last executing test programs: 2m10.852321668s ago: executing program 0 (id=160): syz_pidfd_open(0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x400242, 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) write$binfmt_elf64(r0, 0x0, 0x78) (async) write$binfmt_elf64(r0, 0x0, 0x78) close(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) (async) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r2, &(0x7f0000002880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) (async) connect$inet(r2, &(0x7f0000002880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) socket(0x11, 0x80000, 0xaa) (async) socket(0x11, 0x80000, 0xaa) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x1, 0xfefffffd, 0x1a6}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x35, 0x9, r1, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x35, 0x9, r1, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x118, &(0x7f0000000000)=0x4, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x17, &(0x7f0000000640)=ANY=[@ANYBLOB="69000000080079cd0200000000000700000018118487dfba10b29d9a293f1be589c0d8fb805caa11f52479a2032e4496cbe8b0047d20812ace108915b12ba2b948d07648e596cab4b91f97f87aa1a20abbb37a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000852000000100000025a9400004000000181a0000", @ANYRES32, @ANYBLOB="0000000000000000185b00000f000000000000000000000018350000030000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000000480)=""/195, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x8, 0x2, 0xd74}, 0x10, 0x0, r4, 0x1, &(0x7f00000008c0)=[r0, r0, r3, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x2, 0xf, 0x7}], 0x10, 0x6e1}, 0x94) add_key(0x0, 0x0, &(0x7f0000000180)="0000000000000002ff69fe0000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed", 0x4d, 0xffffffffffffffff) (async) add_key(0x0, 0x0, &(0x7f0000000180)="0000000000000002ff69fe0000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da888c7a56843a85f3a078c97d542ed", 0x4d, 0xffffffffffffffff) unshare(0x2c020400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m10.504009896s ago: executing program 0 (id=165): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x101996, 0x7ff, 0x9, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) exit(0x7) lsm_set_self_attr(0x64, &(0x7f0000000000)={0xa, 0x9, 0x73, 0x53, "5bf5ae12fcb5cc75e9813ae16ec7ef6ddccb5212c37cab3fde9868533dd096c327e8651110f96bc449447036ff33e44610670ffd199cbb5452b8a3e527e83e0396389b5df5c8b479c06f84f7931b67e4e5438c"}, 0x73, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) 2m9.521103885s ago: executing program 0 (id=177): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x60, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0xfeffffffffffffff, 0x0, 0x0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x7fffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) 2m7.522759683s ago: executing program 0 (id=186): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000740)=""/377, 0x179) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xec9, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x10134, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r2 = getpid() syz_pidfd_open(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3, 0x2}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="090000000500000008000000ffffffff42000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000f484932a93940e3fa2bc1b85e52da000"], 0x50) 2m6.603627629s ago: executing program 0 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000180)}, 0x400, 0x3ff, 0xfffd, 0x2, 0x2, 0x8000080}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@i_version}, {@noblock_validity}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x611, &(0x7f0000000c00)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6c9c7175}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000080000000800000040000000", @ANYRES32, @ANYBLOB=' \x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="af067d00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000998af8ff00000000bf81d5883b272f2760430000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2m6.37859632s ago: executing program 0 (id=202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) timerfd_gettime(0xffffffffffffffff, 0x0) (fail_nth: 1) 2m6.321758213s ago: executing program 32 (id=202): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) timerfd_gettime(0xffffffffffffffff, 0x0) (fail_nth: 1) 6.363586546s ago: executing program 1 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000c40)=[{{&(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x8, 0x400000, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = gettid() tkill(r6, 0x12) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x40030002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x4003, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 6.075522499s ago: executing program 3 (id=1197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@ipv6_newrule={0x24, 0x20, 0x10, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x9, 0x0, 0x0, 0x3, 0x2801e}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0xfffffffffffffe1e}}, 0x480d0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x43a1bd76, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x3, 0xfffe}) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair(0x2b, 0x1, 0x8, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, 0x0, &(0x7f0000000040)) sendmsg$can_raw(r5, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r7}, 0x10, &(0x7f0000000100)={0x0, 0x33}, 0x2, 0x0, 0x0, 0x44904}, 0x8005) socket$nl_route(0x10, 0x3, 0x0) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) 5.827782692s ago: executing program 4 (id=1200): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000040)=0xee, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x5, 0xf, 0x0, &(0x7f0000000080)="259a53f2712d03488fe5c55033ec28", 0x0, 0x20d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005"], 0x40}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x180, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "13de04798b0fc9b6c82961f60b1c7954857660ae8f9a8ad0"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd6bc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4bdb70d6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4810}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x3}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setreuid(0xffffffffffffffff, 0xee01) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@null, 0xe, 'dummy0\x00'}) 5.487930768s ago: executing program 1 (id=1201): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000853000/0x1000)=nil, 0x1000, 0x0) ptrace(0x10, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf25020000000500020002000000140007002001000000000000000000000000000106000a004e20000008000b00", @ANYRES32=0x0, @ANYBLOB="050004000100000008000b00", @ANYRES32, @ANYBLOB="1400090000000000000000000000000000000000050002000a"], 0x74}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x800) ptrace$setregs(0xf, r0, 0x7ffe, &(0x7f0000000240)="12d6") socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd26, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x4, 0xfc, 0x3, 0xff, 0x5, 0x2100}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008001) r3 = socket(0x10, 0x803, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10026}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x22a5, 0x38023}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc154}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 4.331557016s ago: executing program 5 (id=1203): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x102260, 0x10000, 0x0, 0x1, 0xc, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0xd82, &(0x7f00000008c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@mpls_mc={0x8848, {[], @ipv4=@tcp={{0x5, 0x4, 0x3, 0x6, 0xd74, 0x67, 0x0, 0x4, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}, {{0x4e21, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0xf}, {"6143bf1b2cf99e1f486c96d4fa09d93759fb4a17b6c3b1fd845399b785e1757a5be2a354173a619751b4b568f5174fa2d3e3f527b7a57fc213458c13ed6f1ed7057ad3f76686a7b2f7e66fb28eb41707909d17a3a6d380aaf4b43963221deb4a94f3526f3c38f700d64b3ea1485e127051c88baf3764d8c3af0d34060522720e6f56a1ed97823f808a881fa0ac540e6c54912144d4676321bdb0810477003680eaed273ca536808010e299628b6a64ec3884294ba8c6a8824be21b6fce67a2857966d4ac760e054644e5cd18a1a9e1ec7cf0dcb7958f875b6934dacd90f6c7425c2b650c9232f04c4742d44972cdbe1249b150d796e663ef76fd0d790180387d63ebb16e656ada1e578faab44c0d9867476b9cc60f4544f09e99255dd5540ac340b3274672cb0756364027a73ac53a4f2258f58b99ac3ad5a480e79466daeaf674797296c9a662c42f2b9a14fe75dec10bb917fd2e6170fae9659dcff819e3de6cb393aea4b7b2541577265e232610d3cf8c391ac9c0f4c94589051b0d0dcc76bb8dc7f5b1cee62ce0a96bcf209df537010cfad477383244d9d2285ccf2b4248eef8fe7848e462b79964824251b49c254d746e0af99bb101eefe69cdf37d5e50ba9b8128c5be14a247fde9329c5988d6d6a5148a44a84e985e3b338b10bc4c0ac0a3111f13be321c068635373fc694d1609a58f485b14b1c3d7495b564bc1805080958266861f584d01993e8403825828faa58535f4f35a940bd2c769e60458ffacd8b1635a8df3ff6cabb705de7c55bb1e6d2d51c8607f5a3f69479e488f44ed1ba571a36e25f80d7f233676d2e7217c22c0e5b99f287fbcb7a30e588aa663f05cad444f7cd80b866803a98d8d1503dd9b7cb497255b536a7ae2eab3f99a06bb673e150552b57467efaf1fb335dafa059b1b57f9b3090f9716dbc593e3e75fbb2d503605b1eea2a2b4885b611e633d3e6059ba44bc88f576cd3c7a5603cff3119a0e4ab42f19c884c2d9fb12c05eeb018464ab88c9d81c4b07c03ef550e67f72d7893ac0d8328d8217edbe0e01f29a09be1e7e58776dfefcc888aac3875477fbf88d6fe2a05325bfed6d6201fc8a8518a325501ec11e34167eb896250e2bd9fe96356cf626496798f0dd6ce1f804dc27fd78521a6bc044973d1974c662529218716f265070cd24f3878400746a29b3eff2292ed0199d1d57ee46c34e8a6abd602749a74c67310de8b752e7df22112aeaaa290e48a3bbd1f528cde10ece39591f000fd3d1579aceb76cf5668717ae8c3c3abff7afc9000fcc6658f58d61d532419cb477e25fdf5bf250c82bacf1c0080b4cad232c1cb18d490c8187dd0f5c4a08679b43f5cfd1ca4ce9332ebcc700fcfbd52bbad6c37bbe1115248adbff87baa3edf3bfc8772ca626d1c4b248d4b466904274d0be440c701ab49dbab0c22671799995a30c9ea2e79534fcadb61d49b94f32e93d099dc07215a68a4ca9e7e1863ec0c5a1ac001b42a3e501e25bcd8b99445fdee9a77b0fdf4b5c399e68b6c8b0d6590f798dfd8d90bcfa908d612faf78abce00b7717522810c4cd2da4c35fa8a3485848fb4ef61ea1ef12cdac6d0d283a805ac8fac3fb1d519bb7ebcddd37b00d7b36b9c68d6a7bb4e90dfc3cf7b13e4677c3d61ac41c6e4fe20b483af166c8ba7e1bc6355d5c10d7eefacdfc86483516502827e071adf8c03a56f10b65355c064b890fc9ff42847f55cb60f14f20329e5751c327951234c453fd3f71856ddcc6439ea210d8c47e39dc034d7c0b6e98d55bf35ed62d176c3bcf29758a620247f83e0788a929cf6af24a3000ec923ff64d1d343ea5f859419b4d1bf52b186105b434d7dad5c13564544ef91ad0cf8d2e31aa37c4e6b841c564a64240743424d0e60dd9aafc1ea0891e7291a37906b40c26ef4c767e0fbfc8a5935a56414b5a7ab71292de357d49ae27e79bed4d6c6cb032d69d59350c3138858d79741d8f2aad129ed7292a5f5975ac5f71850b4e2af930e400575f8391b3ef85815a626121d3c55d6a28dd27976ca6c722128fdd8ca5c8dc1008c7cf2e328ebc5a2fb5a2321f378beb9ced53818b833669d3e32c77e307a8db6d9905bc61d60c33db4cd4e4b2229e558fd8a041feaa93aa65b0ec6e30a07242199fa1d8c0459f6b5b23995f92b1a1a37284d322d7914751e445a76383fcc311394a7542a3fabb63aed0e257df7cc7d2739aa215fe102e7f07c19b2830c306ef85460d7c1775a697a7d9c84b376c11e5334b5982a43280f266cdbf7a8dd40e5ae48e3ce6a234684e3caf9c6dcca5c0497c40693e381cf55e36b715e7ee6ee5a5627811856a088f8b658ccb85d09d3e30b81a36c15c77d6ac9f30f549bef3108c72a1da5c4e2a70f9581077da375ec1db9937375c9d82988e586d5d58ab8fa568e2403050a73074f5c7d5ef8530ed20250c57beedd022a089079cc3cb6da09253e55fe971d3273b2137b01bdd845e3d61a2fa0381714be4086fd2fe122b29e6746f53f50f91e0b5dce55716b428afbb387776fbb1b0af3f6c68e26ccf76e2dac883e331cce212e7385c497a0369ce85d2db398cf9c2f8c61c54fdf014f536ce8af909add7d9510d6df18c2e78ee7362a9005d0a8bb5f479f413b2476020936070bc6063c6bd735cf67dc9cf0773ccdb96040e5da7d8ed65683bceef92bbeadaffee7599abd98637ea894e181b9b2345c07b23ae76d9b902aa5b3419fab67ad40317705cfb2503b91620d354c52fcbccba889041647bc1bb14725ec5840026ab375aa8f6ff0230ddeecfa3c7d80fbe21849e608adf778fcb624233429fb8068b7a5a1988f6735d9b15a797c770dd0b77bc7e44b95e1d3399c12d86da150e685f94c1268cb670f6cc3e6bd0f3d1d888930e5297ea61b65803c86bc2e3bb7d05bfc40047a52e406c0a6f210b148b0601cd76b6d764bd50187bba1c89c15e0a12aaf26be1f6eed0ce2ca16928e2a236938c5e629a4aab816dfc731dddfb5f1860b57b49a136cbd15560d417ad11da12c136d2f48f833b5805c5413b242d530336dd15e17a5101a2945013381d25ce0f82bc4e9a918b97bb08053fab257749dfa113ca07899fc5ec8050a98324805167c75f084f71f2002ea6f520e3e04ee2993d26b149c576e498e30ff7c40fcc912ac16f2877c3e62f1cf78f14a6e58bb546f56484fcafe5f4e7071a30ee0db9123df737439490dae56d49093b459de08563ee98ea5d59a108888e2cf2d2a5601274cf44f8cbf8822939098524abc9299f617ef1754f83e792922a4dca9e5a4813a99d2bcc1bbe357550e1f6110ce4d6822b9955b3d69f4838e58b3ab26b376745bc48744ced6f62673ab4d79b73673b0dcc1d08fcb158a9db8c3749e1ca3492230ed4992df24553e67a10c1c8b6847c87bdec8abab5265c664d3f3e228bb62896218809b94e6e7414fa68b0a51029311a05de0cb657476864e9c975f7ccda9d65bc414b1328111555ba6574635ccb84a1e4c7371c69b337b0748b9d73e9b3e7c1ae75d42ac0a66c4fd1fd4c4ac6b3a2877c04c05e9e116ec0b553e21863bf0126d98cb6e0a8aa26beaeeab176650708708c12fa4fb3f08c00e927602a0e9a62105030a8217b9fbd1cca44a29f509729613920079ea1c2f8855a17f854c872a1395d83028fd5d9625f215d8c90fee0fa011a341885e5a4b5a8d3ebf69da9d355b48da355d3f790fd666b7e4c6838464d75ae1cdd35727a25d35e07f3436c67391496602c5b939cba5f348fffb5a4aeef0f29ce989975987393538480e3d3cb0f83898b6340911ae4ac7fc9fa5aab4c1433a9cb7b759b455d44e226091acdf2cc68ae913c6f50a1f2ead2e53c93d4c73ab6c672bd94b55edde6aa1b398c116ea597621b992cacecef8fb639ccd8971606eaf88c8bb5a411a80fe421118468ec82b10938525aef29a82ac8bb938e3dda08e0c8ec56bd694770123ffe93359ae5596f38ec1a4ac0a6f0baa6df47430b5d7cfc4d77e2f1e6f1835600d93c66ae1d295322a9487f6188f1147de92b9e3a5428e82ec107ff3fbbce49663c8e7b9eb8f337f95277ac16bf8922f2dd263c3a8a58b9a2268db32d999886f498711e0d9858c145f215a92ef5a35fdde32c9e0c95069a9288d67bde7a2e4c89825a9d0fedc298ac559bb358aa0dc37549968cc8aa4d3b1cde3e39e0da52c938b97b65921291d17b1d1869e4feac97f9bac27c8109009985b78deec7f97d7e211bc607c766eb498b5f9fafda084457f76ce3f0108df56384edd64e5308533dcff45c578fc0ad28730245da231825a37795c621ae9907879016efaaa2588e91f33eb25f69db40c42114007fcf7f9d2a77b362ef001f863e366f0884fef8576545445230f7f21f2a7222a1a298534154534c24021950a4a558e307e690d048a6685f028f5e3b7a0174e4a1afa9657a7c3318b3f383a6287f49f4a12b9da2bf724a520735d69d9aa9ea4a470852eab662cb9637c2b636f992e14c90b66b267bfe76d538f511aecf631e9517ab5440d950a91612597e0aefdccdc5da80570d53e1af6ce740601e5edbde72b236c9dd41be488521b3abdf8840ed58538be30ad10b9fecfe2ee3bb1e97f9b112218a8159b10e21d06bb5b775141823f915474d9c97db7750b7bb1f117feee72e676837b5d206ca4f07a4a3f356f4ef77e01f805d08c980af94147b01b519cc853f4b9442607630d18726a3920637dfa8b6ddac654845b13f735ea6b7e959cf9cb471ed880d9e121de947fedd17b6fdd746b34062267665d18cef9b02aedeab3ef71039fb1062fced406966"}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000480), 