last executing test programs: 5m35.632873372s ago: executing program 2 (id=420): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) 5m35.604184743s ago: executing program 2 (id=421): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='wchan\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 5m35.541371275s ago: executing program 2 (id=422): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 5m35.39505995s ago: executing program 2 (id=429): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 5m35.324219762s ago: executing program 2 (id=430): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 5m35.10267921s ago: executing program 2 (id=434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277be"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 5m35.10234302s ago: executing program 32 (id=434): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000350000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4318123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277be"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 4m26.358523476s ago: executing program 5 (id=1723): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003001000", 0x10}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x8005) 4m26.320308768s ago: executing program 5 (id=1725): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) 4m26.319345468s ago: executing program 5 (id=1727): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x3, 0x0, 0x9, 0x0, 0x0, 0x9, 0xbd3a7481b18b840b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x3, @perf_bp={&(0x7f0000000200), 0xf}, 0x200, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) 4m26.294008139s ago: executing program 5 (id=1728): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000004c0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x40000, 0x0) 4m26.268429079s ago: executing program 5 (id=1730): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4m26.112801854s ago: executing program 5 (id=1735): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x805, 0x0, &(0x7f0000000040), 0xfffffffc) 4m26.072764096s ago: executing program 33 (id=1735): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x805, 0x0, &(0x7f0000000040), 0xfffffffc) 4m20.80203732s ago: executing program 3 (id=1865): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x891b, 0x0) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 4m20.582138707s ago: executing program 3 (id=1872): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000340)={r3, 0x7}, 0x8) 4m20.577281107s ago: executing program 3 (id=1873): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 4m19.973788867s ago: executing program 3 (id=1887): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m19.910298769s ago: executing program 3 (id=1890): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) 4m19.123048905s ago: executing program 3 (id=1916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000ac0)={@val={0x0, 0x18}, @void, @eth={@random="bae5670bc70e", @remote, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "5efdc2", 0x8, 0x0, 0x0, @empty, @mcast1, {[@dstopts={0x2f}]}}}}}}, 0x42) 4m19.095096506s ago: executing program 34 (id=1916): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000ac0)={@val={0x0, 0x18}, @void, @eth={@random="bae5670bc70e", @remote, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "5efdc2", 0x8, 0x0, 0x0, @empty, @mcast1, {[@dstopts={0x2f}]}}}}}}, 0x42) 3m25.507237833s ago: executing program 6 (id=3070): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3m25.314254629s ago: executing program 6 (id=3077): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x9, 0x7}, &(0x7f0000000080)=0x8) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c00)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18, 0x1, 0x3d, 0x1000000000002}}], 0x18}}], 0x1, 0x8845) 3m24.793403826s ago: executing program 6 (id=3086): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 3m24.742215518s ago: executing program 6 (id=3087): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/104, 0x5f}}], 0x4000008, 0x40012041, 0x0) 3m24.501560096s ago: executing program 6 (id=3089): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 3m24.469277618s ago: executing program 6 (id=3090): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 3m9.400394564s ago: executing program 35 (id=3090): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 1m27.049685259s ago: executing program 1 (id=5046): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x63aa, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x8, 0x4) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfe59}, 0xdb30}], 0x3fffffffffffe38, 0x40002142, 0x0) 1m27.01702708s ago: executing program 1 (id=5047): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.01658202s ago: executing program 1 (id=5048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x35) 1m26.970978492s ago: executing program 1 (id=5052): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f00000000c0)={[{@nomblk_io_submit}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x2]}) rmdir(&(0x7f0000000100)='./control\x00') 1m26.661379952s ago: executing program 1 (id=5061): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0xfffffffffffffffd, 0x0, 0x80800) 1m26.106102881s ago: executing program 1 (id=5074): openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 1m26.061051472s ago: executing program 36 (id=5074): openat$pfkey(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4084) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40800) 2.974415682s ago: executing program 0 (id=6948): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x1, 0x6}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x7, @loopback, 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 2.560438066s ago: executing program 4 (id=6962): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000000)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000340)="23d1df978264", 0x6}], 0x1, 0x0, 0x0, 0x1}, 0xc0) 2.391904891s ago: executing program 4 (id=6966): unshare(0x68040200) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) accept$inet6(r0, 0x0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 2.11877645s ago: executing program 0 (id=6978): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 2.11287446s ago: executing program 8 (id=6979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.018274713s ago: executing program 8 (id=6981): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004000)=[{0x0}, {&(0x7f00000070c0)=""/148, 0x94}], 0x2}, 0x3}], 0x1, 0x101, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.52543599s ago: executing program 4 (id=6983): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="600000000124000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) 1.379701124s ago: executing program 4 (id=6988): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x4400, &(0x7f0000000040)={@align=0xfffffffffffffff6, {0x3, 0x0, 0x200, 0x7}}, 0x9a, &(0x7f00000000c0), &(0x7f0000000100)=0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f0000000000)={0xffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) clock_gettime(0x2, &(0x7f0000004700)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1.204745631s ago: executing program 0 (id=6991): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x7) vmsplice(r3, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1.18973138s ago: executing program 8 (id=6992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000019880)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a8, 0x258, 0x258, 0x2a8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'geneve0\x00', '\x00', {0xff}, {}, 0x11}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff000000], [], 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x32}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x52014, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x280048c6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") 1.189501801s ago: executing program 4 (id=6994): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4, r1, 0x0}]) 981.897228ms ago: executing program 8 (id=6996): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) unshare(0x8000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x24000000) 952.579519ms ago: executing program 8 (id=6997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @void}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10) 934.995069ms ago: executing program 9 (id=7009): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e23, @broadcast}}, 0x5, 0x2, 0x100, 0x2, 0x47, 0xffffff1a, 0x1}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 772.086555ms ago: executing program 4 (id=6998): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 771.558605ms ago: executing program 9 (id=7011): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 771.270985ms ago: executing program 8 (id=6999): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$eJzs3c9rHOUbAPBnNtk2/fH9JoVS1IMEerBSu2kSf1TwUI+ixYLe65JsQ8mmW7Kb0sSC7cFevEgRRCyI3jx491j8B/wrClooUoIevERmM5tuk910k+wmaffzgUned2Y2z/vuzPPmnZ1dNoC+NZr+yEW8HBFfJxHDTdsGI9s4urrf8uObU+mSxMrKJ38lkWTrGvsn2e8jWeWliPjty4jTuY1xq4tLs8VyuTSf1cdqc9fGqotLZ67MFWdKM6WrE5OT596anHj3nbe71tfXL/7z3cf3Pzj31cnlb395eOxuEufjaLatuR87cKu5Mhqj2XOSj/PrdhzvQrD9JNnrBrAtA1me5yMdA4ZjIMv6llaGd7NpQI99kaY10KcS+Q99qjEPaFzbd+k6+Lnx6P3VC6CN/R9cfW0khurXRoeXk6eujNLr3ZEuxE9j/PrnvbvpEt17HQLgmW7djoizg4Mbx78kG/+272wH+6yPkcXP7zA00IH76fznjVbzn9za/CdazH+OtMjd7WiT/01yD7sQpq10/vdey/nv2k2rkYGs9r/6nC+fXL5SLqVj2/8j4lTkD6b1Te7nfJZbfrDSbmPz/C9d0viNuWDWjoeDB59+zHSxVtxRp5s8uh3xSsv5b7J2/JMWxz99Pi52GONE6d6r7bY9u/9renKLaeXHiNdaHv/kqcCb3J8cq58PY42zYqO/75z4vV38LfS/Jx79nBXa938kab5fW916jB+G/i2127bd8/9A8mm9fCBbd6NYq82PRxxIPtq4fuLJYxv1xv7p+X/q5ObjX6vz/1Ca2B32/87xO827Dm2t/72V9n968/N/3fHfeuHBh59/3y5+Z8f/zXrpVLamk/Gv0wbu5LkDAAAAAACA/SYXEUcjyRXWyrlcobD6/o7jcThXrlRrpy9XFq5OR/2zsiORzzXudA83vR9iPHs/bKM+sa4+GRHHIuKbgUP1emGqUp7e684DAAAAAAAAAAAAAAAAAADAPnEkYqjV5/9TfwzsdeuAntvkK7+BF1z7/M+2dOObnoB9adv//4e62w5g95n/Q/+S/9C/5D/0L/kP/Uv+Q/+S/9C/tpL/P13oYUMAAAAAAAAAAAAAAAAAAAAAAAAAAADgxXDxwoV0WVl+fHMqrU9fX1yYrVw/M12qzhbmFqYKU5X5a4WZSmWmXCpMVeae9ffKlcq18YlYuDFWK1VrY9XFpUtzlYWrtUtX5oozpUul/K70CgAAAAAAAAAAAAAAAAAAAJ4v1cWl2WK5XJpXUNhWYXB/NEOhy4W9HpkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4In/AgAA//+z7zor") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) truncate(&(0x7f0000000040)='./bus\x00', 0x9) mount$cgroup2(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x404, &(0x7f0000000100)={[{@subsystem='perf_event'}, {@memory_hugetlb_accounting}, {@memory_recursiveprot}], [{@subj_user={'subj_user', 0x3d, 'noquota'}}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 743.843716ms ago: executing program 9 (id=7001): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) 706.792767ms ago: executing program 9 (id=7002): socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 464.320795ms ago: executing program 9 (id=7016): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40895) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) getpgid(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x342, &(0x7f0000000680)="$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") 332.656339ms ago: executing program 0 (id=7005): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x84, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 282.037441ms ago: executing program 7 (id=7006): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4004) 281.823021ms ago: executing program 0 (id=7007): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe80000000000000000000a2ef816aaa0c0002800500010000000000080007"], 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 281.669541ms ago: executing program 0 (id=7010): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 277.314771ms ago: executing program 7 (id=7012): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) close(0x4) 232.326862ms ago: executing program 7 (id=7013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x270b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 154.473575ms ago: executing program 7 (id=7014): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1046c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffd}, 0x0, 0xc8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000121401"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0xc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 154.298295ms ago: executing program 7 (id=7015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 110.669406ms ago: executing program 7 (id=7017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000280)=0xfff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 0s ago: executing program 9 (id=7018): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)='=', 0x1}], 0x1}, 0x11) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) kernel console output (not intermixed with test programs): 8 compat=0 ip=0x7f15b749c819 code=0x7ffc0000 [ 266.378593][ T28] audit: type=1326 audit(1774856498.230:3828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b749c819 code=0x7ffc0000 [ 266.408997][T15529] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4421'. [ 266.435582][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4421'. [ 266.465316][ T28] audit: type=1326 audit(1774856498.230:3829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b749c819 code=0x7ffc0000 [ 266.570729][T15533] sctp: [Deprecated]: syz.0.4423 (pid 15533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.570729][T15533] Use struct sctp_sack_info instead [ 266.610761][T15534] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4422'. [ 266.621262][ T28] audit: type=1326 audit(1774856498.240:3830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15520 comm="syz.1.4419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b749c819 code=0x7ffc0000 [ 266.748787][T15543] netlink: 'syz.4.4425': attribute type 1 has an invalid length. [ 266.762048][T15543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.790168][T15543] bond3: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 267.053731][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4437'. [ 267.073501][T15573] team1: entered promiscuous mode [ 267.085666][T15573] team1: entered allmulticast mode [ 267.094397][T15573] 8021q: