last executing test programs: 5m51.306870884s ago: executing program 32 (id=682): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x650ce4b086bd444b) r0 = creat(&(0x7f0000000080)='./file2\x00', 0x108) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) 5m30.8230887s ago: executing program 33 (id=1091): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xffe}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x8000) 5m22.110579333s ago: executing program 34 (id=1233): ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000004c0)=0xffffffff00002001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x802) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m8.166578953s ago: executing program 35 (id=1498): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1ff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5m4.937197093s ago: executing program 36 (id=1538): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x40}], 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10001}, 0x6025, 0x4001, 0xb, 0x5, 0x2, 0x20005, 0x7f, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4m43.317078756s ago: executing program 37 (id=1927): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) 4m6.650641414s ago: executing program 38 (id=2562): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x165) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/30, 0x1e) 3m45.539141783s ago: executing program 39 (id=2888): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0x9a0e, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0x2, 0x10, "1b090000400000000000000110f98178101700"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 3m18.661934584s ago: executing program 4 (id=3407): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x0, 0x700001b, 0x148, 0x250, 0x148, 0x308, 0x206, 0x240, 0x308, 0x240, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0x0, 'ip6gretap0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0xff, 0x1, 0x11}, 0x1ea, 0x70, 0xd0, 0x0, {0x390, 0x8f00}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x30, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff000000, 0x0, 'ip6gre0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x29, 0x0, 0x25}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) 3m18.590399929s ago: executing program 4 (id=3409): setresgid(0xee00, 0xee01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000180)='io\x00') pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) 3m18.494890595s ago: executing program 4 (id=3413): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000240)=0x800004, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000001c0)="330520000a00160006007ef52f555f2ab34eb67eabe2dffebf30f8784f997bea54fefe7117599e7dae76f98691ffb71675553f", 0x33, 0x801, &(0x7f0000000000)={0x11, 0x8, r2, 0x1, 0x5f, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/22, 0x16}], 0x1) 3m18.403893772s ago: executing program 4 (id=3419): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) 3m17.732587017s ago: executing program 4 (id=3430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) 3m17.410563289s ago: executing program 4 (id=3438): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 3m17.387522071s ago: executing program 40 (id=3438): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b95477511ba86ecaf919bc87db", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x5b2, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 3m11.412502928s ago: executing program 1 (id=3541): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffba, 0x3}, 0x90, 0xa4, 0x2, 0x0, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m11.306631855s ago: executing program 1 (id=3543): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000015c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m11.299527275s ago: executing program 1 (id=3545): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="10000180", @ANYRES8], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m11.201822752s ago: executing program 1 (id=3548): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x48) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) getdents(r0, 0x0, 0x0) 3m10.64264898s ago: executing program 1 (id=3559): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m10.325697232s ago: executing program 1 (id=3566): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000210425bd70000000000000000000", @ANYRES32, @ANYBLOB="0000000000020100300012800800010067726500240002"], 0x50}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011003f00303030303a30303a31302e3000000000080003f4ffffff0008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m10.291270424s ago: executing program 41 (id=3566): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000210425bd70000000000000000000", @ANYRES32, @ANYBLOB="0000000000020100300012800800010067726500240002"], 0x50}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001007063690011003f00303030303a30303a31302e3000000000080003f4ffffff0008000b000104000006"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m50.610715495s ago: executing program 7 (id=3909): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000580)={r2, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000013c0)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b00)=']', 0x1}], 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20, 0x40004}], 0x1, 0x0) 2m50.53847734s ago: executing program 7 (id=3911): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x1000040, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m50.53798181s ago: executing program 7 (id=3912): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="40c469738961ea3c63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m50.3965454s ago: executing program 7 (id=3915): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x1200040, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0], 0xfe, 0x27f, &(0x7f00000005c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x8013, 0x9, 0xb) 2m50.216406192s ago: executing program 7 (id=3919): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x2, 0x1, {0xa, 0x4e24, 0x4, @empty, 0x1f}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, 0x0) 2m50.024765905s ago: executing program 7 (id=3928): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x5e, 0x0, 0x1}, 0x28) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 2m49.978368238s ago: executing program 42 (id=3928): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x5e, 0x0, 0x1}, 0x28) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 2m17.097354718s ago: executing program 3 (id=4449): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x73, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, 0x0, 0x0, &(0x7f0000000000)) unshare(0x26020480) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m17.025246673s ago: executing program 3 (id=4450): perf_event_open(0x0, 0x0, 0x2000000, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, 0x0, 0x24004016) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x109111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000300)={[{@dioread_lock}, {@norecovery}, {@abort}, {@nomblk_io_submit}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) getpriority(0x2, 0xffffffffffffffff) 2m15.892295281s ago: executing program 3 (id=4471): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m15.619114459s ago: executing program 3 (id=4468): socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 2m15.463826149s ago: executing program 3 (id=4470): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x121) fcntl$notify(r0, 0x402, 0x30) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) write$P9_RVERSION(r1, &(0x7f0000000a80)=ANY=[], 0x15) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r2, &(0x7f00000009c0)=[{&(0x7f0000000140)="d0", 0x1}], 0x1, 0x7) 2m15.207137087s ago: executing program 3 (id=4477): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)='F', 0x1) 2m15.16753098s ago: executing program 43 (id=4477): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_misc(r1, &(0x7f0000000100)='F', 0x1) 1m53.762219669s ago: executing program 8 (id=4785): fsopen(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x44, 0x0, 0x6, 0x6, 0x3, 0x2}, {0x3, 0x2, 0x7, 0x4, 0x0, 0x6}, 0x90000000, 0x82b8ca3e, 0x1d24}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9b4e7c312ffd1ff5}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 1m53.476854518s ago: executing program 8 (id=4790): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x50) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmsg$802154_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)="8be4c41006cca6", 0x7}, 0x1, 0x0, 0x0, 0x4004081}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1m52.601652678s ago: executing program 8 (id=4805): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffffffd}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m52.551682641s ago: executing program 8 (id=4807): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x8b101a, 0x0) umount2(&(0x7f0000000200)='./file0/../file0\x00', 0x8) 1m52.551034761s ago: executing program 8 (id=4808): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 1m52.168071037s ago: executing program 8 (id=4812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1m52.139564259s ago: executing program 44 (id=4812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 17.736106402s ago: executing program 9 (id=6358): epoll_create1(0x0) epoll_create1(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') readv(r2, &(0x7f0000000740)=[{&(0x7f0000000400)=""/162, 0xa2}], 0x1) 17.679603935s ago: executing program 9 (id=6360): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x1, 0x6, 0xe}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0xb1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0xb1}, 0x39) 17.637215329s ago: executing program 9 (id=6362): bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8c014) 17.130986563s ago: executing program 9 (id=6376): prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2) timer_create(0x2, 0x0, &(0x7f0000000600)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000280)={{r1, r2+10000000}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x989680}}, &(0x7f00000002c0)) 17.077725077s ago: executing program 9 (id=6378): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='.\x02\x00', 0x4) 17.051138269s ago: executing program 9 (id=6379): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.090841009s ago: executing program 0 (id=6414): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10020, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x101680, 0x2, 0xfffffffc, 0x0, 0x5, 0xa50, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.090555359s ago: executing program 2 (id=6415): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.089690999s ago: executing program 5 (id=6416): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x74a6, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) 8.089446789s ago: executing program 6 (id=6417): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000714f, 0x0) 6.675478245s ago: executing program 0 (id=6418): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000853) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r3, r4, 0x1, 0x0) 6.675309705s ago: executing program 2 (id=6419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x41) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) socket$inet6(0xa, 0x3, 0x0) socket(0x2, 0x80805, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) unshare(0x2c020400) prlimit64(0x0, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001280)={r0, 0x0, 0x0, 0x4}, 0x20) 6.675076365s ago: executing program 5 (id=6420): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000480)='veth1\x00', 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 6.674852825s ago: executing program 6 (id=6421): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)) socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 5.157537098s ago: executing program 0 (id=6422): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mq_open(0x0, 0x8c2, 0x30, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, 0x0, 0x0, 0xfecc) inotify_init() setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) copy_file_range(r2, 0x0, r2, 0x0, 0x2, 0x0) 5.157255718s ago: executing program 2 (id=6423): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) r1 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0xfffffffc, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r1, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 5.157049799s ago: executing program 5 (id=6424): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'batadv0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 5.156707148s ago: executing program 6 (id=6425): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000004100000018010000756c6c2500000000003c20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 3.543911059s ago: executing program 0 (id=6426): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 3.539696089s ago: executing program 2 (id=6427): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049367, 0x0) 3.538656069s ago: executing program 5 (id=6428): modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0xc001200, 0x0, 0x0, 0x0, 0x0, 0x0) 3.538435319s ago: executing program 6 (id=6429): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x400000, {0x0, 0x0, 0x0, r5, {0x7, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x8002, 0x2000401, 0x5, 0x6}, {0x0, 0x7f, 0x8, 0xfffffffd}, {0x3ff, 0xe, 0x76800, 0xd}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}]}, 0x7c}}, 0x20040054) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.821220966s ago: executing program 0 (id=6430): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f00000006c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1.805692597s ago: executing program 2 (id=6431): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800008008"], 0x48) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r1) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='decodes io+m'], 0xf) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.803236817s ago: executing program 5 (id=6432): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xf0, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.802944817s ago: executing program 6 (id=6433): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x39ce, 0x57b7, 0x16, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 531.81µs ago: executing program 0 (id=6434): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)=ANY=[], 0x0) unshare(0x2a060400) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8840) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) 348.36µs ago: executing program 2 (id=6435): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 181.56µs ago: executing program 5 (id=6436): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r2) inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') r3 = dup2(r0, r1) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=6437): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.8.