0x6, 0x578, &(0x7f0000000ec0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) socketpair(0x1e, 0x1, 0x5, &(0x7f0000000400)) fallocate(r5, 0x1, 0x1, 0x8fffb) timer_create(0x0, &(0x7f0000000100)={0x0, 0x15, 0x0, @thr={&(0x7f00000000c0)="909e8b1aac82b6b8e5f3ae1420f27a8a2f68e97018f55f68d14b317d3fe92073203507410e41704577b9ff0d0eba197d67c50034a220413c341f", &(0x7f0000000280)="1ddef0ce21b4cd837d0cf117520490d8ef76dd51073a45e7953590b16180b121302a41817fa1884461ea9a7302787d016650502bb7457a75ad65ea301e093ebf8eaa6a71a66b06e7bd150c5ff078f5ecb7258ca049f0b65fa22d672bcea55befedeaa952f4009d6356f586eda1a1f542b9c13b87c92afc5e2848a26985b30fd00223b765b876a8d10904fe161a620dd5fa7771be120310131699e079dcf0b9cf087094b4b8794bb6e2625a5caf035f4b52f1eb1df56f214e"}}, &(0x7f00000001c0)=0x0) timer_settime(r6, 0x6ab7121d11659632, &(0x7f0000000380)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f00000003c0)) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r8}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) 4.277059269s ago: executing program 4 (id=1204): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56ea3b2222d70fbf31db5e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000006c0)=""/198, 0xc6}], 0x2}, 0x8}], 0x1, 0x10300, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) prctl$PR_SET_NAME(0x4, 0x0) r1 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0xa, 0x10100) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000007c0)=""/253) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.275455559s ago: executing program 3 (id=1205): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x49}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f00000003c0)=ANY=[@ANYBLOB="4cff810200000000000000010000000081004700001105ab5373c0be0002"], 0x0) 4.229865801s ago: executing program 1 (id=1206): unshare(0x24020400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028005000900890000000500040007000000"], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x2, 0x5, 0x5) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8300, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket(0x10, 0x806, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r8 = getpgrp(0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x4, 0x9, 0x4, 0x4, 0x0, 0xb008, 0x2, 0xe, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8000000000000001, 0x7}, 0x314, 0x4, 0x6, 0x1, 0x2, 0x6, 0x4, 0x0, 0xffff8001, 0x0, 0xfffffffffffffffc}, r8, 0xc, r3, 0x3) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) syz_clone(0x4400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) setsockopt$inet6_opts(r6, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x11, 0x0, 0xf3, 0x0, 0x0, 0x11, 0x65}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000014"], 0x30}, 0x1, 0x0, 0x0, 0x20040044}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xf, 0x12, r4, 0xb39cb000) 4.190405042s ago: executing program 3 (id=1207): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffff9, @initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2510, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x22, 0x0, &(0x7f0000000180)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x2afd, &(0x7f0000000380)={0x0, 0xfffffffd, 0x13098, 0x10010004, 0x125}, &(0x7f0000000100), &(0x7f0000000000)) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x31}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0xffffff5e, &(0x7f00000002c0)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c050010ffff0af30000000075f800250003000f600000251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.846928859s ago: executing program 3 (id=1208): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) gettid() r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3a394bd3202d647dbfb8a1b60dab8c7d51abeda8d39eae0ad42b93315bd273bbaeaf90c1814dbaf8493292a5c621ada9d88ea36c1570b563c555005272158bb32a4545dcca986d130b8d5f8590e416c677b62bb6d5fac74dfeaabbff41b425cd7b2b44814c6616053d700c514a996f77925af46e56a65cb48290615ab431fa0be9f41874ba631caecb5b8afbfbb3d030eaea441aa02c1ae23cde6b2001acfc43957c0452721ee65eab0572fd547ede2db240f2d66d27fac28d48f06ce8c25d03a098e2"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000400), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r6}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x5}, r6}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=r6, @ANYBLOB="3a8d04005a1000000800040044"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x804) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x292ca90c, 0xffffffffffffb2eb}, 0x119b10, 0x1, 0xe, 0x4, 0x8, 0x6, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r8 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.84674253s ago: executing program 5 (id=1209): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000100c0)={0x0, &(0x7f0000000180)}, 0x10) gettid() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000d00)=""/93, 0x5d}], 0x2, 0x9, 0x100) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200503a00fe8000000000000500000000000000bbfe8000100000000000000000000000aa0802907800000000600008100000110000000000000000ffff00000000fc0200000b000000000000000000000000000000000000000588000100000000fb36eeca6fad50b375a22a584d16ca55108301bac06858ad004de70d296216e78edcd103199f1cd2a7a0e1ca000000"], 0x0) 3.84641786s ago: executing program 4 (id=1210): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) readv(r2, 0x0, 0x57) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1, 0xb, 0x1) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) (async) accept4(r0, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000140)=0x80, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0), r5) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) (async, rerun: 32) r7 = socket$tipc(0x1e, 0x5, 0x0) setrlimit(0x7, &(0x7f00000001c0)={0x7f, 0x8000000000000001}) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) (async, rerun: 32) sendmsg$tipc(r8, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x0, 0x101d0}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) (rerun: 32) 3.83804357s ago: executing program 5 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000180)}, 0x400, 0x3ff, 0xfffd, 0x2, 0x2, 0x8000080}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@i_version}, {@noblock_validity}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x611, &(0x7f0000000c00)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6c9c7175}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000040000000800000008000000400000", @ANYRES32, @ANYBLOB=' \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="af067d00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000998af8ff00000000bf81d5883b272f2760430000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 3.719952316s ago: executing program 1 (id=1212): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x1, @perf_config_ext={0x8005, 0x6}, 0x4800, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r0, 0x0, 0x4, 0x0, 0x2900) 3.719662296s ago: executing program 3 (id=1213): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x400000000, {0x0, 0x0, 0x4}, 0xfe}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000001d40)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f8, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000000b00030400", @ANYRES32=0x0, @ANYBLOB="00430000000000001c0012800b0001006272"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x28902) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f00000000c0)={0x3, 0x10100001ffffdf, 0x0, 0x10b, 0x300}) 3.719417446s ago: executing program 4 (id=1214): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000000040)=0xee, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x5, 0xf, 0x0, &(0x7f0000000080)="259a53f2712d03488fe5c55033ec28", 0x0, 0x20d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080003007f000000080005"], 0x40}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x180, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "13de04798b0fc9b6c82961f60b1c7954857660ae8f9a8ad0"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x54}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd6bc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4bdb70d6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x4810}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x10, 0x3}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240420d1}, 0x4000000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setreuid(0xffffffffffffffff, 0xee01) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@null, 0xe, 'dummy0\x00'}) 3.472623678s ago: executing program 1 (id=1215): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc81) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {0xeaff}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4414}, 0x4000884) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x48804}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r5) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x40010) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.282063687s ago: executing program 4 (id=1219): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8055b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x3403, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x4) ftruncate(r1, 0x7000000) r2 = dup(r1) preadv2(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1.993692662s ago: executing program 2 (id=1222): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r9, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1, 0x0, 0x0, 0xfdff}, 0x0) 1.884204807s ago: executing program 2 (id=1223): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r4, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 1.884037117s ago: executing program 2 (id=1224): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = epoll_create(0xb3c) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x4003}) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4, 0x0, 0xa00}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.883819217s ago: executing program 2 (id=1225): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x42) mkdir(0x0, 0x0) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x800440, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1], 0x85, 0x588, &(0x7f0000000680)="$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") ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x105842, 0x0) writev(r6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fcffffff00000000000000010500000010000000000000000000000402"], 0x0, 0x4e}, 0x20) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 192.02689ms ago: executing program 5 (id=1226): socket$kcm(0x2, 0x3, 0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89fc, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) writev(r2, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x224000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000003000400000000007400", @ANYRES32=r4, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 173.957421ms ago: executing program 4 (id=1227): fsopen(0x0, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r7], 0x54}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="2997000910000104087d1c92880ae70226e9e547dd4e", @ANYRES64=r8], 0x3c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8000000b, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x24020400) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x400) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r11, 0x40a85321, &(0x7f0000000980)={{0x7, 0x1}, 'port1\x00', 0x1, 0x1, 0x200, 0xa, 0x0, 0xffff, 0xb456, 0x0, 0x2, 0x5}) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x2010, r12, 0xdf) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 99.852475ms ago: executing program 1 (id=1228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newsa={0x14c, 0x10, 0x1, 0x70bd2c, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x2200, 0xa, 0x0, 0x0, 0x73}, {@in=@private=0xa010100, 0x0, 0x33}, @in6=@mcast1, {0xfffffffffdfffffe, 0x2, 0x0, 0xfffffffffffffffc}, {0x8, 0x400800, 0x0, 0x400}, {}, 0x3, 0x0, 0xa, 0x4, 0x0, 0xc}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2d, 0x3}}]}, 0x14c}}, 0x4050) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000005, 0x1010, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x110, &(0x7f0000000040)=0xab, 0x0, 0x4) splice(r1, 0x0, r3, 0x0, 0x8, 0x3) 77.146206ms ago: executing program 2 (id=1229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000100020000060000000006000000", @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 65.835166ms ago: executing program 5 (id=1230): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0xffffffff, 0x99, 0x7, 0x16, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = io_uring_setup(0x2e71, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x131}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) futex(0x0, 