last executing test programs: 4m57.533926988s ago: executing program 32 (id=270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x97}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 4m16.736493186s ago: executing program 33 (id=1133): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r3, 0x9}, 0x8) 4m2.854475959s ago: executing program 5 (id=1393): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x4004, @fd=r0, 0x823, &(0x7f00000001c0)=[{0x0, 0x10}], 0x1}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000100000009000034000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000140000000e0a0102000000000000000001000000140000001000010000000000000000000000000a94d99f4a88af8f7c"], 0x90}}, 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 4m2.82747395s ago: executing program 5 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 4m2.801638432s ago: executing program 5 (id=1396): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 4m2.696582888s ago: executing program 5 (id=1398): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@errors_continue}, {@numtail}]}, 0x0, 0x2ad, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 4m2.644327781s ago: executing program 5 (id=1400): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x6f6) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4m1.45737587s ago: executing program 5 (id=1413): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) ftruncate(r1, 0x6) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 4m1.45723815s ago: executing program 34 (id=1413): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@nombcache}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) ftruncate(r1, 0x6) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 3m36.768384676s ago: executing program 7 (id=1934): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3m36.709499679s ago: executing program 7 (id=1936): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000e1ff00850000007d00000095"], 0x0, 0x10000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000500000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 3m36.18166277s ago: executing program 7 (id=1948): perf_event_open(0x0, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) pipe(0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x200002e6) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {0x0, 0x3, {0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x38) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x19) 3m35.923789485s ago: executing program 7 (id=1950): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 3m35.704387438s ago: executing program 7 (id=1953): socket$netlink(0x10, 0x3, 0x0) socketpair(0x28, 0x1, 0x4, &(0x7f0000000140)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x10003}, 0x0, 0x32, 0x43a1bd7b, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x2000, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@data_writeback}, {@norecovery}, {@dioread_lock}, {@resgid}, {@noinit_itable}, {@block_validity}, {@user_xattr}, {@jqfmt_vfsv0}]}, 0x21, 0x5fb, &(0x7f0000001440)="$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") 3m35.408288715s ago: executing program 7 (id=1961): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 3m35.408147915s ago: executing program 35 (id=1961): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 3m30.229046918s ago: executing program 8 (id=2031): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, &(0x7f0000000200)=[{0x4, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(r0, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x3, 0x5, 0x3000}], 0x2) semop(r0, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5, 0x1000}], 0x2) 3m29.325267951s ago: executing program 8 (id=2046): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x400, 0xdd5}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x63cf80fb, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x7b1b) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 3m29.193964829s ago: executing program 8 (id=2049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "0200", "ec094ea7c597058c35040000000009000000000000000000bd47a3ad00", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 3m29.087565915s ago: executing program 8 (id=2051): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x48000, 0x0) 3m29.054509787s ago: executing program 8 (id=2054): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) shutdown(r1, 0x2) connect$bt_sco(r1, &(0x7f0000000700)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 3m28.67749833s ago: executing program 8 (id=2062): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r3, @in={{0x2, 0xce21, @empty}}, 0xeffd, 0x86}, &(0x7f0000000500)=0x90) 3m28.66028232s ago: executing program 36 (id=2062): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r3, @in={{0x2, 0xce21, @empty}}, 0xeffd, 0x86}, &(0x7f0000000500)=0x90) 3m16.077606987s ago: executing program 1 (id=2267): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230007) close(r0) 3m15.832717861s ago: executing program 1 (id=2271): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x390, 0x2e8, 0xf0, 0xfeffffff, 0x218, 0x2e8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x4, 0x0, 0x2, 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2062) 3m15.744068227s ago: executing program 1 (id=2274): syz_pidfd_open(0x0, 0x0) mq_open(0x0, 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0x74}}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m15.709035838s ago: executing program 1 (id=2275): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$selinux_context(0xffffffffffffffff, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') io_setup(0x7, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 3m15.602988574s ago: executing program 1 (id=2277): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee00ba19ce670d25010000020000040000009fc40400d2532e764975f03f1cbf9b0a4def23d410f6accd3641110bec4e90a6341965dac05c04683712a0b09ec39e9ef8f6e396ad200a011ea665c45a3449abe802f5ab3e89cf40b858e217ce740068720000074e468eea3fcfcf498278ad15f5f87e1c26433a8acdc0e65888b2007f00000000000000000100000000000000010000000000000053350000000034a70c2ab40c7cf5691db43a5c00000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000040cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d01000000520655a8056085f4d431623c850af895abba14f6fbd7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891e7d87a79d6fce424c2200af6cb784a1975fa657de38a3a32a4fd67ce446adb431d07db79240aca1dd9ba02450500000000000000e645f091231b986e77d05d988d6edc6f9b4eb883ec8f878300cabf2b5543ffc1bdb92618242852e6e8b3e56fefbfff81669557b3809d8c396d2c0361629d1822f722ec23812770d72cd0010000007889b8c7044f563a1f68d4efe895fdbc463f747c08f4010586903500000000000000e800000000000000000000000000000000000000003ddf4aa4b1c8b0a0ae6feb6737c275dc2740f742b5425f1d581961471cdb51f8940290e99ccff4123f955267fe4a75c11448741f064fe7ce7e62ee4df874e086287547d4099aeec9f1538ee25a2a5ccf4a9b604e88e12ff251845d0fff45bdbaeba4d4e3c6f7f623579435b2c505fb711300000000040000000000000000000000004c00e67ccc02148a4fc43021cce9f24f4b2f9492c32e7a92a557ac2b44b84e88bbf7611589906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec0c0acef5385c5a2720caeb68f1e9c05b0591d89467ded84da092dea262e51811e2d7fa515722516bd5ef6cfa4966e5937562a5649a1a0000a042a7097ddefe0671a5767014b09b78f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32879d326497e21e041254f06bd7f3a067e147e82e841dba3867da8bfbc101d3960e07d282f483e7be49833f3c435f9700bc84680549f9eb16682ecb72277ffaca907a3eac4bfc8e0a47c0076d7cc9d32b3cc96aa751d890881c3c33bd91f6ecf45ab3f12f816318346f9b883427b9190024edc1eddd68f34ce3bfedb5fe5d7beae4d3ca561e37570587783f9673e7ab17f5a09efc1114777d2707d2996961203aedff1c5a87013b98649805216631e20d07dff3ae567ca0d38a828542625fc6096aedc0ac5c144f0965071274bea051007e398cf9090c53d4b8b7dc784e3d83b78b007a43d744aa99d6a7c576e20b4281eff511122ccb399bcef0a0471639c81aab7445cebfc9b00b31fcbaf63086b3c16f51b593acee0b3a4830dd6af1accb15cc6163cabc01442527aa10000000000000000a4ba25997affe74ec552bf9deafbd63e"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r2}, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 3m15.350021679s ago: executing program 1 (id=2282): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 3m15.327995471s ago: executing program 37 (id=2282): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000006c0)='.\x00', 0xaa) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 2m42.389779727s ago: executing program 3 (id=2889): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x7c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffe09, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x89da}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m42.242498475s ago: executing program 3 (id=2895): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1}, 0x4048000) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m42.204330157s ago: executing program 3 (id=2896): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0xffffffffffffffff, 0x0) 2m41.714794125s ago: executing program 3 (id=2901): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 2m41.588790563s ago: executing program 3 (id=2902): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000040)=""/4110, 0x100e) getdents64(r1, 0x0, 0x607a9e0a432a4785) 2m41.29316198s ago: executing program 3 (id=2905): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 2m41.29299553s ago: executing program 38 (id=2905): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 2.101361477s ago: executing program 0 (id=5505): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r4, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) 1.315557443s ago: executing program 9 (id=5517): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x70bd27, 0x25dfdbec, {0x2, 0x18, 0x4, 0xff, r3}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LABEL={0x14, 0x3, 'lo\x00'}]}, 0x34}}, 0x880) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.224687858s ago: executing program 4 (id=5520): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/cgroup\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000340)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}}}}}}}, 0x0) 1.176423771s ago: executing program 0 (id=5521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) pwrite64(r1, 0x0, 0xffffff7d, 0xffffffffffffffff) 1.142424803s ago: executing program 4 (id=5522): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000000008"], 0x5c}}, 0x24040001) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000000008100", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.080563137s ago: executing program 4 (id=5523): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.034173739s ago: executing program 4 (id=5525): r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 958.046123ms ago: executing program 6 (id=5526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xfffffffd, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 945.598094ms ago: executing program 9 (id=5527): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x1, 0x1, 0xb, 0x0, 0x100}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 843.77857ms ago: executing program 2 (id=5529): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x9c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x8a, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26f"]}]}, 0x9c}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 843.26897ms ago: executing program 6 (id=5530): sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101042, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x8, 0x20, 0xffffffffffffffff, 0x7}, 0x0) 834.387571ms ago: executing program 9 (id=5531): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) 754.021745ms ago: executing program 0 (id=5532): set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085"], 0x3c}}, 0x0) 753.215186ms ago: executing program 9 (id=5533): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a080, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) unshare(0x2040400) inotify_rm_watch(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) getpid() syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 676.38599ms ago: executing program 9 (id=5534): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xec}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000002140)=@gcm_128={{0x303}, '\x00', "0b3e6200000000000000d362581725c7", '\x00', '\x00@\b\x00'}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 675.20009ms ago: executing program 4 (id=5535): r0 = syz_io_uring_setup(0xda, &(0x7f0000000480)={0x0, 0x183, 0x8, 0x1, 0x15}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffd, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x51, 0x0, @fd, 0x1, 0x0, 0x7, 0x1}) io_uring_enter(r0, 0x22d2, 0x20, 0x0, 0x0, 0x0) 630.518523ms ago: executing program 4 (id=5536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x8, &(0x7f00000000c0)=0x0) r2 = eventfd2(0x0, 0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000009c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x4000, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r2}]) 572.816176ms ago: executing program 9 (id=5537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) syz_mount_image$ext4(&(0x7f0000010300)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x1204000, &(0x7f00000102c0), 0x3, 0x57c, &(0x7f0000010a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 543.601548ms ago: executing program 2 (id=5538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0x9, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x83, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r1, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="140000000000000000000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000000000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r5], 0x168}}], 0x1, 0x8000004) 449.083233ms ago: executing program 2 (id=5539): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) open(0x0, 0x64842, 0x86) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 398.211166ms ago: executing program 0 (id=5540): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0xa) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r1, r3, 