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfa4ac819 code=0x7ffc0000 [ 293.634887][ T28] audit: type=1326 audit(1776335427.704:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.8.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedfa4ac819 code=0x7ffc0000 [ 293.969126][ T28] audit: type=1326 audit(1776335427.704:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.8.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedfa4ac819 code=0x7ffc0000 [ 295.039216][T19141] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4689'. [ 296.195814][T19153] netlink: 'syz.0.4694': attribute type 4 has an invalid length. [ 296.227334][T19153] netlink: 'syz.0.4694': attribute type 4 has an invalid length. [ 296.322347][T19156] loop5: detected capacity change from 0 to 128 [ 296.429215][T19156] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.455436][T19156] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.491067][T19168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4700'. [ 296.505545][T19169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4696'. [ 296.537104][T19171] loop0: detected capacity change from 0 to 512 [ 296.582593][T19171] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 296.666093][T19171] EXT4-fs (loop0): 1 truncate cleaned up [ 296.679580][T19171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.855464][T14810] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.927501][T14609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.137948][T19204] loop2: detected capacity change from 0 to 256 [ 297.154044][T19202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=19202 comm=syz.6.4712 [ 297.166951][T19202] netlink: 1195 bytes leftover after parsing attributes in process `syz.6.4712'. [ 297.180205][T19204] FAT-fs (loop2): Directory bread(block 64) failed [ 297.196141][T19204] FAT-fs (loop2): Directory bread(block 65) failed [ 297.206460][T19204] FAT-fs (loop2): Directory bread(block 66) failed [ 297.213807][T19204] FAT-fs (loop2): Directory bread(block 67) failed [ 297.225866][T19204] FAT-fs (loop2): Directory bread(block 68) failed [ 297.237219][T19204] FAT-fs (loop2): Directory bread(block 69) failed [ 297.250894][T19204] FAT-fs (loop2): Directory bread(block 70) failed [ 297.261630][T19204] FAT-fs (loop2): Directory bread(block 71) failed [ 297.286418][T19204] FAT-fs (loop2): Directory bread(block 72) failed [ 297.293549][T19204] FAT-fs (loop2): Directory bread(block 73) failed [ 297.596888][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.596888][ T69] loop2: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 297.612014][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.612014][ T69] loop2: rw=1, sector=1288, nr_sectors = 32 limit=256 [ 297.626781][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.626781][ T69] loop2: rw=1, sector=1352, nr_sectors = 32 limit=256 [ 297.645166][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.645166][ T69] loop2: rw=1, sector=1416, nr_sectors = 32 limit=256 [ 297.659877][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.659877][ T69] loop2: rw=1, sector=1480, nr_sectors = 32 limit=256 [ 297.674948][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.674948][ T69] loop2: rw=1, sector=1544, nr_sectors = 32 limit=256 [ 297.692044][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.692044][ T69] loop2: rw=1, sector=1608, nr_sectors = 32 limit=256 [ 297.707545][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.707545][ T69] loop2: rw=1, sector=1672, nr_sectors = 32 limit=256 [ 297.760506][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.760506][ T69] loop2: rw=1, sector=1736, nr_sectors = 32 limit=256 [ 297.782379][ T69] kworker/u8:4: attempt to access beyond end of device [ 297.782379][ T69] loop2: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 297.899395][T19235] loop2: detected capacity change from 0 to 512 [ 297.952213][T19235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.988175][T19235] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.120973][T18319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.163554][T19250] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.4730'. [ 298.185717][T19250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4730'. [ 298.359435][T19262] loop2: detected capacity change from 0 to 128 [ 298.473348][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 298.473368][ T28] audit: type=1400 audit(1776335433.134:2764): avc: denied { mounton } for pid=19266 comm="syz.2.4739" path="/file0" dev="autofs" ino=56093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 298.981978][T19281] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 299.150381][ T28] audit: type=1400 audit(1776335433.794:2765): avc: denied { read write } for pid=19282 comm="syz.2.4746" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 299.219126][ T28] audit: type=1400 audit(1776335433.794:2766): avc: denied { open } for pid=19282 comm="syz.2.4746" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 299.271080][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.280422][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.289706][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.299504][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.308832][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.318044][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.327197][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.336593][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.346231][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.355618][T19293] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 299.455092][T19301] netlink: 'syz.8.4755': attribute type 4 has an invalid length. [ 299.456747][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4756'. [ 299.483974][T19303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4756'. [ 299.796757][T19328] netlink: 168 bytes leftover after parsing attributes in process `syz.8.4765'. [ 299.963686][T19337] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4767'. [ 300.015777][T19339] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.098313][T19340] lo speed is unknown, defaulting to 1000 [ 300.419385][T19343] ref_ctr going negative. vaddr: 0x200000000002, curr val: -29802, delta: 1 [ 300.428979][T19343] ref_ctr increment failed for inode: 0x10dc offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8881042b0d80 [ 300.571519][T19345] __nla_validate_parse: 1 callbacks suppressed [ 300.571537][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 300.587625][T19345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4771'. [ 300.601533][T19347] sctp: [Deprecated]: syz.0.4772 (pid 19347) Use of int in max_burst socket option. [ 300.601533][T19347] Use struct sctp_assoc_value instead [ 300.755986][ T28] audit: type=1400 audit(1776335435.414:2767): avc: denied { watch watch_reads } for pid=19360 comm="syz.6.4778" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 300.829209][T19367] netlink: 'syz.8.4781': attribute type 10 has an invalid length. [ 300.844869][T19367] veth1_macvtap: left promiscuous mode [ 300.899467][T19368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 300.925542][T19370] bond1: entered allmulticast mode [ 300.961852][T19374] macvlan2: entered promiscuous mode [ 300.974262][T19374] macvlan2: entered allmulticast mode [ 300.981107][T19374] bond1: (slave macvlan2): Opening slave failed [ 301.069588][T19379] netlink: 'syz.8.4785': attribute type 13 has an invalid length. [ 301.131088][T19384] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 301.436390][T19398] loop2: detected capacity change from 0 to 1024 [ 301.461112][T19398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.478747][T19403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4793'. [ 301.489274][T19403] team0: Mode changed to "activebackup" [ 301.507157][T18319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.577266][T19409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4796'. [ 301.598981][T19409] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4796'. [ 301.608411][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4796'. [ 301.845118][T19421] lo speed is unknown, defaulting to 1000 [ 302.160427][T19431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4804'. [ 302.296202][T19439] smc: net device bond0 applied user defined pnetid SYZ2 [ 302.415445][ T1720] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.483628][ T1720] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.534402][ T1720] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.995314][ T1720] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.021554][T19454] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4816'. [ 303.134651][ T1720] bridge_slave_1: left allmulticast mode [ 303.141563][ T1720] bridge_slave_1: left promiscuous mode [ 303.161930][ T1720] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.245596][T19472] netlink: 'syz.6.4820': attribute type 1 has an invalid length. [ 303.258720][T19475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.263903][T19472] netlink: 'syz.6.4820': attribute type 4 has an invalid length. [ 303.279874][T19472] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4820'. [ 303.305018][T19475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.357186][ T1720] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 303.424793][ T1720] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 303.433646][ T1720] bridge1 (unregistering): left promiscuous mode [ 303.522699][ T1720] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.533274][ T1720] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.543021][ T1720] bond0 (unregistering): Released all slaves [ 303.553817][ T1720] bond1 (unregistering): Released all slaves [ 303.566025][T19445] lo speed is unknown, defaulting to 1000 [ 303.706019][ T1720] hsr_slave_0: left promiscuous mode [ 303.720053][ T1720] hsr_slave_1: left promiscuous mode [ 303.726903][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.739990][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.755119][ T1720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.769194][ T1720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.789493][ T1720] veth0_macvtap: left promiscuous mode [ 303.795290][ T1720] veth1_vlan: left promiscuous mode [ 303.800959][ T1720] veth0_vlan: left promiscuous mode [ 303.880152][ T1720] team0 (unregistering): Port device team_slave_1 removed [ 303.891043][ T1720] team0 (unregistering): Port device team_slave_0 removed [ 303.920598][ T3659] smc: removing ib device lyz2 [ 304.041437][T19445] chnl_net:caif_netlink_parms(): no params data found [ 304.163942][T19445] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.186938][T19445] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.212769][T19445] bridge_slave_0: entered allmulticast mode [ 304.229460][T19445] bridge_slave_0: entered promiscuous mode [ 304.237001][T19445] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.259203][T19445] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.272701][T19445] bridge_slave_1: entered allmulticast mode [ 304.286984][T19445] bridge_slave_1: entered promiscuous mode [ 304.334584][T19445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.355430][T19445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.381014][T19445] team0: Port device team_slave_0 added [ 304.388164][T19445] team0: Port device team_slave_1 added [ 304.412348][T19445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.429273][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.469721][T19445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.491291][T19445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.498573][T19445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.536491][T19445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.614317][T19445] hsr_slave_0: entered promiscuous mode [ 304.626024][T19445] hsr_slave_1: entered promiscuous mode [ 304.637880][T19445] debugfs: 'hsr0' already exists in 'hsr' [ 304.651351][T19445] Cannot create hsr debugfs directory [ 304.762498][T19567] loop0: detected capacity change from 0 to 128 [ 304.930567][T19579] loop5: detected capacity change from 0 to 512 [ 304.949258][T19579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.995778][T19579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.028153][T19579] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.037755][T19591] bio_check_eod: 55 callbacks suppressed [ 305.037774][T19591] syz.0.4833: attempt to access beyond end of device [ 305.037774][T19591] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 305.104374][T19445] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 305.152902][T19445] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 305.183199][T19567] syz.0.4833: attempt to access beyond end of device [ 305.183199][T19567] loop0: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 305.184822][T14810] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.219601][T19445] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 305.249139][T19445] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 305.363139][T19445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.396448][T19445] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.424434][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.431822][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.463983][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.471362][ T1720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.546247][T19445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.586303][T19445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.682145][T19445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.937698][T19445] veth0_vlan: entered promiscuous mode [ 305.961991][T19445] veth1_vlan: entered promiscuous mode [ 305.992437][T19445] veth0_macvtap: entered promiscuous mode [ 306.007415][T19445] veth1_macvtap: entered promiscuous mode [ 306.020257][T19445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.037429][T19445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.062805][ T1720] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.076567][ T1720] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.090450][ T3659] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.102175][ T3659] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.301422][T19716] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4848'. [ 306.363515][T19726] netlink: 'syz.0.4850': attribute type 1 has an invalid length. [ 306.393111][T19726] bond2: entered promiscuous mode [ 306.398525][T19726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.424833][T19733] netlink: 'syz.6.4853': attribute type 13 has an invalid length. [ 306.448414][T19726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.460376][T19726] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 306.470835][ T28] audit: type=1400 audit(1776335441.104:2768): avc: denied { watch watch_reads } for pid=19736 comm="syz.2.4854" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 306.471191][T19726] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 306.505959][T19726] bond2: (slave vti0): making interface the new active one [ 306.513929][T19726] vti0: entered promiscuous mode [ 306.521014][T19726] bond2: (slave vti0): Enslaving as an active interface with an up link [ 306.579409][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4855'. [ 306.749040][T19751] netlink: 'syz.2.4857': attribute type 4 has an invalid length. [ 306.783525][T19751] netlink: 'syz.2.4857': attribute type 4 has an invalid length. [ 306.852826][T19766] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4859'. [ 306.874454][T19766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4859'. [ 306.902617][T19766] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4859'. [ 306.925517][ T28] audit: type=1326 audit(1776335441.584:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.5.