adding VLAN 0 to HW filter on device team1 [ 267.104656][T15576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4437'. [ 267.124368][T15576] team2: entered promiscuous mode [ 267.129757][T15576] team2: entered allmulticast mode [ 267.135536][T15576] 8021q: adding VLAN 0 to HW filter on device team2 [ 267.207508][T15580] xt_hashlimit: size too large, truncated to 1048576 [ 267.623219][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4452'. [ 267.694020][T15617] batman_adv: batadv0: Removing interface: dummy0 [ 267.717587][T15617] bond5: (slave batadv0): Removing an active aggregator [ 267.732262][T15617] bond5: (slave batadv0): Releasing backup interface [ 268.382969][T15644] chnl_net:caif_netlink_parms(): no params data found [ 268.484673][T15686] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4477'. [ 268.569822][T15644] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.577090][T15644] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.584401][T15644] bridge_slave_0: entered allmulticast mode [ 268.591145][T15644] bridge_slave_0: entered promiscuous mode [ 268.605984][T15644] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.615582][T15644] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.622980][T15644] bridge_slave_1: entered allmulticast mode [ 268.629651][T15644] bridge_slave_1: entered promiscuous mode [ 268.649457][T15644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.661750][T15644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.685675][T15644] team0: Port device team_slave_0 added [ 268.692517][T15644] team0: Port device team_slave_1 added [ 268.708849][T15644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.715861][T15644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.742144][T15644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.782518][T15644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.789545][T15644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.822212][T15644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.888353][T15644] hsr_slave_0: entered promiscuous mode [ 268.894774][T15644] hsr_slave_1: entered promiscuous mode [ 268.901182][T15644] debugfs: 'hsr0' already exists in 'hsr' [ 268.907192][T15644] Cannot create hsr debugfs directory [ 269.281820][T15644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 269.291917][T15644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 269.301487][T15644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 269.310734][T15644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 269.357463][T15644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.370202][T15644] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.388368][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.395526][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.430111][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.437201][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.554203][T15644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.680334][T15644] veth0_vlan: entered promiscuous mode [ 269.699728][T15644] veth1_vlan: entered promiscuous mode [ 269.751428][T15644] veth0_macvtap: entered promiscuous mode [ 269.770498][T15644] veth1_macvtap: entered promiscuous mode [ 269.795362][T15644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.831727][T15644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.853176][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.871460][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.891608][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.913380][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.281510][T15776] loop8: detected capacity change from 0 to 512 [ 270.303287][T15776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 270.349434][T15776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.381889][T15776] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.432678][T12638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.670667][ T6556] nci: nci_ntf_packet: unknown ntf opcode 0x403 [ 271.171880][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4519'. [ 271.183598][T15813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4519'. [ 271.218808][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4520'. [ 271.229369][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4520'. [ 271.255125][ T28] kauditd_printk_skb: 186 callbacks suppressed [ 271.255142][ T28] audit: type=1326 audit(1774856503.450:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f56ac819 code=0x7ffc0000 [ 271.290295][ T28] audit: type=1326 audit(1774856503.480:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f56ac819 code=0x7ffc0000 [ 271.293104][T15820] loop1: detected capacity change from 0 to 512 [ 271.315741][ T28] audit: type=1326 audit(1774856503.480:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f56ac819 code=0x7ffc0000 [ 271.330438][T15820] EXT4-fs: Ignoring removed mblk_io_submit option [ 271.355286][ T28] audit: type=1326 audit(1774856503.480:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f56ac819 code=0x7ffc0000 [ 271.363365][T15820] EXT4-fs (loop1): 1 truncate cleaned up [ 271.379461][ T28] audit: type=1326 audit(1774856503.480:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15817 comm="syz.0.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f98f56ac819 code=0x7ffc0000 [ 271.408504][ T28] audit: type=1326 audit(1774856503.490:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc59dc819 code=0x7ffc0000 [ 271.432110][ T28] audit: type=1326 audit(1774856503.490:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc59dc819 code=0x7ffc0000 [ 271.437820][T15820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.455690][ T28] audit: type=1326 audit(1774856503.490:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc59dc819 code=0x7ffc0000 [ 271.494276][ T28] audit: type=1326 audit(1774856503.490:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6dc59dc819 code=0x7ffc0000 [ 271.518028][T15794] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.577387][ T28] audit: type=1326 audit(1774856503.490:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15819 comm="syz.1.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6dc59dc582 code=0x7ffc0000 [ 271.618635][T15831] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 271.663520][T15831] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4527'. [ 271.704926][T15831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.755457][T15831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.794527][T15644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.796237][T15831] bond0 (unregistering): Released all slaves [ 271.828295][T15838] loop8: detected capacity change from 0 to 8192 [ 272.136425][T15871] loop1: detected capacity change from 0 to 512 [ 272.143552][T15871] EXT4-fs: Ignoring removed i_version option [ 272.152337][T15871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.198416][T15644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.658709][T15895] netlink: 'syz.7.4554': attribute type 1 has an invalid length. [ 272.725062][T15895] bond6: (slave geneve3): making interface the new active one [ 272.752821][T15895] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 272.763545][ T6534] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.804029][ T6534] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.833973][ T6534] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.870022][ T6534] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 273.133572][T15931] loop1: detected capacity change from 0 to 512 [ 273.191897][T15931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.222527][T15931] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.223934][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4572'. [ 273.264924][T15939] netlink: 'syz.4.4572': attribute type 11 has an invalid length. [ 273.358071][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4572'. [ 273.397595][T15939] netlink: 'syz.4.4572': attribute type 11 has an invalid length. [ 273.511236][T15644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.317885][T16001] netlink: 'syz.1.4596': attribute type 8 has an invalid length. [ 275.345379][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4596'. [ 275.377874][T16006] netlink: 'syz.1.4596': attribute type 8 has an invalid length. [ 275.379962][T16001] bond0: entered promiscuous mode [ 275.394582][T16006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4596'. [ 275.424412][T16001] bond_slave_0: entered promiscuous mode [ 275.453586][T16001] bond_slave_1: entered promiscuous mode [ 275.463078][T16001] gretap0: entered promiscuous mode [ 275.470074][T16001] hsr1: entered promiscuous mode [ 275.668037][T16020] tipc: Failed to remove unknown binding: 66,1,1/0:2480185892/2480185894 [ 275.705006][T16020] tipc: Failed to remove unknown binding: 66,1,1/0:2480185892/2480185894 [ 276.577258][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4620'. [ 277.129402][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4623'. [ 277.138596][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4623'. [ 277.166785][T16066] vlan2: entered promiscuous mode [ 277.185867][T16066] erspan0: entered promiscuous mode [ 277.214272][T16066] vlan2: entered allmulticast mode [ 277.397502][T16066] erspan0: entered allmulticast mode [ 278.466017][ T3449] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 278.483829][ T3449] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.743001][ T28] kauditd_printk_skb: 120 callbacks suppressed [ 278.743020][ T28] audit: type=1326 audit(1774856510.940:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16125 comm="syz.4.4647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f0cdc086597 code=0x0 [ 278.749871][T16127] netlink: 'syz.0.4645': attribute type 4 has an invalid length. [ 278.909276][T16135] all: renamed from veth0_to_hsr [ 279.293610][ T28] audit: type=1326 audit(1774856511.490:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16144 comm="syz.1.4655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dc59dc819 code=0x0 [ 280.518431][T16188] ipip0: entered promiscuous mode [ 280.664978][T16192] netlink: 'syz.1.4675': attribute type 10 has an invalid length. [ 280.687251][T16192] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 280.729273][T16192] team0: Failed to send options change via netlink (err -105) [ 280.737122][T16192] team0: Port device netdevsim1 added [ 280.935406][ T28] audit: type=1326 audit(1774856513.130:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 280.988873][ T28] audit: type=1326 audit(1774856513.130:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 281.042491][T16200] loop8: detected capacity change from 0 to 512 [ 281.049574][T16200] EXT4-fs: Ignoring removed mblk_io_submit option [ 281.059002][ T28] audit: type=1326 audit(1774856513.130:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 281.106066][ T28] audit: type=1326 audit(1774856513.130:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 281.130244][ T28] audit: type=1326 audit(1774856513.130:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 281.149300][T16200] EXT4-fs (loop8): 1 truncate cleaned up [ 281.154253][ T28] audit: type=1326 audit(1774856513.130:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fce8acec582 code=0x7ffc0000 [ 281.168432][T16200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.182820][ T28] audit: type=1326 audit(1774856513.130:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fce8acad04e code=0x7ffc0000 [ 281.182855][ T28] audit: type=1326 audit(1774856513.140:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16199 comm="syz.8.4678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fce8acec647 code=0x7ffc0000 [ 281.377000][T12638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.427241][T16224] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4687'. [ 281.514218][T16226] bond1: (slave lo): Releasing backup interface [ 281.532950][T16226] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 281.570611][T16226] bond3: (slave syz_tun): Releasing active interface [ 281.587049][T16226] net_ratelimit: 10 callbacks suppressed [ 281.587069][T16226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 281.754742][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4693'. [ 282.016593][T16250] loop1: detected capacity change from 0 to 512 [ 282.023304][T16250] EXT4-fs: Ignoring removed oldalloc option [ 282.048335][T16250] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4698: invalid indirect mapped block 4294967295 (level 1) [ 282.071510][T16250] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 282.071696][T16250] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.4698: invalid indirect mapped block 4294967295 (level 1) [ 282.080884][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 282.080902][ C0] EXT4-fs (loop1): initial error at time 1774856514: ext4_free_branches:1023: inode 11 [ 282.080942][ C0] EXT4-fs (loop1): last error at time 1774856514: ext4_free_branches:1023: inode 11 [ 282.297416][T16250] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 282.365971][T16250] EXT4-fs (loop1): 2 truncates cleaned up [ 282.392185][T16250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.478676][T15644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.376710][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 284.376807][ T28] audit: type=1400 audit(1774856516.570:4193): avc: denied { create } for pid=16293 comm="syz.1.