0x0) 397.684406ms ago: executing program 0 (id=5541): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='u', 0x1}], 0x1, &(0x7f0000000300)=ANY=[], 0xb0}, 0x0, 0x8400, 0x1}) r2 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x21, 0x0, 0x0) 345.215319ms ago: executing program 2 (id=5542): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1696, 0x7c18, 0x5, 0x6, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x4b72, &(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0xb, "0060930000efa4890200"}) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.current\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x61, 0x14, {{'cmac(aes)\x00'}, 0xa8, 0x0, "e80c857b65087dea03da4c290569c738c39dac5def"}}]}, 0x19c}}, 0x0) 272.763403ms ago: executing program 6 (id=5543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) listen(r0, 0xb5d6) 229.630786ms ago: executing program 2 (id=5544): r0 = socket$nl_route(0x10, 0x3, 0x0) vmsplice(r0, 0x0, 0x0, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) set_mempolicy(0x3, 0x0, 0x9) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x7ff, &(0x7f0000000000)={0x0, 0x3938700}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 211.156007ms ago: executing program 6 (id=5545): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 180.680039ms ago: executing program 2 (id=5546): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) 113.233223ms ago: executing program 0 (id=5547): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) write$nbd(r2, &(0x7f0000000100)=ANY=[], 0x1010) 62.977776ms ago: executing program 6 (id=5548): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) listen(r1, 0x3) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r4, &(0x7f0000000180)={0x2, 0xde20, @empty}, 0x10) listen(r4, 0x3) 0s ago: executing program 6 (id=5549): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x9c}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x400, &(0x7f00000002c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0xe8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) getdents(r0, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.0.3736'. [ 233.500603][T14920] loop4: detected capacity change from 0 to 512 [ 233.548122][T14920] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 233.615417][T14920] EXT4-fs (loop4): mount failed [ 233.769291][T14935] loop4: detected capacity change from 0 to 512 [ 233.797085][T14935] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 233.808836][T14935] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 233.818973][T14935] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3745: Corrupt directory, running e2fsck is recommended [ 233.833928][T14935] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 233.842316][T14935] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.3745: corrupted in-inode xattr: e_name out of bounds [ 233.857159][T14935] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3745: couldn't read orphan inode 15 (err -117) [ 233.870285][T14935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.888498][T14935] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 233.900496][T14935] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 233.911166][T14935] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3745: Corrupt directory, running e2fsck is recommended [ 233.925272][T14935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.3745: path /732/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 233.946938][T14935] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 8: comm syz.4.3745: path /732/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 233.982255][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.188097][T14947] loop6: detected capacity change from 0 to 256 [ 234.222382][T14947] FAT-fs (loop6): bogus number of directory entries (5) [ 234.229452][T14947] FAT-fs (loop6): Can't find a valid FAT filesystem [ 234.241892][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3752'. [ 234.251116][T14951] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3752'. [ 234.318405][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3753'. [ 234.749086][T14979] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3764'. [ 234.784086][T14982] loop4: detected capacity change from 0 to 512 [ 234.813033][T14982] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 234.856169][T14982] EXT4-fs (loop4): 1 orphan inode deleted [ 234.862101][T14982] EXT4-fs (loop4): 1 truncate cleaned up [ 235.005986][T14982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.031494][T14982] EXT4-fs (loop4): shut down requested (2) [ 235.066749][T14982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.117129][T14985] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 235.123812][T14985] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 235.131316][T14985] vhci_hcd vhci_hcd.0: Device attached [ 235.177224][T14988] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 235.183801][T14988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.191420][T14988] vhci_hcd vhci_hcd.0: Device attached [ 235.228380][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3767'. [ 235.256435][T14985] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 235.263051][T14985] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 235.270794][T14985] vhci_hcd vhci_hcd.0: Device attached [ 235.288920][T14988] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(10) [ 235.295643][T14988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.303227][T14988] vhci_hcd vhci_hcd.0: Device attached [ 235.315314][T13662] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 235.342242][T14988] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(12) [ 235.348993][T14988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.356601][T14988] vhci_hcd vhci_hcd.0: Device attached [ 235.406850][T14985] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.415269][T13662] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 235.460725][T14988] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 235.511147][T15007] loop6: detected capacity change from 0 to 512 [ 235.538432][T15007] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.3769: inode has both inline data and extents flags [ 235.538998][T14985] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(14) [ 235.558298][T14985] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.566674][T14985] vhci_hcd vhci_hcd.0: Device attached [ 235.569151][T15007] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3769: couldn't read orphan inode 15 (err -117) [ 235.597614][T15008] vhci_hcd: connection closed [ 235.597724][T14998] vhci_hcd: connection closed [ 235.602643][ T9637] vhci_hcd vhci_hcd.4: stop threads [ 235.612611][ T9637] vhci_hcd vhci_hcd.4: release socket [ 235.618042][ T9637] vhci_hcd vhci_hcd.4: disconnect device [ 235.624574][T14996] vhci_hcd: connection closed [ 235.624903][T14994] vhci_hcd: connection closed [ 235.629898][T14989] vhci_hcd: connection closed [ 235.629905][T14986] vhci_hcd: connection reset by peer [ 235.664884][T13665] IPVS: starting estimator thread 0... [ 235.671802][ T9637] vhci_hcd vhci_hcd.4: stop threads [ 235.677147][ T9637] vhci_hcd vhci_hcd.4: release socket [ 235.682577][ T9637] vhci_hcd vhci_hcd.4: disconnect device [ 235.699300][T15007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.739489][ T9637] vhci_hcd vhci_hcd.4: stop threads [ 235.744953][ T9637] vhci_hcd vhci_hcd.4: release socket [ 235.750463][ T9637] vhci_hcd vhci_hcd.4: disconnect device [ 235.764692][T15013] IPVS: using max 2112 ests per chain, 105600 per kthread [ 235.787851][ T9637] vhci_hcd vhci_hcd.4: stop threads [ 235.793115][ T9637] vhci_hcd vhci_hcd.4: release socket [ 235.798603][ T9637] vhci_hcd vhci_hcd.4: disconnect device [ 235.829877][ T9637] vhci_hcd vhci_hcd.4: stop threads [ 235.835427][ T9637] vhci_hcd vhci_hcd.4: release socket [ 235.841461][ T9637] vhci_hcd vhci_hcd.4: disconnect device [ 235.848879][T14691] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.880328][ T9637] vhci_hcd vhci_hcd.4: stop threads [ 235.886074][ T9637] vhci_hcd vhci_hcd.4: release socket [ 235.891681][ T9637] vhci_hcd vhci_hcd.4: disconnect device [ 235.948197][T15020] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 235.957679][T15020] ref_ctr increment failed for inode: 0x5a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810e621b00 [ 235.997537][T15024] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3776'. [ 236.071065][T15032] loop6: detected capacity change from 0 to 128 [ 236.091148][T15032] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.112075][T15032] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.186984][T15044] netlink: 'syz.4.3785': attribute type 4 has an invalid length. [ 236.212888][T15044] netlink: 'syz.4.3785': attribute type 4 has an invalid length. [ 236.221717][T14691] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.429551][T15067] netlink: 'syz.4.3794': attribute type 1 has an invalid length. [ 236.475688][T15067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 236.538744][T15070] bond4: entered promiscuous mode [ 236.559976][T15069] bond0: (slave dummy0): Releasing backup interface [ 236.577447][T15069] dummy0: left promiscuous mode [ 236.589735][T15069] bond4: (slave dummy0): making interface the new active one [ 236.604922][T15069] dummy0: entered promiscuous mode [ 236.612990][T15069] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 236.628978][T15066] bond4: left promiscuous mode [ 236.633989][T15066] dummy0: left promiscuous mode [ 236.695488][T15072] loop4: detected capacity change from 0 to 256 [ 236.727639][T15072] FAT-fs (loop4): bogus number of directory entries (5) [ 236.735409][T15072] FAT-fs (loop4): Can't find a valid FAT filesystem [ 237.245424][ T3401] usb 1-1: enqueue for inactive port 0 [ 237.251165][ T3401] usb 1-1: enqueue for inactive port 0 [ 237.306705][T15090] syzkaller1: entered promiscuous mode [ 237.312256][T15090] syzkaller1: entered allmulticast mode [ 237.335582][ T3401] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 237.411767][T15096] loop6: detected capacity change from 0 to 256 [ 237.457881][T15096] syz.6.3804: attempt to access beyond end of device [ 237.457881][T15096] loop6: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 237.503018][T15096] Invalid ELF header len 1 [ 237.799035][T15102] loop6: detected capacity change from 0 to 32768 [ 238.049169][T15113] netlink: 'syz.9.3812': attribute type 32 has an invalid length. [ 238.075407][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 238.075426][ T29] audit: type=1326 audit(1768979274.133:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.119636][ T29] audit: type=1326 audit(1768979274.133:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.143289][ T29] audit: type=1326 audit(1768979274.163:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.166878][ T29] audit: type=1326 audit(1768979274.163:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.190437][ T29] audit: type=1326 audit(1768979274.163:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.214079][ T29] audit: type=1326 audit(1768979274.163:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.237606][ T29] audit: type=1326 audit(1768979274.163:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.261149][ T29] audit: type=1326 audit(1768979274.163:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.284686][ T29] audit: type=1326 audit(1768979274.163:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.308168][ T29] audit: type=1326 audit(1768979274.163:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15114 comm="syz.6.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 238.504254][T15138] loop4: detected capacity change from 0 to 1024 [ 238.535576][T15138] EXT4-fs: inline encryption not supported [ 238.571879][T15138] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.588594][T15142] lo speed is unknown, defaulting to 1000 [ 238.796000][T15138] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 238.835348][T15138] EXT4-fs (loop4): Remounting filesystem read-only [ 238.893079][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.444886][T13662] usb 9-1: enqueue for inactive port 0 [ 240.450494][T13662] usb 9-1: enqueue for inactive port 0 [ 240.544737][T13662] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 241.407885][T15259] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 241.434740][T15259] batman_adv: batadv0: Adding interface: gretap1 [ 241.441197][T15259] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.502432][T15259] batman_adv: batadv0: Interface activated: gretap1 [ 241.512928][ T3401] kernel write not supported for file bpf-prog (pid: 3401 comm: kworker/1:3) [ 241.668357][T15270] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3870'. [ 242.162361][T15286] veth0_vlan: entered allmulticast mode [ 242.170969][T15286] veth0_vlan: left promiscuous mode [ 242.177084][T15280] Set syz1 is full, maxelem 65536 reached [ 242.182983][T15286] veth0_vlan: entered promiscuous mode [ 242.535634][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.005275][T13662] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.184099][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 243.184151][ T29] audit: type=1326 audit(1768979279.233:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.238663][ T29] audit: type=1400 audit(1768979279.273:2736): avc: denied { write } for pid=15340 comm="syz.4.