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557ce6c819 code=0x7ffc0000 [ 306.970564][ T28] audit: type=1326 audit(1776335441.584:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.5.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557ce6c819 code=0x7ffc0000 [ 307.000723][ T28] audit: type=1326 audit(1776335441.584:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.5.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f557ce6c819 code=0x7ffc0000 [ 307.095917][ T28] audit: type=1326 audit(1776335441.584:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.5.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557ce6c819 code=0x7ffc0000 [ 307.123691][ T28] audit: type=1326 audit(1776335441.584:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.5.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f557ce6c819 code=0x7ffc0000 [ 307.151594][T19800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19800 comm=syz.2.4869 [ 307.155965][ T28] audit: type=1326 audit(1776335441.584:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.5.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557ce6c819 code=0x7ffc0000 [ 307.200639][ T28] audit: type=1326 audit(1776335441.614:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19777 comm="syz.5.4863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f557ce6c819 code=0x7ffc0000 [ 307.238185][T19805] audit: audit_backlog=65 > audit_backlog_limit=64 [ 307.245258][ T28] audit: type=1404 audit(1776335441.614:2776): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 307.474769][T19838] netlink: 'syz.5.4879': attribute type 4 has an invalid length. [ 307.517279][T19838] netlink: 'syz.5.4879': attribute type 4 has an invalid length. [ 307.544730][T19846] netlink: 'syz.9.4884': attribute type 27 has an invalid length. [ 307.639791][T19846] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.647021][T19846] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.729227][T19846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.739522][T19846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.865888][T19853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.887961][T19853] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.925659][T19853] net_ratelimit: 3319 callbacks suppressed [ 307.925670][T19853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.964666][T11861] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.973698][T11861] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.005897][T11861] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.017008][T11861] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.346674][T19891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4895'. [ 308.399264][T19891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.438236][T19891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.127772][T19924] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4910'. [ 309.178884][T19926] bond0: entered promiscuous mode [ 309.185521][T19926] bond_slave_0: entered promiscuous mode [ 309.191916][T19926] bond_slave_1: entered promiscuous mode [ 309.199257][T19926] veth0_to_team: entered promiscuous mode [ 309.206140][T19926] debugfs: 'hsr1' already exists in 'hsr' [ 309.213610][T19926] Cannot create hsr debugfs directory [ 309.219378][T19926] hsr1: Slave B (veth0_to_team) is not up; please bring it up to get a fully working HSR network [ 309.932883][T19993] netlink: 'syz.6.4947': attribute type 4 has an invalid length. [ 309.957791][T19993] netlink: 'syz.6.4947': attribute type 4 has an invalid length. [ 311.617926][ T28] kauditd_printk_skb: 630 callbacks suppressed [ 311.617944][ T28] audit: type=1400 audit(1776335446.274:3267): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.831865][ T28] audit: type=1400 audit(1776335446.494:3268): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 311.865666][ T28] audit: type=1400 audit(1776335446.524:3269): avc: denied { prog_load } for pid=20026 comm="syz.0.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.887657][ T28] audit: type=1400 audit(1776335446.524:3270): avc: denied { open } for pid=20026 comm="syz.0.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 311.926500][ T28] audit: type=1400 audit(1776335446.554:3271): avc: denied { map_create } for pid=20026 comm="syz.0.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 311.948160][ T28] audit: type=1400 audit(1776335446.554:3272): avc: denied { prog_load } for pid=20026 comm="syz.0.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.002321][ T28] audit: type=1400 audit(1776335446.574:3273): avc: denied { prog_load } for pid=20026 comm="syz.0.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.032593][ T28] audit: type=1400 audit(1776335446.574:3274): avc: denied { prog_load } for pid=20026 comm="syz.0.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 312.053915][ T28] audit: type=1400 audit(1776335446.664:3275): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 312.192614][ T28] audit: type=1400 audit(1776335446.844:3276): avc: denied { bpf } for pid=20029 comm="syz.0.4953" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 312.691032][ T3659] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.707186][ T3659] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.737345][ T3659] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.746555][ T3659] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.771486][ T3659] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.783916][ T3659] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.802402][ T3659] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.821444][ T3659] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.972859][T20040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4955'. [ 313.535382][T20076] lo: Caught tx_queue_len zero misconfig [ 313.551467][T20076] netem: incorrect gi model size [ 313.566589][T20076] netem: change failed [ 314.183291][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4980'. [ 314.317209][T20106] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4985'. [ 314.871293][T20146] netlink: 'syz.6.5003': attribute type 13 has an invalid length. [ 314.912435][T20149] netlink: 'syz.6.5004': attribute type 1 has an invalid length. [ 314.914439][T20152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5005'. [ 314.935361][T20149] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.946749][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5005'. [ 314.958563][T20149] bond4: (slave veth11): Enslaving as an active interface with a down link [ 314.974118][T20152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5005'. [ 314.976010][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5004'. [ 314.995622][T20149] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 315.005588][T20149] bond4: (slave batadv1): making interface the new active one [ 315.014241][T20149] batadv1: entered promiscuous mode [ 315.019688][T20149] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 315.072889][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5010'. [ 315.117973][T20169] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5012'. [ 315.151125][T20177] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5015'. [ 316.343295][T20292] netlink: 'syz.6.5059': attribute type 21 has an invalid length. [ 316.620349][ T28] kauditd_printk_skb: 402 callbacks suppressed [ 316.620368][ T28] audit: type=1400 audit(1776335451.284:3679): avc: denied { open } for pid=20318 comm="syz.0.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 316.662812][ T28] audit: type=1400 audit(1776335451.284:3680): avc: denied { open } for pid=20318 comm="syz.0.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 316.701192][ T28] audit: type=1400 audit(1776335451.284:3681): avc: denied { open } for pid=20318 comm="syz.0.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 316.732399][ T28] audit: type=1400 audit(1776335451.304:3682): avc: denied { read write } for pid=20316 comm="syz.2.5071" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.771594][ T28] audit: type=1400 audit(1776335451.314:3683): avc: denied { read } for pid=20316 comm="syz.2.5071" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 316.795807][ T28] audit: type=1400 audit(1776335451.424:3684): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 316.820802][ T28] audit: type=1400 audit(1776335451.484:3685): avc: denied { create } for pid=20302 comm="syz.6.5064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 316.849711][ T28] audit: type=1400 audit(1776335451.494:3686): avc: denied { map_create } for pid=20322 comm="syz.2.5073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.885094][ T28] audit: type=1400 audit(1776335451.504:3687): avc: denied { map_create } for pid=20322 comm="syz.2.5073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 316.917508][T20333] audit: audit_backlog=65 > audit_backlog_limit=64 [ 317.078776][T20361] netlink: 'syz.0.5086': attribute type 1 has an invalid length. [ 317.105064][T20361] bond3: entered promiscuous mode [ 317.122784][T20361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 317.140346][T20370] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 317.153177][T20370] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 317.165741][T20370] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 317.176361][T20370] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 318.377350][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 319.193061][T20470] __nla_validate_parse: 9 callbacks suppressed [ 319.193079][T20470] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.5128'. [ 319.790805][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5145'. [ 319.830950][ T314] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.840400][T20510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5145'. [ 319.850136][ T314] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.879625][ T314] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.894480][ T314] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.392576][T20539] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.5157'. [ 320.410766][T20539] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5157'. [ 320.429127][ T5519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.435569][ T5519] Bluetooth: hci1: command 0x1003 tx timeout [ 320.443898][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 320.476788][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5159'. [ 321.614884][T20581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5176'. [ 321.649435][ T28] kauditd_printk_skb: 461 callbacks suppressed [ 321.649471][ T28] audit: type=1400 audit(1776335456.314:4147): avc: denied { module_request } for pid=20586 comm="syz.6.5179" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 321.707974][ T28] audit: type=1400 audit(1776335456.314:4148): avc: denied { sys_module } for pid=20586 comm="syz.6.5179" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 321.749259][ T28] audit: type=1400 audit(1776335456.314:4149): avc: denied { module_request } for pid=20586 comm="syz.6.5179" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 321.799040][T20598] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5184'. [ 321.801765][ T28] audit: type=1400 audit(1776335456.314:4150): avc: denied { sys_module } for pid=20586 comm="syz.6.5179" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 321.836148][ T28] audit: type=1400 audit(1776335456.344:4151): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 321.870510][ T28] audit: type=1400 audit(1776335456.344:4152): avc: denied { module_request } for pid=20588 comm="syz.6.5180" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 321.893667][ T28] audit: type=1400 audit(1776335456.344:4153): avc: denied { sys_module } for pid=20588 comm="syz.6.5180" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 321.949755][ T28] audit: type=1400 audit(1776335456.344:4154): avc: denied { module_request } for pid=20588 comm="syz.6.5180" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 321.988920][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5186'. [ 321.999461][ T28] audit: type=1400 audit(1776335456.344:4155): avc: denied { sys_module } for pid=20588 comm="syz.6.5180" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 322.048747][ T28] audit: type=1400 audit(1776335456.384:4156): avc: denied { open } for pid=20592 comm="syz.6.