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.475823][ T28] audit: type=1400 audit(1774856516.610:4194): avc: denied { listen } for pid=16293 comm="syz.1.4716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.524174][ T28] audit: type=1400 audit(1774856516.610:4195): avc: denied { ioctl } for pid=16293 comm="syz.1.4716" path="socket:[47634]" dev="sockfs" ino=47634 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.640634][T16311] loop8: detected capacity change from 0 to 1764 [ 284.657988][T16311] iso9660: Unknown parameter 'ÿ' [ 284.774726][ T28] audit: type=1400 audit(1774856516.970:4196): avc: denied { create } for pid=16328 comm="syz.7.4732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.876860][ T28] audit: type=1400 audit(1774856517.000:4197): avc: denied { connect } for pid=16328 comm="syz.7.4732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.913488][ T28] audit: type=1400 audit(1774856517.000:4198): avc: denied { ioctl } for pid=16328 comm="syz.7.4732" path="socket:[47659]" dev="sockfs" ino=47659 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 284.942260][ T28] audit: type=1400 audit(1774856517.020:4199): avc: denied { read write } for pid=16332 comm="syz.1.4730" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 284.982198][ T28] audit: type=1400 audit(1774856517.020:4200): avc: denied { open } for pid=16332 comm="syz.1.4730" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 285.201082][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4742'. [ 285.505333][T16365] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4747'. [ 285.546632][T16374] loop1: detected capacity change from 0 to 512 [ 285.567694][T16374] EXT4-fs: Ignoring removed nobh option [ 285.590682][T16374] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.630789][T16374] EXT4-fs (loop1): 1 truncate cleaned up [ 285.656995][T16374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.996495][T16392] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4756'. [ 286.036428][T16392] geneve4: entered promiscuous mode [ 286.063322][ T6545] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.080264][ T6545] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.117537][ T6545] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.157811][ T6545] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.215407][T16403] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4760'. [ 286.404947][T15644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.407391][ T28] audit: type=1326 audit(1774856519.600:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16416 comm="syz.1.4767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc59dc819 code=0x7fc00000 [ 287.591297][T16461] loop1: detected capacity change from 0 to 512 [ 287.615014][T16461] journal_path: Non-blockdev passed as './file2' [ 287.641718][T16461] EXT4-fs: error: could not find journal device path [ 287.844769][T16475] loop1: detected capacity change from 0 to 128 [ 288.018256][ T28] audit: type=1326 audit(1774856520.210:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16481 comm="syz.4.4794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 288.082985][T16487] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4796'. [ 288.318568][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4803'. [ 288.331158][ T4192] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.344249][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4803'. [ 288.355465][ T4192] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.387401][ T4192] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.396418][ T4192] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.573446][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4808'. [ 289.281844][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4821'. [ 289.295810][T16552] bond6: entered allmulticast mode [ 289.446499][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 289.446541][ T28] audit: type=1326 audit(1774856521.640:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16558 comm="syz.1.4826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6dc59dc819 code=0x7ffc0000 [ 289.570181][T16581] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4834'. [ 289.580489][T16581] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4834'. [ 289.630242][T16585] ipvlan2: entered promiscuous mode [ 289.635573][T16585] ipvlan2: entered allmulticast mode [ 289.650762][T16585] gretap0: entered allmulticast mode [ 289.657243][T16585] team0: Device ipvlan2 is VLAN challenged and team device has VLAN set up [ 289.706769][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4838'. [ 289.716651][T16587] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4838'. [ 289.735005][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4838'. [ 289.842870][ T3418] IPVS: starting estimator thread 0... [ 289.938431][T16600] IPVS: using max 2544 ests per chain, 127200 per kthread [ 290.970745][ T28] audit: type=1326 audit(1774856523.170:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 291.009319][T16645] VFS: Mount too revealing [ 291.025035][ T28] audit: type=1326 audit(1774856523.170:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 291.098554][ T28] audit: type=1326 audit(1774856523.170:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 291.155402][ T28] audit: type=1326 audit(1774856523.170:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 291.209014][ T28] audit: type=1326 audit(1774856523.200:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 291.297601][ T28] audit: type=1326 audit(1774856523.200:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 292.081936][ T28] audit: type=1326 audit(1774856523.200:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 292.129815][ T28] audit: type=1326 audit(1774856523.200:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 292.224142][ T28] audit: type=1326 audit(1774856523.200:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16642 comm="syz.7.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 292.772443][T16758] loop8: detected capacity change from 0 to 512 [ 292.805263][T16758] EXT4-fs: Ignoring removed nobh option [ 292.894423][T16758] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 292.968116][T16758] EXT4-fs (loop8): 1 truncate cleaned up [ 292.988263][T16758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.342614][T16834] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4918' sets config #0 [ 293.357890][T16834] __nla_validate_parse: 11 callbacks suppressed [ 293.357917][T16834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4918'. [ 293.445172][T16842] tipc: Failed to remove unknown binding: 66,1,1/4:1915507447/1915507449 [ 293.650546][T12638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.487827][T16898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43552 sclass=netlink_route_socket pid=16898 comm=syz.7.4945 [ 294.520737][T16898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16898 comm=syz.7.4945 [ 294.987066][T16906] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.012537][T16906] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.059858][T16906] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.081887][T16906] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.100957][T16908] xt_hashlimit: size too large, truncated to 1048576 [ 295.159194][T16906] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.176530][T16906] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.222122][T16906] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.232151][T16906] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.315879][ T6535] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.328181][ T6535] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.343512][ T6538] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.352093][ T6538] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.360536][ T6538] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.380840][ T6538] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.394762][ T6538] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.407467][ T6538] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.689366][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 295.689385][ T28] audit: type=1400 audit(2000000000.500:4308): avc: denied { map } for pid=16943 comm="syz.8.4966" path="socket:[49692]" dev="sockfs" ino=49692 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 295.973506][T16982] gretap1: entered promiscuous mode [ 296.021862][T16987] loop8: detected capacity change from 0 to 512 [ 296.039854][T16987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.050154][T16987] EXT4-fs error (device loop8): ext4_do_update_inode:5602: inode #15: comm syz.8.4982: corrupted inode contents [ 296.060691][T16991] netlink: 'syz.0.4984': attribute type 10 has an invalid length. [ 296.069865][T16985] loop1: detected capacity change from 0 to 1024 [ 296.081332][T16985] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 296.081332][T16985] [ 296.096804][T16987] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 296.097351][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 296.113066][ C1] EXT4-fs (loop8): initial error at time 2000000000: ext4_do_update_inode:5602: inode 15 [ 296.122940][ C1] EXT4-fs (loop8): last error at time 2000000000: ext4_do_update_inode:5602: inode 15 [ 296.132891][T16987] EXT4-fs (loop8): Remounting filesystem read-only [ 296.139677][T16987] EXT4-fs (loop8): 1 orphan inode deleted [ 296.146115][T16987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.239790][T12638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.292252][T17018] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5003'. [ 296.362710][T17023] netlink: 'syz.7.5007': attribute type 8 has an invalid length. [ 297.058797][T17050] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5010'. [ 297.435599][T17073] loop1: detected capacity change from 0 to 128 [ 297.449949][T17073] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.512171][ T28] audit: type=1326 audit(2000000002.320:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.586238][ T6516] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 297.602382][ T28] audit: type=1326 audit(2000000002.320:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.636050][T17085] loop1: detected capacity change from 0 to 1024 [ 297.669766][T17087] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5026'. [ 297.697440][ T28] audit: type=1326 audit(2000000002.320:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.767913][T17085] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.785437][T17085] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 297.795355][ T28] audit: type=1326 audit(2000000002.320:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.804941][T17098] cgroup: noprefix used incorrectly [ 297.848677][ T28] audit: type=1326 audit(2000000002.320:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.873097][ T28] audit: type=1326 audit(2000000002.320:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.878133][T17085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.896939][ T28] audit: type=1326 audit(2000000002.370:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.933652][ T28] audit: type=1326 audit(2000000002.370:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 297.958470][ T28] audit: type=1326 audit(2000000002.370:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17076 comm="syz.4.5022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 298.349870][T15644] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.489374][T17124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5040'. [ 298.730519][ T3946] kernel read not supported for file [fscontext] (pid: 3946 comm: kworker/1:4) [ 298.782234][T17150] loop1: detected capacity change from 0 to 2048 [ 298.796483][T17150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.842525][T17150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.897416][T17150] loop1: detected capacity change from 2048 to 0 [ 298.904760][T17150] EXT4-fs error (device loop1): __ext4_find_entry:1615: inode #2: comm syz.1.5052: reading directory lblock 0 [ 298.928863][T17162] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5055'. [ 298.944772][T17150] buffer_io_error: 4910 callbacks suppressed [ 298.944789][T17150] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 298.964445][T17162] gtp3: entered promiscuous mode [ 298.981137][T17150] EXT4-fs (loop1): I/O error while writing superblock [ 299.038665][T15644] EXT4-fs error (device loop1): ext4_get_inode_loc:4935: inode #2: block 4: comm syz-executor: unable to read itable block [ 299.051813][T15644] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 299.064655][T15644] EXT4-fs (loop1): I/O error while writing superblock [ 299.071731][T15644] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6291: IO failure [ 299.082505][T15644] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 299.091075][T15644] EXT4-fs (loop1): I/O error while writing superblock [ 299.098785][T15644] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #2: comm syz-executor: mark_inode_dirty error [ 299.160441][T15644] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 299.185263][T15644] EXT4-fs (loop1): I/O error while writing superblock [ 299.259825][ T6538] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4920: inode #2: block 4: comm kworker/u8:44: unable to read itable block [ 299.284068][ T6538] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 299.296281][ T6538] EXT4-fs (loop1): I/O error while writing superblock [ 299.311463][T16455] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.326961][T16455] Buffer I/O error on dev loop1, logical block 0, lost sync page write [ 299.347809][T16455] EXT4-fs (loop1): I/O error while writing superblock [ 299.360510][T17156] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 299.598907][ T6545] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.654908][ T6545] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.713837][ T6545] team0: Port device netdevsim1 removed [ 299.720912][ T6545] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.780951][ T6545] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.919065][ T6545] bridge_slave_1: left allmulticast mode [ 299.925646][ T6545] bridge_slave_1: left promiscuous mode [ 299.931875][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.943849][ T6545] bridge_slave_0: left allmulticast mode [ 299.962891][ T6545] bridge_slave_0: left promiscuous mode [ 299.978461][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.165150][ T6545] gretap0 (unregistering): left promiscuous mode [ 300.223741][ T6545] bond0 (unregistering): left promiscuous mode [ 300.237171][ T6545] bond_slave_0: left promiscuous mode [ 300.244623][ T6545] bond_slave_1: left promiscuous mode [ 300.252911][T17239] tls_set_device_offload: netdev not found [ 300.275133][ T6545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.291352][ T6545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.304417][ T6545] bond0 (unregistering): Released all slaves [ 300.350338][T17241] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.360681][T17241] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.380887][ T6545] hsr_slave_0: left promiscuous mode [ 300.386635][ T6545] hsr_slave_1: left promiscuous mode [ 300.389065][T17250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5083'. [ 300.397023][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.412151][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.420805][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.421276][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5084'. [ 300.428506][ T6545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.449291][ T6545] veth1_macvtap: left promiscuous mode [ 300.454843][ T6545] veth0_macvtap: left promiscuous mode [ 300.460411][ T6545] veth1_vlan: left promiscuous mode [ 300.465827][ T6545] veth0_vlan: left promiscuous mode [ 300.567750][ T6545] team0 (unregistering): Port device team_slave_1 removed [ 300.577546][ T6545] team0 (unregistering): Port device team_slave_0 removed [ 300.639788][T17241] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.647586][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5085'. [ 300.650204][T17241] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.673020][T17206] chnl_net:caif_netlink_parms(): no params data found [ 300.734209][T17241] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.768028][T17241] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.783848][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.792639][T17206] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.800254][T17206] bridge_slave_0: entered allmulticast mode [ 300.806865][T17206] bridge_slave_0: entered promiscuous mode [ 300.814077][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.821346][T17206] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.828679][T17206] bridge_slave_1: entered allmulticast mode [ 300.835267][T17206] bridge_slave_1: entered promiscuous mode [ 300.844448][T17241] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.854539][T17241] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.877866][T17206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.889420][T17206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.909175][T17206] team0: Port device team_slave_0 added [ 300.916044][T17206] team0: Port device team_slave_1 added [ 300.935149][T17206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.942184][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.968296][T17206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.979521][T17206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.986543][T17206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.012857][T17206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.040711][T17206] hsr_slave_0: entered promiscuous mode [ 301.047439][T17206] hsr_slave_1: entered promiscuous mode [ 301.053929][T17206] debugfs: 'hsr0' already exists in 'hsr' [ 301.060016][T17206] Cannot create hsr debugfs directory [ 301.074150][ T6551] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.082696][ T6551] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.091282][ T6551] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.099849][ T6551] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.120489][ T6545] IPVS: stop unused estimator thread 0... [ 301.154539][ T6551] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.163266][ T6551] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.172530][ T6551] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.182081][ T6551] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.264464][T17206] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 301.273748][T17206] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 301.289771][T17206] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 301.299044][T17206] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 301.322309][T17206] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.329522][T17206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.336951][T17206] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.344099][T17206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.378254][T17206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.391077][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.399620][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.411983][T17206] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.422916][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.429991][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.440953][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.448200][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.476275][T17206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.544752][T17206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.658874][T17206] veth0_vlan: entered promiscuous mode [ 301.666598][T17206] veth1_vlan: entered promiscuous mode [ 301.683185][T17206] veth0_macvtap: entered promiscuous mode [ 301.690873][T17206] veth1_macvtap: entered promiscuous mode [ 301.702948][T17206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.716984][T17206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.729555][ T6551] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.738761][ T6551] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.748185][ T6551] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.759039][ T6551] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.818515][T17354] netlink: 'syz.8.5101': attribute type 1 has an invalid length. [ 301.831616][T17354] netlink: 'syz.8.5101': attribute type 4 has an invalid length. [ 301.840054][T17354] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.5101'. [ 301.936709][T17358] loop9: detected capacity change from 0 to 512 [ 301.967967][T17358] EXT4-fs: Ignoring removed nobh option [ 301.983495][T17358] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 302.050314][T17358] EXT4-fs (loop9): 1 truncate cleaned up [ 302.081060][T17360] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5092'. [ 302.091384][T17358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.126906][T17360] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 302.944734][T17206] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.224356][T17406] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5112'. [ 303.652318][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 303.652337][ T28] audit: type=1400 audit(2000000008.450:4359): avc: denied { ioctl } for pid=17419 comm="syz.9.5119" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 303.737905][T17426] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.805292][T17426] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.870467][T17426] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.035293][T17426] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.241675][ T6551] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.274840][ T6551] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.303743][ T6551] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.325439][ T6551] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.622072][T17455] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5133'. [ 304.648927][T17455] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5133'. [ 306.020866][T17493] loop8: detected capacity change from 0 to 8192 [ 306.056787][T17493] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 306.059594][T17497] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5151'. [ 306.367718][ T28] audit: type=1400 audit(2000000011.180:4360): avc: denied { read } for pid=17511 comm="syz.8.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.651418][ T28] audit: type=1400 audit(2000000011.460:4361): avc: denied { read } for pid=17536 comm="syz.7.5169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 307.283007][T17576] netlink: 'syz.0.5195': attribute type 10 has an invalid length. [ 307.325734][ T28] audit: type=1400 audit(2000000000.240:4362): avc: denied { unmount } for pid=12638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 307.472785][T17590] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5191'. [ 307.597604][T17601] netlink: 'syz.9.5196': attribute type 1 has an invalid length. [ 307.662093][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5197'. [ 307.688558][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5197'. [ 308.428188][T17622] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5213'. [ 308.552219][T17625] io-wq is not configured for unbound workers [ 308.646581][T17632] loop9: detected capacity change from 0 to 512 [ 308.689955][T17632] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 308.781268][T17638] geneve2: entered promiscuous mode [ 308.808997][ T6551] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.833453][ T36] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.846672][ T36] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 308.873554][ T36] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 309.131261][T17654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.149638][T17654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.867889][T17670] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5224'. [ 309.878395][T17670] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5224'. [ 309.887949][T17670] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5224'. [ 310.137004][T17679] loop8: detected capacity change from 0 to 512 [ 310.178228][T17679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.254792][T17679] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.5227: iget: bad i_size value: 38620345925642 [ 310.297533][ T28] audit: type=1400 audit(2000000003.210:4363): avc: denied { ioctl } for pid=17682 comm="syz.9.5228" path="socket:[53962]" dev="sockfs" ino=53962 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 310.377397][T17679] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 310.377622][T17679] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.5227: couldn't read orphan inode 15 (err -117) [ 310.398729][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 310.398753][ C1] EXT4-fs (loop8): initial error at time 2000000003: ext4_orphan_get:1397: inode 15 [ 310.398795][ C1] EXT4-fs (loop8): last error at time 2000000003: ext4_orphan_get:1397: inode 15 [ 310.462712][T17679] loop8: lost filesystem error report for type 5 error -117 [ 310.463243][T17679] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.650062][T17679] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5227: bg 0: block 5: invalid block bitmap [ 310.695517][T17679] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 796 with error 28 [ 310.738702][T17690] netlink: 'syz.4.5231': attribute type 1 has an invalid length. [ 310.746603][T17679] EXT4-fs (loop8): This should not happen!! Data will be lost [ 310.746603][T17679] [ 310.777806][T17679] EXT4-fs (loop8): Total free blocks count 0 [ 310.783971][T17679] EXT4-fs (loop8): Free/Dirty block details [ 310.819749][T17679] EXT4-fs (loop8): free_blocks=0 [ 310.833057][T17679] EXT4-fs (loop8): dirty_blocks=800 [ 310.868061][T17679] EXT4-fs (loop8): Block reservation details [ 310.887377][T17679] EXT4-fs (loop8): i_reserved_data_blocks=800 [ 310.936631][T12638] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 310.949752][T12638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.995849][ T28] audit: type=1400 audit(2000000003.900:4364): avc: denied { append } for pid=17698 comm="syz.8.5234" name="rt_cache" dev="proc" ino=4026533503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 311.063943][T17704] loop8: detected capacity change from 0 to 256 [ 311.104349][T17704] FAT-fs (loop8): codepage cp863 not found [ 311.158175][T17710] netlink: 'syz.4.5237': attribute type 4 has an invalid length. [ 311.294257][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5239'. [ 311.341237][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5239'. [ 311.350436][ T6545] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.368571][ T6545] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.398946][ T6545] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.429886][ T6545] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.681089][ T28] audit: type=1400 audit(2000000005.600:4365): avc: denied { read } for pid=17797 comm="syz.0.5266" path="socket:[54424]" dev="sockfs" ino=54424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 312.865487][T17806] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5259'. [ 313.607375][T17846] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.666752][T17846] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.676653][ T28] audit: type=1400 audit(2000000006.590:4366): avc: denied { watch watch_reads } for pid=17847 comm="syz.7.5270" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 313.778618][T17846] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.931917][T17846] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.012617][ T6545] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.044088][ T6545] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.067054][ T6545] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.097091][ T6545] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.751128][ T8683] IPVS: starting estimator thread 0... [ 314.847384][T17897] IPVS: using max 2640 ests per chain, 132000 per kthread [ 315.828311][T18005] bond0: entered promiscuous mode [ 315.833586][T18005] macvlan2: entered promiscuous mode [ 315.857022][T18005] dummy0: entered promiscuous mode [ 315.863365][T18005] bridge3: entered promiscuous mode [ 315.869476][T18005] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 315.934755][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5310'. [ 315.944506][T18010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5310'. [ 316.074060][ T28] audit: type=1400 audit(2000000008.990:4367): avc: denied { append } for pid=18022 comm="syz.8.5317" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 316.525463][T18039] bond0: entered promiscuous mode [ 316.548142][T18039] bridge2: entered promiscuous mode [ 316.556274][T18039] debugfs: 