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.258248][ T29] audit: type=1326 audit(1768979279.273:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.282027][ T29] audit: type=1326 audit(1768979279.273:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.305564][ T29] audit: type=1326 audit(1768979279.273:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.329378][ T29] audit: type=1326 audit(1768979279.273:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.353029][ T29] audit: type=1326 audit(1768979279.273:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.376651][ T29] audit: type=1326 audit(1768979279.273:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.400221][ T29] audit: type=1326 audit(1768979279.273:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.423844][ T29] audit: type=1326 audit(1768979279.273:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15341 comm="syz.2.3905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 243.574941][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.658382][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.666710][ T7330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.221552][T15399] macvtap0: entered promiscuous mode [ 244.228471][T15399] team0: entered promiscuous mode [ 244.234390][T15399] team_slave_0: entered promiscuous mode [ 244.243661][T15399] team_slave_1: entered promiscuous mode [ 244.260566][T15399] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 244.278099][T15399] team0: Device macvtap0 is already an upper device of the team interface [ 244.349943][T15399] team0: left promiscuous mode [ 244.360961][T15399] team_slave_0: left promiscuous mode [ 244.371852][T15399] team_slave_1: left promiscuous mode [ 244.493120][T15406] loop4: detected capacity change from 0 to 1024 [ 244.512003][T15406] EXT4-fs: Ignoring removed bh option [ 244.538846][T15406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.579254][T15406] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 244.608579][T15406] EXT4-fs (loop4): Remounting filesystem read-only [ 244.615549][ T7709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.624203][T15406] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 244.837857][T15432] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=15432 comm=syz.6.3936 [ 244.854411][T15432] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3936'. [ 244.924748][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.344339][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.405974][T15450] lo: Caught tx_queue_len zero misconfig [ 245.467457][T15454] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 245.601739][T15459] loop4: detected capacity change from 0 to 512 [ 245.644970][T13665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.720843][T15459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 245.776480][T15459] System zones: 0-2, 18-18, 34-34 [ 245.781771][T15459] EXT4-fs (loop4): too many log groups per flexible block group [ 245.886283][T15459] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 245.905806][T15459] EXT4-fs (loop4): mount failed [ 246.009454][T15488] lo speed is unknown, defaulting to 1000 [ 246.576308][T15503] loop4: detected capacity change from 0 to 512 [ 246.625244][T15503] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.3964: bad orphan inode 15 [ 246.636017][T15508] batman_adv: batadv0: Adding interface: dummy0 [ 246.642293][T15508] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.674582][T15503] ext4_test_bit(bit=14, block=5) = 0 [ 246.688652][T15503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.711324][T15508] batman_adv: batadv0: Interface activated: dummy0 [ 246.819820][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.906446][T15516] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.913785][T15516] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.006331][T15516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.045943][T15516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.136577][ T53] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.145645][T15538] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3978'. [ 247.175061][ T53] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.192041][ T53] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.214691][ T53] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.392726][T15540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.416530][T15540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.440802][T15540] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.452725][T15540] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.532699][T15540] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.543938][T15540] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.667687][T15540] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.678370][T15540] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.720610][T15586] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 247.818326][T15540] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.833877][T15540] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.920855][T15601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4001'. [ 248.385447][ T409] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.395677][ T409] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.575954][ T409] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.585884][ T409] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.758406][ T409] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.772838][ T409] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.996997][ T31] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.007307][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.035384][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 249.035408][ T29] audit: type=1400 audit(1768979285.083:2788): avc: denied { execute } for pid=15633 comm="syz.2.4015" path="/file1" dev="ramfs" ino=54562 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 249.121516][ T29] audit: type=1400 audit(1768979285.173:2789): avc: denied { setattr } for pid=15636 comm="syz.2.4016" name="secretmem" dev="secretmem" ino=53654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 249.221330][T15647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4019'. [ 249.373006][ T29] audit: type=1400 audit(1768979285.423:2790): avc: denied { map } for pid=15655 comm="syz.0.4024" path="socket:[53703]" dev="sockfs" ino=53703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.403333][ T29] audit: type=1400 audit(1768979285.423:2791): avc: denied { read } for pid=15655 comm="syz.0.4024" path="socket:[53703]" dev="sockfs" ino=53703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.760069][T15663] loop4: detected capacity change from 0 to 2048 [ 249.784509][T15663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.964917][T15678] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4030'. [ 250.006934][T15681] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4033'. [ 250.091287][ T29] audit: type=1400 audit(1768979286.143:2792): avc: denied { create } for pid=15685 comm="syz.9.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.130358][T15687] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4035'. [ 250.162908][ T29] audit: type=1400 audit(1768979286.173:2793): avc: denied { connect } for pid=15685 comm="syz.9.4035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 250.199629][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.263635][ T29] audit: type=1400 audit(1768979286.313:2794): avc: denied { create } for pid=15691 comm="syz.6.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.297072][ T29] audit: type=1400 audit(1768979286.353:2795): avc: denied { bind } for pid=15691 comm="syz.6.4039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 250.371921][T15702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4042'. [ 250.561766][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4047'. [ 250.835156][ T29] audit: type=1326 audit(1768979286.873:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.2.4050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x0 [ 251.036324][ T29] audit: type=1326 audit(1768979287.093:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15736 comm="syz.9.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 251.107884][T15740] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4059'. [ 251.679897][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4071'. [ 251.799704][T15773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.810725][T15773] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 251.895925][T15773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.906960][T15773] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 252.063359][T15773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.074429][T15773] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 252.227930][T15773] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.239464][T15773] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 252.405354][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 252.415123][ T52] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.503097][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 252.513303][ T52] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.563970][T15808] loop4: detected capacity change from 0 to 512 [ 252.574735][ T2549] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 252.585765][ T2549] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.633675][T15808] EXT4-fs: Ignoring removed oldalloc option [ 252.644792][ T2549] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 252.656620][ T2549] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 252.716196][T15808] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.4086: dx entry: limit 1024 != root limit 124 [ 252.733677][T15808] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4086: Corrupt directory, running e2fsck is recommended [ 252.826248][T15808] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 252.855151][T15808] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.4086: corrupted in-inode xattr: invalid ea_ino [ 252.909055][T15808] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4086: couldn't read orphan inode 15 (err -117) [ 252.937097][T15808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.997871][T15808] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.4086: dx entry: limit 1024 != root limit 124 [ 253.019951][T15808] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4086: Corrupt directory, running e2fsck is recommended [ 253.047341][T15808] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.4086: dx entry: limit 1024 != root limit 124 [ 253.064790][T15808] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4086: Corrupt directory, running e2fsck is recommended [ 253.117587][T15808] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.4086: dx entry: limit 1024 != root limit 124 [ 253.139028][T15808] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4086: Corrupt directory, running e2fsck is recommended [ 253.161021][T15808] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.4086: dx entry: limit 1024 != root limit 124 [ 253.180282][T15808] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4086: Corrupt directory, running e2fsck is recommended [ 253.235237][T15808] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.4086: dx entry: limit 1024 != root limit 124 [ 253.253180][T15808] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4086: Corrupt directory, running e2fsck is recommended [ 253.283785][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.536476][T15845] loop4: detected capacity change from 0 to 128 [ 253.549471][T15845] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.564008][T15845] ext4 filesystem being mounted at /781/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.636017][ T3327] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 253.972832][T15869] __nla_validate_parse: 1 callbacks suppressed [ 253.972853][T15869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4109'. [ 254.199336][T15902] netlink: 'syz.6.4117': attribute type 1 has an invalid length. [ 254.251472][T15902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.306031][T15908] bond1: (slave veth5): Enslaving as an active interface with a down link [ 254.335672][T15902] bond1: (slave dummy0): making interface the new active one [ 254.346223][T15902] dummy0: entered promiscuous mode [ 254.351997][T15902] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 254.373457][T15902] bond1 (unregistering): (slave veth5): Releasing active interface [ 254.391481][T15902] bond1 (unregistering): (slave dummy0): Releasing active interface [ 254.402948][T15902] bond1 (unregistering): Released all slaves [ 254.535493][ T9664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.549169][ T9664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.641513][ T9664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.655221][ T9664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.802753][ T9664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.815984][ T9664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.908809][ T9664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.922042][ T9664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.226528][ T9664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.249832][ T9664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.272291][ T9664] bond0 (unregistering): Released all slaves [ 255.340712][ T9664] hsr_slave_0: left promiscuous mode [ 255.359524][ T9664] hsr_slave_1: left promiscuous mode [ 255.380425][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.390091][ T9664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.424248][ T9664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.433302][ T9664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.456410][ T9664] veth1_macvtap: left promiscuous mode [ 255.476921][ T9664] veth0_macvtap: left promiscuous mode [ 255.500164][ T9664] veth1_vlan: left promiscuous mode [ 255.524792][ T9664] veth0_vlan: left promiscuous mode [ 255.849181][ T9664] team0 (unregistering): Port device team_slave_1 removed [ 255.890755][ T9664] team0 (unregistering): Port device team_slave_0 removed [ 256.443101][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 256.443151][ T29] audit: type=1400 audit(1768979292.493:2861): avc: denied { create } for pid=16067 comm="syz.9.