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 323.010470][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5201'. [ 324.166893][T20689] netlink: 'syz.0.5219': attribute type 10 has an invalid length. [ 324.178450][T20689] team0: Port device dummy0 added [ 324.187346][T20689] netlink: 'syz.0.5219': attribute type 10 has an invalid length. [ 324.198882][T20689] team0: Port device dummy0 removed [ 324.206336][T20689] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 324.398894][T20705] __nla_validate_parse: 1 callbacks suppressed [ 324.398911][T20705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5226'. [ 324.537021][T20711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5228'. [ 324.589018][T20717] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5230'. [ 324.888294][T20739] lo: Caught tx_queue_len zero misconfig [ 324.894372][T20739] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 324.940014][T20743] netlink: 'syz.9.5240': attribute type 1 has an invalid length. [ 324.953700][T20743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.967457][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5240'. [ 324.976922][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5240'. [ 324.990092][T20743] macsec1: entered promiscuous mode [ 324.995473][T20743] bond1: entered promiscuous mode [ 325.001312][T20743] macsec1: entered allmulticast mode [ 325.006753][T20743] bond1: entered allmulticast mode [ 325.030621][T20746] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5241'. [ 325.045780][T20746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 325.059786][T20746] macvlan2: entered promiscuous mode [ 325.066325][T20746] bond2: entered promiscuous mode [ 325.071750][T20746] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.080772][T20746] bond2: left promiscuous mode [ 325.350854][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5247'. [ 326.070548][T20791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5259'. [ 326.160288][T20795] netlink: 'syz.9.5261': attribute type 4 has an invalid length. [ 326.171794][ T69] batadv1: left promiscuous mode [ 326.213205][T20795] netlink: 'syz.9.5261': attribute type 4 has an invalid length. [ 326.284912][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5263'. [ 326.316858][T20805] netlink: 'syz.2.5264': attribute type 10 has an invalid length. [ 326.360134][T20805] team0: Port device dummy0 added [ 326.392113][T20805] netlink: 'syz.2.5264': attribute type 10 has an invalid length. [ 326.425298][T20805] team0: Port device dummy0 removed [ 326.441421][T20805] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 326.684530][ T28] kauditd_printk_skb: 251 callbacks suppressed [ 326.684549][ T28] audit: type=1400 audit(1776335461.344:4408): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 326.743222][ T28] audit: type=1400 audit(1776335461.394:4409): avc: denied { create } for pid=20820 comm="syz.0.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 326.764532][ T28] audit: type=1400 audit(1776335461.394:4410): avc: denied { allowed } for pid=20820 comm="syz.0.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 326.789269][T20823] netlink: 'syz.0.5271': attribute type 27 has an invalid length. [ 326.820230][ T28] audit: type=1400 audit(1776335461.424:4411): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 326.879675][T20823] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.887037][T20823] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.938217][T20823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.951208][ T28] audit: type=1400 audit(1776335461.614:4412): avc: denied { create } for pid=20806 comm="syz.9.5265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 326.992530][T20823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.050899][T20823] bond1: left allmulticast mode [ 327.057802][T20823] bridge2: left allmulticast mode [ 327.063306][ T28] audit: type=1400 audit(1776335461.724:4413): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 327.090906][ T28] audit: type=1400 audit(1776335461.724:4414): avc: denied { prog_load } for pid=20826 comm="syz.5.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 327.096661][T20823] bond2: left promiscuous mode [ 327.121773][ T28] audit: type=1400 audit(1776335461.734:4415): avc: denied { prog_load } for pid=20826 comm="syz.5.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 327.142379][T20823] vti0: left promiscuous mode [ 327.149943][ T28] audit: type=1400 audit(1776335461.734:4416): avc: denied { open } for pid=20826 comm="syz.5.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 327.171162][T20823] bond3: left promiscuous mode [ 327.177058][ T28] audit: type=1400 audit(1776335461.804:4417): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 327.210714][T20824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.221862][T20824] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.235005][T20824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.260993][ T314] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.270706][ T314] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.286312][ T314] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.324280][ T314] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.328134][T20835] netlink: 'syz.6.5276': attribute type 4 has an invalid length. [ 327.372395][ T314] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.378670][T20835] netlink: 'syz.6.5276': attribute type 4 has an invalid length. [ 327.390919][ T314] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.409537][ T314] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.418592][ T314] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.466460][T20846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.186558][ T1720] Bluetooth: hci0: Frame reassembly failed (-84) [ 328.338782][T20874] bond3: entered promiscuous mode [ 328.367624][T20878] gtp2: left promiscuous mode [ 328.452371][T20878] bond0: left promiscuous mode [ 328.479642][T20878] erspan1: left promiscuous mode [ 328.484776][T20878] bond0: left allmulticast mode [ 328.490023][T20878] erspan1: left allmulticast mode [ 328.586741][T20879] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.620050][T20879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.822664][T20885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.189140][ T5519] Bluetooth: hci0: command 0x1003 tx timeout [ 330.195289][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 331.735458][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 331.735475][ T28] audit: type=1400 audit(1776335466.394:4537): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 331.816908][ T28] audit: type=1400 audit(1776335466.474:4538): avc: denied { open } for pid=20998 comm="syz.0.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 331.902637][ T28] audit: type=1400 audit(1776335466.474:4539): avc: denied { prog_load } for pid=20998 comm="syz.0.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 331.959103][ T28] audit: type=1400 audit(1776335466.504:4540): avc: denied { map_create } for pid=20998 comm="syz.0.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 332.015664][ T28] audit: type=1400 audit(1776335466.504:4541): avc: denied { prog_load } for pid=20998 comm="syz.0.5342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 332.079133][ T28] audit: type=1400 audit(1776335466.514:4542): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.139156][ T28] audit: type=1400 audit(1776335466.654:4543): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.202592][ T28] audit: type=1400 audit(1776335466.664:4544): avc: denied { read write } for pid=21000 comm="syz.9.5343" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 332.267392][ T28] audit: type=1400 audit(1776335466.664:4545): avc: denied { execute } for pid=21000 comm="syz.9.5343" path="/98/file1" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 332.385386][ T28] audit: type=1400 audit(1776335466.844:4546): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 333.816416][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5356'. [ 333.911902][T21039] bond4: entered promiscuous mode [ 333.952589][T21039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.055440][ T314] Bluetooth: hci0: Frame reassembly failed (-84) [ 334.381742][T21077] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5371'. [ 334.852822][T21107] validate_nla: 1 callbacks suppressed [ 334.852843][T21107] netlink: 'syz.2.5385': attribute type 1 has an invalid length. [ 334.874734][T21107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 334.883902][T21109] netlink: 'syz.5.5386': attribute type 27 has an invalid length. [ 334.928193][T21109] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.966669][T21114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5385'. [ 335.018949][T21109] geneve2: left promiscuous mode [ 335.025029][T21109] geneve2: left allmulticast mode [ 335.032743][T21109] ipvlan2: left promiscuous mode [ 335.072458][T21107] bond2: (slave veth5): Enslaving as an active interface with a down link [ 335.110856][T21113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.130662][T21113] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.141538][T21113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.168556][T21114] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 335.189625][T21114] bond2: (slave batadv1): making interface the new active one [ 335.198688][T21114] batadv1: entered promiscuous mode [ 335.204556][T21114] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 335.218045][ T3659] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.240937][ T3659] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.250707][ T3659] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.286999][ T3659] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.304430][ T3659] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.314802][ T3659] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.328896][ T3659] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.338529][ T3659] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.348762][ T3659] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.365593][ T3659] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.374848][ T3659] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.384859][ T3659] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 335.562988][T21136] netlink: 'syz.0.5396': attribute type 1 has an invalid length. [ 335.611444][T21136] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 335.621949][T21136] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 335.633559][T21136] bond5: (slave vxcan3): making interface the new active one [ 335.641696][T21136] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 335.662825][T21136] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 335.674730][T21136] bond5: (slave vxcan5): Enslaving as a backup interface with an up link [ 335.774608][ T1720] Bluetooth: hci1: Frame reassembly failed (-84) [ 335.794501][T21146] Bluetooth: hci1: Frame reassembly failed (-90) [ 336.109215][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 336.115436][T20444] Bluetooth: hci0: command 0x1003 tx timeout [ 337.789229][ T5519] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 337.789258][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 337.811995][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 337.812014][ T28] audit: type=1400 audit(1776335472.474:4679): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.724894][ T28] audit: type=1400 audit(1776335473.384:4680): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.769332][ T28] audit: type=1400 audit(1776335473.414:4681): avc: denied { create } for pid=21151 comm="syz.9.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 338.769844][T21154] geneve2: entered promiscuous mode [ 338.790313][ T28] audit: type=1400 audit(1776335473.414:4682): avc: denied { create } for pid=21151 comm="syz.9.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 338.801254][ T3659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.818331][ T28] audit: type=1400 audit(1776335473.414:4683): avc: denied { open } for pid=21151 comm="syz.9.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 338.825305][ T3659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.850201][ T28] audit: type=1400 audit(1776335473.414:4684): avc: denied { open } for pid=21151 comm="syz.9.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 338.872945][ T28] audit: type=1400 audit(1776335473.424:4685): avc: denied { open } for pid=21150 comm="syz.0.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 338.873032][ T3659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.903412][ T28] audit: type=1400 audit(1776335473.424:4686): avc: denied { create } for pid=21150 comm="syz.0.5411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 338.903738][T21159] netlink: 'syz.2.5401': attribute type 27 has an invalid length. [ 338.933131][ T28] audit: type=1400 audit(1776335473.424:4687): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 338.958759][ T28] audit: type=1400 audit(1776335473.494:4688): avc: denied { create } for pid=21156 comm="syz.6.