11356] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 199.399643][T11356] RBP: 00007f1aa6301f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.399655][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.399668][T11356] R13: 00007f1aa64d6038 R14: 00007f1aa64d5fa0 R15: 00007ffec8e07e88 [ 199.399686][T11356] [ 199.399693][T11356] memory: usage 307200kB, limit 307200kB, failcnt 465 [ 199.624087][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 199.629204][T11356] memory+swap: usage 307956kB, limit 9007199254740988kB, failcnt 0 [ 199.629224][T11356] kmem: usage 306928kB, limit 9007199254740988kB, failcnt 0 [ 199.629239][T11356] Memory cgroup stats for [ 199.770264][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'. [ 199.772153][T11356] /syz3: [ 199.788086][T11356] cache 192512 [ 199.822801][T11356] rss 12288 [ 199.822813][T11356] shmem 0 [ 199.822820][T11356] mapped_file 4096 [ 199.822827][T11356] dirty 0 [ 199.822833][T11356] writeback 0 [ 199.822840][T11356] workingset_refault_anon 2987 [ 199.822847][T11356] workingset_refault_file 932 [ 199.822855][T11356] swap 843776 [ 199.822863][T11356] swapcached 45056 [ 199.822870][T11356] pgpgin 297755 [ 199.822878][T11356] pgpgout 297697 [ 199.822886][T11356] pgfault 277374 [ 199.822893][T11356] pgmajfault 433 [ 199.822902][T11356] inactive_anon 45056 [ 199.822909][T11356] active_anon 0 [ 199.822915][T11356] inactive_file 147456 [ 199.822922][T11356] active_file 4096 [ 199.822929][T11356] unevictable 0 [ 199.822935][T11356] hierarchical_memory_limit 314572800 [ 199.822943][T11356] hierarchical_memsw_limit 9223372036854771712 [ 199.822951][T11356] total_cache 192512 [ 199.822958][T11356] total_rss 12288 [ 199.822966][T11356] total_shmem 0 [ 199.822973][T11356] total_mapped_file 4096 [ 199.823045][T11356] total_dirty 0 [ 199.823067][T11356] total_writeback 0 [ 199.823075][T11356] total_workingset_refault_anon 2987 [ 199.823084][T11356] total_workingset_refault_file 932 [ 199.823195][T11356] total_swap 843776 [ 199.823203][T11356] total_swapcached 45056 [ 199.823211][T11356] total_pgpgin 297755 [ 199.823219][T11356] total_pgpgout 297697 [ 199.823227][T11356] total_pgfault 277374 [ 199.823275][T11356] total_pgmajfault 433 [ 199.823282][T11356] total_inactive_anon 45056 [ 199.823289][T11356] total_active_anon 0 [ 199.823296][T11356] total_inactive_file 147456 [ 199.823303][T11356] total_active_file 4096 [ 199.823310][T11356] total_unevictable 0 [ 199.823317][T11356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2880,pid=11354,uid=0 [ 199.823487][T11356] Memory cgroup out of memory: Killed process 11354 (syz.3.2880) total-vm:96136kB, anon-rss:1136kB, file-rss:22192kB, shmem-rss:40kB, UID:0 pgtables:148kB oom_score_adj:0 [ 199.858385][T11381] loop5: detected capacity change from 0 to 512 [ 200.045038][T11381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 200.095171][T11379] wg2: entered promiscuous mode [ 200.100101][T11379] wg2: entered allmulticast mode [ 200.107149][T11390] loop4: detected capacity change from 0 to 1024 [ 200.114171][T11390] EXT4-fs: Ignoring removed orlov option [ 200.124234][T10359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 200.145510][T11390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.198012][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.515717][T11423] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2904'. [ 200.730852][T11429] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.237407][T11439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2911'. [ 201.368436][T11446] loop5: detected capacity change from 0 to 512 [ 201.416601][T11446] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.472035][T10359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.570943][T11455] Process accounting resumed [ 201.585642][T11462] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 201.736224][T11473] netlink: 'syz.5.2925': attribute type 1 has an invalid length. [ 201.883800][T11478] vlan2: entered allmulticast mode [ 202.496421][T11503] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2935'. [ 202.611104][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2941'. [ 202.620760][T11515] hsr_slave_0: left promiscuous mode [ 202.643510][T11520] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2943'. [ 202.661670][T11520] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11520 comm=syz.3.2943 [ 202.697590][T11524] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2945'. [ 202.712835][T11524] lo: entered allmulticast mode [ 202.726898][T11524] dvmrp8: entered allmulticast mode [ 202.744100][T11523] lo: left allmulticast mode [ 203.384090][T11550] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 203.403875][T11556] netlink: 'syz.4.2957': attribute type 4 has an invalid length. [ 203.412074][T11556] netlink: 'syz.4.2957': attribute type 4 has an invalid length. [ 203.455741][T11550] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 203.477457][T11560] loop4: detected capacity change from 0 to 512 [ 203.508601][T11560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.587779][ T29] kauditd_printk_skb: 195 callbacks suppressed [ 203.587796][ T29] audit: type=1400 audit(1741.569:13496): avc: denied { remount } for pid=11559 comm="syz.4.2958" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 203.671883][T11560] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.704519][T11560] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.2958: corrupted xattr block 6: invalid header [ 203.723440][T11560] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 203.735325][ T29] audit: type=1326 audit(1741.719:13497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.758951][ T29] audit: type=1326 audit(1741.719:13498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.785106][ T29] audit: type=1326 audit(1741.759:13499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.808131][ T29] audit: type=1326 audit(1741.759:13500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.831324][ T29] audit: type=1326 audit(1741.759:13501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.855007][T11550] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 