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 256.576835][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'. [ 256.614302][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4142'. [ 256.663313][T16087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4140'. [ 256.796261][T16097] netlink: 199828 bytes leftover after parsing attributes in process `syz.9.4146'. [ 257.233993][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4156'. [ 257.471326][T16169] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4161'. [ 257.532863][T16169] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4161'. [ 257.704394][T16203] netlink: 1347 bytes leftover after parsing attributes in process `syz.4.4168'. [ 258.131222][ T29] audit: type=1400 audit(1768979294.183:2862): avc: denied { write } for pid=16241 comm="syz.4.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 258.487701][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4178'. [ 258.986195][ T29] audit: type=1326 audit(1768979295.043:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.046663][ T29] audit: type=1326 audit(1768979295.043:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.078423][ T29] audit: type=1326 audit(1768979295.043:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.109386][ T29] audit: type=1326 audit(1768979295.073:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.138710][ T29] audit: type=1326 audit(1768979295.073:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.167599][ T29] audit: type=1326 audit(1768979295.073:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.198177][ T29] audit: type=1326 audit(1768979295.073:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.227793][ T29] audit: type=1326 audit(1768979295.073:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16321 comm="syz.4.4185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f270429acb9 code=0x7ffc0000 [ 259.924936][T16390] net_ratelimit: 27 callbacks suppressed [ 259.924958][T16390] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 259.953302][T13668] lo speed is unknown, defaulting to 1000 [ 259.962295][T16394] team0: No ports can be present during mode change [ 260.195241][T16415] xt_connbytes: Forcing CT accounting to be enabled [ 260.277140][ T3327] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 260.291129][ T3327] CPU: 1 UID: 0 PID: 3327 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.291194][ T3327] Tainted: [W]=WARN [ 260.291201][ T3327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.291218][ T3327] Call Trace: [ 260.291229][ T3327] [ 260.291237][ T3327] __dump_stack+0x1d/0x30 [ 260.291302][ T3327] dump_stack_lvl+0x95/0xd0 [ 260.291331][ T3327] dump_stack+0x15/0x1b [ 260.291357][ T3327] dump_header+0x80/0x240 [ 260.291418][ T3327] oom_kill_process+0x295/0x350 [ 260.291446][ T3327] out_of_memory+0x97d/0xb80 [ 260.291477][ T3327] try_charge_memcg+0x62e/0xa10 [ 260.291579][ T3327] charge_memcg+0x51/0xc0 [ 260.291631][ T3327] __mem_cgroup_charge+0x28/0xb0 [ 260.291714][ T3327] filemap_add_folio+0x110/0x350 [ 260.291743][ T3327] __filemap_get_folio_mpol+0x326/0x680 [ 260.291817][ T3327] filemap_fault+0x473/0xbb0 [ 260.291855][ T3327] __do_fault+0xbc/0x200 [ 260.291895][ T3327] handle_mm_fault+0x11d7/0x3030 [ 260.291992][ T3327] ? vma_start_read+0x1c7/0x2c0 [ 260.292065][ T3327] do_user_addr_fault+0x62f/0x1050 [ 260.292136][ T3327] exc_page_fault+0x62/0xa0 [ 260.292160][ T3327] asm_exc_page_fault+0x26/0x30 [ 260.292182][ T3327] RIP: 0033:0x7f2704168db4 [ 260.292200][ T3327] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 260.292237][ T3327] RSP: 002b:00007ffe23889bc0 EFLAGS: 00010206 [ 260.292255][ T3327] RAX: 0000001b34224000 RBX: 0000000000000773 RCX: 000000000003f7a0 [ 260.292269][ T3327] RDX: 0000000003614a5a RSI: 00007ffe23889c50 RDI: 0000000000000001 [ 260.292283][ T3327] RBP: 00007ffe23889bfc R08: 000000000ce4d231 R09: 7fffffffffffffff [ 260.292298][ T3327] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 260.292335][ T3327] R13: 00000000000927c0 R14: 000000000003f634 R15: 00007ffe23889c50 [ 260.292433][ T3327] [ 260.292587][ T3327] memory: usage 307200kB, limit 307200kB, failcnt 5805 [ 260.520424][ T3327] memory+swap: usage 375988kB, limit 9007199254740988kB, failcnt 0 [ 260.532400][ T3327] kmem: usage 306840kB, limit 9007199254740988kB, failcnt 0 [ 260.540883][ T3327] Memory cgroup stats for /syz4: [ 260.784139][T16439] IPv6: sit2: Disabled Multicast RS [ 260.827979][ T3327] cache 167936 [ 260.832415][ T3327] rss 196608 [ 260.835832][ T3327] shmem 40960 [ 260.839331][ T3327] mapped_file 40960 [ 260.843787][ T3327] dirty 4096 [ 260.848987][ T3327] writeback 0 [ 260.853321][ T3327] workingset_refault_anon 84 [ 260.858376][ T3327] workingset_refault_file 2646 [ 260.864166][ T3327] swap 70438912 [ 260.868050][ T3327] swapcached 126976 [ 260.872893][ T3327] pgpgin 270206 [ 260.877329][ T3327] pgpgout 270085 [ 260.881257][ T3327] pgfault 231107 [ 260.886041][ T3327] pgmajfault 164 [ 260.889926][ T3327] inactive_anon 352256 [ 260.894677][ T3327] active_anon 12288 [ 260.898949][ T3327] inactive_file 0 [ 260.902984][ T3327] active_file 131072 [ 260.907167][ T3327] unevictable 0 [ 260.910833][ T3327] hierarchical_memory_limit 314572800 [ 260.916947][ T3327] hierarchical_memsw_limit 9223372036854771712 [ 260.924190][ T3327] total_cache 167936 [ 260.928406][ T3327] total_rss 196608 [ 260.932160][ T3327] total_shmem 40960 [ 260.936764][ T3327] total_mapped_file 40960 [ 260.941300][ T3327] total_dirty 4096 [ 260.945539][ T3327] total_writeback 0 [ 260.950035][ T3327] total_workingset_refault_anon 84 [ 260.955644][ T3327] total_workingset_refault_file 2646 [ 260.962863][ T3327] total_swap 70438912 [ 260.967539][ T3327] total_swapcached 126976 [ 260.973469][ T3327] total_pgpgin 270206 [ 260.977928][ T3327] total_pgpgout 270085 [ 260.982118][ T3327] total_pgfault 231107 [ 260.988558][ T3327] total_pgmajfault 164 [ 260.993720][ T3327] total_inactive_anon 352256 [ 260.999086][ T3327] total_active_anon 12288 [ 261.004642][ T3327] total_inactive_file 0 [ 261.010798][ T3327] total_active_file 131072 [ 261.015837][ T3327] total_unevictable 0 [ 261.021450][ T3327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.4193,pid=16353,uid=0 [ 261.037348][ T3327] Memory cgroup out of memory: Killed process 16353 (syz.4.4193) total-vm:96216kB, anon-rss:1332kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 261.311560][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.366305][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.445092][T16449] ref_ctr_offset mismatch. inode: 0x1079 offset: 0x0 ref_ctr_offset(old): 0x100 ref_ctr_offset(new): 0x0 [ 261.499249][T16454] bond2: entered promiscuous mode [ 261.522301][T16454] ip6gre1: entered promiscuous mode [ 261.527880][T16454] ip6gre1: entered allmulticast mode [ 261.545066][T16454] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 261.568348][T16454] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 261.802888][T16478] netlink: 87 bytes leftover after parsing attributes in process `syz.0.4221'. [ 262.590434][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 262.590454][ T29] audit: type=1400 audit(1768979298.643:2914): avc: denied { name_bind } for pid=16509 comm="syz.9.4233" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 262.668855][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4235'. [ 262.677984][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4235'. [ 262.688471][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 262.697556][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4235'. [ 263.088830][T16535] lo speed is unknown, defaulting to 1000 [ 264.298046][ T29] audit: type=1400 audit(1768979300.343:2915): avc: denied { accept } for pid=16568 comm="syz.2.4251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 264.403706][ T29] audit: type=1400 audit(1768979300.443:2916): avc: denied { shutdown } for pid=16574 comm="syz.9.4254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.508371][ T29] audit: type=1326 audit(1768979300.563:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16580 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 264.574131][ T29] audit: type=1326 audit(1768979300.563:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16580 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 264.597835][ T29] audit: type=1326 audit(1768979300.593:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16580 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 264.621479][ T29] audit: type=1326 audit(1768979300.593:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16580 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 264.645099][ T29] audit: type=1326 audit(1768979300.593:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16580 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 264.705130][ T29] audit: type=1326 audit(1768979300.733:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16580 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc1dcb1b58e code=0x7ffc0000 [ 264.728802][ T29] audit: type=1326 audit(1768979300.743:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16580 comm="syz.6.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 264.853819][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4259'. [ 264.886687][T16590] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4260'. [ 264.899093][T16588] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4259'. [ 265.053946][T16598] gtp0: entered promiscuous mode [ 265.433826][T16614] lo speed is unknown, defaulting to 1000 [ 266.513673][T16675] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4291'. [ 267.294082][T16702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4301'. [ 267.876003][T16724] sctp: [Deprecated]: syz.9.4306 (pid 16724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.876003][T16724] Use struct sctp_sack_info instead [ 268.123664][T16740] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4309'. [ 268.218597][T16744] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4311'. [ 268.336117][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 268.336136][ T29] audit: type=1326 audit(1768979304.393:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 268.392445][T16759] team0 (unregistering): Port device team_slave_0 removed [ 268.420380][T16759] team0 (unregistering): Port device team_slave_1 removed [ 268.444770][ T29] audit: type=1326 audit(1768979304.393:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 268.468370][ T29] audit: type=1326 audit(1768979304.393:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 268.492207][ T29] audit: type=1326 audit(1768979304.393:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 268.515782][ T29] audit: type=1326 audit(1768979304.463:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 268.539409][ T29] audit: type=1326 audit(1768979304.463:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf8385aa22 code=0x7ffc0000 [ 268.562830][ T29] audit: type=1326 audit(1768979304.463:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbf8385aab7 code=0x7ffc0000 [ 268.586322][ T29] audit: type=1326 audit(1768979304.463:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbf83817a51 code=0x7ffc0000 [ 268.609873][ T29] audit: type=1326 audit(1768979304.463:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbf8385bac9 code=0x7ffc0000 [ 268.633441][ T29] audit: type=1326 audit(1768979304.463:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16754 comm="syz.9.4313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbf83817abb code=0x7ffc0000 [ 269.120313][T16800] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 269.560508][T16835] netlink: 'syz.2.4337': attribute type 27 has an invalid length. [ 269.952676][T16835] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.960021][T16835] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.146674][T16835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.177996][T16835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.291620][T16835] macvlan1: left promiscuous mode [ 270.433736][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4346'. [ 270.864676][T16835] geneve2: left promiscuous mode [ 270.869751][T16835] geneve2: left allmulticast mode [ 270.907330][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4349'. [ 270.975647][T16835] team1: left promiscuous mode [ 270.980535][T16835] team1: left allmulticast mode [ 271.040442][T16838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.063810][T16838] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.093051][T16838] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.129496][ T31] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.137941][ T31] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.176914][ T31] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.185285][ T31] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.226999][ T31] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.235420][ T31] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.278168][T16881] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4351'. [ 271.288740][ T31] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 271.297117][ T31] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.426771][T16897] netlink: 'syz.4.4354': attribute type 10 has an invalid length. [ 271.434871][T16897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4354'. [ 271.460857][T16897] dummy0: entered promiscuous mode [ 271.466079][T16897] dummy0: entered allmulticast mode [ 271.482947][T16897] bond4: (slave dummy0): Releasing active interface [ 271.502709][T16897] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 271.548241][T16908] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4358'. [ 272.231037][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4370'. [ 272.250415][T16943] 8021q: adding VLAN 0 to HW filter on device bond3 [ 272.283700][T16943] macvlan2: entered promiscuous mode [ 272.289091][T16943] macvlan2: entered allmulticast mode [ 272.394463][T16946] netlink: 143700 bytes leftover after parsing attributes in process `syz.0.4371'. [ 272.477117][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4372'. [ 272.559192][T16958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4374'. [ 272.637749][T16964] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 272.707558][T16968] bond1: entered promiscuous mode [ 272.726610][T16968] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.735582][T16968] team0: Port device bond1 added [ 272.863747][T16977] lo speed is unknown, defaulting to 1000 [ 273.165053][ T3508] page_pool_release_retry() stalled pool shutdown: id 149, 1 inflight 60 sec [ 274.179015][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4405'. [ 274.188019][T17036] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4405'. [ 274.251807][T17044] loop4: detected capacity change from 0 to 512 [ 274.259082][T17046] netlink: 'syz.9.4408': attribute type 1 has an invalid length. [ 274.266928][T17046] netlink: 5 bytes leftover after parsing attributes in process `syz.9.4408'. [ 274.276984][T17044] EXT4-fs: Ignoring removed bh option [ 274.298090][T17044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.335115][T17044] ext4 filesystem being mounted at /838/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.359035][T17044] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.4407: iget: bad i_size value: 2533274857506816 [ 274.379900][T17044] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.4407: iget: bad i_size value: 2533274857506816 [ 274.411818][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.512675][T17073] lo speed is unknown, defaulting to 1000 [ 274.515275][T17077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4414'. [ 274.540524][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4414'. [ 274.729572][T17098] netlink: 'syz.0.4416': attribute type 1 has an invalid length. [ 274.782455][T17104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4416'. [ 274.791606][T17104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4416'. [ 274.928998][T17098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.040188][T17104] macsec1: entered promiscuous mode [ 275.045683][T17104] bond4: entered promiscuous mode [ 275.050868][T17104] macsec1: entered allmulticast mode [ 275.056290][T17104] bond4: entered allmulticast mode [ 275.217436][T17073] Set syz1 is full, maxelem 65536 reached [ 275.484844][T17206] IPv6: addrconf: prefix option has invalid lifetime [ 275.541620][T17216] tipc: Failed to remove unknown binding: 66,0,0/0:545061545/545061546 [ 275.559574][T17216] tipc: Failed to remove unknown binding: 66,0,0/0:545061545/545061546 [ 275.584354][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 275.584373][ T29] audit: type=1326 audit(1768979311.633:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.589167][T17219] netlink: 'syz.2.4432': attribute type 1 has an invalid length. [ 275.591508][ T29] audit: type=1326 audit(1768979311.653:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.706895][ T29] audit: type=1326 audit(1768979311.703:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.730541][ T29] audit: type=1326 audit(1768979311.703:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.754096][ T29] audit: type=1326 audit(1768979311.703:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.777657][ T29] audit: type=1326 audit(1768979311.703:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.801287][ T29] audit: type=1326 audit(1768979311.703:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.824815][ T29] audit: type=1326 audit(1768979311.703:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.848386][ T29] audit: type=1326 audit(1768979311.703:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 275.871932][ T29] audit: type=1326 audit(1768979311.703:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17223 comm="syz.0.4433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 276.508109][T17262] loop4: detected capacity change from 0 to 8192 [ 276.780611][T17291] netlink: 'syz.4.4459': attribute type 3 has an invalid length. [ 276.847233][T17296] lo speed is unknown, defaulting to 1000 [ 277.163987][T17321] ref_ctr_offset mismatch. inode: 0x317 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1f00000000 [ 277.635898][T17296] Set syz1 is full, maxelem 65536 reached [ 277.695099][T17345] netlink: 'syz.6.4483': attribute type 13 has an invalid length. [ 277.829793][T17357] __nla_validate_parse: 7 callbacks suppressed [ 277.829925][T17357] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4489'. [ 278.051774][T17376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4491'. [ 278.187625][T17377] batman_adv: batadv0: Interface deactivated: dummy0 [ 278.220632][T17377] macvtap1: left promiscuous mode [ 278.225763][T17377] macvtap1: left allmulticast mode [ 278.231034][T17377] hsr1: left promiscuous mode [ 278.279240][T17377] team1: left promiscuous mode [ 278.284099][T17377] team1: left allmulticast mode [ 278.327897][T17377] geneve2: left promiscuous mode [ 278.347736][T17377] ipip0: left promiscuous mode [ 278.396993][T17377] batman_adv: batadv0: Interface deactivated: gretap1 [ 278.427686][T17377] macvlan2: left promiscuous mode [ 278.432874][T17377] macvlan2: left allmulticast mode [ 278.476816][T17377] bond4: left allmulticast mode [ 278.481764][T17377] bond4: left promiscuous mode [ 278.506700][T17377] macsec1: left promiscuous mode [ 278.511728][T17377] macsec1: left allmulticast mode [ 278.544769][T13662] lo speed is unknown, defaulting to 1000 [ 278.550823][T13662] syz2: Port: 1 Link DOWN [ 278.665976][ T1140] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.674861][ T1140] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.716606][T17379] lo speed is unknown, defaulting to 1000 [ 278.746254][ T1140] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.755158][ T1140] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.787469][ T1140] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.796033][ T1140] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.824564][ T1140] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.833222][ T1140] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.045734][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4499'. [ 279.188716][T17380] Set syz1 is full, maxelem 65536 reached [ 279.405172][T17414] netlink: 'syz.6.4510': attribute type 1 has an invalid length. [ 279.448029][T17419] lo speed is unknown, defaulting to 1000 [ 279.539026][T17414] bond2: entered promiscuous mode [ 279.544151][T17414] bond2: entered allmulticast mode [ 279.549539][T17414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.560066][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4510'. [ 279.586055][T17414] veth7: entered promiscuous mode [ 279.591278][T17414] veth7: entered allmulticast mode [ 279.597392][T17414] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 279.862243][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4518'. [ 280.615116][T17483] loop4: detected capacity change from 0 to 2048 [ 280.629377][T17483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.461484][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.805814][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 281.805834][ T29] audit: type=1326 audit(1768979317.863:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.0.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 281.854743][ T29] audit: type=1326 audit(1768979317.913:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.0.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 281.933451][ T29] audit: type=1326 audit(1768979317.973:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.0.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 281.957091][ T29] audit: type=1326 audit(1768979317.973:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17512 comm="syz.0.4545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 282.225690][T17528] tipc: Failed to remove unknown binding: 66,1,1/0:556273480/556273482 [ 282.296006][T17529] tipc: Failed to remove unknown binding: 66,1,1/0:556273480/556273482 [ 282.304370][T17529] tipc: Failed to remove unknown binding: 66,1,1/0:556273480/556273482 [ 282.945313][T17555] tipc: Started in network mode [ 282.950276][T17555] tipc: Node identity 164812fde771, cluster identity 4711 [ 282.957710][T17555] tipc: Enabled bearer , priority 0 [ 282.971930][T17554] tipc: Resetting bearer [ 283.005084][T17554] tipc: Disabling bearer [ 283.012753][T17558] netlink: 'syz.9.4564': attribute type 4 has an invalid length. [ 283.367809][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4572'. [ 283.860618][T17589] lo speed is unknown, defaulting to 1000 [ 283.932866][T17592] netlink: 'syz.6.4577': attribute type 4 has an invalid length. [ 284.215115][T13669] IPVS: starting estimator thread 0... [ 284.245674][T17610] lo speed is unknown, defaulting to 1000 [ 284.304719][T17608] IPVS: using max 2208 ests per chain, 110400 per kthread [ 284.335967][T17612] lo speed is unknown, defaulting to 1000 [ 284.428691][ T9648] IPVS: stop unused estimator thread 0... [ 284.515145][T17629] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4589'. [ 284.619261][T17636] loop4: detected capacity change from 0 to 1024 [ 284.639985][T17636] EXT4-fs: inline encryption not supported [ 284.674238][T17636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.715451][T17631] netlink: 'syz.4.4590': attribute type 4 has an invalid length. [ 284.791457][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.922739][T17651] SET target dimension over the limit! [ 285.232850][T17668] netlink: 'syz.0.4601': attribute type 10 has an invalid length. [ 285.716881][T17681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4607'. [ 285.733100][T17676] netlink: 'syz.0.4605': attribute type 4 has an invalid length. [ 285.748294][T17684] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4609'. [ 285.806960][T17686] loop4: detected capacity change from 0 to 2048 [ 285.835920][T17686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.868149][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.283793][ T29] audit: type=1400 audit(1768979322.313:3087): avc: denied { unlink } for pid=3327 comm="syz-executor" name="file3" dev="tmpfs" ino=4713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 286.313982][T17720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4622'. [ 286.546710][T17743] netlink: 'syz.9.4633': attribute type 4 has an invalid length. [ 286.556034][T17743] netlink: 'syz.9.4633': attribute type 4 has an invalid length. [ 286.633537][ T29] audit: type=1326 audit(1768979322.683:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.2.4634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7efdbe1e4ad7 code=0x0 [ 286.944150][T17757] kernel profiling enabled (shift: 63) [ 286.949727][T17757] profiling shift: 63 too large [ 287.339769][T17768] syzkaller0: entered promiscuous mode [ 287.345344][T17768] syzkaller0: entered allmulticast mode [ 287.444061][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4644'. [ 287.484498][T17773] hsr_slave_0: left promiscuous mode [ 287.514879][T17773] hsr_slave_1: left promiscuous mode [ 287.556339][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4646'. [ 287.565388][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4646'. [ 287.688393][ T29] audit: type=1400 audit(1768979323.743:3089): avc: denied { read write } for pid=17789 comm="syz.4.4651" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 287.712202][ T29] audit: type=1400 audit(1768979323.743:3090): avc: denied { open } for pid=17789 comm="syz.4.4651" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 288.267530][T17802] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4654'. [ 288.995429][ T29] audit: type=1326 audit(1768979325.053:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.6.4674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x0 [ 289.035342][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'. [ 289.104792][ T29] audit: type=1400 audit(1768979325.153:3092): avc: denied { setattr } for pid=17861 comm="syz.4.4677" name="RDS" dev="sockfs" ino=67769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.275906][ T29] audit: type=1326 audit(1768979325.333:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 289.299502][ T29] audit: type=1326 audit(1768979325.333:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 289.323149][ T29] audit: type=1326 audit(1768979325.333:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efdbe1eaa22 code=0x7ffc0000 [ 289.346797][ T29] audit: type=1326 audit(1768979325.333:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efdbe1eaa22 code=0x7ffc0000 [ 289.370364][ T29] audit: type=1326 audit(1768979325.333:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 289.398173][T17886] batadv_slave_0: entered promiscuous mode [ 289.406294][ T29] audit: type=1326 audit(1768979325.443:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.2.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 289.436003][T17886] batadv_slave_0 (unregistering): left promiscuous mode [ 289.903529][T17919] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4696'. [ 290.157769][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4700'. [ 290.167339][T17929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.176895][T17929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.363539][T17940] netlink: 'syz.6.4705': attribute type 13 has an invalid length. [ 290.647041][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 290.663174][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 290.672661][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4713'. [ 290.691686][T17957] lo speed is unknown, defaulting to 1000 [ 290.707029][T17965] netlink: 'syz.6.4715': attribute type 1 has an invalid length. [ 290.765474][T17965] bond3: entered promiscuous mode [ 290.770595][T17965] bond3: entered allmulticast mode [ 290.790263][T17965] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.819102][T17965] bridge6: entered promiscuous mode [ 290.824538][T17965] bridge6: entered allmulticast mode [ 290.830753][T17965] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 290.874746][ T2549] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 290.933349][T13664] IPVS: starting estimator thread 0... [ 290.994764][ T9648] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 291.035722][T17981] IPVS: using max 1728 ests per chain, 86400 per kthread [ 291.137145][ T9631] IPVS: stop unused estimator thread 0... [ 291.904826][T18042] syzkaller1: entered promiscuous mode [ 291.910358][T18042] syzkaller1: entered allmulticast mode [ 292.100278][T18052] tipc: Failed to remove unknown binding: 66,0,0/0:3938151600/3938151601 [ 292.113012][T18052] tipc: Failed to remove unknown binding: 66,0,0/0:3938151600/3938151601 [ 292.189015][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4755'. [ 292.197995][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4755'. [ 292.353584][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4761'. [ 293.045385][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 293.045402][ T29] audit: type=1400 audit(1768979329.103:3117): avc: denied { accept } for pid=18090 comm="syz.0.