'hsr1' already exists in 'hsr' [ 316.594365][T18039] Cannot create hsr debugfs directory [ 316.851942][T18055] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.5328'. [ 316.871709][T18055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5328'. [ 317.428204][T18059] syz.8.5330: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 317.467419][T18059] CPU: 1 UID: 0 PID: 18059 Comm: syz.8.5330 Tainted: G W syzkaller #0 PREEMPT(full) [ 317.467455][T18059] Tainted: [W]=WARN [ 317.467464][T18059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.467510][T18059] Call Trace: [ 317.467518][T18059] [ 317.467526][T18059] __dump_stack+0x1d/0x30 [ 317.467553][T18059] dump_stack_lvl+0x95/0xd0 [ 317.467578][T18059] dump_stack+0x15/0x1b [ 317.467614][T18059] warn_alloc+0x145/0x1c0 [ 317.467652][T18059] ? __schedule+0x93c/0xd40 [ 317.467683][T18059] ? __rcu_read_unlock+0x4e/0x70 [ 317.467704][T18059] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 317.467764][T18059] ? __futex_wait+0x1fd/0x260 [ 317.467788][T18059] ? __pfx_futex_wake_mark+0x10/0x10 [ 317.467811][T18059] ? __rcu_read_unlock+0x4e/0x70 [ 317.467833][T18059] ? avc_has_perm_noaudit+0xab/0x130 [ 317.467918][T18059] ? should_fail_ex+0x30/0x280 [ 317.467947][T18059] ? xskq_create+0x36/0xe0 [ 317.467972][T18059] vmalloc_user_noprof+0x7d/0xb0 [ 317.468073][T18059] ? xskq_create+0x80/0xe0 [ 317.468130][T18059] xskq_create+0x80/0xe0 [ 317.468153][T18059] xsk_init_queue+0x70/0xb0 [ 317.468175][T18059] xsk_setsockopt+0x3f5/0x640 [ 317.468202][T18059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 317.468245][T18059] __sys_setsockopt+0x184/0x200 [ 317.468275][T18059] __x64_sys_setsockopt+0x64/0x80 [ 317.468386][T18059] x64_sys_call+0x2327/0x3020 [ 317.468410][T18059] do_syscall_64+0x12c/0x370 [ 317.468435][T18059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.468456][T18059] RIP: 0033:0x7fce8acec819 [ 317.468473][T18059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.468495][T18059] RSP: 002b:00007fce89747028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.468516][T18059] RAX: ffffffffffffffda RBX: 00007fce8af65fa0 RCX: 00007fce8acec819 [ 317.468529][T18059] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 317.468541][T18059] RBP: 00007fce8ad82c91 R08: 0000000000000004 R09: 0000000000000000 [ 317.468554][T18059] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.468625][T18059] R13: 00007fce8af66038 R14: 00007fce8af65fa0 R15: 00007fffdbc31b98 [ 317.468648][T18059] [ 317.468657][T18059] Mem-Info: [ 317.709944][T18061] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.728204][T18059] active_anon:38175 inactive_anon:24 isolated_anon:0 [ 317.728204][T18059] active_file:12441 inactive_file:15612 isolated_file:0 [ 317.728204][T18059] unevictable:0 dirty:255 writeback:0 [ 317.728204][T18059] slab_reclaimable:4251 slab_unreclaimable:95529 [ 317.728204][T18059] mapped:29253 shmem:17343 pagetables:5695 [ 317.728204][T18059] sec_pagetables:0 bounce:0 [ 317.728204][T18059] kernel_misc_reclaimable:0 [ 317.728204][T18059] free:1749045 free_pcp:14879 free_cma:0 [ 317.790369][T18059] Node 0 active_anon:152004kB inactive_anon:96kB active_file:49764kB inactive_file:62448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117012kB dirty:1020kB writeback:0kB shmem:68792kB kernel_stack:6288kB pagetables:22664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 317.827256][T18059] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.865374][T18059] lowmem_reserve[]: 0 2879 7857 7857 [ 317.871925][T18059] Node 0 DMA32 free:2944516kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948144kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 317.909080][T18061] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.929712][T18059] lowmem_reserve[]: 0 0 4978 4978 [ 317.935058][T18059] Node 0 Normal free:4036304kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:153048kB inactive_anon:96kB active_file:49764kB inactive_file:62448kB unevictable:0kB writepending:1020kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:55276kB local_pcp:26356kB free_cma:0kB [ 317.985322][T18059] lowmem_reserve[]: 0 0 0 0 [ 317.990456][T18059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 318.004556][T18059] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944516kB [ 318.021317][T18059] Node 0 Normal: [ 318.023786][T18061] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.041372][T18059] 8*4kB (ME) 1628*8kB (UME) 1613*16kB (UME) 1062*32kB (UME) 953*64kB (UME) 558*128kB (UME) 381*256kB (UM) 424*512kB (UME) 272*1024kB (UM) 197*2048kB (UME) 692*4096kB (UM) = 4036304kB [ 318.060218][T18059] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 318.069736][T18059] 45300 total pagecache pages [ 318.074606][T18059] 61 pages in swap cache [ 318.080316][T18059] Free swap = 111528kB [ 318.085948][T18059] Total swap = 124996kB [ 318.091397][T18061] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.103176][T18059] 2097051 pages RAM [ 318.107273][T18059] 0 pages HighMem/MovableOnly [ 318.112633][T18059] 81615 pages reserved [ 318.145535][ T6552] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.164970][ T6552] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.180488][ T6552] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.207467][ T6552] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.252979][ T28] audit: type=1400 audit(2000000011.170:4368): avc: denied { accept } for pid=18084 comm="syz.7.5340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 318.282841][T18082] netlink: 'syz.8.5339': attribute type 8 has an invalid length. [ 318.287008][T18088] bond0: entered promiscuous mode [ 318.319323][T18088] bond_slave_0: entered promiscuous mode [ 318.325120][T18088] bond_slave_1: entered promiscuous mode [ 318.340033][T18088] bridge1: entered promiscuous mode [ 318.356077][T18088] debugfs: 'hsr1' already exists in 'hsr' [ 318.365545][T18088] Cannot create hsr debugfs directory [ 318.881633][ T28] audit: type=1400 audit(2000000011.800:4369): avc: denied { relabelfrom } for pid=18107 comm="syz.4.5347" name="NETLINK" dev="sockfs" ino=55784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 318.917344][ T28] audit: type=1400 audit(2000000011.800:4370): avc: denied { relabelto } for pid=18107 comm="syz.4.5347" name="NETLINK" dev="sockfs" ino=55784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 319.136698][T18117] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 319.401051][T18126] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.413597][T18126] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 319.425764][T18126] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.498070][T18126] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.508087][T18126] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 319.518988][T18126] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.530472][ T28] audit: type=1400 audit(2000000012.450:4371): avc: denied { append } for pid=18122 comm="syz.9.5362" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 319.530769][T18124] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 319.608791][T18126] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.620064][T18126] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 319.630259][T18126] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.655557][T18131] tipc: Failed to remove unknown binding: 66,1,1/0:1024278216/1024278218 [ 319.668216][T18131] tipc: Failed to remove unknown binding: 66,1,1/0:1024278216/1024278218 [ 319.688682][T18126] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.698641][T18126] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 319.709423][T18126] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 319.753376][ T6538] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.761784][ T6538] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.770246][ T6538] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 319.787420][ T6538] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.808421][ T6538] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.817213][ T6538] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 319.829449][T18135] netlink: 'syz.9.5357': attribute type 3 has an invalid length. [ 319.838226][T18135] netlink: 'syz.9.5357': attribute type 3 has an invalid length. [ 319.846423][ T6538] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.855413][ T6538] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.865151][ T6538] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 319.875188][ T6538] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.891663][ T6538] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.902471][ T6538] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 319.959296][T18139] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5359'. [ 320.512557][ T28] audit: type=1400 audit(2000000013.430:4372): avc: denied { accept } for pid=18156 comm="syz.4.5368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 320.961939][T18168] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5373'. [ 322.048574][T18209] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5387'. [ 322.184850][ T28] audit: type=1400 audit(2000000015.100:4373): avc: denied { execute_no_trans } for pid=18210 comm="syz.4.5388" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=59773 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 322.709001][T18224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5396'. [ 323.049207][T18249] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.5404'. [ 323.617916][ T28] audit: type=1400 audit(2000000016.540:4374): avc: denied { watch watch_reads } for pid=18309 comm="syz.0.5430" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 323.883440][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5435'. [ 323.904971][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5435'. [ 324.598241][T18352] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 324.604851][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.615070][T18352] vhci_hcd vhci_hcd.0: Device attached [ 324.635434][T18352] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 324.641990][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.667083][T18352] vhci_hcd vhci_hcd.0: Device attached [ 324.673877][T18352] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 324.680450][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 324.692043][T18352] vhci_hcd vhci_hcd.0: Device attached [ 324.699178][T18352] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(9) [ 324.705728][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.764367][T18352] vhci_hcd vhci_hcd.0: Device attached [ 324.818393][T18369] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(11) [ 324.825206][T18369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.852601][T18352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 324.879788][T18369] vhci_hcd vhci_hcd.0: Device attached [ 324.887392][ T8695] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 324.902156][T18352] vhci_hcd vhci_hcd.0: pdev(8) rhport(6) sockfd(13) [ 324.908778][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 324.935897][T18352] vhci_hcd vhci_hcd.0: Device attached [ 324.947089][T18352] vhci_hcd vhci_hcd.0: pdev(8) rhport(7) sockfd(17) [ 324.953765][T18352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 324.972759][T18352] vhci_hcd vhci_hcd.0: Device attached [ 324.979170][T18374] vhci_hcd: connection closed [ 324.979336][ T6535] vhci_hcd vhci_hcd.8: stop threads [ 324.990132][T18364] vhci_hcd: connection closed [ 324.990261][T18357] vhci_hcd: connection closed [ 325.005794][T18370] vhci_hcd: connection closed [ 325.012693][T18372] vhci_hcd: connection closed [ 325.021498][ T6535] vhci_hcd vhci_hcd.8: release socket [ 325.033664][T18353] vhci_hcd: connection reset by peer [ 325.057393][T18361] vhci_hcd: connection closed [ 325.074909][ T6535] vhci_hcd vhci_hcd.8: disconnect device [ 325.125956][ T6535] vhci_hcd vhci_hcd.8: stop threads [ 325.151582][ T6535] vhci_hcd vhci_hcd.8: release socket [ 325.191964][ T6535] vhci_hcd vhci_hcd.8: disconnect device [ 325.237605][ T6535] vhci_hcd vhci_hcd.8: stop threads [ 325.254220][ T6535] vhci_hcd vhci_hcd.8: release socket [ 325.278877][ T6535] vhci_hcd vhci_hcd.8: disconnect device [ 325.298272][ T6535] vhci_hcd vhci_hcd.8: stop threads [ 325.314140][ T6535] vhci_hcd vhci_hcd.8: release socket [ 325.335869][ T6535] vhci_hcd vhci_hcd.8: disconnect device [ 325.354740][ T6535] vhci_hcd vhci_hcd.8: stop threads [ 325.379318][ T6535] vhci_hcd vhci_hcd.8: release socket [ 325.394180][ T6535] vhci_hcd vhci_hcd.8: disconnect device [ 325.411948][ T6535] vhci_hcd vhci_hcd.8: stop threads [ 325.436463][ T6535] vhci_hcd vhci_hcd.8: release socket [ 325.457250][ T6535] vhci_hcd vhci_hcd.8: disconnect device [ 325.476701][ T6535] vhci_hcd vhci_hcd.8: stop threads [ 325.493065][ T6535] vhci_hcd vhci_hcd.8: release socket [ 325.498547][ T6535] vhci_hcd vhci_hcd.8: disconnect device [ 326.052508][T18410] netlink: 'syz.4.5462': attribute type 8 has an invalid length. [ 326.460480][ T28] audit: type=1400 audit(2000000019.380:4375): avc: denied { ioctl } for pid=18417 comm="syz.7.5465" path="socket:[60849]" dev="sockfs" ino=60849 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 327.013785][T18446] xt_SECMARK: invalid security context 'system_u:object_r:initctl_t:s0' [ 327.048340][T18447] netlink: 'syz.8.5476': attribute type 1 has an invalid length. [ 327.105126][T18447] bond0: entered promiscuous mode [ 327.138732][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5476'. [ 327.142787][T18447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.168102][T18458] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5476'. [ 327.291670][T18464] netlink: 'syz.9.5483': attribute type 8 has an invalid length. [ 327.301058][T18464] netlink: 'syz.9.5483': attribute type 7 has an invalid length. [ 327.309845][T18447] bond0: (slave bridge5): making interface the new active one [ 327.317955][T18464] netlink: 194488 bytes leftover after parsing attributes in process `syz.9.5483'. [ 327.326852][T18447] bridge5: entered promiscuous mode [ 327.341874][T18447] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 327.432262][T18472] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5486'. [ 