203.885105][ T29] audit: type=1326 audit(1741.839:13502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.908252][ T29] audit: type=1326 audit(1741.849:13503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.931376][ T29] audit: type=1326 audit(1741.849:13504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.954588][ T29] audit: type=1326 audit(1741.849:13505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11570 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 203.988047][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.057381][T11580] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2963'. [ 205.575209][T11550] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 206.349031][T11628] loop5: detected capacity change from 0 to 512 [ 206.372533][T11628] EXT4-fs: Invalid want_extra_isize 93 [ 206.480370][T10787] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 206.492355][T10787] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 206.503830][T10787] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 206.516307][T10787] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 206.916199][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'. [ 206.958630][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'. [ 206.981517][T11644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2985'. [ 207.094032][T11658] bond3: option all_slaves_active: invalid value (5) [ 207.102167][T11658] bond3 (unregistering): Released all slaves [ 207.112100][T11656] bridge: RTM_NEWNEIGH with invalid ether address [ 207.949030][T11678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2996'. [ 208.176789][T11678] hsr_slave_0: left promiscuous mode [ 208.776821][T11678] hsr_slave_1: left promiscuous mode [ 208.993490][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 208.993508][ T29] audit: type=1326 audit(1746.969:13565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.022990][ T29] audit: type=1326 audit(1746.969:13566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.060847][ T29] audit: type=1326 audit(1746.969:13567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.084119][ T29] audit: type=1326 audit(1746.969:13568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.108067][ T29] audit: type=1326 audit(1746.969:13569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.131138][ T29] audit: type=1326 audit(1746.979:13570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.154217][ T29] audit: type=1326 audit(1746.979:13571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.177359][ T29] audit: type=1326 audit(1746.979:13572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.200441][ T29] audit: type=1326 audit(1746.979:13573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.216193][T11704] netlink: 'syz.0.3002': attribute type 13 has an invalid length. [ 209.223537][ T29] audit: type=1326 audit(1746.979:13574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11690 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 209.340478][T11714] netlink: 'syz.2.3007': attribute type 4 has an invalid length. [ 209.352952][T11714] netlink: 'syz.2.3007': attribute type 4 has an invalid length. [ 209.609641][T11728] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.039286][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3014'. [ 210.856866][T11743] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3018'. [ 210.867492][T11743] 0X: renamed from caif0 [ 210.874157][T11743] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 211.110329][T11752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3022'. [ 211.165469][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3022'. [ 211.868758][T11782] netlink: 'syz.4.3032': attribute type 1 has an invalid length. [ 211.935526][T11785] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3032'. [ 211.943299][T11782] bond4: entered promiscuous mode [ 211.953086][T11782] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.964004][T11785] bond4: entered allmulticast mode [ 212.051846][T11782] bond4: (slave bridge4): making interface the new active one [ 212.059467][T11782] bridge4: entered promiscuous mode [ 212.064738][T11782] bridge4: entered allmulticast mode [ 212.158533][T11782] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 212.400955][T11792] netlink: 'syz.5.3033': attribute type 4 has an invalid length. [ 212.428476][T11792] netlink: 'syz.5.3033': attribute type 4 has an invalid length. [ 212.477294][T11794] ip6gretap0: entered promiscuous mode [ 212.483461][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3037'. [ 212.494359][T11794] ip6gretap0 (unregistering): left promiscuous mode [ 212.599253][T11798] netlink: 'syz.2.3038': attribute type 12 has an invalid length. [ 212.624176][T11796] loop5: detected capacity change from 0 to 512 [ 212.645499][T11796] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.320181][T11818] loop5: detected capacity change from 0 to 2048 [ 213.377177][T11818] Alternate GPT is invalid, using primary GPT. [ 213.383620][T11818] loop5: p2 p3 p7 [ 213.391685][T11822] netlink: 'syz.2.3045': attribute type 1 has an invalid length. [ 213.407705][T11822] bond5: entered promiscuous mode [ 213.413022][T11822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 213.437464][T11822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3045'. [ 213.446680][T11822] bond5: entered allmulticast mode [ 213.459770][T11822] bond5: (slave bridge6): making interface the new active one [ 213.467603][T11822] bridge6: entered promiscuous mode [ 213.473023][T11822] bridge6: entered allmulticast mode [ 213.479993][T11822] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 213.849659][T11844] loop4: detected capacity change from 0 to 1024 [ 213.875168][T11844] EXT4-fs: Ignoring removed orlov option [ 213.896042][T11844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.065607][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3056'. [ 214.679924][T11863] netlink: 'syz.5.3058': attribute type 1 has an invalid length. [ 214.695030][T11863] bond1: entered promiscuous mode [ 