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 293.476515][ T29] audit: type=1326 audit(1768979585.536:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.501886][ T29] audit: type=1326 audit(1768979585.556:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.525558][ T29] audit: type=1326 audit(1768979585.556:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.549120][ T29] audit: type=1326 audit(1768979585.556:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.572765][ T29] audit: type=1326 audit(1768979585.556:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.596304][ T29] audit: type=1326 audit(1768979585.556:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.619907][ T29] audit: type=1326 audit(1768979585.556:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.643335][ T29] audit: type=1326 audit(1768979585.556:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.666889][ T29] audit: type=1326 audit(1768979585.556:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18103 comm="syz.2.4771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 293.814728][T18122] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 293.824818][T18122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4776'. [ 294.198729][T18145] tipc: Enabled bearer , priority 0 [ 294.208315][T18144] tipc: Resetting bearer [ 294.232327][T18144] tipc: Disabling bearer [ 294.592191][T18155] __nla_validate_parse: 1 callbacks suppressed [ 294.592211][T18155] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4788'. [ 294.888561][T18174] Set syz1 is full, maxelem 65536 reached [ 295.209011][T18190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4801'. [ 295.859191][T18226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4817'. [ 295.894301][T18230] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4818'. [ 295.967274][T18237] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4821'. [ 295.977561][T18237] netlink: 'syz.6.4821': attribute type 10 has an invalid length. [ 295.988123][T18237] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 296.160208][T18248] netlink: 'syz.6.4834': attribute type 1 has an invalid length. [ 296.194075][T18248] bond4: (slave veth9): Enslaving as an active interface with a down link [ 296.205910][T18248] bond4: entered promiscuous mode [ 296.211017][T18248] bond4: entered allmulticast mode [ 296.231882][T18248] 8021q: adding VLAN 0 to HW filter on device bond4 [ 296.257091][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4825'. [ 296.302649][T18253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4825'. [ 296.886833][T18299] lo speed is unknown, defaulting to 1000 [ 298.273337][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4863'. [ 298.282800][T18358] hsr_slave_0: left promiscuous mode [ 298.289078][T18358] hsr_slave_1: left promiscuous mode [ 298.382440][T18364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.467179][T18363] netlink: 'syz.0.4866': attribute type 2 has an invalid length. [ 298.475058][T18363] netlink: 199792 bytes leftover after parsing attributes in process `syz.0.4866'. [ 298.488839][T13669] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 298.509299][T13669] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 298.805597][T18382] loop4: detected capacity change from 0 to 128 [ 298.955353][T18398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4878'. [ 298.996633][T18402] netlink: 'syz.2.4880': attribute type 83 has an invalid length. [ 299.756133][T18432] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.766179][T18432] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.814911][T18438] __nla_validate_parse: 1 callbacks suppressed [ 299.814933][T18438] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4892'. [ 299.842076][T18432] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.851932][T18432] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.900144][T18438] 8021q: adding VLAN 0 to HW filter on device bond3 [ 299.925790][T18442] bond3: (slave ip6tnl1): refused to change device type [ 299.944267][T18432] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.954824][T18432] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.161749][T18432] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.171631][T18432] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.381625][ T2447] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.390689][ T2447] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.530464][ T2447] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.539524][ T2447] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.733512][ T2447] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.742541][ T2447] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.798542][ T2447] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.807602][ T2447] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.826682][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 300.826723][ T29] audit: type=1326 audit(1768979592.886:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18475 comm="syz.2.4906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x0 [ 300.908484][T18479] dummy0: Caught tx_queue_len zero misconfig [ 300.982218][T18487] loop4: detected capacity change from 0 to 512 [ 301.006205][T18487] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 301.035220][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4910'. [ 301.153684][T18496] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.164316][T18496] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.198813][T18502] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4917'. [ 301.237310][T18496] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.247217][T18496] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.306672][T18496] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.316921][T18496] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.366682][T18496] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.377256][T18496] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.478524][T18521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4926'. [ 301.517474][T18524] tipc: New replicast peer: 255.255.255.255 [ 301.523774][T18524] tipc: Enabled bearer , priority 10 [ 301.590812][T18526] IPVS: set_ctl: invalid protocol: 45813 10.1.1.2:20004 [ 301.600958][T18526] Set syz1 is full, maxelem 65536 reached [ 301.791018][T18532] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4931'. [ 301.800297][T18532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.983677][ T29] audit: type=1326 audit(1768979594.036:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 302.008373][ T29] audit: type=1326 audit(1768979594.036:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 302.032067][ T29] audit: type=1326 audit(1768979594.046:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 302.056314][ T29] audit: type=1326 audit(1768979594.046:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f739442aa22 code=0x7ffc0000 [ 302.080192][ T29] audit: type=1326 audit(1768979594.086:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f73943eb58e code=0x7ffc0000 [ 302.104581][ T29] audit: type=1326 audit(1768979594.156:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f739442aae7 code=0x7ffc0000 [ 302.129020][ T29] audit: type=1326 audit(1768979594.166:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73943eb58e code=0x7ffc0000 [ 302.152636][ T29] audit: type=1326 audit(1768979594.166:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f73943eb58e code=0x7ffc0000 [ 302.178325][ T29] audit: type=1326 audit(1768979594.216:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18545 comm="syz.0.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 302.386555][T18564] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 302.403765][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4946'. [ 302.406274][T18564] team0: No ports can be present during mode change [ 302.430803][T18566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18566 comm=syz.6.4946 [ 302.567222][T18576] netlink: 'syz.2.4950': attribute type 3 has an invalid length. [ 302.575257][T18576] netlink: 'syz.2.4950': attribute type 3 has an invalid length. [ 302.634668][ T3510] tipc: Node number set to 4047049469 [ 302.655418][T18580] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4951'. [ 302.688755][T18580] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 304.725685][T18636] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4975'. [ 304.768229][T18636] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18636 comm=syz.6.4975 [ 305.117590][T18655] ªªªªªª: renamed from vlan0 [ 305.237878][ T9665] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.246984][ T9665] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.412061][ T9665] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.420374][ T9665] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.428718][ T9665] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.437605][ T9665] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.446319][ T9665] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.454529][ T9665] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.564392][T18666] loop4: detected capacity change from 0 to 512 [ 305.606665][T18666] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4986: bg 0: block 248: padding at end of block bitmap is not set [ 305.673398][T18666] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4986: Failed to acquire dquot type 1 [ 305.765884][T18681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4992'. [ 305.777463][T18666] EXT4-fs (loop4): 1 truncate cleaned up [ 305.784350][T18666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.805436][T18666] ext4 filesystem being mounted at /972/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.982215][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.088142][T18711] tipc: Failed to remove unknown binding: 66,0,0/0:3064392074/3064392075 [ 306.098776][T18711] tipc: Failed to remove unknown binding: 66,0,0/0:3064392074/3064392075 [ 306.160588][T18716] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5005'. [ 306.190700][T18722] netlink: 'syz.4.5007': attribute type 4 has an invalid length. [ 306.321511][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5013'. [ 307.049927][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 307.049943][ T29] audit: type=1400 audit(1768979599.106:3274): avc: denied { accept } for pid=18764 comm="syz.2.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 308.195715][T18791] lo speed is unknown, defaulting to 1000 [ 308.502679][T18807] ip6t_rpfilter: unknown options [ 308.695258][T18791] netlink: 764 bytes leftover after parsing attributes in process `syz.0.5031'. [ 308.845913][T18826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5043'. [ 308.962048][T18826] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18826 comm=syz.2.5043 [ 309.062343][ T29] audit: type=1326 audit(1768979601.116:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.067190][T18851] lo: entered allmulticast mode [ 309.139168][ T29] audit: type=1326 audit(1768979601.116:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.162801][ T29] audit: type=1326 audit(1768979601.116:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.186501][ T29] audit: type=1326 audit(1768979601.116:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.210068][ T29] audit: type=1326 audit(1768979601.116:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.233678][ T29] audit: type=1326 audit(1768979601.116:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.257208][ T29] audit: type=1326 audit(1768979601.116:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.280764][ T29] audit: type=1326 audit(1768979601.116:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.298385][T18854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5052'. [ 309.304482][ T29] audit: type=1326 audit(1768979601.116:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18850 comm="syz.2.