0xb, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x2) io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, 0x0, 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000046000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e00"], 0x0, 0x46, 0x0, 0x6}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) r4 = add_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="a0f55b", 0x3, 0xfffffffffffffff9) add_key(&(0x7f0000000240)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000280)="7589d70300d69035fd9f61e55a55fa8da6d5af705d24bf9ce20270445064b0c2abfc86d50631b499e08e", 0x2a, r4) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00003c7000/0x2000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x40, 0x32}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$nfc_llcp(r6, 0x118, 0x0, 0x0, 0x0) 45.589608ms ago: executing program 2 (id=1231): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'macsec0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf2540000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) 45.015627ms ago: executing program 3 (id=1232): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000100c0)={0x0, &(0x7f0000000180)}, 0x10) gettid() setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000d00)=""/93, 0x5d}], 0x2, 0x9, 0x100) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000200503a00fe8000000000000500000000000000bbfe8000100000000000000000000000aa0802907800000000600008100000110000000000000000ffff00000000fc0200000b000000000000000000000000000000000000000588000100000000fb36eeca6fad50b375a22a584d16ca55108301bac06858ad004de70d296216e78edcd103199f1cd2a7a0e1ca000000"], 0x0) 0s ago: executing program 5 (id=1233): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4073, 0x32, 0xfe9, 0x1, 0x32e, 0x2000000}, 0x28) kernel console output (not intermixed with test programs): 108.372360][ T5840] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.523: Corrupt directory, running e2fsck is recommended [ 108.393219][ T5843] loop4: detected capacity change from 0 to 256 [ 108.427623][ T5845] netlink: 'syz.1.525': attribute type 27 has an invalid length. [ 108.494080][ T5840] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 108.596556][ T5840] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.523: corrupted in-inode xattr: e_name out of bounds [ 108.656773][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.664082][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.763271][ T5840] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 108.763586][ T5840] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.523: couldn't read orphan inode 15 (err -117) [ 108.772750][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 108.772770][ C1] EXT4-fs (loop5): initial error at time 1774238793: ext4_iget_extra_inode:5025: inode 15 [ 108.772807][ C1] EXT4-fs (loop5): last error at time 1774238793: ext4_iget_extra_inode:5025: inode 15 [ 109.313800][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.340281][ T5854] Cannot find add_set index 0 as target [ 109.400561][ T5840] loop5: lost filesystem error report for type 5 error -117 [ 109.404088][ T5840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.580002][ T5845] sit1: left promiscuous mode [ 109.593905][ T3509] lo speed is unknown, defaulting to 1000 [ 109.607593][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.615762][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.623920][ T5866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=5866 comm=syz.5.523 [ 109.644856][ T5848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 109.731656][ T5867] loop3: detected capacity change from 0 to 4096 [ 109.749252][ T5867] EXT4-fs: Ignoring removed bh option [ 109.799975][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.523'. [ 109.817688][ T55] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.834899][ T55] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.844769][ T3400] lo speed is unknown, defaulting to 1000 [ 109.856810][ T5878] bridge0: port 3(team0) entered disabled state [ 109.863234][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.870482][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.899630][ T5867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.917292][ T5889] loop4: detected capacity change from 0 to 1024 [ 109.937824][ T55] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.949429][ T5889] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.954272][ T5892] loop1: detected capacity change from 0 to 512 [ 109.970129][ T55] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.991933][ T5889] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 110.016121][ T5856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.028318][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.139279][ T5896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 110.285585][ T5905] loop4: detected capacity change from 0 to 512 [ 110.331652][ T5905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 110.331680][ T5905] System zones: 1-12 [ 110.331968][ T5905] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.539: corrupted in-inode xattr: e_value size too large [ 110.331994][ T5905] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.332647][ T5905] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.539: couldn't read orphan inode 15 (err -117) [ 110.332673][ T5905] loop4: lost filesystem error report for type 5 error -117 [ 110.333388][ T5905] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.363472][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.639433][ T5918] veth7: entered promiscuous mode [ 110.803012][ T5922] loop2: detected capacity change from 0 to 128 [ 110.925047][ T28] kauditd_printk_skb: 243 callbacks suppressed [ 110.925059][ T28] audit: type=1326 audit(1774238795.412:5214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f943580cfce code=0x7ffc0000 [ 111.001539][ T5926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=5926 comm=syz.2.547 [ 111.037264][ T28] audit: type=1326 audit(1774238795.452:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f943584c5c7 code=0x7ffc0000 [ 111.140227][ T28] audit: type=1326 audit(1774238795.452:5216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f943580cfce code=0x7ffc0000 [ 111.168585][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.547'. [ 111.378951][ T28] audit: type=1326 audit(1774238795.452:5217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f943580cfce code=0x7ffc0000 [ 111.430340][ T28] audit: type=1326 audit(1774238795.452:5218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943584c799 code=0x7ffc0000 [ 111.466215][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.546'. [ 111.496279][ T28] audit: type=1326 audit(1774238795.452:5219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943584c799 code=0x7ffc0000 [ 111.638981][ C1] bridge0: port 3(team0) entered learning state [ 111.809003][ T28] audit: type=1326 audit(1774238795.462:5220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz.2.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f943584c799 code=0x7ffc0000 [ 111.835233][ T5932] xt_hashlimit: size too large, truncated to 1048576 [ 111.903403][ T28] audit: type=1400 audit(1774238795.472:5221): avc: denied { open } for pid=5925 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.019126][ T5937] loop5: detected capacity change from 0 to 512 [ 112.069557][ T5937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 112.077663][ T5937] System zones: 1-12 [ 112.089047][ T28] audit: type=1400 audit(1774238795.472:5222): avc: denied { perfmon } for pid=5925 comm="syz.2.547" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 112.112301][ T5937] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.550: corrupted in-inode xattr: e_value size too large [ 112.130449][ T28] audit: type=1400 audit(1774238795.472:5223): avc: denied { kernel } for pid=5925 comm="syz.2.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 112.131395][ T5856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.169192][ T5937] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.176655][ T5943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.552'. [ 112.179112][ T5937] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.550: couldn't read orphan inode 15 (err -117) [ 112.194684][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 112.194707][ C0] EXT4-fs (loop5): initial error at time 1774238796: ext4_iget_extra_inode:5025: inode 15 [ 112.194734][ C0] EXT4-fs (loop5): last error at time 1774238796: ext4_iget_extra_inode:5025: inode 15 [ 112.197534][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.552'. [ 112.291957][ T5856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.302435][ T5937] loop5: lost filesystem error report for type 5 error -117 [ 112.330927][ T5937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.363106][ T5856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.449017][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 112.470473][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.519117][ T3893] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.528674][ T3893] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.537302][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.551640][ T3902] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.562949][ T5946] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 112.569454][ T5946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.577603][ T5946] vhci_hcd vhci_hcd.0: Device attached [ 112.584073][ T3902] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.593464][ T5946] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 112.600035][ T5946] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 112.609188][ T5946] vhci_hcd vhci_hcd.0: Device attached [ 112.668165][ T5946] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10) [ 112.674808][ T5946] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.698657][ T5959] netlink: 188 bytes leftover after parsing attributes in process `syz.5.558'. [ 112.714515][ T5946] vhci_hcd vhci_hcd.0: Device attached [ 112.730793][ T5960] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 112.737389][ T5960] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.745489][ T5960] vhci_hcd vhci_hcd.0: Device attached [ 112.758372][ T5961] vhci_hcd: connection closed [ 112.758437][ T5950] vhci_hcd: connection closed [ 112.758513][ T5958] vhci_hcd: connection closed [ 112.767910][ T5952] vhci_hcd: connection closed [ 112.773079][ T182] vhci_hcd vhci_hcd.1: stop threads [ 112.796319][ T182] vhci_hcd vhci_hcd.1: release socket [ 112.807883][ T182] vhci_hcd vhci_hcd.1: disconnect device [ 112.813987][ T182] vhci_hcd vhci_hcd.1: stop threads [ 112.819632][ T182] vhci_hcd vhci_hcd.1: release socket [ 112.825222][ T182] vhci_hcd vhci_hcd.1: disconnect device [ 112.831250][ T182] vhci_hcd vhci_hcd.1: stop threads [ 112.836485][ T182] vhci_hcd vhci_hcd.1: release socket [ 112.842377][ T182] vhci_hcd vhci_hcd.1: disconnect device [ 112.848105][ T182] vhci_hcd vhci_hcd.1: stop threads [ 112.853681][ T182] vhci_hcd vhci_hcd.1: release socket [ 112.896124][ T3400] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 112.906202][ T3400] usb 3-1: enqueue for inactive port 0 [ 112.924378][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.5.561'. [ 112.930138][ T182] vhci_hcd vhci_hcd.1: disconnect device [ 112.933300][ T3400] usb 3-1: enqueue for inactive port 0 [ 112.950810][ T3400] usb 3-1: enqueue for inactive port 0 [ 112.956706][ T5970] netlink: 164 bytes leftover after parsing attributes in process `syz.4.560'. [ 113.029201][ T3400] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 113.072893][ T5983] loop5: detected capacity change from 0 to 512 [ 113.150499][ T5993] loop4: detected capacity change from 0 to 128 [ 113.268242][ T5991] loop5: detected capacity change from 0 to 4096 [ 113.278836][ T5991] EXT4-fs: Ignoring removed bh option [ 113.348179][ T5991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.387959][ T5991] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.405483][ T6005] netlink: 164 bytes leftover after parsing attributes in process `syz.1.573'. [ 113.497711][ T6025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.669678][ T6028] loop1: detected capacity change from 0 to 1024 [ 113.677304][ T6028] EXT4-fs: Ignoring removed i_version option [ 113.683618][ T6028] EXT4-fs: Ignoring removed bh option [ 113.689180][ T6028] EXT4-fs: inline encryption not supported [ 113.714091][ T6028] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 113.800555][ T6028] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 113.815871][ T6028] EXT4-fs (loop1): mount failed [ 114.834321][ T5991] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.874663][ T6041] netlink: 'syz.3.585': attribute type 15 has an invalid length. [ 115.521892][ T6052] loop3: detected capacity change from 0 to 256 [ 115.623681][ T6052] FAT-fs (loop3): Directory bread(block 64) failed [ 115.630353][ T6052] FAT-fs (loop3): Directory bread(block 65) failed [ 115.636885][ T6052] FAT-fs (loop3): Directory bread(block 66) failed [ 115.643817][ T6052] FAT-fs (loop3): Directory bread(block 67) failed [ 115.651139][ T6052] FAT-fs (loop3): Directory bread(block 68) failed [ 115.657668][ T6052] FAT-fs (loop3): Directory bread(block 69) failed [ 115.664594][ T6052] FAT-fs (loop3): Directory bread(block 70) failed [ 115.671261][ T6052] FAT-fs (loop3): Directory bread(block 71) failed [ 115.677904][ T6052] FAT-fs (loop3): Directory bread(block 72) failed [ 115.684738][ T6052] FAT-fs (loop3): Directory bread(block 73) failed [ 115.713114][ T5991] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.077261][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 116.077273][ T28] audit: type=1400 audit(1774238800.562:5335): avc: denied { sys_admin } for pid=6055 comm="syz.4.590" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 116.119004][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.126226][ C0] bridge0: topology change detected, propagating [ 116.130435][ T5991] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.132619][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.149950][ C0] bridge0: topology change detected, propagating [ 116.202403][ T4072] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.225493][ T4072] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.269664][ T6068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.316311][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.363767][ T4072] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.377739][ T4072] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.863913][ T28] audit: type=1400 audit(1774238801.352:5336): avc: denied { write } for pid=6072 comm="syz.2.