214.700379][T11863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.716455][T11863] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3058'. [ 214.725668][T11863] bond1: entered allmulticast mode [ 214.739570][T11863] bond1: (slave bridge1): making interface the new active one [ 214.747232][T11863] bridge1: entered promiscuous mode [ 214.752747][T11863] bridge1: entered allmulticast mode [ 214.759542][T11863] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 214.802301][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.814706][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 214.814724][ T29] audit: type=1326 audit(1752.789:13675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 214.845853][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3061'. [ 214.863298][ T29] audit: type=1326 audit(1752.829:13676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 214.886598][ T29] audit: type=1326 audit(1752.829:13677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 214.910028][ T29] audit: type=1326 audit(1752.829:13678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 214.933659][ T29] audit: type=1326 audit(1752.829:13679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 214.956967][ T29] audit: type=1326 audit(1752.829:13680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 214.980248][ T29] audit: type=1326 audit(1752.829:13681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 215.003369][ T29] audit: type=1326 audit(1752.829:13682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 215.006403][T11868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 215.026649][ T29] audit: type=1326 audit(1752.829:13683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 215.056424][ T29] audit: type=1326 audit(1752.829:13684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11865 comm="syz.2.3059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 215.117839][T11876] bond5: option all_slaves_active: invalid value (5) [ 215.127024][T11876] bond5 (unregistering): Released all slaves [ 215.747756][T11903] geneve2: entered promiscuous mode [ 215.753084][T11903] geneve2: entered allmulticast mode [ 215.870158][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3073'. [ 216.386055][T11926] bond6: option all_slaves_active: invalid value (5) [ 216.401978][T11926] bond6 (unregistering): Released all slaves [ 216.668844][T11948] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.716845][T11948] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.756937][T11948] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.816372][T11948] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.872388][T10782] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.884020][T10782] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.895212][T10782] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.906925][T10782] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.208449][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3087'. [ 217.357793][T11964] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.3095'. [ 217.565372][T11975] bond5: option all_slaves_active: invalid value (5) [ 217.573156][T11975] bond5 (unregistering): Released all slaves [ 220.159572][T12053] netlink: 'syz.4.3112': attribute type 13 has an invalid length. [ 220.316470][T12093] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 220.379432][T12093] 8021q: adding VLAN 0 to HW filter on device bond6 [ 220.394264][T12099] veth17: entered promiscuous mode [ 220.402439][T12099] bond6: (slave veth17): Enslaving as an active interface with a down link [ 220.430772][T12093] veth19: entered promiscuous mode [ 220.438064][T12093] bond6: (slave veth19): Enslaving as an active interface with a down link [ 220.810068][T12112] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 220.828006][T12110] vlan1: entered allmulticast mode [ 220.831340][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3115'. [ 220.960328][T12112] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 221.136792][T12112] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 221.301553][T12112] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 221.543072][T10778] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 221.561785][T10778] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 221.584982][T10778] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 221.593306][T10778] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 221.798374][T12131] loop5: detected capacity change from 0 to 512 [ 221.829195][T12131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.860703][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 221.860791][ T29] audit: type=1400 audit(1759.839:13836): avc: denied { setattr } for pid=12129 comm="syz.5.3134" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.860991][T12131] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #4: comm syz.5.3134: corrupted inode contents [ 221.915021][T12131] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #4: comm syz.5.3134: mark_inode_dirty error [ 221.945131][T12131] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #4: comm syz.5.3134: corrupted inode contents [ 221.967300][T12131] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.3134: mark_inode_dirty error [ 221.980563][T12131] Quota error (device loop5): write_blk: dquota write failed [ 221.988108][T12131] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 221.998101][T12131] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3134: Failed to acquire dquot type 1 [ 222.184372][T10359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.244571][T12151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.562715][T12154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12154 comm=syz.4.3129 [ 222.677211][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 223.144897][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 223.214035][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3135'. [ 