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efdbe1eacb9 code=0x7ffc0000 [ 309.633016][T18861] veth19: entered promiscuous mode [ 309.638275][T18861] veth19: entered allmulticast mode [ 309.917816][T18880] unsupported nlmsg_type 40 [ 310.009042][T18889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5065'. [ 310.019433][T18891] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5066'. [ 310.038812][T18891] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18891 comm=syz.9.5066 [ 310.698454][T18905] lo speed is unknown, defaulting to 1000 [ 310.957591][T18912] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5074'. [ 310.973420][T18912] bond4: entered promiscuous mode [ 310.979339][T18912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.046670][T18912] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.072557][T18912] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 311.085097][T18919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.092344][T18919] IPv6: NLM_F_CREATE should be set when creating new route [ 311.099599][T18919] IPv6: NLM_F_CREATE should be set when creating new route [ 311.142455][T18912] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 311.197718][T18919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.229514][T18919] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 311.256362][T18919] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 311.959574][T18940] netlink: 'syz.6.5082': attribute type 13 has an invalid length. [ 312.297179][T18952] netlink: 'syz.6.5086': attribute type 1 has an invalid length. [ 312.306672][T18951] tipc: Failed to remove unknown binding: 66,0,0/4047049469:2190542915/2190542916 [ 312.316939][T18951] tipc: Failed to remove unknown binding: 66,0,0/4047049469:2190542915/2190542916 [ 312.342328][T18952] 8021q: adding VLAN 0 to HW filter on device bond5 [ 312.386379][T18955] macvlan2: entered promiscuous mode [ 312.391758][T18955] macvlan2: entered allmulticast mode [ 312.430725][T18955] bond5: entered promiscuous mode [ 312.435258][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 312.435309][ T29] audit: type=1326 audit(1768979604.496:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.9.5089" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf8385acb9 code=0x0 [ 312.445572][T18955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.475520][T18955] bond5: left promiscuous mode [ 313.185946][T18980] netlink: 1300 bytes leftover after parsing attributes in process `syz.6.5095'. [ 313.848269][ T29] audit: type=1400 audit(1768979605.906:3331): avc: denied { setopt } for pid=18999 comm="syz.0.5103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 314.552222][T19014] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 314.590283][ T29] audit: type=1326 audit(1768979606.636:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19016 comm="syz.0.5107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f739442acb9 code=0x0 [ 314.761878][T19029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5111'. [ 315.107856][ T29] audit: type=1326 audit(1768979607.166:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.9.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 315.132209][ T29] audit: type=1326 audit(1768979607.166:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.9.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 315.156469][ T29] audit: type=1326 audit(1768979607.166:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.9.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 315.180104][ T29] audit: type=1326 audit(1768979607.166:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.9.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 315.204557][ T29] audit: type=1326 audit(1768979607.166:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.9.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 315.364436][ T29] audit: type=1326 audit(1768979607.246:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.9.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 315.388773][ T29] audit: type=1326 audit(1768979607.246:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19031 comm="syz.9.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbf8385aa22 code=0x7ffc0000 [ 315.610660][T19040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5115'. [ 315.672971][T19040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19040 comm=syz.2.5115 [ 315.715859][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5112'. [ 315.728648][T19042] loop4: detected capacity change from 0 to 2048 [ 315.747710][T19032] hsr_slave_1 (unregistering): left promiscuous mode [ 315.797445][T19042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.106415][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.124820][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5121'. [ 316.296585][T19069] syzkaller0: entered promiscuous mode [ 316.302167][T19069] syzkaller0: entered allmulticast mode [ 317.815984][T19119] netlink: 'syz.2.5143': attribute type 83 has an invalid length. [ 318.998543][T19143] netlink: 'syz.9.5153': attribute type 30 has an invalid length. [ 319.022191][T19144] netlink: 'syz.6.5152': attribute type 2 has an invalid length. [ 319.030059][T19144] netlink: 199776 bytes leftover after parsing attributes in process `syz.6.5152'. [ 319.042190][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5151'. [ 319.051206][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5151'. [ 319.110471][T19146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5154'. [ 319.145820][T19146] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19146 comm=syz.4.5154 [ 319.214322][T19152] netlink: 'syz.4.5157': attribute type 13 has an invalid length. [ 319.451636][ T52] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.460125][ T52] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.025523][ T9640] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.034081][ T9640] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.083672][ T9640] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.092279][ T9640] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.210134][T19182] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 320.210134][T19182] The task syz.4.5164 (19182) triggered the difference, watch for misbehavior. [ 320.233493][ T9640] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 320.242032][ T9640] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.467563][T19189] lo speed is unknown, defaulting to 1000 [ 320.583311][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 320.583328][ T29] audit: type=1326 audit(1768979612.636:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 320.710637][ T29] audit: type=1326 audit(1768979612.676:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 320.734238][ T29] audit: type=1326 audit(1768979612.676:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 320.757905][ T29] audit: type=1326 audit(1768979612.676:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 320.781478][ T29] audit: type=1326 audit(1768979612.726:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 320.805101][ T29] audit: type=1326 audit(1768979612.726:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 320.828656][ T29] audit: type=1326 audit(1768979612.726:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 320.852226][ T29] audit: type=1326 audit(1768979612.726:3508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc1dcb5aa22 code=0x7ffc0000 [ 320.875581][ T29] audit: type=1326 audit(1768979612.726:3509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc1dcb5aab7 code=0x7ffc0000 [ 320.899053][ T29] audit: type=1326 audit(1768979612.726:3510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19195 comm="syz.6.5172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc1dcb17a51 code=0x7ffc0000 [ 321.205881][T19219] batadv_slave_0: entered promiscuous mode [ 321.376968][T19226] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5181'. [ 321.400674][T19226] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19226 comm=syz.6.5181 [ 321.473538][T19231] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5184'. [ 321.557022][T19231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19231 comm=syz.6.5184 [ 322.080867][T19245] vlan1: entered promiscuous mode [ 322.086025][T19245] bridge0: entered promiscuous mode [ 322.214118][T19259] bridge_slave_0: left allmulticast mode [ 322.219966][T19259] bridge_slave_0: left promiscuous mode [ 322.225717][T19259] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.237121][T19259] bridge_slave_1: left allmulticast mode [ 322.242933][T19259] bridge_slave_1: left promiscuous mode [ 322.248783][T19259] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.266799][T19259] bond0: (slave bond_slave_0): Releasing backup interface [ 322.277308][T19259] bond0: (slave bond_slave_1): Releasing backup interface [ 322.287218][T19259] team0: Port device team_slave_0 removed [ 322.305930][T19259] team0: Port device team_slave_1 removed [ 322.312672][T19259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.322444][T19259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.347610][T19259] bond0: (slave macvlan1): Releasing backup interface [ 322.360003][T19263] team0: Mode changed to "activebackup" [ 322.367259][T19272] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 322.383404][T19271] IPVS: Error connecting to the multicast addr [ 322.390921][T19250] veth1_to_bond: entered allmulticast mode [ 322.416496][T19274] batadv_slave_0: entered promiscuous mode [ 322.423042][T19250] veth1_to_bond: left allmulticast mode [ 322.472118][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5205'. [ 322.539996][T19289] loop4: detected capacity change from 0 to 1024 [ 322.556689][T19289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.579061][T19289] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 322.604930][T19289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 322.623392][T19289] System zones: 0-1, 3-36 [ 322.634996][T19289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.669706][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.724983][T19304] bridge0: entered allmulticast mode [ 322.974233][T19310] lo speed is unknown, defaulting to 1000 [ 323.128030][T19317] netlink: 'syz.6.5220': attribute type 1 has an invalid length. [ 323.142401][T19317] bond6: entered promiscuous mode [ 323.148486][T19317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.167926][T19317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 323.175341][T19317] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 323.185969][T19317] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 323.199098][T19317] bond6: (slave wireguard0): making interface the new active one [ 323.206917][T19317] wireguard0: entered promiscuous mode [ 323.215407][T19317] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 323.237449][T19317] bond6: (slave wireguard1): The slave device specified does not support setting the MAC address [ 323.251671][T19317] bond6: (slave wireguard1): Enslaving as a backup interface with an up link [ 323.442560][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5222'. [ 323.451615][T19325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5222'. [ 323.542816][T19333] lo speed is unknown, defaulting to 1000 [ 325.116531][T19378] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.5242'. [ 325.126425][T19378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5242'. [ 325.253620][T19380] siw: device registration error -23 [ 325.340958][T19384] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 325.608820][T19393] uprobe: syz.4.5249:19393 failed to unregister, leaking uprobe [ 325.757244][T19395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5250'. [ 325.766338][T19395] netlink: 'syz.4.5250': attribute type 7 has an invalid length. [ 325.774130][T19395] netlink: 'syz.4.5250': attribute type 8 has an invalid length. [ 325.781979][T19395] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5250'. [ 325.975083][ T29] kauditd_printk_skb: 1032 callbacks suppressed [ 325.975102][ T29] audit: type=1326 audit(1768979618.036:4543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.068199][T19399] lo speed is unknown, defaulting to 1000 [ 326.106755][T19401] lo speed is unknown, defaulting to 1000 [ 326.125866][ T29] audit: type=1326 audit(1768979618.036:4544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.150130][ T29] audit: type=1326 audit(1768979618.036:4545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.173788][ T29] audit: type=1326 audit(1768979618.066:4546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.198127][ T29] audit: type=1326 audit(1768979618.066:4547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.221711][ T29] audit: type=1326 audit(1768979618.066:4548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.245860][ T29] audit: type=1326 audit(1768979618.076:4549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.269407][ T29] audit: type=1326 audit(1768979618.076:4550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.293662][ T29] audit: type=1326 audit(1768979618.076:4551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.318034][ T29] audit: type=1326 audit(1768979618.076:4552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19398 comm="syz.6.5251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x7ffc0000 [ 326.514824][T19407] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5253'. [ 326.536470][T19407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19407 comm=syz.9.5253 [ 326.659117][T19410] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 326.964503][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5261'. [ 327.141426][T19430] syzkaller0: entered promiscuous mode [ 327.147087][T19430] syzkaller0: entered allmulticast mode [ 327.528028][T19445] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5269'. [ 327.591952][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5269'. [ 327.740749][T19450] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5271'. [ 327.794561][T19453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5271'. [ 328.102574][T19461] netlink: 'syz.2.5274': attribute type 142 has an invalid length. [ 328.110690][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5274'. [ 328.341862][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5275'. [ 328.687855][T19471] netlink: 'syz.9.5278': attribute type 1 has an invalid length. [ 328.696878][T19471] Unknown options in mask 20 [ 329.464545][T19493] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5286'. [ 329.676142][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5290'. [ 330.040756][T19525] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19525 comm=syz.6.5299 [ 330.322595][T19542] loop4: detected capacity change from 0 to 512 [ 330.355633][T19542] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 330.368253][T19542] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 330.376855][T19542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.404338][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.301269][T19579] netlink: 'syz.6.5317': attribute type 1 has an invalid length. [ 331.354731][T19579] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.483287][T19581] bond7: (slave geneve2): making interface the new active one [ 331.499290][T19581] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 331.510032][ T9637] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.534691][ T9637] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.577510][ T9637] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.635107][ T9656] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.643892][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 331.643908][ T29] audit: type=1326 audit(1768979623.696:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19588 comm="syz.6.5319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1dcb5acb9 code=0x0 [ 331.810425][T19601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.876470][T19601] vlan2: entered allmulticast mode [ 331.881694][T19601] bond1: entered allmulticast mode [ 332.736277][T19634] netlink: 'syz.0.5337': attribute type 39 has an invalid length. [ 332.764178][T19636] __nla_validate_parse: 8 callbacks suppressed [ 332.764201][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5338'. [ 332.956737][ T29] audit: type=1400 audit(1768979625.016:4816): avc: denied { ioctl } for pid=19640 comm="syz.9.5340" path="socket:[75279]" dev="sockfs" ino=75279 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 333.027221][ T3415] kernel read not supported for file bpf-prog (pid: 3415 comm: kworker/0:4) [ 333.061666][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5342'. [ 333.072214][T19645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.177798][ T29] audit: type=1326 audit(1768979625.236:4817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.0.