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.020904][ T6079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'. [ 117.092730][ T28] audit: type=1400 audit(1774238801.582:5337): avc: denied { remount } for pid=6078 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.145124][ T28] audit: type=1400 audit(1774238801.632:5338): avc: denied { create } for pid=6078 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.184896][ T28] audit: type=1400 audit(1774238801.652:5339): avc: denied { connect } for pid=6078 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 117.901931][ T6087] loop1: detected capacity change from 0 to 256 [ 117.954666][ T6090] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 117.961194][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.991218][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 118.014613][ T6090] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 118.021141][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 118.032638][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 118.064314][ T6090] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 118.070968][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.117419][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 118.144509][ T6107] loop5: detected capacity change from 0 to 4096 [ 118.231944][ T6110] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 118.238565][ T6110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.246368][ T35] usb 7-1: new low-speed USB device number 5 using vhci_hcd [ 118.254471][ T6107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.267227][ T6110] vhci_hcd vhci_hcd.0: Device attached [ 118.290736][ T6102] vhci_hcd: connection closed [ 118.290861][ T6111] vhci_hcd: connection closed [ 118.291049][ T6094] vhci_hcd: connection closed [ 118.295754][ T6091] vhci_hcd: connection reset by peer [ 118.310278][ T3893] vhci_hcd vhci_hcd.3: stop threads [ 118.315461][ T3893] vhci_hcd vhci_hcd.3: release socket [ 118.339157][ T3893] vhci_hcd vhci_hcd.3: disconnect device [ 118.355325][ T28] audit: type=1400 audit(1774238802.832:5340): avc: denied { read write } for pid=6085 comm="syz.5.600" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.379838][ T3893] vhci_hcd vhci_hcd.3: stop threads [ 118.398014][ T3893] vhci_hcd vhci_hcd.3: release socket [ 118.403652][ T3893] vhci_hcd vhci_hcd.3: disconnect device [ 118.409795][ T28] audit: type=1400 audit(1774238802.832:5341): avc: denied { open } for pid=6085 comm="syz.5.600" path="/77/file0/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 118.439680][ T3893] vhci_hcd vhci_hcd.3: stop threads [ 118.445030][ T3893] vhci_hcd vhci_hcd.3: release socket [ 118.454787][ T3893] vhci_hcd vhci_hcd.3: disconnect device [ 118.467203][ T3893] vhci_hcd vhci_hcd.3: stop threads [ 118.477969][ T3893] vhci_hcd vhci_hcd.3: release socket [ 118.488887][ T3893] vhci_hcd vhci_hcd.3: disconnect device [ 118.680424][ T6128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.014188][ T28] audit: type=1400 audit(1774238803.502:5342): avc: denied { append } for pid=6132 comm="syz.3.613" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 119.037477][ T28] audit: type=1400 audit(1774238803.502:5343): avc: denied { create } for pid=6132 comm="syz.3.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.840203][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.871055][ T6135] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 119.904477][ T28] audit: type=1400 audit(1774238804.392:5344): avc: denied { bind } for pid=6137 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 119.945014][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 119.964086][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 119.990073][ T6147] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 120.032947][ T6154] loop3: detected capacity change from 0 to 512 [ 120.053644][ T6147] 9pnet_fd: Insufficient options for proto=fd [ 120.061452][ T6154] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 120.069890][ T6154] System zones: 1-12 [ 120.074088][ T6156] loop1: detected capacity change from 0 to 512 [ 120.074448][ T6154] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.619: corrupted in-inode xattr: e_value size too large [ 120.094396][ T6154] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.108935][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 120.124575][ C0] EXT4-fs (loop3): initial error at time 1774238804: ext4_iget_extra_inode:5025: inode 15 [ 120.134626][ C0] EXT4-fs (loop3): last error at time 1774238804: ext4_iget_extra_inode:5025: inode 15 [ 120.151488][ T6154] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.619: couldn't read orphan inode 15 (err -117) [ 120.152842][ T6147] sctp: [Deprecated]: syz.5.617 (pid 6147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.152842][ T6147] Use struct sctp_sack_info instead [ 120.173797][ T6156] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 120.199135][ T6154] loop3: lost filesystem error report for type 5 error -117 [ 120.199717][ T6154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.209265][ T6156] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 120.238654][ T6156] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.621: Corrupt directory, running e2fsck is recommended [ 120.256086][ T6156] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 120.264960][ T6156] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.621: corrupted in-inode xattr: e_name out of bounds [ 120.278801][ T6156] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 120.278927][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 120.294433][ C1] EXT4-fs (loop1): initial error at time 1774238804: ext4_iget_extra_inode:5025: inode 15 [ 120.304360][ C1] EXT4-fs (loop1): last error at time 1774238804: ext4_iget_extra_inode:5025: inode 15 [ 120.314796][ T6156] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.621: couldn't read orphan inode 15 (err -117) [ 120.318614][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.326552][ T6156] loop1: lost filesystem error report for type 5 error -117 [ 120.336151][ T6156] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.341823][ T6153] netlink: 68 bytes leftover after parsing attributes in process `syz.4.620'. [ 120.367419][ T6156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6156 comm=syz.1.621 [ 120.449768][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 120.488615][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.649188][ T6173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.254849][ T6184] netlink: 20 bytes leftover after parsing attributes in process `syz.5.630'. [ 121.979311][ T6195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'. [ 122.077031][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 122.077045][ T28] audit: type=1400 audit(1774238806.562:5357): avc: denied { append } for pid=6205 comm="syz.3.640" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.107645][ T6206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5122 sclass=netlink_route_socket pid=6206 comm=syz.3.640 [ 122.133298][ T28] audit: type=1400 audit(1774238806.592:5358): avc: denied { open } for pid=6205 comm="syz.3.640" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.135753][ T6209] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6209 comm=syz.2.641 [ 122.159316][ T28] audit: type=1400 audit(1774238806.592:5359): avc: denied { ioctl } for pid=6205 comm="syz.3.640" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 122.360776][ T28] audit: type=1400 audit(1774238806.852:5360): avc: denied { create } for pid=6214 comm="syz.5.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 122.431200][ T28] audit: type=1400 audit(1774238806.922:5361): avc: denied { shutdown } for pid=6225 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.479005][ T28] audit: type=1400 audit(1774238806.942:5362): avc: denied { name_connect } for pid=6225 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 122.499136][ T28] audit: type=1400 audit(1774238806.942:5363): avc: denied { create } for pid=6225 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.519143][ T28] audit: type=1400 audit(1774238806.942:5364): avc: denied { bind } for pid=6225 comm="syz.4.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 122.539229][ T28] audit: type=1400 audit(1774238806.942:5365): avc: denied { name_bind } for pid=6225 comm="syz.4.647" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 122.560180][ T28] audit: type=1400 audit(1774238806.942:5366): avc: denied { node_bind } for pid=6225 comm="syz.4.647" saddr=fc02:: src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 123.318983][ T35] usb 7-1: enqueue for inactive port 0 [ 123.324601][ T35] usb 7-1: enqueue for inactive port 0 [ 123.398961][ T35] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 123.655712][ T6227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.682439][ T6237] netlink: 'syz.4.650': attribute type 1 has an invalid length. [ 123.682964][ T6217] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 123.706486][ T6217] batman_adv: batadv0: Adding interface: ip6gretap2 [ 123.713504][ T6217] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.739556][ T6217] batman_adv: batadv0: Interface activated: ip6gretap2 [ 123.746898][ T3400] lo speed is unknown, defaulting to 1000 [ 123.752985][ T3400] syz2: Port: 1 Link DOWN [ 123.821218][ T6237] veth5: entered promiscuous mode [ 123.827493][ T6237] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 123.879864][ T6252] netlink: 68 bytes leftover after parsing attributes in process `syz.3.655'. [ 123.943195][ T6260] netlink: 'syz.2.659': attribute type 1 has an invalid length. [ 124.019030][ T6260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=6260 comm=syz.2.659 [ 124.075941][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 124.154499][ T6260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.169441][ T6285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=6285 comm=syz.3.667 [ 124.178679][ T3375] IPVS: starting estimator thread 0... [ 124.194872][ T6291] loop5: detected capacity change from 0 to 1024 [ 124.204267][ T6271] bond4: (slave gretap1): making interface the new active one [ 124.236629][ T6271] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 124.265185][ T6291] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.277479][ T6260] netlink: 44 bytes leftover after parsing attributes in process `syz.2.659'. [ 124.287136][ T6289] IPVS: using max 2448 ests per chain, 122400 per kthread [ 124.329483][ T6291] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 124.355282][ T6291] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 124.395457][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.430849][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 124.524679][ T6321] loop5: detected capacity change from 0 to 512 [ 124.569199][ T6321] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.609621][ T6321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.630764][ T6321] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.641073][ T6305] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 124.654743][ T6321] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.773162][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.854639][ T6327] loop5: detected capacity change from 0 to 2048 [ 124.900167][ T6327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.912319][ T6335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=6335 comm=syz.4.683 [ 124.951635][ T6337] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.976526][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.049173][ T6341] netlink: 'syz.4.687': attribute type 16 has an invalid length. [ 125.076930][ T6341] netlink: 'syz.4.687': attribute type 16 has an invalid length. [ 125.085306][ T6353] netlink: 132 bytes leftover after parsing attributes in process `syz.3.690'. [ 125.094574][ T6354] Cannot find del_set index 0 as target [ 125.105442][ T6353] loop3: detected capacity change from 0 to 512 [ 125.119297][ T6341] netlink: 'syz.4.687': attribute type 16 has an invalid length. [ 125.127125][ T6341] netlink: 'syz.4.687': attribute type 16 has an invalid length. [ 125.137004][ T6341] netlink: 'syz.4.687': attribute type 16 has an invalid length. [ 125.146907][ T6341] netlink: 'syz.4.687': attribute type 16 has an invalid length. [ 125.157567][ T6360] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 125.183447][ T6341] netlink: 'syz.4.687': attribute type 16 has an invalid length. [ 125.194712][ T6360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32784 sclass=netlink_route_socket pid=6360 comm=syz.1.693 [ 125.212732][ T6360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.693'. [ 125.261582][ T6364] loop3: detected