223.879867][T12227] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.986637][T12227] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.047739][T12227] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.129344][T12227] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.232294][T10778] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.265775][T10778] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.283813][T10778] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.326016][T10778] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.570595][T12284] netlink: 'syz.2.3143': attribute type 13 has an invalid length. [ 224.675571][T12290] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 224.741556][ T29] audit: type=1326 audit(1762.719:13837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 224.765523][ T29] audit: type=1326 audit(1762.749:13838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 224.788790][ T29] audit: type=1326 audit(1762.749:13839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 224.812107][ T29] audit: type=1326 audit(1762.749:13840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 224.835499][ T29] audit: type=1326 audit(1762.749:13841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 224.837386][T12290] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 224.858567][ T29] audit: type=1326 audit(1762.749:13842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 224.891576][ T29] audit: type=1326 audit(1762.749:13843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12295 comm="syz.2.3148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe91f54f6c9 code=0x7ffc0000 [ 225.015718][T12290] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 225.056677][T12290] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 225.133292][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.145376][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.156441][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.167842][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 225.216715][T12303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12303 comm=syz.2.3152 [ 225.263579][T12300] netlink: 'syz.3.3149': attribute type 1 has an invalid length. [ 225.396720][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3149'. [ 225.555400][T12300] bond3: entered promiscuous mode [ 225.560645][T12300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.724620][T12300] bond3: (slave bridge8): making interface the new active one [ 225.732219][T12300] bridge8: entered promiscuous mode [ 225.739010][T12300] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 226.866565][T12342] netlink: 'syz.3.3163': attribute type 13 has an invalid length. [ 226.914133][T10754] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 226.923267][T10754] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 226.933947][T10754] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 226.946458][T10754] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 227.090453][T12347] dvmrp8: entered allmulticast mode [ 227.390389][T12353] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 227.404808][T12355] geneve2: entered promiscuous mode [ 227.410127][T12355] geneve2: entered allmulticast mode [ 227.423250][T12353] bond5: entered promiscuous mode [ 227.428831][T12353] 8021q: adding VLAN 0 to HW filter on device bond5 [ 227.445656][T12353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3167'. [ 227.457532][T12353] bond5: entered allmulticast mode [ 227.472214][T12353] bond5: (slave bridge6): making interface the new active one [ 227.479844][T12353] bridge6: entered promiscuous mode [ 227.485252][T12353] bridge6: entered allmulticast mode [ 227.492328][T12353] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 227.634144][T12361] netlink: 'syz.4.3169': attribute type 4 has an invalid length. [ 227.643877][T12361] netlink: 'syz.4.3169': attribute type 4 has an invalid length. [ 227.686451][T12363] tipc: Enabled bearer , priority 0 [ 227.693850][T12363] syzkaller0: entered promiscuous mode [ 227.699863][T12363] syzkaller0: entered allmulticast mode [ 227.714344][T12363] tipc: Resetting bearer [ 227.721945][T12362] tipc: Resetting bearer [ 227.730942][T12362] tipc: Disabling bearer [ 227.805718][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 227.805735][ T29] audit: type=1326 audit(1765.789:13887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 227.835450][ T29] audit: type=1326 audit(1765.819:13888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 227.861872][ T29] audit: type=1326 audit(1765.839:13889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 227.888176][ T29] audit: type=1326 audit(1765.869:13890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 227.934368][ T29] audit: type=1326 audit(1765.909:13891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1aa627f6c9 code=0x7ffc0000 [ 227.958371][ T29] audit: type=1326 audit(1765.939:13892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1aa627f703 code=0x7ffc0000 [ 227.999591][ T29] audit: type=1326 audit(1765.979:13893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1aa627e17f code=0x7ffc0000 [ 228.030481][ T29] audit: type=1326 audit(1766.009:13894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1aa627f757 code=0x7ffc0000 [ 228.107859][ T29] audit: type=1326 audit(1766.089:13895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1aa627df10 code=0x7ffc0000 [ 228.134078][ T29] audit: type=1326 audit(1766.109:13896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.3.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f1aa627e32a code=0x7ffc0000 [ 229.751337][T12403] lo: entered allmulticast mode [ 229.757590][T12402] lo: left allmulticast mode [ 232.479717][T12444] loop5: detected capacity change from 0 to 1024 [ 233.356217][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 233.356235][ T29] audit: type=1326 audit(1771.339:13923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.385570][ T29] audit: type=1326 audit(1771.339:13924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.472936][ T29] audit: type=1326 audit(1771.389:13925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.496254][ T29] audit: type=1326 audit(1771.389:13926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.519662][ T29] audit: type=1326 audit(1771.389:13927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.542814][ T29] audit: type=1326 audit(1771.389:13928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.566107][ T29] audit: type=1326 audit(1771.399:13929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.589365][ T29] audit: type=1326 audit(1771.399:13930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.612777][ T29] audit: type=1326 audit(1771.399:13931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.635912][ T29] audit: type=1326 audit(1771.399:13932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12481 comm="syz.5.