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 339.153353][ T3659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 339.584952][T21159] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.592284][T21159] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.123110][T21159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.173402][T21159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.608909][T21159] bond1: left allmulticast mode [ 340.652323][T21157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.660663][T21157] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.672394][T21157] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 340.719648][T21180] team0 (unregistering): Port device team_slave_0 removed [ 340.728034][T21180] team0 (unregistering): Port device team_slave_1 removed [ 340.750953][T11861] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.752072][T11861] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.752146][T11861] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.752183][T11861] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.823670][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5424'. [ 340.850129][T21208] bridge4: entered promiscuous mode [ 340.852029][T21208] bridge4: port 1(macvtap1) entered blocking state [ 340.852198][T21208] bridge4: port 1(macvtap1) entered disabled state [ 340.852296][T21208] macvtap1: entered allmulticast mode [ 340.852311][T21208] bridge4: entered allmulticast mode [ 340.852809][T21208] macvtap1: left allmulticast mode [ 340.852850][T21208] bridge4: left allmulticast mode [ 340.863014][T21208] bridge4: left promiscuous mode [ 340.911523][T21215] netlink: 'syz.6.5428': attribute type 4 has an invalid length. [ 340.912980][T21215] netlink: 'syz.6.5428': attribute type 4 has an invalid length. [ 340.940609][T21218] batman_adv: batadv0: Adding interface: dummy0 [ 340.950471][T21218] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.950632][T21218] batman_adv: batadv0: Interface activated: dummy0 [ 341.029486][T21221] netlink: 'syz.5.5431': attribute type 27 has an invalid length. [ 341.057596][T21221] batman_adv: batadv0: Interface deactivated: dummy0 [ 341.065560][T21228] netlink: 'syz.0.5434': attribute type 4 has an invalid length. [ 341.068121][T21228] netlink: 'syz.0.5434': attribute type 4 has an invalid length. [ 341.114194][T21221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.115559][T21221] batman_adv: batadv0: Interface activated: dummy0 [ 341.140239][T21221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.162539][T21236] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.5436'. [ 341.162560][T21236] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5436'. [ 341.171793][T21234] IPv6: sit1: Disabled Multicast RS [ 341.705141][T21262] netlink: 'syz.2.5448': attribute type 27 has an invalid length. [ 342.289263][T21266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.310143][T21266] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.343286][T21266] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.572522][T21311] netlink: 'syz.0.5468': attribute type 4 has an invalid length. [ 342.611834][T21311] netlink: 'syz.0.5468': attribute type 4 has an invalid length. [ 342.647215][T21311] bond4: left promiscuous mode [ 342.667280][T21311] geneve2: left promiscuous mode [ 342.684815][ T1720] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 342.695033][ T1720] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 342.725792][ T1720] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 342.758982][ T1720] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 342.833745][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 342.833763][ T28] audit: type=1400 audit(1776335477.494:4842): avc: denied { open } for pid=21315 comm="syz.0.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 342.917878][ T28] audit: type=1400 audit(1776335477.524:4843): avc: denied { open } for pid=21315 comm="syz.0.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 342.944995][T21314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 343.014877][ T28] audit: type=1400 audit(1776335477.524:4844): avc: denied { prog_load } for pid=21315 comm="syz.0.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 343.034790][ T28] audit: type=1400 audit(1776335477.524:4845): avc: denied { open } for pid=21315 comm="syz.0.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 343.054533][ T28] audit: type=1400 audit(1776335477.524:4846): avc: denied { prog_load } for pid=21315 comm="syz.0.5469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 343.064104][T21319] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 343.074463][ T28] audit: type=1400 audit(1776335477.554:4847): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.089144][ T314] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.118856][ T28] audit: type=1400 audit(1776335477.704:4848): avc: denied { open } for pid=21320 comm="syz.0.5472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 343.187263][ T28] audit: type=1400 audit(1776335477.844:4849): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 343.260932][ T28] audit: type=1400 audit(1776335477.884:4850): avc: denied { create } for pid=21326 comm="syz.0.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 343.292334][ T314] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 343.333429][ T28] audit: type=1400 audit(1776335477.884:4851): avc: denied { create } for pid=21326 comm="syz.0.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 343.458108][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5480'. [ 343.639588][T21350] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.5482'. [ 343.659041][T21350] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5482'. [ 344.295310][T21373] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5494'. [ 344.321344][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5494'. [ 344.354004][ T3659] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.363797][ T1720] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.372766][T21373] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5494'. [ 344.389141][ T1720] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.399288][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5494'. [ 344.401911][ T1720] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.476162][T21377] netlink: 'syz.9.5496': attribute type 27 has an invalid length. [ 344.518927][T21377] bond1: left allmulticast mode [ 344.524119][T21377] bond1: left promiscuous mode [ 344.529392][T21377] macsec1: left promiscuous mode [ 344.534616][T21377] macsec1: left allmulticast mode [ 344.572956][T21377] bond3: left promiscuous mode [ 344.609887][T21381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.668431][T21381] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.680584][T21386] xt_CT: No such helper "snmp_trap" [ 344.687972][T21381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.723549][ T314] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.732951][ T314] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.749330][T21386] xt_time: unknown flags 0xc [ 344.763027][ T314] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.799144][ T314] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.902819][T21401] netlink: 'syz.5.5506': attribute type 1 has an invalid length. [ 344.934002][T21401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 345.130052][T21401] bond1: (slave veth7): Enslaving as an active interface with a down link [ 345.195292][T21410] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 345.227787][T21410] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 346.401626][T21456] __nla_validate_parse: 3 callbacks suppressed [ 346.402773][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5527'. [ 346.452646][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5527'. [ 346.788425][T21477] netlink: 'syz.5.5534': attribute type 22 has an invalid length. [ 346.809834][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5534'. [ 346.835982][T21477] netlink: 'syz.5.5534': attribute type 22 has an invalid length. [ 346.836330][ T3659] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.852328][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5534'. [ 346.857570][ T3659] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.881830][ T3659] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.909513][ T3659] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.616988][T21492] syzkaller0: entered promiscuous mode [ 347.644836][T21492] syzkaller0: entered allmulticast mode [ 347.797827][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5546'. [ 347.839446][ T28] kauditd_printk_skb: 268 callbacks suppressed [ 347.839465][ T28] audit: type=1400 audit(1776335482.504:5120): avc: denied { read } for pid=21515 comm="syz.0.5552" dev="nsfs" ino=4026532702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 347.883046][ T28] audit: type=1400 audit(1776335482.504:5121): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 347.910529][ T28] audit: type=1400 audit(1776335482.534:5122): avc: denied { name_bind } for pid=21519 comm="syz.9.5554" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 347.932822][ T28] audit: type=1400 audit(1776335482.544:5123): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 347.962067][ T28] audit: type=1400 audit(1776335482.624:5124): avc: denied { map_create } for pid=21521 comm="syz.9.5555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 347.993589][ T28] audit: type=1400 audit(1776335482.654:5125): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.041681][ T28] audit: type=1400 audit(1776335482.694:5126): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.067569][ T28] audit: type=1400 audit(1776335482.724:5127): avc: denied { open } for pid=21527 comm="syz.5.5557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 348.089142][ T28] audit: type=1400 audit(1776335482.744:5128): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 348.119959][ T28] audit: type=1400 audit(1776335482.784:5129): avc: denied { create } for pid=21529 comm="syz.9.5558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 348.236886][T21542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21542 comm=syz.5.5563 [ 348.253652][T21542] ip6gre1: entered promiscuous mode [ 348.259287][T21542] ip6gre1: entered allmulticast mode [ 348.265882][T11861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.268900][T21542] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.273886][T11861] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.281825][T21542] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.299207][ T1033] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.499259][ T4856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 348.671515][T21558] IPVS: set_ctl: invalid protocol: 255 224.0.0.1:20265 [ 349.149161][ T4856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.949883][ T5519] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 349.958334][T21600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5589'. [ 349.978925][T21602] team0: Caught tx_queue_len zero misconfig [ 349.993438][T21600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5589'. [ 350.115610][T21610] netlink: 'syz.5.5594': attribute type 2 has an invalid length. [ 350.178051][T21617] netlink: 'syz.0.5596': attribute type 1 has an invalid length. [ 350.207009][T21617] 8021q: adding VLAN 0 to HW filter on device bond6 [ 350.293716][T21617] bond6: (slave veth13): Enslaving as an active interface with a down link [ 350.388413][T21617] bond0: (slave dummy0): Releasing backup interface [ 350.411601][T21617] bond6: (slave dummy0): making interface the new active one [ 350.433540][T21617] dummy0: entered promiscuous mode [ 350.438809][T21617] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 350.481087][T21622] bond6 (unregistering): (slave veth13): Releasing active interface [ 350.500838][T21622] bond6 (unregistering): (slave dummy0): Releasing active interface [ 350.516096][T21622] bond6 (unregistering): Released all slaves [ 351.090885][T21643] netlink: 'syz.6.5607': attribute type 4 has an invalid length. [ 351.232778][T21658] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.240143][T21658] IPv6: NLM_F_CREATE should be set when creating new route [ 351.271535][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5615'. [ 351.281413][T21660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5615'. [ 352.040666][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5627'. [ 352.067201][T21694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5627'. [ 352.189259][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 352.345356][T21712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=21712 comm=syz.0.5640 [ 352.851885][ T28] kauditd_printk_skb: 255 callbacks suppressed [ 352.851947][ T28] audit: type=1400 audit(1776335487.514:5385): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 352.956777][ T28] audit: type=1400 audit(1776335487.574:5386): avc: denied { create } for pid=21744 comm="syz.2.5662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 353.037681][ T28] audit: type=1400 audit(1776335487.574:5387): avc: denied { open } for pid=21744 comm="syz.2.5662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 353.080171][ T28] audit: type=1400 audit(1776335487.574:5388): avc: denied { create } for pid=21744 comm="syz.2.5662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 353.141848][ T28] audit: type=1400 audit(1776335487.584:5389): avc: denied { open } for pid=21746 comm="syz.6.5652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 353.187246][ T28] audit: type=1400 audit(1776335487.584:5390): avc: denied { prog_load } for pid=21746 comm="syz.6.5652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 353.247296][ T28] audit: type=1400 audit(1776335487.584:5391): avc: denied { create } for pid=21746 comm="syz.6.5652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 353.304174][ T28] audit: type=1400 audit(1776335487.774:5392): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.335305][ T28] audit: type=1400 audit(1776335487.824:5393): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 353.363056][ T28] audit: type=1400 audit(1776335487.844:5394): avc: denied { execmem } for pid=21749 comm="syz.9.5653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 353.663839][T21776] netlink: 'syz.9.5666': attribute type 1 has an invalid length. [ 353.704789][T21776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 353.728764][T21776] bond4: (slave veth3): Enslaving as an active interface with a down link [ 353.755150][T21776] bond4: (slave dummy0): making interface the new active one [ 353.763143][T21784] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.5667'. [ 353.776583][T21776] dummy0: entered promiscuous mode [ 353.781843][T21784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5667'. [ 353.792595][T21776] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 353.804337][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5678'. [ 353.835361][T21776] bond4 (unregistering): (slave veth3): Releasing active interface [ 353.847598][T21776] bond4 (unregistering): (slave dummy0): Releasing active interface [ 353.857623][T21776] bond4 (unregistering): Released all slaves [ 354.373783][T21808] netlink: 'syz.9.5676': attribute type 1 has an invalid length. [ 354.406971][T21813] serio: Serial port ttyS3 [ 354.417632][T21808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.436168][T21808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.443709][T21808] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 354.455497][T21808] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 354.495711][T21820] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5684'. [ 354.507722][T21820] ip6gre2: entered promiscuous mode [ 354.513164][T21820] ip6gre2: entered allmulticast mode [ 354.524280][T21820] netlink: 'syz.5.5684': attribute type 6 has an invalid length. [ 354.532816][T21820] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5684'. [ 354.928536][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5702'. [ 354.938182][T21862] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5702'. [ 356.461401][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5733'. [ 356.899110][T21943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 356.937670][T21943] macsec2: entered promiscuous mode [ 356.943261][T21943] bond5: entered promiscuous mode [ 356.949825][T21943] bond5: left promiscuous mode [ 356.986657][T21934] syz.6.5735 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 357.005761][T21934] CPU: 1 UID: 0 PID: 21934 Comm: syz.6.5735 Tainted: G W syzkaller #0 PREEMPT(full) [ 357.005868][T21934] Tainted: [W]=WARN [ 357.005877][T21934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.005891][T21934] Call Trace: [ 357.005899][T21934] [ 357.005913][T21934] __dump_stack+0x1d/0x30 [ 357.005940][T21934] dump_stack_lvl+0x95/0xd0 [ 357.005963][T21934] dump_stack+0x15/0x1b [ 357.006049][T21934] dump_header+0x80/0x240 [ 357.006078][T21934] oom_kill_process+0x295/0x350 [ 357.006151][T21934] out_of_memory+0x97d/0xb80 [ 357.006173][T21934] try_charge_memcg+0x62e/0xa10 [ 357.006215][T21934] obj_cgroup_charge_pages+0x23/0xc0 [ 357.006288][T21934] __memcg_kmem_charge_page+0x9e/0x170 [ 357.006383][T21934] __alloc_frozen_pages_noprof+0x18a/0x360 [ 357.006418][T21934] alloc_pages_mpol+0xb3/0x260 [ 357.006472][T21934] alloc_pages_noprof+0x8f/0x140 [ 357.006504][T21934] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 357.006541][T21934] __kvmalloc_node_noprof+0x3d4/0x650 [ 357.006610][T21934] ? futex_hash_allocate+0x190/0x9d0 [ 357.006642][T21934] ? futex_hash_allocate+0x190/0x9d0 [ 357.006741][T21934] futex_hash_allocate+0x190/0x9d0 [ 357.006794][T21934] ? cap_task_prctl+0x13f/0x6e0 [ 357.006820][T21934] futex_hash_prctl+0xd8/0xf0 [ 357.006845][T21934] __se_sys_prctl+0xa3d/0x13f0 [ 357.006917][T21934] __x64_sys_prctl+0x67/0x80 [ 357.006947][T21934] x64_sys_call+0x2533/0x3020 [ 357.007004][T21934] do_syscall_64+0x12c/0x370 [ 357.007052][T21934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.007076][T21934] RIP: 0033:0x7f919cabc819 [ 357.007104][T21934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.007124][T21934] RSP: 002b:00007f919b517028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 357.007150][T21934] RAX: ffffffffffffffda RBX: 00007f919cd35fa0 RCX: 00007f919cabc819 [ 357.007166][T21934] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 357.007195][T21934] RBP: 00007f919cb52c91 R08: 0000000000000000 R09: 0000000000000000 [ 357.007208][T21934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.007221][T21934] R13: 00007f919cd36038 R14: 00007f919cd35fa0 R15: 00007ffd9329e808 [ 357.007240][T21934] [ 357.007428][T21934] memory: usage 294200kB, limit 307200kB, failcnt 1080 [ 357.251260][T21934] memory+swap: usage 23888kB, limit 9007199254740988kB, failcnt 0 [ 357.260394][T21934] kmem: usage 13340kB, limit 9007199254740988kB, failcnt 0 [ 357.268369][T21934] Memory cgroup stats for /syz6: [ 357.268853][T21934] cache 0 [ 357.277390][T21934] rss 106496 [ 357.280907][T21934] shmem 0 [ 357.284163][T21934] mapped_file 0 [ 357.319098][T21934] dirty 0 [ 357.322093][T21934] writeback 0 [ 357.325531][T21934] workingset_refault_anon 2970 [ 357.374361][T21934] workingset_refault_file 0 [ 357.399165][T21934] swap 937984 [ 357.402677][T21934] swapcached 29757440 [ 357.431580][T21934] pgpgin 436241 [ 357.435195][T21934] pgpgout 436215 [ 357.439536][T21934] pgfault 324007 [ 357.449348][T21934] pgmajfault 490 [ 357.453132][T21934] inactive_anon 0 [ 357.467084][T21934] active_anon 106496 [ 357.471401][T21934] inactive_file 0 [ 357.475247][T21934] active_file 0 [ 357.478925][T21934] unevictable 0 [ 357.482550][T21934] hierarchical_memory_limit 314572800 [ 357.503842][T21934] hierarchical_memsw_limit 9223372036854771712 [ 357.519216][T21934] total_cache 0 [ 357.533107][T21934] total_rss 106496 [ 357.537010][T21934] total_shmem 0 [ 357.562489][T21934] total_mapped_file 0 [ 357.592024][T21934] total_dirty 0 [ 357.595728][T21934] total_writeback 0 [ 357.626296][T21934] total_workingset_refault_anon 2970 [ 357.641857][T21934] total_workingset_refault_file 0 [ 357.655247][T21934] total_swap 937984 [ 357.669311][T21934] total_swapcached 29757440 [ 357.674475][T21934] total_pgpgin 436241 [ 357.678756][T21934] total_pgpgout 436215 [ 357.689099][T21934] total_pgfault 324007 [ 357.693288][T21934] total_pgmajfault 490 [ 357.700740][T21934] total_inactive_anon 0 [ 357.705017][T21934] total_active_anon 106496 [ 357.709671][T21934] total_inactive_file 0 [ 357.714056][T21934] total_active_file 0 [ 357.718355][T21934] total_unevictable 0 [ 357.722647][T21934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1222,pid=7025,uid=0 [ 357.739256][T21934] Memory cgroup out of memory: Killed process 7025 (syz.6.1222) total-vm:96008kB, anon-rss:1240kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 357.860303][ T28] kauditd_printk_skb: 380 callbacks suppressed [ 357.860322][ T28] audit: type=1400 audit(1776335492.524:5775): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 357.894803][ T28] audit: type=1400 audit(1776335492.524:5776): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 357.919798][ T28] audit: type=1400 audit(1776335492.554:5777): avc: denied { create } for pid=21986 comm="syz.0.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 357.950578][ T28] audit: type=1400 audit(1776335492.564:5778): avc: denied { prog_load } for pid=21986 comm="syz.0.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 357.971055][ T28] audit: type=1400 audit(1776335492.564:5779): avc: denied { map_create } for pid=21986 comm="syz.0.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.031629][ T28] audit: type=1400 audit(1776335492.564:5780): avc: denied { prog_load } for pid=21986 comm="syz.0.5755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 358.053963][ T28] audit: type=1400 audit(1776335492.604:5781): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.165714][ T28] audit: type=1400 audit(1776335492.614:5782): avc: denied { read write } for pid=21991 comm="syz.0.5758" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.234980][ T28] audit: type=1400 audit(1776335492.614:5783): avc: denied { create } for pid=21993 comm="syz.6.5757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 358.289151][ T28] audit: type=1400 audit(1776335492.644:5784): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.776501][T22040] __nla_validate_parse: 1 callbacks suppressed [ 358.776521][T22040] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5777'. [ 359.640159][T22059] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5785'. [ 359.709196][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.544756][T22089] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5798'. [ 360.746898][T22092] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5799'. [ 360.955425][T22096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5801'. [ 360.972754][T22096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5801'. [ 361.973396][T22134] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5816'. [ 362.511817][T22145] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 362.954941][ T28] kauditd_printk_skb: 230 callbacks suppressed [ 362.954974][ T28] audit: type=1400 audit(1776335497.614:6015): avc: denied { name_bind } for pid=22164 comm="syz.2.5830" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 363.111716][ T28] audit: type=1400 audit(1776335497.774:6016): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.271562][ T28] audit: type=1400 audit(1776335497.934:6017): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.350975][ T28] audit: type=1400 audit(1776335497.974:6018): avc: denied { create } for pid=22172 comm="syz.5.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 363.383191][ T28] audit: type=1400 audit(1776335497.974:6019): avc: denied { allowed } for pid=22172 comm="syz.5.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 363.411972][ T28] audit: type=1400 audit(1776335497.974:6020): avc: denied { create } for pid=22172 comm="syz.5.5833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 363.439394][ T28] audit: type=1400 audit(1776335497.994:6021): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.478694][ T28] audit: type=1400 audit(1776335498.024:6022): avc: denied { read write } for pid=22174 comm="syz.5.5834" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 363.644490][ T28] audit: type=1400 audit(1776335498.304:6023): avc: denied { create } for pid=22174 comm="syz.5.5834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 363.733574][ T28] audit: type=1400 audit(1776335498.394:6024): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 364.331779][T22221] netlink: 'syz.0.5852': attribute type 1 has an invalid length. [ 364.542770][T22221] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.668655][T22289] netlink: 'syz.6.5879': attribute type 1 has an invalid length. [ 365.683988][T22289] 8021q: adding VLAN 0 to HW filter on device bond5 [ 366.067611][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5894'. [ 367.318418][T22373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5915'. [ 367.345909][T22373] macvtap1: entered promiscuous mode [ 367.363409][T22373] netdevsim netdevsim6 netdevsim1: entered promiscuous mode [ 367.379425][T22373] macvtap1: entered allmulticast mode [ 367.395191][T22373] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 367.395898][T22378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5915'. [ 367.439538][T22378] netdevsim netdevsim6 netdevsim1: left allmulticast mode [ 367.456289][T22378] netdevsim netdevsim6 netdevsim1: left promiscuous mode [ 367.885322][T22383] netlink: 'syz.2.5918': attribute type 1 has an invalid length. [ 367.935112][T22383] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.066448][T22351] syz.0.5904 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 368.080897][T22351] CPU: 0 UID: 0 PID: 22351 Comm: syz.0.5904 Tainted: G W syzkaller #0 PREEMPT(full) [ 368.080942][T22351] Tainted: [W]=WARN [ 368.080950][T22351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.080999][T22351] Call Trace: [ 368.081008][T22351] [ 368.081043][T22351] __dump_stack+0x1d/0x30 [ 368.081139][T22351] dump_stack_lvl+0x95/0xd0 [ 368.081168][T22351] dump_stack+0x15/0x1b [ 368.081190][T22351] dump_header+0x80/0x240 [ 368.081215][T22351] oom_kill_process+0x295/0x350 [ 368.081241][T22351] out_of_memory+0x97d/0xb80 [ 368.081309][T22351] try_charge_memcg+0x62e/0xa10 [ 368.081348][T22351] obj_cgroup_charge_pages+0x23/0xc0 [ 368.081377][T22351] __memcg_kmem_charge_page+0x9e/0x170 [ 368.081458][T22351] __alloc_frozen_pages_noprof+0x18a/0x360 [ 368.081547][T22351] alloc_pages_mpol+0xb3/0x260 [ 368.081581][T22351] alloc_pages_noprof+0x8f/0x140 [ 368.081614][T22351] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 368.081764][T22351] __kvmalloc_node_noprof+0x3d4/0x650 [ 368.081795][T22351] ? futex_hash_allocate+0x190/0x9d0 [ 368.081853][T22351] ? futex_hash_allocate+0x190/0x9d0 [ 368.081965][T22351] futex_hash_allocate+0x190/0x9d0 [ 368.081998][T22351] ? cap_task_prctl+0x13f/0x6e0 [ 368.082028][T22351] futex_hash_prctl+0xd8/0xf0 [ 368.082128][T22351] __se_sys_prctl+0xa3d/0x13f0 [ 368.082171][T22351] __x64_sys_prctl+0x67/0x80 [ 368.082195][T22351] x64_sys_call+0x2533/0x3020 [ 368.082274][T22351] do_syscall_64+0x12c/0x370 [ 368.082306][T22351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.082331][T22351] RIP: 0033:0x7f14e1c0c819 [ 368.082351][T22351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.082396][T22351] RSP: 002b:00007f14e0667028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 368.082422][T22351] RAX: ffffffffffffffda RBX: 00007f14e1e85fa0 RCX: 00007f14e1c0c819 [ 368.082438][T22351] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 368.082454][T22351] RBP: 00007f14e1ca2c91 R08: 0000000000000000 R09: 0000000000000000 [ 368.082468][T22351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.082512][T22351] R13: 00007f14e1e86038 R14: 00007f14e1e85fa0 R15: 00007ffcfc663528 [ 368.082532][T22351] [ 368.082602][T22351] memory: usage 307200kB, limit 307200kB, failcnt 4915 [ 368.181986][ T28] kauditd_printk_skb: 388 callbacks suppressed [ 368.182002][ T28] audit: type=1400 audit(1776335502.844:6413): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 368.195246][T22389] bond4: (slave geneve2): making interface the new active one [ 368.255304][T22351] memory+swap: usage 375284kB, limit 9007199254740988kB, failcnt 0 [ 368.369560][T22389] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 368.381388][ T28] audit: type=1400 audit(1776335503.034:6414): avc: denied { name_bind } for pid=22391 comm="syz.6.5922" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 368.403722][ T1720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.414317][ T1720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.423240][ T28] audit: type=1400 audit(1776335503.034:6415): avc: denied { name_bind } for pid=22391 comm="syz.6.5922" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 368.449629][ T28] audit: type=1400 audit(1776335503.034:6416): avc: denied { name_bind } for pid=22391 comm="syz.6.5922" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 368.455682][T22393] bond2: entered promiscuous mode [ 368.477386][ T28] audit: type=1326 audit(1776335503.084:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22394 comm="syz.6.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cabc819 code=0x7ffc0000 [ 368.501823][ T1720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.510594][T22351] kmem: usage 295548kB, limit 9007199254740988kB, failcnt 0 [ 368.518768][T22351] Memory cgroup stats for /syz0: [ 368.519725][T22351] cache 11534336 [ 368.520525][ T1720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.525317][T22351] rss 180224 [ 368.540629][T22351] shmem 11509760 [ 368.544303][T22351] mapped_file 11534336 [ 368.548749][T22351] dirty 0 [ 368.552141][T22351] writeback 0 [ 368.555647][T22351] workingset_refault_anon 3064 [ 368.560649][T22351] workingset_refault_file 7402 [ 368.565609][T22351] swap 69718016 [ 368.569266][T22351] swapcached 130465792 [ 368.573342][T22351] pgpgin 496499 [ 368.576958][T22351] pgpgout 493586 [ 368.580726][T22351] pgfault 355080 [ 368.584445][T22351] pgmajfault 416 [ 368.588074][T22351] inactive_anon 8564736 [ 368.592276][T22351] active_anon 3338240 [ 368.596528][T22351] inactive_file 28672 [ 368.600601][T22351] active_file 0 [ 368.604238][T22351] unevictable 0 [ 368.607872][T22351] hierarchical_memory_limit 314572800 [ 368.613427][T22351] hierarchical_memsw_limit 9223372036854771712 [ 368.621314][T22351] total_cache 11534336 [ 368.625509][T22351] total_rss 180224 [ 368.630545][T22351] total_shmem 11509760 [ 368.634702][T22351] total_mapped_file 11534336 [ 368.639627][T22351] total_dirty 0 [ 368.643133][T22351] total_writeback 0 [ 368.647008][T22351] total_workingset_refault_anon 3064 [ 368.664185][T22351] total_workingset_refault_file 7402 [ 368.669767][T22351] total_swap 69718016 [ 368.675392][T22351] total_swapcached 130465792 [ 368.686675][T22351] total_pgpgin 496499 [ 368.690795][T22351] total_pgpgout 493586 [ 368.694947][T22351] total_pgfault 355080 [ 368.699219][T22351] total_pgmajfault 416 [ 368.703420][T22351] total_inactive_anon 8564736 [ 368.708354][T22351] total_active_anon 3338240 [ 368.719474][T22393] bond2 (unregistering): Released all slaves [ 368.741033][T22351] total_inactive_file 28672 [ 368.745636][T22351] total_active_file 0 [ 368.750020][T22351] total_unevictable 0 [ 368.754228][T22351] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.5904,pid=22350,uid=0 [ 368.769184][T22351] Memory cgroup out of memory: Killed process 22350 (syz.0.5904) total-vm:96344kB, anon-rss:1396kB, file-rss:21984kB, shmem-rss:11240kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 368.891770][ T28] audit: type=1326 audit(1776335503.084:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22394 comm="syz.6.