327.682350][ T28] audit: type=1400 audit(2000000020.600:4376): avc: denied { bind } for pid=18485 comm="syz.8.5492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 327.753560][T18491] loop9: detected capacity change from 0 to 512 [ 327.876968][ T28] audit: type=1400 audit(2000000020.790:4377): avc: denied { listen } for pid=18498 comm="syz.9.5498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 328.206366][ T28] audit: type=1400 audit(2000000021.120:4378): avc: denied { mounton } for pid=18512 comm="syz.7.5503" path="/file0" dev="autofs" ino=61064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 328.210582][T18513] netlink: 'syz.0.5502': attribute type 8 has an invalid length. [ 328.390695][T18528] netlink: 'syz.9.5507': attribute type 4 has an invalid length. [ 328.420246][T18523] netlink: 'syz.9.5507': attribute type 4 has an invalid length. [ 328.537897][T18523] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.545252][T18523] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.616220][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.625543][T18523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.658035][ T6538] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.667591][ T6538] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.681573][ T6538] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.694394][ T6538] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.952899][ T28] audit: type=1400 audit(2000000021.870:4379): avc: denied { watch watch_reads } for pid=18547 comm="syz.4.5517" path="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 329.957425][ T8695] usb 17-1: enqueue for inactive port 0 [ 329.973135][ T8695] usb 17-1: enqueue for inactive port 0 [ 330.057829][ T8695] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 330.692204][T18607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5541'. [ 331.341929][T18621] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5545'. [ 331.382590][T18623] netlink: 'syz.0.5546': attribute type 1 has an invalid length. [ 331.418925][T18623] bond7: entered promiscuous mode [ 331.424108][T18623] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.472671][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5546'. [ 331.489250][T18632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5546'. [ 331.581216][T18637] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5551'. [ 331.622956][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5551'. [ 331.687819][T18623] bond7: (slave bridge4): making interface the new active one [ 331.707069][T18623] bridge4: entered promiscuous mode [ 331.714216][T18623] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 332.569614][T18669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5564'. [ 332.952423][T18691] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5574'. [ 333.141673][T18704] netlink: 116376 bytes leftover after parsing attributes in process `syz.8.5578'. [ 333.176119][T18704] netlink: zone id is out of range [ 333.196179][T18704] netlink: zone id is out of range [ 333.224520][T18704] netlink: zone id is out of range [ 333.249332][T18704] netlink: zone id is out of range [ 333.340978][ T28] audit: type=1326 audit(2000000026.260:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.368795][ T28] audit: type=1326 audit(2000000026.260:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.392725][ T28] audit: type=1326 audit(2000000026.260:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.416611][ T28] audit: type=1326 audit(2000000026.260:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.440569][ T28] audit: type=1326 audit(2000000026.260:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.473287][ T28] audit: type=1326 audit(2000000026.260:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.510465][ T28] audit: type=1326 audit(2000000026.260:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.535629][ T28] audit: type=1326 audit(2000000026.260:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.560458][ T28] audit: type=1404 audit(2000000026.260:4388): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 333.575810][ T28] audit: type=1326 audit(2000000026.290:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18716 comm="syz.8.5584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8acec819 code=0x7ffc0000 [ 333.717362][T18739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5595'. [ 334.187279][T18770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5608'. [ 334.280250][T18778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5612'. [ 334.883441][T18800] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5621'. [ 335.633575][T18835] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5634'. [ 336.148121][T18904] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5675'. [ 336.334586][T18919] IPVS: sh: FWM 3 0x00000003 - no destination available [ 336.385114][T18924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5674'. [ 338.349854][ T28] kauditd_printk_skb: 264 callbacks suppressed [ 338.349898][ T28] audit: type=1400 audit(2000000031.270:4654): avc: denied { module_request } for pid=18997 comm="syz.7.5707" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 338.396547][ T28] audit: type=1400 audit(2000000031.300:4655): avc: denied { sys_module } for pid=18997 comm="syz.7.5707" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 338.422774][ T28] audit: type=1400 audit(2000000031.340:4656): avc: denied { create } for pid=18999 comm="syz.9.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.444477][ T28] audit: type=1400 audit(2000000031.340:4657): avc: denied { map_create } for pid=19001 comm="syz.7.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 338.465084][ T28] audit: type=1400 audit(2000000031.340:4658): avc: denied { prog_load } for pid=19001 comm="syz.7.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 338.507174][ T28] audit: type=1400 audit(2000000031.340:4659): avc: denied { open } for pid=19001 comm="syz.7.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 338.663708][ T28] audit: type=1400 audit(2000000031.340:4660): avc: denied { prog_load } for pid=19001 comm="syz.7.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 338.703295][ T28] audit: type=1400 audit(2000000031.370:4661): avc: denied { create } for pid=18999 comm="syz.9.5708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 338.724440][ T28] audit: type=1400 audit(2000000031.420:4662): avc: denied { create } for pid=19003 comm="syz.9.5710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 338.745038][ T28] audit: type=1400 audit(2000000031.450:4663): avc: denied { create } for pid=19005 comm="syz.9.5712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 340.042586][T19104] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5753'. [ 342.382261][T19184] batman_adv: batadv0: Interface deactivated: dummy0 [ 342.690386][T19184] ip6gre1: left promiscuous mode [ 342.749967][T19184] ip6gre1: left allmulticast mode [ 343.411015][T19184] team0: left promiscuous mode [ 343.422142][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 343.422157][ T28] audit: type=1400 audit(2000000036.340:4835): avc: denied { read write } for pid=12638 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.482789][ T28] audit: type=1326 audit(2000000036.380:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.541731][T19184] bridge1: left promiscuous mode [ 343.560681][ T28] audit: type=1326 audit(2000000036.380:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.563686][T19184] bridge1: left allmulticast mode [ 343.606118][ T28] audit: type=1326 audit(2000000036.380:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.630523][T19184] geneve2: left promiscuous mode [ 343.695466][T19184] team1: left promiscuous mode [ 343.702626][ T28] audit: type=1326 audit(2000000036.380:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.727961][T19184] team1: left allmulticast mode [ 343.744373][T19184] team2: left promiscuous mode [ 343.756678][ T28] audit: type=1326 audit(2000000036.380:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.770462][T19184] team2: left allmulticast mode [ 343.788115][ T28] audit: type=1400 audit(2000000036.380:4841): avc: denied { open } for pid=19206 comm="syz.7.5795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 343.817069][ T28] audit: type=1326 audit(2000000036.380:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.845215][ T28] audit: type=1326 audit(2000000036.380:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.889342][ T6552] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.909608][ T6552] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.924052][ T6552] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.945592][ T28] audit: type=1326 audit(2000000036.380:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19206 comm="syz.7.5795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3310bc819 code=0x7ffc0000 [ 343.970075][ T6552] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.978831][ T6552] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.995733][ T6552] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.050252][ T6552] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.068934][ T6552] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.225990][T19260] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.291867][T19272] 8021q: VLANs not supported on gre0 [ 344.325874][T19278] geneve5: entered promiscuous mode [ 344.332833][ T6552] netdevsim netdevsim7 eth0: set [1, 2] type 2 family 0 port 45426 - 0 [ 344.341457][ T6552] netdevsim netdevsim7 eth1: set [1, 2] type 2 family 0 port 45426 - 0 [ 344.368082][ T6552] netdevsim netdevsim7 eth2: set [1, 2] type 2 family 0 port 45426 - 0 [ 344.394243][ T6552] netdevsim netdevsim7 eth3: set [1, 2] type 2 family 0 port 45426 - 0 [ 344.506516][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5838'. [ 344.753378][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5846'. [ 344.773150][T19318] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.799404][T19318] bond1: (slave veth5): Enslaving as an active interface with an up link [ 344.833081][T19324] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5848'. [ 344.986789][T19335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5852'. [ 345.059823][T19343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5856'. [ 345.372772][T19358] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 345.656493][T19374] netlink: 'syz.8.5869': attribute type 4 has an invalid length. [ 345.777553][T19377] netlink: 'syz.8.5869': attribute type 4 has an invalid length. [ 346.201473][T19380] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.208868][T19380] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.362496][T19380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.626099][T19398] netlink: 180 bytes leftover after parsing attributes in process `syz.0.5877'. [ 346.667250][T19397] vlan4: entered promiscuous mode [ 346.673454][T19397] vlan4: entered allmulticast mode [ 346.686711][T19397] hsr_slave_1: entered allmulticast mode [ 346.703386][ T6538] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.712051][ T6538] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 346.814866][ T6538] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.972230][ T6538] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 346.982617][ T6538] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.991330][ T6538] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.027258][ T6538] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.054384][ T6538] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 347.829782][T19442] netlink: 'syz.4.5895': attribute type 4 has an invalid length. [ 347.838985][T19442] netlink: 'syz.4.5895': attribute type 4 has an invalid length. [ 348.397522][T19470] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5906'. [ 348.477935][ T28] kauditd_printk_skb: 285 callbacks suppressed [ 348.477989][ T28] audit: type=1400 audit(2000000041.400:5130): avc: denied { open } for pid=19471 comm="syz.4.5907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 348.513758][ T28] audit: type=1400 audit(2000000041.400:5131): avc: denied { open } for pid=19471 comm="syz.4.5907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 348.720635][ T28] audit: type=1400 audit(2000000041.640:5132): avc: denied { prog_load } for pid=19473 comm="syz.9.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 348.724306][T19476] netlink: 'syz.0.5908': attribute type 4 has an invalid length. [ 348.771255][ T28] audit: type=1400 audit(2000000041.670:5133): avc: denied { prog_load } for pid=19473 comm="syz.9.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 348.811041][ T28] audit: type=1400 audit(2000000041.710:5134): avc: denied { open } for pid=19473 comm="syz.9.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 348.857813][T19476] netlink: 'syz.0.5908': attribute type 4 has an invalid length. [ 348.865773][ T28] audit: type=1400 audit(2000000041.710:5135): avc: denied { map_create } for pid=19473 comm="syz.9.