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd78ef6c9 code=0x7ffc0000 [ 233.740866][T12494] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3217'. [ 233.771862][T12496] Y4`ҘDʆ5: renamed from lo (while UP) [ 233.811509][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3219'. [ 234.788968][T12521] loop5: detected capacity change from 0 to 512 [ 234.815531][T12521] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 234.823501][T12521] EXT4-fs (loop5): orphan cleanup on readonly fs [ 234.848653][T12521] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #16: comm syz.5.3226: corrupted inode contents [ 234.874995][T12521] EXT4-fs (loop5): Remounting filesystem read-only [ 234.881703][T12521] EXT4-fs (loop5): 1 truncate cleaned up [ 234.887606][ T2606] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.898207][ T2606] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.960344][ T2606] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 234.971243][T12521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.984486][T12521] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.076712][T12535] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3230'. [ 235.228348][T12521] Process accounting resumed [ 235.236434][T12543] loop4: detected capacity change from 0 to 512 [ 235.251501][T12543] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 235.269522][T12543] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 235.284203][T12543] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3233: bg 0: block 248: padding at end of block bitmap is not set [ 235.299169][T12543] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3233: Failed to acquire dquot type 1 [ 235.311258][T12543] EXT4-fs (loop4): 1 truncate cleaned up [ 235.317528][T12543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 235.346764][T12543] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3233: Failed to acquire dquot type 1 [ 235.367118][T12543] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.3233: Failed to acquire dquot type 1 [ 235.390062][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 235.432750][T12553] loop4: detected capacity change from 0 to 1024 [ 235.455885][T12553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.748442][T12558] syzkaller0: entered allmulticast mode [ 235.758913][T12558] syzkaller0: entered promiscuous mode [ 235.772871][T12558] syzkaller0 (unregistering): left allmulticast mode [ 235.779647][T12558] syzkaller0 (unregistering): left promiscuous mode [ 235.870204][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.178250][T12576] Process accounting resumed [ 236.288222][T12583] vxcan0: left allmulticast mode [ 236.293338][T12583] vxcan1: left allmulticast mode [ 236.298633][T12583] veth0: left allmulticast mode [ 236.303646][T12583] veth1: left allmulticast mode [ 236.308822][T12583] wg1: left allmulticast mode [ 236.313733][T12583] wg2: left promiscuous mode [ 236.318357][T12583] wg2: left allmulticast mode [ 236.323186][T12583] veth0_to_bridge: left allmulticast mode [ 236.329175][T12583] veth1_to_bridge: left allmulticast mode [ 236.335124][T12583] bridge_slave_1: left allmulticast mode [ 236.335751][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3249'. [ 236.340822][T12583] veth0_to_bond: left allmulticast mode [ 236.340931][T12583] bond_slave_0: left allmulticast mode [ 236.361062][T12583] veth0_to_team: left allmulticast mode [ 236.366785][T12583] team_slave_0: left allmulticast mode [ 236.372509][T12583] veth0_to_batadv: left allmulticast mode [ 236.378350][T12583] batadv_slave_0: left allmulticast mode [ 236.384056][T12583] xfrm0: left allmulticast mode [ 236.387397][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3249'. [ 236.389076][T12583] veth0_to_hsr: left allmulticast mode [ 236.403517][T12583] veth1_to_hsr: left allmulticast mode [ 236.409219][T12583] hsr0: left allmulticast mode [ 236.413996][T12583] hsr_slave_0: left allmulticast mode [ 236.419424][T12583] hsr_slave_1: left allmulticast mode [ 236.424890][T12583] veth1_virt_wifi: left allmulticast mode [ 236.430817][T12583] veth0_virt_wifi: left allmulticast mode [ 236.436824][T12583] veth1_macvtap: left allmulticast mode [ 236.442459][T12583] veth0_macvtap: left allmulticast mode [ 236.448312][T12583] macvtap0: left allmulticast mode [ 236.453466][T12583] macsec0: left allmulticast mode [ 236.458644][T12583] geneve0: left allmulticast mode [ 236.463856][T12583] geneve1: left allmulticast mode [ 236.468986][T12583] @: left allmulticast mode [ 236.473617][T12583] syztnl0: left allmulticast mode [ 236.478732][T12583] bond1: left allmulticast mode [ 236.483752][T12583] wireguard0: left allmulticast mode [ 236.489274][T12583] wireguard1: left allmulticast mode [ 236.494672][T12583] bridge1: left allmulticast mode [ 236.499937][T12583] : left allmulticast mode [ 236.504578][T12583] bridge2: left allmulticast mode [ 236.509741][T12583] bridge3: left allmulticast mode [ 236.514872][T12583] bridge4: left allmulticast mode [ 236.520134][T12583] vlan2: left allmulticast mode [ 236.525102][T12583] bond0: left allmulticast mode [ 236.530664][T12583] dummy0: left allmulticast mode [ 236.535862][T12583] veth2: left allmulticast mode [ 236.540919][T12583] veth3: left allmulticast mode [ 236.545954][T12583] geneve2: left allmulticast mode [ 236.551343][T12583] veth6: left promiscuous mode [ 236.556263][T12583] veth6: left allmulticast mode [ 