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f919cabc819 code=0x7ffc0000 [ 368.912397][T22412] audit: audit_backlog=65 > audit_backlog_limit=64 [ 368.924307][T22410] audit: audit_backlog=65 > audit_backlog_limit=64 [ 368.932982][T22410] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 368.942679][T22413] audit: audit_backlog=65 > audit_backlog_limit=64 [ 369.064398][T22413] syz.6.5927 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 369.649368][T22461] netlink: 'syz.9.5949': attribute type 4 has an invalid length. [ 369.660529][T22461] netlink: 'syz.9.5949': attribute type 4 has an invalid length. [ 369.728709][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5951'. [ 369.748054][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5951'. [ 370.406867][T22491] netlink: 'syz.9.5963': attribute type 1 has an invalid length. [ 370.588251][T22491] 8021q: adding VLAN 0 to HW filter on device bond6 [ 370.715562][T22498] bond6: (slave geneve2): making interface the new active one [ 370.746712][T22498] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 370.762991][ T1720] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.790380][ T1720] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.832126][ T1720] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.866982][ T1720] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.063759][T22531] bond6: entered allmulticast mode [ 371.108324][T22531] bridge4: entered promiscuous mode [ 371.127886][T22531] bridge4: entered allmulticast mode [ 371.155625][T22531] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 371.767515][T22549] netlink: 'syz.6.5985': attribute type 1 has an invalid length. [ 371.814889][T22549] 8021q: adding VLAN 0 to HW filter on device bond7 [ 371.931586][T22561] netlink: 'syz.0.5991': attribute type 4 has an invalid length. [ 371.955822][T22561] netlink: 'syz.0.5991': attribute type 4 has an invalid length. [ 372.037684][T22574] netlink: 'syz.5.5996': attribute type 1 has an invalid length. [ 372.059411][T22574] netlink: 'syz.5.5996': attribute type 4 has an invalid length. [ 372.271221][T22574] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5996'. [ 372.382026][T22587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6000'. [ 372.402587][T22589] netlink: 'syz.5.6001': attribute type 1 has an invalid length. [ 372.585596][T22589] bond2: entered promiscuous mode [ 372.598589][T22589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 372.640149][T22593] bond2: (slave bridge6): making interface the new active one [ 372.704938][T22593] bridge6: entered promiscuous mode [ 372.712238][T22593] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 373.059892][T22610] syzkaller0: entered promiscuous mode [ 373.069199][T22610] syzkaller0: entered allmulticast mode [ 373.194635][ T28] kauditd_printk_skb: 322 callbacks suppressed [ 373.194653][ T28] audit: type=1400 audit(1776335507.854:6661): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 373.235604][ T28] audit: type=1400 audit(1776335507.884:6662): avc: denied { read write } for pid=22615 comm="syz.5.6010" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 373.287451][ T28] audit: type=1400 audit(1776335507.944:6663): avc: denied { open } for pid=22615 comm="syz.5.6010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 373.373883][ T28] audit: type=1400 audit(1776335507.954:6664): avc: denied { read } for pid=22615 comm="syz.5.6010" dev="nsfs" ino=4026532657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 373.419533][T22629] netlink: 'syz.5.6016': attribute type 2 has an invalid length. [ 373.445659][ T28] audit: type=1400 audit(1776335507.974:6665): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 373.470704][ T28] audit: type=1400 audit(1776335507.984:6666): avc: denied { block_suspend } for pid=22617 comm="syz.0.6011" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 373.539781][ T28] audit: type=1400 audit(1776335507.984:6667): avc: denied { block_suspend } for pid=22617 comm="syz.0.6011" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 373.759207][ T28] audit: type=1400 audit(1776335507.984:6668): avc: denied { block_suspend } for pid=22617 comm="syz.0.6011" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 373.846537][ T28] audit: type=1400 audit(1776335508.004:6669): avc: denied { create } for pid=22624 comm="syz.5.6014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 373.945536][ T28] audit: type=1400 audit(1776335508.044:6670): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 374.144219][ T1720] bond0: (slave bond_slave_0): interface is now down [ 374.151184][ T1720] bond0: (slave bond_slave_1): interface is now down [ 374.158168][ T1720] bond0: now running without any active interface! [ 374.241363][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6023'. [ 374.941812][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6037'. [ 375.069144][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.580079][T22707] validate_nla: 1 callbacks suppressed [ 375.580095][T22707] netlink: 'syz.2.6048': attribute type 3 has an invalid length. [ 375.644692][T22707] netlink: 'syz.2.6048': attribute type 1 has an invalid length. [ 375.684689][T22707] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.6048'. [ 378.468202][ T28] kauditd_printk_skb: 301 callbacks suppressed [ 378.468221][ T28] audit: type=1400 audit(1776335513.124:6972): avc: denied { create } for pid=22817 comm="syz.2.6093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 378.509142][ T28] audit: type=1400 audit(1776335513.134:6973): avc: denied { create } for pid=22817 comm="syz.2.6093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 378.789560][ T28] audit: type=1400 audit(1776335513.434:6974): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 378.879114][ T28] audit: type=1400 audit(1776335513.494:6975): avc: denied { mounton } for pid=22827 comm="syz.0.6094" path="/479" dev="tmpfs" ino=2489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 378.959384][ T28] audit: type=1400 audit(1776335513.504:6976): avc: denied { execmem } for pid=22827 comm="syz.0.6094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 379.017843][ T28] audit: type=1400 audit(1776335513.524:6977): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 379.095751][ T28] audit: type=1400 audit(1776335513.534:6978): avc: denied { execmem } for pid=22829 comm="syz.0.6095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 379.126136][ T28] audit: type=1400 audit(1776335513.534:6979): avc: denied { name_bind } for pid=22829 comm="syz.0.6095" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 379.173554][ T28] audit: type=1400 audit(1776335513.544:6980): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 379.218585][ T28] audit: type=1400 audit(1776335513.574:6981): avc: denied { create } for pid=22831 comm="syz.0.6096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 379.488493][T22860] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6108'. [ 379.512030][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6108'. [ 379.550558][T22864] syzkaller0: entered promiscuous mode [ 379.556192][T22864] syzkaller0: entered allmulticast mode [ 379.578274][T22866] netlink: 76 bytes leftover after parsing attributes in process `syz.6.6111'. [ 380.424481][T22891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6120'. [ 381.349497][T22912] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 381.356209][T22912] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 381.459685][T22912] vhci_hcd vhci_hcd.0: Device attached [ 381.608311][T22918] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 381.615037][T22918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.699100][ T3421] usb 5-1: new high-speed USB device number 3 using vhci_hcd [ 381.707873][T22918] vhci_hcd vhci_hcd.0: Device attached [ 381.762512][T22918] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 381.769079][T22918] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 381.814473][T22918] vhci_hcd vhci_hcd.0: Device attached [ 381.965579][T22929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6130'. [ 382.025156][T22912] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 382.031742][T22912] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.046339][T22912] vhci_hcd vhci_hcd.0: Device attached [ 382.064694][T22930] vhci_hcd: connection closed [ 382.065346][T22922] vhci_hcd: connection closed [ 382.071699][T22913] vhci_hcd: connection reset by peer [ 382.079134][T22920] vhci_hcd: connection closed [ 382.135461][T22934] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6131'. [ 382.149750][ T1720] vhci_hcd vhci_hcd.2: stop threads [ 382.154983][ T1720] vhci_hcd vhci_hcd.2: release socket [ 382.161289][ T1720] vhci_hcd vhci_hcd.2: disconnect device [ 382.171574][ T1720] vhci_hcd vhci_hcd.2: stop threads [ 382.177939][ T1720] vhci_hcd vhci_hcd.2: release socket [ 382.184693][ T1720] vhci_hcd vhci_hcd.2: disconnect device [ 382.196484][ T1720] vhci_hcd vhci_hcd.2: stop threads [ 382.203111][ T1720] vhci_hcd vhci_hcd.2: release socket [ 382.214497][ T1720] vhci_hcd vhci_hcd.2: disconnect device [ 382.266420][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6133'. [ 382.289419][ T1720] vhci_hcd vhci_hcd.2: stop threads [ 382.301004][ T1720] vhci_hcd vhci_hcd.2: release socket [ 382.317734][ T1720] vhci_hcd vhci_hcd.2: disconnect device [ 383.755108][ T28] kauditd_printk_skb: 132 callbacks suppressed [ 383.755126][ T28] audit: type=1400 audit(1776335518.414:7114): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 383.839166][ T28] audit: type=1400 audit(1776335518.414:7115): avc: denied { create } for pid=22968 comm="syz.0.6147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=0 [ 383.899124][ T28] audit: type=1400 audit(1776335518.424:7116): avc: denied { allowed } for pid=22968 comm="syz.0.6147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 383.939197][ T28] audit: type=1400 audit(1776335518.424:7117): avc: denied { create } for pid=22968 comm="syz.0.6147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 383.979578][ T28] audit: type=1400 audit(1776335518.424:7118): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 384.069103][ T28] audit: type=1400 audit(1776335518.474:7119): avc: denied { prog_load } for pid=22971 comm="syz.5.6148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 384.134253][ T28] audit: type=1400 audit(1776335518.534:7120): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 384.200947][ T28] audit: type=1400 audit(1776335518.864:7121): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 384.363280][ T28] audit: type=1400 audit(1776335519.004:7122): avc: denied { module_request } for pid=22979 comm="syz.6.6151" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 384.416264][ T28] audit: type=1400 audit(1776335519.004:7123): avc: denied { sys_module } for pid=22979 comm="syz.6.6151" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 384.518962][T23003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6162'. [ 384.545128][T23003] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 384.556238][T23003] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 385.022970][T23015] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 386.076931][T23091] ªªªªªª: renamed from vlan0 [ 386.666006][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6200'. [ 386.819109][ T3421] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 386.935825][T23124] netlink: 'syz.9.6210': attribute type 1 has an invalid length. [ 387.118054][T23124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 387.221801][T23138] 8021q: VLANs not supported on ip6tnl0 [ 387.233252][T23135] bond7 (unregistering): Released all slaves [ 387.575487][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6230'. [ 387.601261][T23171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.182620][T23188] netlink: 'syz.9.6235': attribute type 1 has an invalid length. [ 388.201297][T23188] bond7: entered promiscuous mode [ 388.224816][T23188] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.258418][T23188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6235'. [ 388.447041][T23188] bond7: (slave veth5): making interface the new active one [ 388.464668][T23188] veth5: entered promiscuous mode [ 388.470967][T23188] bond7: (slave veth5): Enslaving as an active interface with an up link [ 388.759876][ T28] kauditd_printk_skb: 290 callbacks suppressed [ 388.759894][ T28] audit: type=1400 audit(1776335523.424:7414): avc: denied { name_bind } for pid=23209 comm="syz.9.6244" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 388.809145][ T28] audit: type=1400 audit(1776335523.434:7415): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 388.854918][ T28] audit: type=1400 audit(1776335523.434:7416): avc: denied { open } for pid=23212 comm="syz.9.6245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 388.880069][T23219] 8021q: VLANs not supported on ip6_vti0 [ 388.920403][ T28] audit: type=1400 audit(1776335523.444:7417): avc: denied { read write } for pid=19445 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 388.948001][ T28] audit: type=1400 audit(1776335523.454:7418): avc: denied { open } for pid=23208 comm="syz.5.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 388.969690][ T28] audit: type=1400 audit(1776335523.454:7419): avc: denied { open } for pid=23208 comm="syz.5.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 388.989840][ T28] audit: type=1400 audit(1776335523.454:7420): avc: denied { create } for pid=23208 comm="syz.5.