capacity change from 0 to 128 [ 125.268394][ T6360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.284445][ T6372] bond2: (slave gretap1): making interface the new active one [ 125.307273][ T6372] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 125.440753][ T6360] netlink: 44 bytes leftover after parsing attributes in process `syz.1.693'. [ 126.036820][ T6500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.699'. [ 126.265124][ T6495] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 126.765089][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 127.010530][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b4a3400: rx timeout, send abort [ 127.230011][ T5860] lo speed is unknown, defaulting to 1000 [ 127.235931][ T5860] syz2: Port: 1 Link ACTIVE [ 127.251366][ T6533] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 127.879833][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 127.879848][ T28] audit: type=1400 audit(1774238812.362:5400): avc: denied { create } for pid=6560 comm="syz.5.714" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 127.953727][ T6550] ipvlan2: entered allmulticast mode [ 127.959137][ T6550] dummy0: entered allmulticast mode [ 127.978244][ T28] audit: type=1400 audit(1774238812.452:5401): avc: denied { unlink } for pid=4551 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.131321][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 128.141366][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.719'. [ 128.179036][ T28] audit: type=1400 audit(1774238812.662:5402): avc: denied { name_bind } for pid=6577 comm="syz.3.720" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 128.221679][ T6582] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 128.228211][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.235842][ T28] audit: type=1400 audit(1774238812.712:5403): avc: denied { create } for pid=6584 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.269055][ T6588] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 128.275579][ T6588] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.301507][ T28] audit: type=1400 audit(1774238812.712:5404): avc: denied { bind } for pid=6584 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.309193][ T6588] vhci_hcd vhci_hcd.0: Device attached [ 128.326634][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 128.346692][ T6593] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 128.352502][ T28] audit: type=1400 audit(1774238812.712:5405): avc: denied { listen } for pid=6584 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.353296][ T6593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.401317][ T6593] vhci_hcd vhci_hcd.0: Device attached [ 128.409042][ T28] audit: type=1400 audit(1774238812.712:5406): avc: denied { connect } for pid=6584 comm="syz.3.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.458955][ T6582] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(8) [ 128.465471][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.474325][ T6600] netlink: 1 bytes leftover after parsing attributes in process `syz.1.725'. [ 128.528976][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 128.535982][ T6583] vhci_hcd: connection closed [ 128.536194][ T6386] vhci_hcd vhci_hcd.5: stop threads [ 128.536277][ T6597] vhci_hcd: connection closed [ 128.540950][ T6386] vhci_hcd vhci_hcd.5: release socket [ 128.546343][ T6589] vhci_hcd: connection closed [ 128.551194][ T6386] vhci_hcd vhci_hcd.5: disconnect device [ 128.558990][ T6594] vhci_hcd: connection closed [ 128.560930][ T3400] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 128.658979][ T6386] vhci_hcd vhci_hcd.5: stop threads [ 128.664303][ T6386] vhci_hcd vhci_hcd.5: release socket [ 128.676865][ T6386] vhci_hcd vhci_hcd.5: disconnect device [ 128.718977][ T6386] vhci_hcd vhci_hcd.5: stop threads [ 128.724610][ T6386] vhci_hcd vhci_hcd.5: release socket [ 128.731842][ T6386] vhci_hcd vhci_hcd.5: disconnect device [ 128.737708][ T6386] vhci_hcd vhci_hcd.5: stop threads [ 128.743648][ T6386] vhci_hcd vhci_hcd.5: release socket [ 128.749343][ T6386] vhci_hcd vhci_hcd.5: disconnect device [ 128.899049][ T28] audit: type=1326 audit(1774238813.382:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943584c799 code=0x7ffc0000 [ 128.943574][ T6607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6607 comm=syz.2.727 [ 128.976341][ T28] audit: type=1326 audit(1774238813.382:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f943584c799 code=0x7ffc0000 [ 129.045474][ T28] audit: type=1326 audit(1774238813.382:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.2.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f943584c799 code=0x7ffc0000 [ 129.070864][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 129.387552][ T6617] loop5: detected capacity change from 0 to 8192 [ 129.908026][ T6625] FAULT_INJECTION: forcing a failure. [ 129.908026][ T6625] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.949783][ T6625] CPU: 1 UID: 0 PID: 6625 Comm: syz.5.732 Not tainted syzkaller #0 PREEMPT(full) [ 129.949826][ T6625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 129.949847][ T6625] Call Trace: [ 129.949854][ T6625] [ 129.949861][ T6625] __dump_stack+0x1d/0x30 [ 129.949890][ T6625] dump_stack_lvl+0x95/0xd0 [ 129.949907][ T6625] dump_stack+0x15/0x1b [ 129.950004][ T6625] should_fail_ex+0x263/0x280 [ 129.950027][ T6625] should_fail+0xb/0x20 [ 129.950053][ T6625] should_fail_usercopy+0x1a/0x20 [ 129.950078][ T6625] strncpy_from_user+0x27/0x250 [ 129.950097][ T6625] ? __fget_files+0x184/0x1c0 [ 129.950116][ T6625] __se_sys_add_key+0x86/0x360 [ 129.950200][ T6625] __x64_sys_add_key+0x67/0x80 [ 129.950219][ T6625] x64_sys_call+0xb39/0x3020 [ 129.950259][ T6625] do_syscall_64+0x12c/0x370 [ 129.950304][ T6625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.950326][ T6625] RIP: 0033:0x7faa1c0dc799 [ 129.950372][ T6625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.950453][ T6625] RSP: 002b:00007faa1ab37028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 129.950476][ T6625] RAX: ffffffffffffffda RBX: 00007faa1c355fa0 RCX: 00007faa1c0dc799 [ 129.950514][ T6625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 129.950574][ T6625] RBP: 00007faa1ab37090 R08: 0000000016bfad76 R09: 0000000000000000 [ 129.950585][ T6625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.950596][ T6625] R13: 00007faa1c356038 R14: 00007faa1c355fa0 R15: 00007ffce564ecc8 [ 129.950615][ T6625] [ 130.227013][ T6638] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 130.233543][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.259017][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 130.278478][ T6638] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 130.284997][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 130.308292][ T6650] loop5: detected capacity change from 0 to 164 [ 130.329595][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 130.335407][ T6650] iso9660: Unknown parameter ':äkö‰[î("žY‡y#Ÿ¸Ÿ<ä9)ü' [ 130.347792][ T6653] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 130.354399][ T6653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.401194][ T6659] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'. [ 130.410287][ T6638] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 130.416961][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 130.434634][ T6653] vhci_hcd vhci_hcd.0: Device attached [ 130.450446][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 130.460657][ T6660] vhci_hcd: connection closed [ 130.460752][ T6654] vhci_hcd: connection closed [ 130.460800][ T6478] vhci_hcd vhci_hcd.3: stop threads [ 130.475657][ T6639] vhci_hcd: connection closed [ 130.476853][ T6645] vhci_hcd: connection closed [ 130.481679][ T6478] vhci_hcd vhci_hcd.3: release socket [ 130.498055][ T6478] vhci_hcd vhci_hcd.3: disconnect device [ 130.503773][ T3375] usb 7-1: new low-speed USB device number 6 using vhci_hcd [ 130.516781][ T6642] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 130.516952][ T6478] vhci_hcd vhci_hcd.3: stop threads [ 130.528021][ T6478] vhci_hcd vhci_hcd.3: release socket [ 130.533509][ T6478] vhci_hcd vhci_hcd.3: disconnect device [ 130.540359][ T6478] vhci_hcd vhci_hcd.3: stop threads [ 130.545661][ T6478] vhci_hcd vhci_hcd.3: release socket [ 130.551259][ T6478] vhci_hcd vhci_hcd.3: disconnect device [ 130.551534][ T6665] lo speed is unknown, defaulting to 1000 [ 130.563597][ T6478] vhci_hcd vhci_hcd.3: stop threads [ 130.571280][ T6478] vhci_hcd vhci_hcd.3: release socket [ 130.580543][ T6478] vhci_hcd vhci_hcd.3: disconnect device [ 130.637336][ T6665] lo speed is unknown, defaulting to 1000 [ 130.656125][ T6667] loop5: detected capacity change from 0 to 512 [ 130.705673][ T6670] loop1: detected capacity change from 0 to 512 [ 130.731324][ T6670] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 130.731924][ T6667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.743088][ T6670] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 130.765509][ T6670] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.746: Corrupt directory, running e2fsck is recommended [ 130.767174][ T6667] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.786998][ T6670] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 130.799932][ T6670] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.746: corrupted in-inode xattr: e_name out of bounds [ 130.814263][ T6670] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 130.818939][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 130.834510][ C1] EXT4-fs (loop1): initial error at time 1774238815: ext4_iget_extra_inode:5025: inode 15 [ 130.844456][ C1] EXT4-fs (loop1): last error at time 1774238815: ext4_iget_extra_inode:5025: inode 15 [ 130.859094][ T6670] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.746: couldn't read orphan inode 15 (err -117) [ 130.871045][ T6670] loop1: lost filesystem error report for type 5 error -117 [ 130.871510][ T6670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.902115][ T6670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6670 comm=syz.1.746 [ 130.940007][ T6681] loop5: detected capacity change from 0 to 1024 [ 130.946772][ T6681] EXT4-fs: inline encryption not supported [ 130.955603][ T6681] EXT4-fs: Ignoring removed bh option [ 130.991298][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'. [ 131.141809][ T6681] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.280636][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.392723][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.446505][ T6696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.754'. [ 131.498005][ T6696] netlink: 44 bytes leftover after parsing attributes in process `syz.2.754'. [ 131.686089][ T6708] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 131.692618][ T6708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.710604][ T6708] vhci_hcd vhci_hcd.0: Device attached [ 131.722515][ T6708] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 131.729027][ T6708] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 131.744599][ T6715] ip6tnl1: entered promiscuous mode [ 131.750807][ T6715] ip6tnl1: entered allmulticast mode [ 131.756499][ T6708] vhci_hcd vhci_hcd.0: Device attached [ 131.766963][ T6708] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 131.773631][ T6708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.792680][ T6708] vhci_hcd vhci_hcd.0: Device attached [ 131.798670][ T6708] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 131.805291][ T6708] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.813316][ T6708] vhci_hcd vhci_hcd.0: Device attached [ 131.819172][ T6720] vhci_hcd: connection closed [ 131.819496][ T6477] vhci_hcd vhci_hcd.3: stop threads [ 131.829524][ T6477] vhci_hcd vhci_hcd.3: release socket [ 131.834932][ T6716] vhci_hcd: connection closed [ 131.835205][ T6713] vhci_hcd: connection closed [ 131.840222][ T6710] vhci_hcd: connection closed [ 132.457468][ T6727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6727 comm=syz.4.763 [ 132.476260][ T6477] vhci_hcd vhci_hcd.3: disconnect device [ 132.501173][ T6477] vhci_hcd vhci_hcd.3: stop threads [ 132.602799][ T6477] vhci_hcd vhci_hcd.3: release socket [ 132.623336][ T6477] vhci_hcd vhci_hcd.3: disconnect device [ 132.639570][ T6477] vhci_hcd vhci_hcd.3: stop threads [ 132.644996][ T6477] vhci_hcd vhci_hcd.3: release socket [ 132.651012][ T6477] vhci_hcd vhci_hcd.3: disconnect device [ 132.656850][ T6477] vhci_hcd vhci_hcd.3: stop threads [ 132.662141][ T6477] vhci_hcd vhci_hcd.3: release socket [ 132.667601][ T6477] vhci_hcd vhci_hcd.3: disconnect device [ 132.696595][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'. [ 132.717010][ T6738] netlink: 104 bytes leftover after parsing attributes in process `syz.2.764'. [ 132.957868][ T6756] loop3: detected capacity change from 0 to 1024 [ 133.014888][ T6756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.029431][ T6756] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 133.041670][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 133.041685][ T28] audit: type=1400 audit(1774238817.532:5557): avc: denied { read } for pid=6762 comm="syz.1.773" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 133.088986][ T6756] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 133.108849][ T28] audit: type=1400 audit(1774238817.592:5558): avc: denied { create } for pid=6749 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 133.133353][ T28] audit: type=1400 audit(1774238817.612:5559): avc: denied { create } for pid=6762 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.153171][ T28] audit: type=1400 audit(1774238817.622:5560): avc: denied { ioctl } for pid=6749 comm="syz.5.769" path="socket:[23311]" dev="sockfs" ino=23311 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 133.306901][ T28] audit: type=1400 audit(1774238817.792:5561): avc: denied { getopt } for pid=6769 comm="syz.2.