236.562692][T12583] bond3: left promiscuous mode [ 236.567543][T12583] bridge8: left promiscuous mode [ 236.585393][T12588] loop5: detected capacity change from 0 to 1024 [ 236.595978][T12588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.736151][T12591] wg2: entered promiscuous mode [ 236.741075][T12591] wg2: entered allmulticast mode [ 236.814653][T12598] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12598 comm=syz.0.3254 [ 236.827315][T12598] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12598 comm=syz.0.3254 [ 236.962540][T10359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.250499][T12609] xt_socket: unknown flags 0x40 [ 237.514909][T12614] loop7: detected capacity change from 16384 to 0 [ 237.645388][T12625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3262'. [ 237.688547][T12625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12625 comm=syz.4.3262 [ 237.939496][T12641] sch_fq: defrate 4294967295 ignored. [ 238.797735][T12657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3276'. [ 238.816206][T12657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12657 comm=syz.5.3276 [ 238.843293][T12659] netlink: 'syz.5.3278': attribute type 13 has an invalid length. [ 238.890830][T12659] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.898063][T12659] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.951347][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.962776][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.013663][ T2606] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.024019][T12666] netlink: 'syz.0.3280': attribute type 4 has an invalid length. [ 239.032002][ T2606] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.051783][ T2606] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.060830][ T2606] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.232804][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3283'. [ 239.391084][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3285'. [ 239.404305][T12683] pim6reg: entered allmulticast mode [ 240.121112][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 240.121131][ T29] audit: type=1326 audit(1778.099:14101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.214939][ T29] audit: type=1326 audit(1778.099:14102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.238178][ T29] audit: type=1326 audit(1778.139:14103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.239123][T12699] xt_connbytes: Forcing CT accounting to be enabled [ 240.261470][ T29] audit: type=1326 audit(1778.139:14104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.291256][ T29] audit: type=1326 audit(1778.139:14105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.314482][ T29] audit: type=1326 audit(1778.139:14106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.337717][ T29] audit: type=1326 audit(1778.139:14107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.360777][ T29] audit: type=1326 audit(1778.139:14108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.383866][ T29] audit: type=1326 audit(1778.139:14109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 240.406898][ T29] audit: type=1326 audit(1778.139:14110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12692 comm="syz.4.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e310f6c9 code=0x7ffc0000 [ 241.004245][T12707] netlink: 'syz.0.3303': attribute type 1 has an invalid length. [ 241.033291][T12707] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.041659][T12707] bond5: (slave bond6): making interface the new active one [ 241.049396][T12707] bond5: (slave bond6): Enslaving as an active interface with an up link [ 241.096757][T12707] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 241.113399][T12693] syz.4.3289 (12693) used greatest stack depth: 6184 bytes left [ 241.113600][T12699] set match dimension is over the limit! [ 241.152953][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3293'. [ 241.158926][T12707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3303'. [ 241.162020][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3293'. [ 241.191649][T12707] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.216625][T12715] netlink: 'syz.5.3294': attribute type 13 has an invalid length. [ 241.274948][T12717] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 241.563588][T12733] loop5: detected capacity change from 0 to 512 [ 241.596045][T12733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.646542][T10359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.667375][T12738] bridge: RTM_NEWNEIGH with invalid ether address [ 241.800049][T12751] netlink: 'syz.4.3311': attribute type 12 has an invalid length. [ 241.898486][T12758] loop4: detected capacity change from 0 to 512 [ 241.916889][T12758] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 241.925382][T12758] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.933184][T12758] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.3314: corrupted inode contents [ 241.946478][T12758] EXT4-fs (loop4): Remounting filesystem read-only [ 241.957165][T12758] EXT4-fs (loop4): 1 truncate cleaned up [ 241.963002][ T2606] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.973583][ T2606] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 241.985736][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3315'. [ 241.997332][ T2606] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 242.012580][T12762] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.027530][T12758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.041089][T12762] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3315'. [ 242.050638][T12758] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.059661][T12762] bond3: entered promiscuous mode [ 242.064723][T12762] bond3: entered allmulticast mode [ 242.083165][T12762] dummy0: entered promiscuous mode [ 242.095168][T12762] dummy0: entered allmulticast mode [ 242.103224][T12758] Process accounting resumed [ 242.108640][T12762] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 242.129380][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 