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 389.021414][ T28] audit: type=1400 audit(1776335523.464:7421): avc: denied { prog_load } for pid=23214 comm="syz.9.6246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 389.041687][ T28] audit: type=1400 audit(1776335523.464:7422): avc: denied { write } for pid=23214 comm="syz.9.6246" name="unix" dev="proc" ino=4026534408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 389.065291][ T28] audit: type=1400 audit(1776335523.464:7423): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.092154][T23230] netlink: 'syz.0.6252': attribute type 1 has an invalid length. [ 389.107863][T23230] bond7: entered promiscuous mode [ 389.113335][T23230] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.139212][T23230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6252'. [ 389.159920][T23230] bond7: (slave veth17): making interface the new active one [ 389.169936][T23230] veth17: entered promiscuous mode [ 389.176041][T23230] bond7: (slave veth17): Enslaving as an active interface with an up link [ 389.264092][T23242] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6257'. [ 389.868114][T23269] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6268'. [ 390.056902][T23276] netlink: 'syz.2.6270': attribute type 4 has an invalid length. [ 390.074484][T23276] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6270'. [ 390.256610][T23293] 8021q: VLANs not supported on ip6_vti0 [ 390.311536][T23295] netlink: 'syz.2.6278': attribute type 1 has an invalid length. [ 390.395735][T23295] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.459590][T23308] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6283'. [ 391.048955][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6295'. [ 392.001989][T23376] netlink: 'syz.2.6311': attribute type 13 has an invalid length. [ 392.113747][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6313'. [ 392.148046][ T3659] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.169268][ T3659] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.178563][ T3659] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.204416][ T3659] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.594129][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6333'. [ 393.776210][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 393.776230][ T28] audit: type=1400 audit(1776335528.434:7663): avc: denied { open } for pid=23426 comm="syz.2.6329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 393.816755][ T28] audit: type=1400 audit(1776335528.464:7664): avc: denied { create } for pid=23426 comm="syz.2.6329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 394.035108][ T28] audit: type=1400 audit(1776335528.464:7665): avc: denied { prog_load } for pid=23426 comm="syz.2.6329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 394.089106][ T28] audit: type=1400 audit(1776335528.514:7666): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.146660][ T28] audit: type=1400 audit(1776335528.554:7667): avc: denied { block_suspend } for pid=23420 comm="syz.5.6323" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 394.201876][ T28] audit: type=1326 audit(1776335528.784:7668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23429 comm="syz.2.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4058c819 code=0x7fc00000 [ 394.262298][ T28] audit: type=1326 audit(1776335528.794:7669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23429 comm="syz.2.6330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbd4058c819 code=0x7fc00000 [ 394.879928][ T28] audit: type=1400 audit(1776335529.544:7670): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.951056][ T28] audit: type=1400 audit(1776335529.564:7671): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 394.998568][ T28] audit: type=1400 audit(1776335529.574:7672): avc: denied { create } for pid=23434 comm="syz.0.6332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 395.032296][T23448] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6338'. [ 396.646720][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6352'. [ 397.149449][T23510] syzkaller0: entered promiscuous mode [ 397.155155][T23510] syzkaller0: entered allmulticast mode [ 397.307861][T23527] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6368'. [ 397.341469][T23527] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23527 comm=syz.5.6368 [ 397.442439][T23531] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6371'. [ 397.452839][T23531] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6371'. [ 397.566909][ T4859] IPVS: starting estimator thread 0... [ 397.660312][T23536] IPVS: using max 2544 ests per chain, 127200 per kthread [ 398.875764][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 398.875855][ T28] audit: type=1400 audit(1776335789.539:7834): avc: denied { execmem } for pid=23572 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 399.201541][ T28] audit: type=1400 audit(1776335789.869:7835): avc: denied { read write } for pid=14609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 399.226262][ T28] audit: type=1400 audit(1776335789.869:7836): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 399.514411][ T28] audit: type=1400 audit(1776335790.179:7837): avc: denied { prog_load } for pid=23580 comm="syz.0.6388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.543111][ T28] audit: type=1400 audit(1776335790.199:7838): avc: denied { open } for pid=23581 comm="syz.2.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 399.563368][ T28] audit: type=1400 audit(1776335790.209:7839): avc: denied { create } for pid=23581 comm="syz.2.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 399.583743][ T28] audit: type=1400 audit(1776335790.209:7840): avc: denied { execmem } for pid=23579 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 399.604126][ T28] audit: type=1400 audit(1776335790.209:7841): avc: denied { create } for pid=23581 comm="syz.2.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 399.624780][ T28] audit: type=1400 audit(1776335790.209:7842): avc: denied { create } for pid=23581 comm="syz.2.6389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 399.651995][ T28] audit: type=1400 audit(1776335790.319:7843): avc: denied { read write } for pid=18319 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 401.080206][T23597] netlink: 'syz.5.6397': attribute type 1 has an invalid length. [ 401.149995][T23597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.158021][T23597] bond3: (slave bond4): making interface the new active one [ 401.166038][T23597] bond3: (slave bond4): Enslaving as an active interface with an up link [ 401.188254][T23597] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 404.140547][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 404.140576][ T28] audit: type=1400 audit(1776335794.809:7900): avc: denied { prog_load } for pid=23627 comm="syz.2.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.185026][ T28] audit: type=1400 audit(1776335794.809:7901): avc: denied { execmem } for pid=23624 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 404.205486][ T28] audit: type=1400 audit(1776335794.809:7902): avc: denied { prog_load } for pid=23627 comm="syz.2.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.227872][ T28] audit: type=1400 audit(1776335794.809:7903): avc: denied { open } for pid=23627 comm="syz.2.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 404.247466][ T28] audit: type=1400 audit(1776335794.809:7904): avc: denied { read append } for pid=23627 comm="syz.2.6407" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 404.271122][ T28] audit: type=1400 audit(1776335794.809:7905): avc: denied { prog_load } for pid=23627 comm="syz.2.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.290935][ T28] audit: type=1400 audit(1776335794.809:7906): avc: denied { prog_load } for pid=23627 comm="syz.2.6407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.310487][ T28] audit: type=1400 audit(1776335794.839:7907): avc: denied { open } for pid=23626 comm="syz.0.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 404.329815][ T28] audit: type=1400 audit(1776335794.839:7908): avc: denied { prog_load } for pid=23626 comm="syz.0.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.349129][ T28] audit: type=1400 audit(1776335794.839:7909): avc: denied { create } for pid=23626 comm="syz.0.6406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=0 [ 404.509198][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 405.360758][T23638] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6412'. [ 409.625751][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 409.625828][ T28] audit: type=1400 audit(1776335800.289:7959): avc: denied { execmem } for pid=23666 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 409.628834][T23669] netlink: 'syz.5.6424': attribute type 1 has an invalid length. [ 409.672364][ T28] audit: type=1326 audit(1776335800.339:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23673 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e1c0c819 code=0x7ffc0000 [ 409.697606][ T28] audit: type=1326 audit(1776335800.339:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23673 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e1c0c819 code=0x7ffc0000 [ 409.723507][ T28] audit: type=1326 audit(1776335800.339:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23673 comm="syz.0.6422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e1c0c819 code=0x7ffc0000 [ 409.750197][ T28] audit: type=1400 audit(1776335800.339:7963): avc: denied { prog_load } for pid=23670 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.775986][T23669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 409.783264][ T28] audit: type=1400 audit(1776335800.339:7964): avc: denied { prog_load } for pid=23670 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.803719][ T28] audit: type=1400 audit(1776335800.339:7965): avc: denied { prog_load } for pid=23670 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.805959][T23676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.823308][ T28] audit: type=1400 audit(1776335800.339:7966): avc: denied { map_create } for pid=23670 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.823356][ T28] audit: type=1400 audit(1776335800.339:7967): avc: denied { prog_load } for pid=23670 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.823381][ T28] audit: type=1400 audit(1776335800.339:7968): avc: denied { open } for pid=23670 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 409.833190][T23676] bond5: (slave batadv0): Enslaving as a backup interface with an up link [ 409.879567][T11861] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 410.009174][T11861] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 414.784472][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 414.784501][ T28] audit: type=1400 audit(1776335805.449:8063): avc: denied { execmem } for pid=23699 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 414.814782][ T28] audit: type=1400 audit(1776335805.479:8064): avc: denied { allowed } for pid=23700 comm="syz.6.6437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 414.835252][ T28] audit: type=1400 audit(1776335805.479:8065): avc: denied { map_create } for pid=23700 comm="syz.6.6437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.854695][ T28] audit: type=1400 audit(1776335805.499:8066): avc: denied { bpf } for pid=23702 comm="syz.2.6435" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 414.891528][ T28] audit: type=1400 audit(1776335805.519:8067): avc: denied { prog_load } for pid=23702 comm="syz.2.6435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 414.912111][ T28] audit: type=1400 audit(1776335805.539:8068): avc: denied { open } for pid=23704 comm="syz.5.6436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 414.934654][ T28] audit: type=1400 audit(1776335805.539:8069): avc: denied { watch watch_reads } for pid=23704 comm="syz.5.6436" path="/551/control" dev="tmpfs" ino=2887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 414.958872][ T28] audit: type=1400 audit(1776335805.549:8070): avc: denied { read write } for pid=14810 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 414.983396][ T28] audit: type=1400 audit(1776335805.579:8071): avc: denied { read } for pid=23701 comm="syz.0.6434" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 415.092113][ T28] audit: type=1400 audit(1776335805.759:8072): avc: denied { read write } for pid=23701 comm="syz.0.6434" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 415.120887][ T3659] Bluetooth: hci0: Frame reassembly failed (-84) [ 415.402313][T23709] ================================================================== [ 415.410878][T23709] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 415.417868][T23709] [ 415.420351][T23709] read-write to 0xffff88812657812c of 4 bytes by task 23703 on cpu 1: [ 415.428588][T23709] fifo_open+0x86/0x5d0 [ 415.432943][T23709] do_dentry_open+0x4ca/0xa90 [ 415.437705][T23709] vfs_open+0x37/0x1e0 [ 415.441958][T23709] path_openat+0x1b70/0x2050 [ 415.446640][T23709] do_file_open_root+0x233/0x430 [ 415.451661][T23709] file_open_root+0xfd/0x130 [ 415.456252][T23709] do_handle_open+0x6b6/0x790 [ 415.460934][T23709] __x64_sys_open_by_handle_at+0x44/0x50 [ 415.466575][T23709] x64_sys_call+0x153d/0x3020 [ 415.471263][T23709] do_syscall_64+0x12c/0x370 [ 415.475853][T23709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.481745][T23709] [ 415.484067][T23709] read to 0xffff88812657812c of 4 bytes by task 23709 on cpu 0: [ 415.491871][T23709] wait_for_partner+0xd5/0x1e0 [ 415.496642][T23709] fifo_open+0x462/0x5d0 [ 415.500890][T23709] do_dentry_open+0x4ca/0xa90 [ 415.505600][T23709] vfs_open+0x37/0x1e0 [ 415.509687][T23709] path_openat+0x1b70/0x2050 [ 415.514393][T23709] do_file_open+0x16c/0x290 [ 415.518914][T23709] do_sys_openat2+0x94/0x130 [ 415.523524][T23709] __x64_sys_openat+0xf2/0x120 [ 415.528320][T23709] x64_sys_call+0x1e39/0x3020 [ 415.533006][T23709] do_syscall_64+0x12c/0x370 [ 415.537685][T23709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.543630][T23709] [ 415.545950][T23709] value changed: 0x00000001 -> 0x00000002 [ 415.551666][T23709] [ 415.554010][T23709] Reported by Kernel Concurrency Sanitizer on: [ 415.560155][T23709] CPU: 0 UID: 0 PID: 23709 Comm: syz.2.6435 Tainted: G W syzkaller #0 PREEMPT(full) [ 415.571111][T23709] Tainted: [W]=WARN [ 415.574907][T23709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.585052][T23709] ================================================================== [ 417.149160][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 417.149783][ T5519] Bluetooth: hci0: command 0x1003 tx timeout