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.372710][ T28] audit: type=1400 audit(1774238817.852:5562): avc: denied { bind } for pid=6775 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 133.396528][ T6776] msdos: Unknown parameter 'noquota' [ 133.415493][ T28] audit: type=1400 audit(1774238817.862:5563): avc: denied { cpu } for pid=6777 comm="syz.5.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 133.465713][ T6785] syz_tun: entered promiscuous mode [ 133.480679][ T6785] vlan2: entered promiscuous mode [ 133.490381][ T28] audit: type=1400 audit(1774238817.972:5564): avc: denied { execute } for pid=6780 comm="syz.2.778" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=23743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 133.639246][ T3400] usb 11-1: enqueue for inactive port 0 [ 133.644976][ T3400] usb 11-1: enqueue for inactive port 0 [ 133.728976][ T3400] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 134.433976][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.547617][ T28] audit: type=1400 audit(1774238819.032:5565): avc: denied { setopt } for pid=6809 comm="syz.5.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.569145][ T28] audit: type=1400 audit(1774238819.052:5566): avc: denied { listen } for pid=6809 comm="syz.5.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 134.604788][ T6810] loop5: detected capacity change from 0 to 4096 [ 134.802280][ T6813] loop3: detected capacity change from 0 to 1024 [ 134.847534][ T6813] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.024581][ T6810] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.350253][ T6813] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.440248][ T6833] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.793'. [ 135.459361][ T6833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.793'. [ 135.482358][ T6834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1364 sclass=netlink_route_socket pid=6834 comm=syz.3.788 [ 135.561954][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 135.585381][ T6836] netlink: 176 bytes leftover after parsing attributes in process `syz.3.788'. [ 135.611250][ T6813] netlink: 144 bytes leftover after parsing attributes in process `syz.3.788'. [ 135.639805][ T6470] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.651657][ T6470] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.668646][ T6470] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.685984][ T6470] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.875500][ T3375] usb 7-1: enqueue for inactive port 0 [ 135.881030][ T3375] usb 7-1: enqueue for inactive port 0 [ 135.912564][ T4551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.948962][ T3375] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 135.956459][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.035488][ T6841] loop3: detected capacity change from 0 to 256 [ 136.095016][ T6851] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 136.101623][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.109563][ T6851] vhci_hcd vhci_hcd.0: Device attached [ 136.119009][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 136.128793][ T6851] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(8) [ 136.135368][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 136.143067][ T6851] vhci_hcd vhci_hcd.0: Device attached [ 136.152030][ T6851] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 136.158632][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.166443][ T6851] vhci_hcd vhci_hcd.0: Device attached [ 136.174187][ T6851] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 136.180783][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 136.189056][ T6860] loop5: detected capacity change from 0 to 128 [ 136.201437][ T6851] vhci_hcd vhci_hcd.0: Device attached [ 136.214785][ T6861] vhci_hcd: connection closed [ 136.215106][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 136.225202][ T6470] vhci_hcd vhci_hcd.3: release socket [ 136.230941][ T6852] vhci_hcd: connection closed [ 136.237213][ T6857] vhci_hcd: connection closed [ 136.242123][ T6855] vhci_hcd: connection closed [ 136.244134][ T6864] validate_nla: 60 callbacks suppressed [ 136.244216][ T6864] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 136.246870][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 136.299043][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 136.304345][ T6470] vhci_hcd vhci_hcd.3: release socket [ 136.318983][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 136.324818][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 136.338967][ T6470] vhci_hcd vhci_hcd.3: release socket [ 136.344371][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 136.358957][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 136.364154][ T6470] vhci_hcd vhci_hcd.3: release socket [ 136.377833][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 136.439089][ T3375] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 137.530247][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.816'. [ 137.547169][ T6883] loop3: detected capacity change from 0 to 512 [ 137.579902][ T6883] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 137.632748][ T6884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.642756][ T6883] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 137.682844][ T6883] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.806: Corrupt directory, running e2fsck is recommended [ 137.747057][ T6883] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 137.783584][ T6883] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.806: corrupted in-inode xattr: e_name out of bounds [ 137.829148][ T6883] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.829365][ T6883] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.806: couldn't read orphan inode 15 (err -117) [ 137.850329][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 137.850344][ C1] EXT4-fs (loop3): initial error at time 1774238822: ext4_iget_extra_inode:5025: inode 15 [ 137.850391][ C1] EXT4-fs (loop3): last error at time 1774238822: ext4_iget_extra_inode:5025: inode 15 [ 138.029335][ T6883] loop3: lost filesystem error report for type 5 error -117 [ 138.034013][ T6883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.084423][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 138.084446][ T28] audit: type=1326 audit(1774238822.572:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f335f83cfce code=0x7ffc0000 [ 138.159005][ T28] audit: type=1326 audit(1774238822.602:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f335f87abd7 code=0x7ffc0000 [ 138.182762][ T6894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6894 comm=syz.3.806 [ 138.236511][ T28] audit: type=1326 audit(1774238822.602:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f335f83cfce code=0x7ffc0000 [ 138.288949][ T28] audit: type=1326 audit(1774238822.602:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 138.316156][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.806'. [ 138.348146][ T28] audit: type=1326 audit(1774238822.602:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 138.391694][ T28] audit: type=1326 audit(1774238822.612:5653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6882 comm="syz.3.806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 138.550979][ T6902] netlink: 'syz.5.811': attribute type 1 has an invalid length. [ 138.599430][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 138.660973][ T28] audit: type=1400 audit(1774238823.152:5654): avc: denied { write } for pid=6906 comm="syz.1.813" path="socket:[23904]" dev="sockfs" ino=23904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 138.705563][ T28] audit: type=1400 audit(1774238823.192:5655): avc: denied { lock } for pid=6908 comm="syz.2.814" path="socket:[23486]" dev="sockfs" ino=23486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 138.738896][ T6902] veth5: entered promiscuous mode [ 138.745372][ T6902] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 138.793556][ T6914] loop1: detected capacity change from 0 to 128 [ 138.819752][ T6914] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.859322][ T6914] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.880298][ T6914] FAT-fs (loop1): error, corrupted directory (invalid i_start) [ 138.891145][ T6914] FAT-fs (loop1): Filesystem has been set read-only [ 138.924093][ T3313] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.943123][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.987842][ T6918] loop3: detected capacity change from 0 to 512 [ 139.002218][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.020721][ T6918] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.818: inode has both inline data and extents flags [ 139.034933][ T6918] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.035055][ T6918] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.818: couldn't read orphan inode 15 (err -117) [ 139.044183][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 139.044199][ C0] EXT4-fs (loop3): initial error at time 1774238823: ext4_orphan_get:1391: inode 15 [ 139.044240][ C0] EXT4-fs (loop3): last error at time 1774238823: ext4_orphan_get:1391: inode 15 [ 139.091208][ T6909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.136699][ T6918] loop3: lost filesystem error report for type 5 error -117 [ 139.139612][ T6918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.191459][ T6909] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 139.203181][ T6922] bridge0: port 3(macsec1) entered blocking state [ 139.224032][ T6922] bridge0: port 3(macsec1) entered disabled state [ 139.249398][ T6922] macsec1: entered allmulticast mode [ 139.271428][ T6922] macsec1: left allmulticast mode [ 139.278146][ T6470] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.286637][ T6470] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.303532][ T6470] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.317037][ T6470] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.338427][ T28] audit: type=1400 audit(1774238823.822:5656): avc: denied { create } for pid=6925 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.358135][ T28] audit: type=1400 audit(1774238823.822:5657): avc: denied { write } for pid=6925 comm="syz.2.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 139.403561][ T6940] sctp: [Deprecated]: syz.5.823 (pid 6940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.403561][ T6940] Use struct sctp_sack_info instead [ 139.450160][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.464971][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'. [ 139.495267][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.533758][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.548037][ T6944] batman_adv: batadv0: Removing interface: ip6gretap2 [ 139.571460][ T6959] pimreg: entered allmulticast mode [ 139.578534][ T6959] pimreg: left allmulticast mode [ 139.606543][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 139.666785][ T6967] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 139.673366][ T6967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.694916][ T6949] loop1: detected capacity change from 0 to 2048 [ 139.707867][ T6967] vhci_hcd vhci_hcd.0: Device attached [ 139.723882][ T6972] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 139.730404][ T6972] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.734301][ T6949] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 139.757709][ T6972] vhci_hcd vhci_hcd.0: Device attached [ 139.770101][ T6967] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 139.776607][ T6967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.784895][ T6967] vhci_hcd vhci_hcd.0: Device attached [ 139.796412][ T6949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.816729][ T6967] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 139.823313][ T6967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.833112][ T6967] vhci_hcd vhci_hcd.0: Device attached [ 139.849225][ T6969] vhci_hcd: connection closed [ 139.849308][ T6975] vhci_hcd: connection closed [ 139.849431][ T6977] vhci_hcd: connection closed [ 139.858729][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 139.859044][ T6982] vhci_hcd: connection closed [ 139.863535][ T6470] vhci_hcd vhci_hcd.3: release socket [ 139.879585][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 139.888951][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 139.895760][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.898971][ T5860] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 139.911216][ T6470] vhci_hcd vhci_hcd.3: release socket [ 139.916699][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 139.923583][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 139.928843][ T6470] vhci_hcd vhci_hcd.3: release socket [ 139.945219][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 139.965463][ T6470] vhci_hcd vhci_hcd.3: stop threads [ 139.977047][ T6470] vhci_hcd vhci_hcd.3: release socket [ 139.982899][ T6470] vhci_hcd vhci_hcd.3: disconnect device [ 140.157474][ T6991] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 140.367541][ T6995] IPv6: addrconf: prefix option has invalid lifetime [ 140.374248][ T6995] IPv6: addrconf: prefix option has invalid lifetime [ 140.456285][ T7010] loop3: detected capacity change from 0 to 512 [ 140.462997][ T7010] ext2: Unknown parameter 'dont_measure' [ 140.540055][ T7016] loop3: detected capacity change from 0 to 512 [ 140.552760][ T7016] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 140.564721][ T7016] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 