242.138392][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3316'. [ 242.150246][T12762] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 242.158908][T12762] dummy0: left promiscuous mode [ 242.163849][T12762] dummy0: left allmulticast mode [ 242.169689][T12762] bond3 (unregistering): Released all slaves [ 242.180919][T12764] rtc_cmos 00:00: Alarms can be up to one day in the future [ 242.243059][T12769] netlink: 'syz.5.3318': attribute type 1 has an invalid length. [ 242.264426][T12769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 242.286670][T12769] bond3: entered allmulticast mode [ 242.302481][T12769] bond3: (slave ip6gretap1): making interface the new active one [ 242.310384][T12769] ip6gretap1: entered allmulticast mode [ 242.317029][T12769] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 242.469482][T12784] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 242.477376][T12784] netlink: 'syz.2.3322': attribute type 2 has an invalid length. [ 242.693056][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 242.700758][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 242.708418][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 242.716078][ T3381] rtc_cmos 00:00: Alarms can be up to one day in the future [ 242.723645][ T3381] rtc rtc0: __rtc_set_alarm: err=-22 [ 242.741781][T12789] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.147797][T12793] veth30: entered promiscuous mode [ 243.153047][T12793] veth30: entered allmulticast mode [ 243.299683][T12799] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3330' sets config #1 [ 243.363993][T12805] loop4: detected capacity change from 0 to 512 [ 243.397448][T12805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.652041][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.826853][T12828] netlink: 'syz.3.3340': attribute type 2 has an invalid length. [ 243.869694][T12828] __nla_validate_parse: 4 callbacks suppressed [ 243.869707][T12828] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3340'. [ 245.347900][T12874] Process accounting resumed [ 245.368191][T12880] veth32: entered promiscuous mode [ 245.373383][T12880] veth32: entered allmulticast mode [ 245.414391][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 245.414410][ T29] audit: type=1400 audit(1783.389:14208): avc: denied { ioctl } for pid=12885 comm="syz.5.3362" path="socket:[46051]" dev="sockfs" ino=46051 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 245.530282][ T29] audit: type=1326 audit(1783.509:14209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.553645][ T29] audit: type=1326 audit(1783.509:14210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.586129][ T29] audit: type=1326 audit(1783.559:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.609607][ T29] audit: type=1326 audit(1783.559:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.632677][ T29] audit: type=1326 audit(1783.559:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.655869][ T29] audit: type=1326 audit(1783.559:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.678926][ T29] audit: type=1326 audit(1783.559:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.702152][ T29] audit: type=1326 audit(1783.559:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.725334][ T29] audit: type=1326 audit(1783.559:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12891 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff62cf6f6c9 code=0x7ffc0000 [ 245.750625][T12894] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.3365'. [ 245.760735][T12894] netlink: zone id is out of range [ 245.765924][T12894] netlink: zone id is out of range [ 245.771471][T12894] netlink: zone id is out of range [ 245.776759][T12894] netlink: zone id is out of range [ 245.795734][T12894] netlink: del zone limit has 8 unknown bytes [ 245.810130][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 245.820000][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 245.859648][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3369'. [ 245.871999][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3369'. [ 245.958365][T12907] lo: left allmulticast mode [ 245.963647][T12907] tunl0: left allmulticast mode [ 245.968666][T12907] gre0: left allmulticast mode [ 245.973674][T12907] gretap0: left allmulticast mode [ 245.979086][T12907] erspan0: left allmulticast mode [ 245.984164][T12907] ip_vti0: left allmulticast mode [ 245.989406][T12907] ip6_vti0: left allmulticast mode [ 245.994626][T12907] sit0: left allmulticast mode [ 245.999486][T12907] ip6tnl0: left allmulticast mode [ 246.004607][T12907] ip6gre0: left allmulticast mode [ 246.009808][T12907] syz_tun: left allmulticast mode [ 246.015036][T12907] ip6gretap0: left allmulticast mode [ 246.020534][T12907] bridge0: left allmulticast mode [ 246.025745][T12907] bond0: left allmulticast mode [ 246.042269][T12907] nlmon0: left allmulticast mode [ 246.047448][T12907] 0X: left allmulticast mode [ 246.052438][T12907] batadv0: left allmulticast mode [ 246.057683][T12907] veth0: left allmulticast mode [ 246.062561][T12907] veth1: left allmulticast mode [ 246.067592][T12907] wg0: left allmulticast mode [ 246.072336][T12907] wg1: left allmulticast mode [ 246.077150][T12907] wg2: left allmulticast mode [ 246.081888][T12907] veth0_to_bridge: left allmulticast mode [ 246.087735][T12907] bridge_slave_0: left allmulticast mode [ 246.094065][T12907] veth1_to_bridge: left allmulticast mode [ 246.099879][T12907] bridge_slave_1: left allmulticast mode [ 246.105683][T12907] veth0_to_bond: left allmulticast mode [ 246.111399][T12907] bond_slave_0: left allmulticast mode [ 246.116962][T12907] veth1_to_bond: left allmulticast mode [ 246.122626][T12907] bond_slave_1: left allmulticast mode [ 246.128184][T12907] veth0_to_team: left allmulticast mode [ 246.133916][T12907] team_slave_0: left allmulticast mode [ 246.139778][T12907] veth1_to_team: left allmulticast mode [ 246.145490][T12907] team_slave_1: left allmulticast mode [ 246.151025][T12907] veth0_to_batadv: left allmulticast mode [ 246.157100][T12907] batadv_slave_0: left allmulticast mode [ 246.162788][T12907] veth1_to_batadv: left allmulticast mode [ 246.168756][T12907] batadv_slave_1: left allmulticast mode [ 246.174523][T12907] xfrm0: left allmulticast mode [ 246.179464][T12907] veth0_to_hsr: left allmulticast mode [ 246.185141][T12907] veth1_to_hsr: left allmulticast mode [ 246.190786][T12907] hsr0: left allmulticast mode [ 246.195577][T12907] hsr_slave_0: left allmulticast mode [ 246.200965][T12907] hsr_slave_1: left allmulticast mode [ 246.206575][T12907] veth1_virt_wifi: left allmulticast mode [ 246.212364][T12907] veth0_virt_wifi: left allmulticast mode [ 246.218423][T12907] veth1_macvtap: left allmulticast mode [ 246.224030][T12907] veth0_macvtap: left allmulticast mode [ 246.229745][T12907] macvtap0: left allmulticast mode [ 246.235076][T12907] macsec0: left allmulticast mode [ 246.240233][T12907] geneve0: left allmulticast mode [ 246.245357][T12907] geneve1: left allmulticast mode [ 246.250493][T12907] veth2: left allmulticast mode [ 246.255438][T12907] veth3: left allmulticast mode [ 246.260340][T12907] veth4: left allmulticast mode [ 246.265296][T12907] veth5: left allmulticast mode [ 246.270216][T12907] veth6: left allmulticast mode [ 246.275135][T12907] veth7: left allmulticast mode [ 246.280095][T12907] veth8: left allmulticast mode [ 246.285011][T12907] veth9: left allmulticast mode [ 246.289956][T12907] bond1: left allmulticast mode [ 246.295108][T12907] wireguard0: left allmulticast mode [ 246.300450][T12907] wireguard1: left allmulticast mode [ 246.305845][T12907] bridge1: left allmulticast mode [ 246.311078][T12907] sit1: left allmulticast mode [ 246.315924][T12907] syztnl0: left allmulticast mode [ 246.321082][T12907] veth10: left allmulticast mode [ 246.326265][T12907] veth14: left allmulticast mode [ 246.331339][T12907] veth18: left allmulticast mode [ 246.336430][T12907] veth20: left allmulticast mode [ 246.341497][T12907] veth22: left allmulticast mode [ 246.346582][T12907] macvlan0: left promiscuous mode [ 246.351689][T12907] macvlan0: left allmulticast mode [ 246.356941][T12907] bond4: left promiscuous mode [ 246.361729][T12907] bridge4: left promiscuous mode [ 246.367053][T12907] bond4: left allmulticast mode [ 246.371918][T12907] bridge4: left allmulticast mode [ 246.379898][T12907] bond5: left promiscuous mode [ 246.384695][T12907] bridge6: left promiscuous mode [ 246.389757][T12907] bond5: left allmulticast mode [ 246.394684][T12907] bridge6: left allmulticast mode [ 246.506893][T12926] loop5: detected capacity change from 0 to 512 [ 246.548275][T12926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.608149][T12936] netlink: 'syz.0.3381': attribute type 33 has an invalid length. [ 246.616175][T12936] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3381'. [ 246.655140][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3381'. [ 246.682193][T12936] bond0: (slave dummy0): Releasing backup interface [ 246.698961][T12936] dummy0 (unregistering): left allmulticast mode [ 247.274241][T10359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.511014][T12951] loop5: detected capacity change from 0 to 1024 [ 247.540797][T12951] EXT4-fs: Ignoring removed orlov option [ 247.595355][T12951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.762158][T12955] loop4: detected capacity change from 0 to 1024 [ 247.807120][T12955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.948386][T12955] infiniband syz0: set down [ 247.952997][T12955] infiniband syz0: added bond0 [ 248.019935][T12955] RDS/IB: syz0: added [ 248.037812][T12955] smc: adding ib device syz0 with port count 1 [ 248.044222][T12955] smc: ib device syz0 port 1 has no pnetid [ 248.195326][T12951] ================================================================== [ 248.203463][T12951] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 248.211486][T12951] [ 248.213832][T12951] write to 0xffff88811a015bb0 of 4 bytes by task 12956 on cpu 1: [ 248.221655][T12951] writeback_single_inode+0x150/0x3f0 [ 248.227062][T12951] sync_inode_metadata+0x5b/0x90 [ 248.232040][T12951] generic_buffers_fsync_noflush+0xd9/0x120 [ 248.237961][T12951] ext4_sync_file+0x1ab/0x690 [ 248.242661][T12951] vfs_fsync_range+0x10d/0x130 [ 248.247484][T12951] ext4_buffered_write_iter+0x34f/0x3c0 [ 248.253313][T12951] ext4_file_write_iter+0x387/0xf60 [ 248.258520][T12951] iter_file_splice_write+0x666/0xa60 [ 248.263922][T12951] direct_splice_actor+0x156/0x2a0 [ 248.269059][T12951] splice_direct_to_actor+0x312/0x680 [ 248.274455][T12951] do_splice_direct+0xda/0x150 [ 248.279239][T12951] do_sendfile+0x380/0x650 [ 248.283680][T12951] __x64_sys_sendfile64+0x105/0x150 [ 248.288913][T12951] x64_sys_call+0x2bb4/0x3000 [ 248.293627][T12951] do_syscall_64+0xd2/0x200 [ 248.298241][T12951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.304163][T12951] [ 248.306508][T12951] read to 0xffff88811a015bb0 of 4 bytes by task 12951 on cpu 0: [ 248.314151][T12951] vfs_fsync_range+0x9b/0x130 [ 248.318872][T12951] ext4_buffered_write_iter+0x34f/0x3c0 [ 248.324444][T12951] ext4_file_write_iter+0x387/0xf60 [ 248.329662][T12951] iter_file_splice_write+0x666/0xa60 [ 248.335059][T12951] direct_splice_actor+0x156/0x2a0 [ 248.340197][T12951] splice_direct_to_actor+0x312/0x680 [ 248.346036][T12951] do_splice_direct+0xda/0x150 [ 248.350832][T12951] do_sendfile+0x380/0x650 [ 248.355279][T12951] __x64_sys_sendfile64+0x105/0x150 [ 248.360511][T12951] x64_sys_call+0x2bb4/0x3000 [ 248.365210][T12951] do_syscall_64+0xd2/0x200 [ 248.369740][T12951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.375655][T12951] [ 248.378001][T12951] value changed: 0x00000050 -> 0x00000042 [ 248.383729][T12951] [ 248.386064][T12951] Reported by Kernel Concurrency Sanitizer on: [ 248.392246][T12951] CPU: 0 UID: 0 PID: 12951 Comm: syz.5.3386 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 248.403659][T12951] Tainted: [W]=WARN [ 248.407480][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.417644][T12951] ================================================================== [ 248.551418][T10359] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.574674][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.