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 333.219551][T19653] netlink: 'syz.2.5345': attribute type 1 has an invalid length. [ 333.224931][ T29] audit: type=1326 audit(1768979625.266:4818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.0.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 333.251026][ T29] audit: type=1326 audit(1768979625.266:4819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.0.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 333.274702][ T29] audit: type=1326 audit(1768979625.266:4820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.0.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 333.298226][ T29] audit: type=1326 audit(1768979625.266:4821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.0.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 333.321790][ T29] audit: type=1400 audit(1768979625.276:4822): avc: denied { write } for pid=19652 comm="syz.2.5345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 333.375694][T19653] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 333.384721][ T29] audit: type=1326 audit(1768979625.436:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.0.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 333.388224][T19653] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 333.411683][ T29] audit: type=1326 audit(1768979625.436:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19648 comm="syz.0.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739442acb9 code=0x7ffc0000 [ 333.421906][T19653] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 334.135681][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5353'. [ 334.208026][T19686] delete_channel: no stack [ 334.302578][T19704] netlink: 'syz.6.5361': attribute type 13 has an invalid length. [ 334.431262][T19706] lo speed is unknown, defaulting to 1000 [ 334.516218][ T9656] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.549927][ T9656] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.563072][ T9656] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.613616][ T9656] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.181856][T19740] netlink: 'syz.9.5376': attribute type 1 has an invalid length. [ 335.228522][T19740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.266413][T19746] batman_adv: batadv0: Removing interface: dummy0 [ 335.298110][T19746] bond5: (slave dummy0): making interface the new active one [ 335.307370][T19746] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 335.329166][T19740] bond5: entered allmulticast mode [ 335.345457][T19740] dummy0: entered allmulticast mode [ 335.633155][T19772] netlink: 'syz.2.5388': attribute type 1 has an invalid length. [ 335.641058][T19772] netlink: 668 bytes leftover after parsing attributes in process `syz.2.5388'. [ 335.780268][T19786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5394'. [ 335.812702][T19786] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 335.827711][T19786] team0: entered promiscuous mode [ 335.832920][T19786] team0: entered allmulticast mode [ 335.884002][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5397'. [ 336.108157][T19800] lo speed is unknown, defaulting to 1000 [ 336.573752][T19819] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5406'. [ 336.606465][T19819] netlink: 'syz.4.5406': attribute type 10 has an invalid length. [ 336.632835][T19825] netlink: 'syz.4.5407': attribute type 4 has an invalid length. [ 336.649589][T19825] netlink: 'syz.4.5407': attribute type 4 has an invalid length. [ 336.720594][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 336.720612][ T29] audit: type=1326 audit(1768979628.776:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.752809][ T29] audit: type=1326 audit(1768979628.806:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.776467][ T29] audit: type=1326 audit(1768979628.806:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.800090][ T29] audit: type=1326 audit(1768979628.806:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.823652][ T29] audit: type=1326 audit(1768979628.806:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.847312][ T29] audit: type=1326 audit(1768979628.806:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.870903][ T29] audit: type=1326 audit(1768979628.806:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.894425][ T29] audit: type=1326 audit(1768979628.806:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.918028][ T29] audit: type=1326 audit(1768979628.806:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.941571][ T29] audit: type=1326 audit(1768979628.806:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19831 comm="syz.9.5410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fbf8385acb9 code=0x7ffc0000 [ 336.976106][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5411'. [ 337.008440][T19840] netlink: 'syz.2.5413': attribute type 39 has an invalid length. [ 337.059771][T19844] xt_hashlimit: size too large, truncated to 1048576 [ 337.110970][T19846] –: renamed from vxcan1 [ 337.280656][T19855] netlink: 'syz.4.5417': attribute type 6 has an invalid length. [ 337.472991][T19864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5421'. [ 337.720218][T19881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5428'. [ 337.744033][T19881] bond5: (slave bridge8): Enslaving as an active interface with an up link [ 337.757025][T19881] macvlan3: entered promiscuous mode [ 337.762390][T19881] macvlan3: entered allmulticast mode [ 337.768419][T19881] bond5: entered promiscuous mode [ 337.773566][T19881] bridge8: entered promiscuous mode [ 337.779217][T19881] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 337.787119][T19881] bond5: left promiscuous mode [ 337.791926][T19881] bridge8: left promiscuous mode [ 338.449277][T19896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5433'. [ 338.475736][T19896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5433'. [ 338.521343][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5437'. [ 338.530667][T19905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5437'. [ 338.539794][T19905] netlink: 'syz.4.5437': attribute type 1 has an invalid length. [ 338.598150][T19908] netlink: 'syz.9.5438': attribute type 10 has an invalid length. [ 339.428290][T19942] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5451'. [ 339.451820][T19942] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19942 comm=syz.6.5451 [ 339.466428][T19942] netlink: 'syz.6.5451': attribute type 1 has an invalid length. [ 339.541261][T19937] lo speed is unknown, defaulting to 1000 [ 339.561672][T19947] netlink: 'syz.6.5453': attribute type 1 has an invalid length. [ 339.583629][T19947] 8021q: adding VLAN 0 to HW filter on device bond8 [ 339.622904][T19947] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5453'. [ 339.632772][T19947] bond8: entered promiscuous mode [ 339.643807][T19947] bond8: (slave dummy0): making interface the new active one [ 339.652535][T19947] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 340.884829][T19993] futex_wake_op: syz.0.5469 tries to shift op by -1; fix this program [ 340.981071][T20001] netlink: 'syz.6.5473': attribute type 4 has an invalid length. [ 341.057081][T20007] tipc: Enabling of bearer rejected, failed to enable media [ 341.205352][T20023] bond1: option mode: unable to set because the bond device is up [ 341.229928][T20023] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 341.276468][T20023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.290687][T20023] bond1: (slave lo): making interface the new active one [ 341.335396][T20023] bond1: (slave lo): Enslaving as an active interface with an up link [ 341.379626][T20023] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 341.609257][T20041] netlink: 'syz.0.5489': attribute type 7 has an invalid length. [ 341.617199][T20041] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5489'. [ 341.647575][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5489'. [ 341.657187][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5489'. [ 341.671608][T20041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.297852][T20064] netlink: 14 bytes leftover after parsing attributes in process `syz.9.5497'. [ 342.323362][T20064] bond5: (slave dummy0): Releasing active interface [ 342.331143][T20064] dummy0 (unregistering): left allmulticast mode [ 342.341283][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 342.341300][ T29] audit: type=1400 audit(1768979634.396:5733): avc: denied { accept } for pid=20044 comm="syz.4.5490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 342.904956][T20096] netlink: 'syz.9.5507': attribute type 10 has an invalid length. [ 342.934374][T20096] team0 (unregistering): Port device team_slave_0 removed [ 342.943003][T20096] team0 (unregistering): Port device team_slave_1 removed [ 342.981245][T20101] lo speed is unknown, defaulting to 1000 [ 343.071571][T20106] lo speed is unknown, defaulting to 1000 [ 343.174017][T20117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20117 comm=syz.9.5514 [ 343.543637][T20126] tipc: Enabling of bearer rejected, failed to enable media [ 343.973757][T20162] __nla_validate_parse: 1 callbacks suppressed [ 343.973780][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5527'. [ 344.038179][T20169] netlink: 'syz.2.5529': attribute type 1 has an invalid length. [ 344.057769][T20169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.139660][T20169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5529'. [ 344.161202][T20169] bond3: entered promiscuous mode [ 344.166397][T20169] bond3: entered allmulticast mode [ 344.229631][T20169] bond3: (slave dummy0): making interface the new active one [ 344.259949][T20169] dummy0: entered promiscuous mode [ 344.285968][T20169] dummy0: entered allmulticast mode [ 344.302784][T20169] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 344.398970][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5532'. [ 344.709648][T20220] netlink: 'syz.6.5545': attribute type 1 has an invalid length. [ 344.741191][T20220] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5545'. [ 344.751439][T20220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.765321][T20220] 8021q: adding VLAN 0 to HW filter on device bond9 [ 344.775316][T20220] bond9: (slave geneve3): making interface the new active one [ 344.783625][T20220] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 344.792502][ T2447] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.806384][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5547'. [ 344.822088][ T2447] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.830907][ T2447] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.839461][ T2447] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.926263][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5549'. [ 344.939112][T20229] chnl_net:caif_netlink_parms(): no params data found [ 344.958025][T20191] ================================================================== [ 344.966184][T20191] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 344.973006][T20191] [ 344.975360][T20191] write to 0xffff888107fcd250 of 8 bytes by task 20199 on cpu 1: [ 344.983113][T20191] __dentry_kill+0x142/0x4b0 [ 344.987767][T20191] finish_dput+0x2b/0x200 [ 344.992140][T20191] dput+0x52/0x60 [ 344.995795][T20191] path_openat+0x1155/0x23c0 [ 345.000441][T20191] do_filp_open+0x15d/0x280 [ 345.004991][T20191] do_sys_openat2+0xa6/0x150 [ 345.009623][T20191] __x64_sys_openat+0xf2/0x120 [ 345.014438][T20191] x64_sys_call+0x2b07/0x3000 [ 345.019160][T20191] do_syscall_64+0xc0/0x2a0 [ 345.023783][T20191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.029708][T20191] [ 345.032056][T20191] read to 0xffff888107fcd250 of 8 bytes by task 20191 on cpu 0: [ 345.039753][T20191] fast_dput+0x5f/0x2c0 [ 345.043939][T20191] dput+0x24/0x60 [ 345.048047][T20191] do_mknodat+0x2c2/0x4f0 [ 345.052415][T20191] __x64_sys_mknodat+0x5e/0x70 [ 345.057228][T20191] x64_sys_call+0x2b33/0x3000 [ 345.061964][T20191] do_syscall_64+0xc0/0x2a0 [ 345.066507][T20191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.072443][T20191] [ 345.074793][T20191] value changed: 0xffff888237a4c110 -> 0x0000000000000000 [ 345.082006][T20191] [ 345.084351][T20191] Reported by Kernel Concurrency Sanitizer on: [ 345.090617][T20191] CPU: 0 UID: 0 PID: 20191 Comm: syz.9.5537 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 345.102071][T20191] Tainted: [W]=WARN [ 345.105931][T20191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 345.116226][T20191] ==================================================================