140.575099][ T7016] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.847: Corrupt directory, running e2fsck is recommended [ 140.588809][ T7016] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 140.598128][ T7016] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.847: corrupted in-inode xattr: e_name out of bounds [ 140.612674][ T7016] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.612852][ T7016] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.847: couldn't read orphan inode 15 (err -117) [ 140.621991][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 140.622026][ C1] EXT4-fs (loop3): initial error at time 1774238825: ext4_iget_extra_inode:5025: inode 15 [ 140.622053][ C1] EXT4-fs (loop3): last error at time 1774238825: ext4_iget_extra_inode:5025: inode 15 [ 140.660044][ T7016] loop3: lost filesystem error report for type 5 error -117 [ 140.660554][ T7016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.682476][ T7016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7016 comm=syz.3.847 [ 140.750528][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.847'. [ 140.786964][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.960058][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.970427][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.970706][ T7056] netlink: 164 bytes leftover after parsing attributes in process `syz.5.866'. [ 141.130718][ T7066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7066 comm=syz.4.869 [ 141.185163][ T7072] loop1: detected capacity change from 0 to 2048 [ 141.189786][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.201277][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.209754][ T7054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.864'. [ 141.220085][ T7054] netlink: 48 bytes leftover after parsing attributes in process `syz.3.864'. [ 141.221316][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 141.237849][ T3295] loop1: p3 < > p4 < > [ 141.242188][ T3295] loop1: partition table partially beyond EOD, truncated [ 141.249680][ T3295] loop1: p3 start 4284289 is beyond EOD, truncated [ 141.259095][ T7072] loop1: p3 < > p4 < > [ 141.263278][ T7072] loop1: partition table partially beyond EOD, truncated [ 141.270551][ T7072] loop1: p3 start 4284289 is beyond EOD, truncated [ 141.289449][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.873'. [ 141.303320][ T7075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.873'. [ 141.360471][ T7090] netlink: 164 bytes leftover after parsing attributes in process `syz.4.878'. [ 141.383090][ T7093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49519 sclass=netlink_route_socket pid=7093 comm=syz.5.880 [ 141.396963][ T7096] loop1: detected capacity change from 0 to 128 [ 141.442602][ T7103] pim6reg4: entered allmulticast mode [ 141.469354][ T7107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7107 comm=syz.5.885 [ 141.537792][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.885'. [ 141.650390][ T7118] netlink: 164 bytes leftover after parsing attributes in process `syz.2.889'. [ 141.686862][ T7120] lo speed is unknown, defaulting to 1000 [ 141.715046][ T7120] lo speed is unknown, defaulting to 1000 [ 141.718961][ C1] bridge0: port 3(team0) entered forwarding state [ 141.727201][ C1] bridge0: topology change detected, propagating [ 143.344809][ T28] kauditd_printk_skb: 232 callbacks suppressed [ 143.344831][ T28] audit: type=1326 audit(1774238827.832:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 143.402187][ T28] audit: type=1326 audit(1774238827.832:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.4.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 143.450719][ T7154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7154 comm=syz.5.900 [ 143.504161][ T7159] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=7159 comm=syz.5.900 [ 143.559606][ T28] audit: type=1400 audit(1774238828.032:5892): avc: denied { write } for pid=7161 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.579254][ T28] audit: type=1400 audit(1774238828.032:5893): avc: denied { create } for pid=7153 comm="syz.5.900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.599136][ T7154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1001 sclass=netlink_tcpdiag_socket pid=7154 comm=syz.5.900 [ 143.617803][ T28] audit: type=1400 audit(1774238828.032:5894): avc: denied { setopt } for pid=7161 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.667366][ T28] audit: type=1400 audit(1774238828.032:5895): avc: denied { create } for pid=7161 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 143.784446][ T28] audit: type=1400 audit(1774238828.062:5896): avc: denied { getopt } for pid=7161 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.804769][ T28] audit: type=1400 audit(1774238828.272:5897): avc: denied { execute } for pid=7169 comm="syz.2.906" path="/178/file1" dev="tmpfs" ino=964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 144.979027][ T7183] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 144.986702][ T7183] netlink: 'syz.2.907': attribute type 2 has an invalid length. [ 145.312185][ T7190] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 145.364173][ T28] audit: type=1400 audit(1774238829.842:5898): avc: denied { connect } for pid=7186 comm="syz.5.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.386441][ T7192] netlink: 'syz.5.910': attribute type 39 has an invalid length. [ 145.497495][ T28] audit: type=1400 audit(1774238829.842:5899): avc: denied { setopt } for pid=7186 comm="syz.5.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 145.740710][ T7209] xt_hashlimit: size too large, truncated to 1048576 [ 146.022166][ T7220] bridge_slave_0: left promiscuous mode [ 146.027979][ T7220] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.038280][ T7220] bridge_slave_1: left allmulticast mode [ 146.044506][ T7220] bridge_slave_1: left promiscuous mode [ 146.050553][ T7220] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.069267][ T7220] bond0: (slave bond_slave_0): Releasing backup interface [ 146.080325][ T7220] bond0: (slave bond_slave_1): Releasing backup interface [ 146.150015][ T7220] team_slave_0: left promiscuous mode [ 146.156037][ T7220] team0: Port device team_slave_0 removed [ 146.162481][ T7220] team_slave_1: left promiscuous mode [ 146.187631][ T7220] team0: Port device team_slave_1 removed [ 146.206623][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.242281][ T7220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.306016][ T7220] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.653572][ T7233] __nla_validate_parse: 6 callbacks suppressed [ 146.653587][ T7233] netlink: 164 bytes leftover after parsing attributes in process `syz.1.924'. [ 146.851740][ T7220] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 146.863103][ T7220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.872941][ T7220] bond0: entered promiscuous mode [ 146.879329][ T7220] team0: Port device bond0 added [ 147.371419][ T7253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.589901][ T7261] loop3: detected capacity change from 0 to 128 [ 148.732397][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 148.732410][ T28] audit: type=1400 audit(1774238833.222:5933): avc: denied { watch } for pid=7260 comm="syz.3.931" path="/160/file0/file1" dev="loop3" ino=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 148.794547][ T7269] netlink: 164 bytes leftover after parsing attributes in process `syz.4.935'. [ 149.492622][ T7290] loop1: detected capacity change from 0 to 164 [ 149.511255][ T7285] netlink: 44 bytes leftover after parsing attributes in process `syz.4.941'. [ 149.522990][ T7296] netlink: 164 bytes leftover after parsing attributes in process `syz.5.946'. [ 149.532429][ T7290] iso9660: Unknown parameter 'qbsectoÚqÑWé?6Ë0' [ 149.571209][ T28] audit: type=1400 audit(1774238834.052:5934): avc: denied { bind } for pid=7289 comm="syz.1.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.613790][ T7302] netlink: 54775 bytes leftover after parsing attributes in process `syz.3.949'. [ 149.666550][ T7309] loop3: detected capacity change from 0 to 1024 [ 149.668480][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.950'. [ 149.704870][ T7308] sg_write: data in/out 430044/176 bytes for SCSI command 0x0-- guessing data in; [ 149.704870][ T7308] program syz.1.952 not setting count and/or reply_len properly [ 149.736834][ T7309] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.951: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 149.755911][ T28] audit: type=1400 audit(1774238834.222:5935): avc: denied { setopt } for pid=7305 comm="syz.4.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.756411][ T7309] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 149.778952][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 149.794412][ C1] EXT4-fs (loop3): initial error at time 1774238834: ext4_ext_check_inode:521: inode 4 [ 149.799457][ T7309] EXT4-fs error (device loop3): ext4_quota_enable:7195: comm syz.3.951: Bad quota inode: 4, type: 1 [ 149.804078][ C1] EXT4-fs (loop3): last error at time 1774238834: ext4_ext_check_inode:521: inode 4 [ 149.815563][ T7309] loop3: lost filesystem error report for type 5 error -117 [ 149.824831][ T7309] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 149.854171][ T28] audit: type=1400 audit(1774238834.342:5936): avc: denied { setopt } for pid=7306 comm="syz.1.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.873739][ T7309] EXT4-fs (loop3): mount failed [ 149.983209][ T7334] netlink: 164 bytes leftover after parsing attributes in process `syz.5.958'. [ 150.007145][ T7336] netlink: 'syz.1.959': attribute type 7 has an invalid length. [ 150.018036][ T7336] netlink: 232 bytes leftover after parsing attributes in process `syz.1.959'. [ 150.144132][ T7338] loop3: detected capacity change from 0 to 1024 [ 150.150921][ T7338] EXT4-fs: Ignoring removed i_version option [ 150.318050][ T7338] EXT4-fs: Mount option(s) incompatible with ext2 [ 150.343745][ T28] audit: type=1400 audit(1774238834.622:5937): avc: denied { wake_alarm } for pid=7304 comm="syz.3.951" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.381406][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 150.481101][ T7330] netlink: 80 bytes leftover after parsing attributes in process `syz.4.957'. [ 150.490648][ T7340] team0: No ports can be present during mode change [ 150.510281][ T28] audit: type=1400 audit(1774238834.962:5938): avc: denied { bind } for pid=7339 comm="syz.5.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 150.571355][ T28] audit: type=1326 audit(1774238835.032:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7341 comm="syz.1.961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dd82cc799 code=0x0 [ 150.611407][ T7344] loop1: detected capacity change from 0 to 2048 [ 150.689382][ T4943] loop1: p1 < > p4 [ 150.695120][ T4943] loop1: p4 size 722688 extends beyond EOD, truncated [ 150.725014][ T7344] loop1: p1 < > p4 [ 150.732487][ T7344] loop1: p4 size 722688 extends beyond EOD, truncated [ 150.796697][ T28] audit: type=1400 audit(1774238835.272:5940): avc: denied { setopt } for pid=7353 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.028665][ T7368] lo speed is unknown, defaulting to 1000 [ 151.116233][ T7372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=7372 comm=syz.3.972 [ 151.131474][ T7368] lo speed is unknown, defaulting to 1000 [ 151.247929][ T7384] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 151.336390][ T28] audit: type=1326 audit(1774238835.822:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1c0dc799 code=0x7ffc0000 [ 151.497076][ T28] audit: type=1326 audit(1774238835.852:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7385 comm="syz.5.