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 348.931850][ T6517] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.951599][ T28] audit: type=1400 audit(2000000041.710:5136): avc: denied { prog_load } for pid=19473 comm="syz.9.5910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 348.981405][ T6517] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.034707][ T28] audit: type=1400 audit(2000000041.930:5137): avc: denied { module_request } for pid=19477 comm="syz.9.5911" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 349.086703][ T6517] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.118232][ T6517] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.126680][ T28] audit: type=1400 audit(2000000041.930:5138): avc: denied { sys_module } for pid=19477 comm="syz.9.5911" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 349.185234][ T28] audit: type=1400 audit(2000000042.000:5139): avc: denied { read write } for pid=12638 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 349.357157][T19505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5921'. [ 349.435692][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5926'. [ 349.713387][T19564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5948'. [ 350.208136][T19610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.215890][T19610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.371052][T19621] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5974'. [ 351.445064][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5988'. [ 351.472968][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5988'. [ 352.653286][T19721] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6012'. [ 352.723073][T19721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6012'. [ 353.298069][T19758] netlink: 'syz.9.6030': attribute type 5 has an invalid length. [ 353.356605][T19758] netlink: 1132 bytes leftover after parsing attributes in process `syz.9.6030'. [ 353.366112][T19758] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6030'. [ 353.851348][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6032'. [ 353.875031][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6032'. [ 353.928755][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6032'. [ 353.948932][ T28] kauditd_printk_skb: 262 callbacks suppressed [ 353.948947][ T28] audit: type=1400 audit(2000000046.870:5402): avc: denied { module_request } for pid=19759 comm="syz.4.6032" kmod="net-cls-ba" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 354.090065][ T28] audit: type=1400 audit(2000000047.010:5403): avc: denied { open } for pid=19764 comm="syz.4.6034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 354.109815][ T28] audit: type=1400 audit(2000000047.030:5404): avc: denied { allowed } for pid=19765 comm="syz.9.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 354.161931][ T28] audit: type=1400 audit(2000000047.030:5405): avc: denied { prog_load } for pid=19765 comm="syz.9.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 354.236239][ T28] audit: type=1400 audit(2000000047.030:5406): avc: denied { map_create } for pid=19765 comm="syz.9.6035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 354.288038][ T28] audit: type=1400 audit(2000000047.080:5407): avc: denied { prog_load } for pid=19768 comm="syz.4.6036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 354.337372][ T28] audit: type=1400 audit(2000000047.100:5408): avc: denied { prog_load } for pid=19770 comm="syz.9.6037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 354.377357][ T28] audit: type=1400 audit(2000000047.110:5409): avc: denied { prog_load } for pid=19768 comm="syz.4.6036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 354.418404][ T28] audit: type=1400 audit(2000000047.130:5410): avc: denied { prog_load } for pid=19770 comm="syz.9.6037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 354.465706][ T28] audit: type=1400 audit(2000000047.140:5411): avc: denied { execmem } for pid=19770 comm="syz.9.6037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 356.039480][T19859] 8021q: VLANs not supported on gre0 [ 356.154936][T19871] IPVS: sh: FWM 3 0x00000003 - no destination available [ 356.386431][T19894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.438319][T19899] erspan0: entered promiscuous mode [ 356.456694][T19899] __nla_validate_parse: 3 callbacks suppressed [ 356.456737][T19899] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6090'. [ 356.903464][ T6517] dvmrp0 (unregistering): left allmulticast mode [ 356.947538][ T6517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.959882][ T6517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.959923][T19935] netlink: 'syz.0.6105': attribute type 8 has an invalid length. [ 356.976536][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6105'. [ 356.986048][ T6517] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 356.996182][ T6517] bond0 (unregistering): (slave macvlan5): Releasing backup interface [ 357.010711][T19936] netlink: 'syz.0.6105': attribute type 8 has an invalid length. [ 357.022703][ T6517] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 357.026902][T19936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6105'. [ 357.041040][ T6517] bond0 (unregistering): Released all slaves [ 357.053415][ T6517] bond1 (unregistering): Released all slaves [ 357.076535][ T6517] bond2 (unregistering): (slave lo): Releasing backup interface [ 357.104939][ T6517] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 357.121312][ T6517] bond2 (unregistering): Released all slaves [ 357.135026][T19935] bond0: entered promiscuous mode [ 357.142301][T19935] gretap0: entered promiscuous mode [ 357.154824][T19935] debugfs: 'hsr1' already exists in 'hsr' [ 357.161248][T19935] Cannot create hsr debugfs directory [ 357.166878][T19935] hsr1: entered promiscuous mode [ 357.184704][ T6517] tipc: Disabling bearer [ 357.190181][ T6517] tipc: Left network mode [ 357.202552][ T6517] hsr_slave_0: left promiscuous mode [ 357.213212][ T6517] hsr_slave_1: left promiscuous mode [ 357.223991][ T6517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.238860][ T6517] batman_adv: batadv0: Removing interface: dummy0 [ 357.248972][T19948] netlink: 'syz.4.6112': attribute type 4 has an invalid length. [ 357.297435][ T6517] team0 (unregistering): Port device team_slave_1 removed [ 357.311968][T19951] netlink: 'syz.4.6112': attribute type 4 has an invalid length. [ 357.327529][ T6517] team0 (unregistering): Port device team_slave_0 removed [ 357.632702][ T6517] IPVS: stop unused estimator thread 0... [ 357.798550][T19974] netlink: 'syz.0.6124': attribute type 4 has an invalid length. [ 357.817097][T19974] netlink: 'syz.0.6124': attribute type 4 has an invalid length. [ 358.078723][T19993] netlink: 212916 bytes leftover after parsing attributes in process `syz.9.6131'. [ 358.962842][ T28] kauditd_printk_skb: 275 callbacks suppressed [ 358.962862][ T28] audit: type=1400 audit(2000000051.880:5687): avc: denied { create } for pid=20054 comm="syz.8.6158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 358.991359][ T28] audit: type=1400 audit(2000000051.880:5688): avc: denied { name_bind } for pid=20054 comm="syz.8.6158" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 359.014195][ T28] audit: type=1400 audit(2000000051.930:5689): avc: denied { create } for pid=20053 comm="syz.4.6159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 359.035363][ T28] audit: type=1400 audit(2000000051.930:5690): avc: denied { create } for pid=20053 comm="syz.4.6159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 359.082357][ T28] audit: type=1400 audit(2000000052.000:5691): avc: denied { mount } for pid=20058 comm="syz.4.6160" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=0 [ 359.125890][ T28] audit: type=1400 audit(2000000052.040:5692): avc: denied { prog_load } for pid=20062 comm="syz.4.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 359.149053][ T28] audit: type=1400 audit(2000000052.060:5693): avc: denied { map_create } for pid=20062 comm="syz.4.6163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 359.169471][ T28] audit: type=1400 audit(2000000052.070:5694): avc: denied { prog_load } for pid=20064 comm="syz.7.6164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 359.198970][ T28] audit: type=1400 audit(2000000052.070:5695): avc: denied { mount } for pid=20064 comm="syz.7.6164" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 359.223378][ T28] audit: type=1400 audit(2000000052.070:5696): avc: denied { create } for pid=20064 comm="syz.7.6164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 359.333473][T20080] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6171'. [ 359.463836][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6180'. [ 359.475708][T20100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6180'. [ 359.509487][T20104] wireguard1: entered promiscuous mode [ 359.515584][T20104] wireguard1: entered allmulticast mode [ 359.538844][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6184'. [ 360.126242][T20172] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6211'. [ 360.201679][T20183] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 360.253285][T20193] netlink: 'syz.0.6221': attribute type 27 has an invalid length. [ 360.273898][T20193] ip6gre2: left allmulticast mode [ 360.279496][T20193] gretap2: left allmulticast mode [ 360.284990][T20193] bond6: left allmulticast mode [ 360.290715][T20193] bond7: left promiscuous mode [ 360.295519][T20193] bridge4: left promiscuous mode [ 360.302543][T20193] hsr1: left promiscuous mode [ 360.332048][T20196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.343237][T20196] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.358594][T20196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.638973][T20230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6236'. [ 361.946340][T20327] ªªªªª6: renamed from wg2 [ 362.399392][T20384] __nla_validate_parse: 1 callbacks suppressed [ 362.399615][T20384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6304'. [ 362.526678][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6312'. [ 362.593249][T20408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6315'. [ 363.017369][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6323'. [ 363.038874][T20430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6323'. [ 363.104858][T20434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6326'. [ 363.267480][T20441] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6329'. [ 363.276788][T20441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6329'. [ 363.994822][ T28] kauditd_printk_skb: 524 callbacks suppressed [ 363.994841][ T28] audit: type=1400 audit(2000000056.910:6221): avc: denied { create } for pid=20472 comm="syz.7.6344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 364.023174][ T28] audit: type=1400 audit(2000000056.910:6222): avc: denied { mounton } for pid=20472 comm="syz.7.6344" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=0 [ 364.056214][ T28] audit: type=1400 audit(2000000056.970:6223): avc: denied { allowed } for pid=20474 comm="syz.7.6345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 364.095996][ T28] audit: type=1400 audit(2000000056.970:6224): avc: denied { map_create } for pid=20474 comm="syz.7.6345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 364.127277][ T28] audit: type=1400 audit(2000000057.040:6225): avc: denied { open } for pid=20480 comm="syz.7.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 364.157069][ T28] audit: type=1400 audit(2000000057.040:6226): avc: denied { map_create } for pid=20480 comm="syz.7.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 364.180735][ T28] audit: type=1400 audit(2000000057.040:6227): avc: denied { open } for pid=20480 comm="syz.7.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 364.211223][ T28] audit: type=1400 audit(2000000057.040:6228): avc: denied { prog_load } for pid=20480 comm="syz.7.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 364.236900][ T28] audit: type=1400 audit(2000000057.040:6229): avc: denied { map_create } for pid=20476 comm="syz.4.6346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 364.257919][ T28] audit: type=1400 audit(2000000057.100:6230): avc: denied { create } for pid=20482 comm="syz.7.6349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 365.410258][T20503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6357'. [ 365.713269][T20518] netlink: 'syz.4.6364': attribute type 1 has an invalid length. [ 365.738434][T20518] netlink: 'syz.4.6364': attribute type 4 has an invalid length. [ 365.746766][T20518] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6364'. [ 365.783139][T20523] netlink: 'syz.4.6364': attribute type 1 has an invalid length. [ 365.826971][T20523] netlink: 'syz.4.6364': attribute type 4 has an invalid length. [ 367.480851][T20612] __nla_validate_parse: 4 callbacks suppressed [ 367.480869][T20612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6406'. [ 367.649709][T20620] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.6407'. [ 367.662224][T20620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6407'. [ 368.497809][T20708] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6449'. [ 368.539771][T20715] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6461'. [ 368.552930][T20710] Process accounting resumed [ 368.862113][T20775] netlink: 'syz.4.6481': attribute type 1 has an invalid length. [ 368.904943][T20775] bond5: entered promiscuous mode [ 368.925826][T20775] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.953696][T20775] bond5: (slave bridge10): making interface the new active one [ 368.961426][T20775] bridge10: entered promiscuous mode [ 368.968905][T20775] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 369.000233][ T28] kauditd_printk_skb: 318 callbacks suppressed [ 369.000312][ T28] audit: type=1400 audit(2000000317.915:6549): avc: denied { read write } for pid=12638 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 369.031969][ T28] audit: type=1400 audit(2000000317.915:6550): avc: denied { map_create } for pid=20793 comm="syz.8.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.051473][ T28] audit: type=1400 audit(2000000317.915:6551): avc: denied { map_create } for pid=20793 comm="syz.8.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.074314][ T28] audit: type=1400 audit(2000000317.915:6552): avc: denied { map_create } for pid=20793 comm="syz.8.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.105780][ T28] audit: type=1400 audit(2000000317.915:6553): avc: denied { create } for pid=20791 comm="syz.9.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 369.132787][ T28] audit: type=1400 audit(2000000317.915:6554): avc: denied { allowed } for pid=20791 comm="syz.9.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 369.153868][ T28] audit: type=1400 audit(2000000317.915:6555): avc: denied { prog_load } for pid=20791 comm="syz.9.6487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.174469][ T28] audit: type=1400 audit(2000000317.975:6556): avc: denied { prog_load } for pid=20793 comm="syz.8.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.207728][ T28] audit: type=1400 audit(2000000317.975:6557): avc: denied { prog_load } for pid=20793 comm="syz.8.6489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 369.227088][ T28] audit: type=1400 audit(2000000317.995:6558): avc: denied { read write } for pid=12638 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 369.298449][T20812] netlink: 'syz.8.6498': attribute type 21 has an invalid length. [ 369.354342][T20820] tc_dump_action: action bad kind [ 370.480379][T20880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6527'. [ 370.618720][ T6539] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.632211][ T6539] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.643677][ T6539] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.654262][ T6539] netdevsim netdevsim7 eth0: unset [1, 2] type 2 family 0 port 45426 - 0 [ 370.663934][ T6539] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.673079][ T6539] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.692355][ T6539] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.701388][ T6539] netdevsim netdevsim7 eth1: unset [1, 2] type 2 family 0 port 45426 - 0 [ 370.710045][ T6539] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.726715][ T6539] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.735367][ T6539] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.744347][ T6539] netdevsim netdevsim7 eth2: unset [1, 2] type 2 family 0 port 45426 - 0 [ 370.791040][ T6539] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.809731][ T6539] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.829929][ T6539] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 370.850460][ T6539] netdevsim netdevsim7 eth3: unset [1, 2] type 2 family 0 port 45426 - 0 [ 370.939578][T20923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6547'. [ 371.150670][T20948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6560'. [ 371.168605][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6560'. [ 371.235763][T20957] netlink: 'syz.9.6564': attribute type 10 has an invalid length. [ 371.245637][T20957] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.255125][T20957] team0: entered promiscuous mode [ 371.260302][T20957] team_slave_0: entered promiscuous mode [ 371.266046][T20957] team_slave_1: entered promiscuous mode [ 371.272209][T20957] bond0: (slave team0): Enslaving as an active interface with an up link [ 372.070963][T21058] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6607'. [ 372.555326][T21097] __nla_validate_parse: 1 callbacks suppressed [ 372.555346][T21097] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6625'. [ 372.584506][T21101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6627'. [ 372.821312][T21118] sch_fq: defrate 0 ignored. [ 372.867974][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6638'. [ 373.199066][T21147] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6650'. [ 373.244554][T21147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6650'. [ 373.304899][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6655'. [ 373.372009][T21171] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6660'. [ 373.443086][T21181] netlink: 'syz.9.6665': attribute type 4 has an invalid length. [ 373.462054][T21181] netlink: 'syz.9.6665': attribute type 4 has an invalid length. [ 373.812385][T21238] netlink: 'syz.4.6693': attribute type 27 has an invalid length. [ 373.908533][T21238] bond5: left promiscuous mode [ 373.933622][T21238] bridge10: left promiscuous mode [ 373.989118][T21242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.007702][T21242] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.027258][T21242] batman_adv: batadv0: Interface activated: dummy0 [ 374.034166][T21242] batadv0: mtu less than device minimum [ 374.049492][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.060451][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.071465][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.082448][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.093370][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.104378][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.115284][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.126183][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.137138][T21242] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 374.236108][ T28] kauditd_printk_skb: 498 callbacks suppressed [ 374.236148][ T28] audit: type=1400 audit(2000000323.145:7057): avc: denied { create } for pid=21256 comm="syz.9.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 374.278739][ T28] audit: type=1400 audit(2000000323.145:7058): avc: denied { open } for pid=21256 comm="syz.9.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 374.321003][ T28] audit: type=1400 audit(2000000323.145:7059): avc: denied { prog_load } for pid=21256 comm="syz.9.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 374.366650][ T28] audit: type=1400 audit(2000000323.145:7060): avc: denied { prog_load } for pid=21256 comm="syz.9.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 374.392806][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6707'. [ 374.409280][ T28] audit: type=1400 audit(2000000323.145:7061): avc: denied { prog_load } for pid=21256 comm="syz.9.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 374.454675][ T28] audit: type=1400 audit(2000000323.155:7063): avc: denied { prog_load } for pid=21257 comm="syz.4.6700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 374.494197][ T28] audit: type=1400 audit(2000000323.155:7064): avc: denied { prog_load } for pid=21257 comm="syz.4.6700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 374.519703][ T28] audit: type=1400 audit(2000000323.145:7062): avc: denied { prog_load } for pid=21256 comm="syz.9.6710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 374.539702][ T28] audit: type=1400 audit(2000000323.155:7065): avc: denied { execmem } for pid=21257 comm="syz.4.6700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 374.575873][ T28] audit: type=1400 audit(2000000323.205:7066): avc: denied { create } for pid=21260 comm="syz.9.6701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 374.852164][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6721'. [ 375.138638][T21339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21339 comm=syz.0.6737 [ 375.530150][T21379] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 375.658389][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6761'. [ 376.039466][T21428] 8021q: VLANs not supported on gre0 [ 376.909322][T21535] netlink: 'syz.4.6827': attribute type 1 has an invalid length. [ 376.939949][T21535] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.983249][T21535] bond6: (slave veth13): Enslaving as an active interface with a down link [ 377.022370][T21544] netlink: 'syz.9.6830': attribute type 27 has an invalid length. [ 377.061939][T21535] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 377.099565][T21535] bond6: (slave batadv1): making interface the new active one [ 377.121987][T21535] batadv1: entered promiscuous mode [ 377.148056][T21535] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 377.286213][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.320469][T21548] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.496485][T21559] netlink: 'syz.9.6836': attribute type 1 has an invalid length. [ 377.548639][T21559] bond2: entered promiscuous mode [ 377.563797][T21559] 8021q: adding VLAN 0 to HW filter on device bond2 [ 377.656278][T21561] bond2: (slave bridge5): making interface the new active one [ 377.689624][T19211] IPVS: starting estimator thread 0... [ 377.700082][T21561] bridge5: entered promiscuous mode [ 377.723859][T21561] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 377.797466][T21566] IPVS: using max 2352 ests per chain, 117600 per kthread [ 377.870503][T21576] netlink: 'syz.4.6842': attribute type 5 has an invalid length. [ 378.321989][T21587] netlink: 'syz.8.6847': attribute type 12 has an invalid length. [ 379.262451][ T28] kauditd_printk_skb: 485 callbacks suppressed [ 379.262467][ T28] audit: type=1400 audit(2000000328.175:7552): avc: denied { prog_load } for pid=21644 comm="syz.4.6873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 379.337343][ T28] audit: type=1400 audit(2000000328.205:7553): avc: denied { module_request } for pid=21644 comm="syz.4.6873" kmod="netdev-syz_tun" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 379.402589][ T28] audit: type=1400 audit(2000000328.205:7554): avc: denied { sys_module } for pid=21644 comm="syz.4.6873" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 379.485117][ T28] audit: type=1400 audit(2000000328.205:7555): avc: denied { map_create } for pid=21644 comm="syz.4.6873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 379.538296][ T28] audit: type=1400 audit(2000000328.205:7556): avc: denied { prog_load } for pid=21644 comm="syz.4.6873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 379.609833][ T28] audit: type=1400 audit(2000000328.205:7557): avc: denied { open } for pid=21643 comm="syz.0.6883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 379.662729][ T28] audit: type=1400 audit(2000000328.205:7558): avc: denied { allowed } for pid=21643 comm="syz.0.6883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 379.708853][T12638] audit: audit_backlog=65 > audit_backlog_limit=64 [ 379.719780][T12638] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 379.738066][T21667] audit: audit_backlog=65 > audit_backlog_limit=64 [ 380.226947][T21687] __nla_validate_parse: 4 callbacks suppressed [ 380.226966][T21687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6891'. [ 380.269300][T21687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6891'. [ 380.322542][T21691] netlink: 'syz.9.6893': attribute type 12 has an invalid length. [ 380.736323][T21715] netlink: 'syz.4.6905': attribute type 12 has an invalid length. [ 382.442595][T21786] netlink: 'syz.8.6932': attribute type 1 has an invalid length. [ 382.461874][T21786] bond5: entered promiscuous mode [ 382.467111][T21786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.575873][T21786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 382.584002][T21786] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 382.594863][T21786] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 382.606897][T21786] bond5: (slave vti0): making interface the new active one [ 382.614823][T21786] vti0: entered promiscuous mode [ 382.622286][T21786] bond5: (slave vti0): Enslaving as an active interface with an up link [ 382.673026][T21811] netlink: 'syz.0.6953': attribute type 12 has an invalid length. [ 384.238222][T21900] batman_adv: batadv0: Interface deactivated: dummy0 [ 384.303743][T21909] netlink: 'syz.9.6987': attribute type 4 has an invalid length. [ 384.330079][ T28] kauditd_printk_skb: 722 callbacks suppressed [ 384.330095][ T28] audit: type=1400 audit(2000000333.245:8278): avc: denied { create } for pid=21910 comm="syz.4.6988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 384.330504][T21909] netlink: 'syz.9.6987': attribute type 4 has an invalid length. [ 384.382668][ T28] audit: type=1326 audit(2000000333.295:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 384.409271][T21911] netlink: 'syz.4.6988': attribute type 4 has an invalid length. [ 384.417219][T21911] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6988'. [ 384.426967][ T28] audit: type=1326 audit(2000000333.295:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 384.456812][T21911] .`: renamed from bond0 [ 384.466349][ T28] audit: type=1326 audit(2000000333.295:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 384.525331][ T28] audit: type=1326 audit(2000000333.295:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 384.550071][ T28] audit: type=1400 audit(2000000333.295:8283): avc: denied { name_bind } for pid=21914 comm="syz.7.7000" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 384.573085][ T28] audit: type=1326 audit(2000000333.325:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 384.583992][T21922] xt_CT: No such helper "snmp_trap" [ 384.598058][ T28] audit: type=1326 audit(2000000333.325:8285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 384.644796][ T28] audit: type=1326 audit(2000000333.325:8286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 384.669034][T21922] xt_time: unknown flags 0xc [ 384.669607][ T28] audit: type=1326 audit(2000000333.325:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.4.6988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cdc08c819 code=0x7ffc0000 [ 385.247164][T21956] netlink: 'syz.7.7003': attribute type 4 has an invalid length. [ 385.283186][T21956] netlink: 'syz.7.7003': attribute type 4 has an invalid length. [ 385.954983][T21951] ================================================================== [ 385.963123][T21951] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 385.971935][T21951] [ 385.974272][T21951] write to 0xffff888104055ee8 of 8 bytes by task 21946 on cpu 0: [ 385.982103][T21951] shmem_file_splice_read+0x470/0x600 [ 385.987591][T21951] splice_direct_to_actor+0x26e/0x670 [ 385.993000][T21951] do_splice_direct+0x119/0x1a0 [ 385.997890][T21951] do_sendfile+0x382/0x650 [ 386.002332][T21951] __x64_sys_sendfile64+0x105/0x150 [ 386.007560][T21951] x64_sys_call+0x2dc4/0x3020 [ 386.012262][T21951] do_syscall_64+0x12c/0x370 [ 386.017049][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.022955][T21951] [ 386.025289][T21951] write to 0xffff888104055ee8 of 8 bytes by task 21951 on cpu 1: [ 386.033026][T21951] shmem_file_splice_read+0x470/0x600 [ 386.038435][T21951] splice_direct_to_actor+0x26e/0x670 [ 386.043842][T21951] do_splice_direct+0x119/0x1a0 [ 386.048714][T21951] do_sendfile+0x382/0x650 [ 386.053149][T21951] __x64_sys_sendfile64+0x105/0x150 [ 386.058478][T21951] x64_sys_call+0x2dc4/0x3020 [ 386.063189][T21951] do_syscall_64+0x12c/0x370 [ 386.067801][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.073708][T21951] [ 386.076036][T21951] value changed: 0x000000000000724c -> 0x000000000000724d [ 386.083144][T21951] [ 386.085469][T21951] Reported by Kernel Concurrency Sanitizer on: [ 386.091726][T21951] CPU: 1 UID: 0 PID: 21951 Comm: syz.8.6999 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.102867][T21951] Tainted: [W]=WARN [ 386.106672][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.116907][T21951] ==================================================================