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1c0dc799 code=0x7ffc0000 [ 151.921087][ T7401] __nla_validate_parse: 3 callbacks suppressed [ 151.921132][ T7401] netlink: 164 bytes leftover after parsing attributes in process `syz.3.982'. [ 152.030952][ T7405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.984'. [ 152.475850][ T7426] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 152.495459][ T7426] veth7: entered promiscuous mode [ 152.502175][ T7426] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 152.526081][ T7431] netlink: 164 bytes leftover after parsing attributes in process `syz.2.994'. [ 152.566908][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.993'. [ 152.671550][ T7449] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1001'. [ 152.851222][ T7452] loop1: detected capacity change from 0 to 1764 [ 152.919667][ T7454] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 153.021624][ T7458] loop3: detected capacity change from 0 to 512 [ 153.044715][ T7460] netlink: 'syz.4.1005': attribute type 1 has an invalid length. [ 153.063542][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.076330][ T7458] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.094962][ T7460] veth7: entered promiscuous mode [ 153.101956][ T7460] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 153.152564][ T7465] 9pnet_fd: Insufficient options for proto=fd [ 153.190673][ T7435] syz.2.996 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 153.204503][ T7435] CPU: 0 UID: 60929 PID: 7435 Comm: syz.2.996 Not tainted syzkaller #0 PREEMPT(full) [ 153.204648][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 153.204659][ T7435] Call Trace: [ 153.204666][ T7435] [ 153.204673][ T7435] __dump_stack+0x1d/0x30 [ 153.204697][ T7435] dump_stack_lvl+0x95/0xd0 [ 153.204721][ T7435] dump_stack+0x15/0x1b [ 153.204738][ T7435] dump_header+0x80/0x240 [ 153.204756][ T7435] oom_kill_process+0x295/0x350 [ 153.204774][ T7435] out_of_memory+0x97d/0xb80 [ 153.204805][ T7435] try_charge_memcg+0x62e/0xa10 [ 153.204857][ T7435] obj_cgroup_charge_pages+0x23/0xc0 [ 153.204882][ T7435] __memcg_kmem_charge_page+0x9e/0x170 [ 153.204961][ T7435] __alloc_frozen_pages_noprof+0x18a/0x360 [ 153.204989][ T7435] alloc_pages_mpol+0xb3/0x260 [ 153.205014][ T7435] alloc_pages_noprof+0x8f/0x130 [ 153.205066][ T7435] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 153.205152][ T7435] __kvmalloc_node_noprof+0x3d4/0x650 [ 153.205176][ T7435] ? futex_hash_allocate+0x190/0x9d0 [ 153.205200][ T7435] ? futex_hash_allocate+0x190/0x9d0 [ 153.205315][ T7435] futex_hash_allocate+0x190/0x9d0 [ 153.205337][ T7435] ? cap_task_prctl+0x13f/0x6e0 [ 153.205358][ T7435] futex_hash_prctl+0xd8/0xf0 [ 153.205378][ T7435] __se_sys_prctl+0xa3d/0x13f0 [ 153.205435][ T7435] __x64_sys_prctl+0x67/0x80 [ 153.205459][ T7435] x64_sys_call+0x2533/0x3020 [ 153.205494][ T7435] do_syscall_64+0x12c/0x370 [ 153.205514][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.205533][ T7435] RIP: 0033:0x7f943584c799 [ 153.205546][ T7435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.205586][ T7435] RSP: 002b:00007f94342a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 153.205632][ T7435] RAX: ffffffffffffffda RBX: 00007f9435ac5fa0 RCX: 00007f943584c799 [ 153.205697][ T7435] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 153.205708][ T7435] RBP: 00007f94358e2c99 R08: 0000000000000000 R09: 0000000000000000 [ 153.205719][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.205729][ T7435] R13: 00007f9435ac6038 R14: 00007f9435ac5fa0 R15: 00007ffd06c397d8 [ 153.205820][ T7435] [ 153.205828][ T7435] memory: usage 307200kB, limit 307200kB, failcnt 407 [ 153.433483][ T7435] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 153.441446][ T7435] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 153.448756][ T7435] Memory cgroup stats for /syz2: [ 153.449081][ T7435] cache 0 [ 153.456923][ T7435] rss 0 [ 153.459721][ T7435] shmem 0 [ 153.462645][ T7435] mapped_file 0 [ 153.466175][ T7435] dirty 0 [ 153.469149][ T7435] writeback 0 [ 153.472555][ T7435] workingset_refault_anon 446 [ 153.477216][ T7435] workingset_refault_file 317 [ 153.482366][ T7435] swap 450560 [ 153.486540][ T7435] swapcached 1363968 [ 153.490918][ T7435] pgpgin 117209 [ 153.494425][ T7435] pgpgout 117209 [ 153.495142][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.497974][ T7435] pgfault 129393 [ 153.510564][ T7435] pgmajfault 92 [ 153.522907][ T7435] inactive_anon 0 [ 153.526586][ T7435] active_anon 0 [ 153.539009][ T7435] inactive_file 0 [ 153.542644][ T7435] active_file 0 [ 153.546060][ T7472] loop3: detected capacity change from 0 to 4096 [ 153.546084][ T7435] unevictable 0 [ 153.546092][ T7435] hierarchical_memory_limit 314572800 [ 153.567777][ T7435] hierarchical_memsw_limit 9223372036854771712 [ 153.574821][ T7472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.586961][ T7435] total_cache 0 [ 153.590543][ T7435] total_rss 0 [ 153.594961][ T7435] total_shmem 0 [ 153.602828][ T7435] total_mapped_file 0 [ 153.611159][ T7435] total_dirty 0 [ 153.615343][ T7435] total_writeback 0 [ 153.619626][ T7435] total_workingset_refault_anon 446 [ 153.625275][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.634963][ T7435] total_workingset_refault_file 317 [ 153.640308][ T7435] total_swap 450560 [ 153.644602][ T7435] total_swapcached 1363968 [ 153.649274][ T7435] total_pgpgin 117209 [ 153.659106][ T7435] total_pgpgout 117209 [ 153.663171][ T7435] total_pgfault 129393 [ 153.680297][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 153.682218][ T7435] total_pgmajfault 92 [ 153.694339][ T7435] total_inactive_anon 0 [ 153.698531][ T7435] total_active_anon 0 [ 153.707481][ T7435] total_inactive_file 0 [ 153.711698][ T7435] total_active_file 0 [ 153.715763][ T7435] total_unevictable 0 [ 153.720270][ T7435] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.996,pid=7433,uid=0 [ 153.735239][ T7435] Memory cgroup out of memory: Killed process 7433 (syz.2.996) total-vm:229332kB, anon-rss:1232kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 153.752984][ T28] kauditd_printk_skb: 197 callbacks suppressed [ 153.752994][ T28] audit: type=1326 audit(1774238838.242:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 153.789274][ T28] audit: type=1326 audit(1774238838.242:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 153.826618][ T28] audit: type=1326 audit(1774238838.242:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7474 comm="syz.4.1011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 153.831821][ T7493] netlink: 'syz.5.1017': attribute type 1 has an invalid length. [ 153.863615][ T7491] loop3: detected capacity change from 0 to 2048 [ 153.883401][ T28] audit: type=1400 audit(1774238838.312:6143): avc: denied { mount } for pid=7490 comm="syz.3.1016" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 153.908560][ T7493] veth7: entered promiscuous mode [ 153.929135][ T4943] loop3: p3 < > p4 < > [ 153.933294][ T4943] loop3: partition table partially beyond EOD, truncated [ 153.943658][ T4943] loop3: p3 start 4284289 is beyond EOD, truncated [ 153.973725][ T7493] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 154.045916][ T7491] loop3: p3 < > p4 < > [ 154.050948][ T7491] loop3: partition table partially beyond EOD, truncated [ 154.058284][ T7491] loop3: p3 start 4284289 is beyond EOD, truncated [ 154.162390][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 154.186789][ T7506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 156.005666][ T4943] udevd[4943]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 156.022198][ T4943] udevd[4943]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 156.347542][ T4943] udevd[4943]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 157.056481][ T7520] loop3: detected capacity change from 0 to 1024 [ 157.063285][ T7520] EXT4-fs: Ignoring removed i_version option [ 157.069294][ T7520] EXT4-fs: Ignoring removed bh option [ 157.074807][ T7520] EXT4-fs: inline encryption not supported [ 157.081621][ T7520] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 157.120954][ T7520] Quota error (device loop3): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 157.133033][ T7520] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 157.147898][ T7520] EXT4-fs (loop3): mount failed [ 158.013898][ T7538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1028'. [ 158.212072][ T7533] loop1: detected capacity change from 0 to 1024 [ 158.252241][ T7539] netlink: 'syz.5.1023': attribute type 9 has an invalid length. [ 158.272752][ T28] audit: type=1400 audit(1774238842.692:6144): avc: denied { ioctl } for pid=7514 comm="syz.5.1023" path="socket:[26823]" dev="sockfs" ino=26823 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.345818][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1023'. [ 158.355820][ T7533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.368010][ T7533] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.437876][ T7539] hsr0: entered promiscuous mode [ 158.466370][ T7539] macvlan2: entered promiscuous mode [ 158.475605][ T28] audit: type=1326 audit(1774238842.922:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 158.527034][ T7539] macvlan2: entered allmulticast mode [ 158.550695][ T7539] hsr0: entered allmulticast mode [ 158.569517][ T7539] hsr_slave_0: entered allmulticast mode [ 158.584347][ T7539] hsr_slave_1: entered allmulticast mode [ 158.590688][ T28] audit: type=1326 audit(1774238842.922:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 158.633210][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 158.681321][ T28] audit: type=1326 audit(1774238842.922:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 158.765778][ T28] audit: type=1326 audit(1774238842.922:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 158.816233][ T28] audit: type=1326 audit(1774238842.922:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 158.933287][ T28] audit: type=1326 audit(1774238842.922:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 158.997297][ T28] audit: type=1326 audit(1774238842.922:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 159.023360][ T28] audit: type=1326 audit(1774238842.922:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 159.047770][ T28] audit: type=1326 audit(1774238842.922:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 159.072077][ T28] audit: type=1326 audit(1774238842.922:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 159.096039][ T28] audit: type=1326 audit(1774238842.922:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 159.119726][ T28] audit: type=1326 audit(1774238842.922:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2fd0f2c799 code=0x7ffc0000 [ 159.129758][ T7561] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 159.143516][ T28] audit: type=1326 audit(1774238842.922:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7543 comm="syz.4.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2fd0f2c502 code=0x7ffc0000 [ 159.409021][ T7542] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 160.355599][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.509408][ T7590] netlink: 'syz.4.1046': attribute type 1 has an invalid length. [ 160.649750][ T7590] veth9: entered promiscuous mode [ 160.656174][ T7590] bond7: (slave veth9): Enslaving as a backup interface with a down link [ 160.691009][ T7599] netlink: 'syz.3.1047': attribute type 1 has an invalid length. [ 160.780296][ T7600] ipvlan2: entered allmulticast mode [ 160.831703][ T7601] lo speed is unknown, defaulting to 1000 [ 160.887685][ T7601] lo speed is unknown, defaulting to 1000 [ 160.997669][ T7601] xt_recent: Unsupported userspace flags (000000b1) [ 161.169282][ T7599] veth9: entered promiscuous mode [ 161.175813][ T7599] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 161.265108][ T7608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.186562][ T7619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'. [ 163.333783][ T7627] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1053'. [ 163.399449][ T7630] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1054'. [ 163.534813][ T7630] openvswitch: netlink: Flow key attr not present in new flow. [ 163.783766][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 163.783777][ T28] audit: type=1400 audit(1774238848.272:6213): avc: denied { create } for pid=7637 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 163.858328][ T28] audit: type=1400 audit(1774238848.302:6214): avc: denied { module_request } for pid=7637 comm="syz.2.1058" kmod="net-pf-10-proto-7-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 163.883167][ T28] audit: type=1400 audit(1774238848.302:6215): avc: denied { create } for pid=7631 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.941470][ T28] audit: type=1400 audit(1774238848.312:6216): avc: denied { write } for pid=7631 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 163.994351][ T28] audit: type=1400 audit(1774238848.312:6217): avc: denied { nlmsg_write } for pid=7631 comm="syz.1.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.015551][ T28] audit: type=1400 audit(1774238848.462:6218): avc: denied { mounton } for pid=7637 comm="syz.2.1058" path="/198/file0" dev="tmpfs" ino=1068 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.202035][ T28] audit: type=1400 audit(1774238848.692:6219): avc: denied { mount } for pid=7645 comm="syz.3.1059" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 164.227621][ T7646] loop3: detected capacity change from 0 to 164 [ 164.237962][ T7646] isofs_fill_super: bread failed, dev=loop3, iso_blknum=41, block=82 [ 164.267291][ T28] audit: type=1400 audit(1774238848.722:6220): avc: denied { mounton } for pid=7645 comm="syz.3.1059" path="/187/file1" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.356868][ T28] audit: type=1400 audit(1774238848.822:6221): avc: denied { write } for pid=7645 comm="syz.3.1059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 164.380553][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 164.380892][ T7650] netlink: 'syz.5.1061': attribute type 1 has an invalid length. [ 164.451329][ T28] audit: type=1400 audit(1774238848.942:6222): avc: denied { read } for pid=7653 comm="syz.1.1062" dev="nsfs" ino=4026532510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 164.460190][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 164.497968][ T7654] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 164.505919][ T7652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1059'. [ 164.515148][ T7654] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1062'. [ 164.547692][ T7654] loop1: detected capacity change from 0 to 512 [ 164.571035][ T7654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.584032][ T7655] veth9: entered promiscuous mode [ 164.592046][ T7655] bond4: (slave veth9): Enslaving as a backup interface with a down link [ 164.601047][ T7654] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.798050][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.816409][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1063'. [ 164.831958][ T7670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7670 comm=syz.2.1063 [ 164.844471][ T7670] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1063'. [ 165.653792][ T7677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=7677 comm=syz.5.1068 [ 165.674953][ T7679] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 165.848735][ T7679] veth3: entered promiscuous mode [ 166.916066][ T7702] FAULT_INJECTION: forcing a failure. [ 166.916066][ T7702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.979297][ T7704] batadv_slave_1: entered promiscuous mode [ 166.986604][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: syz.3.1076 Not tainted syzkaller #0 PREEMPT(full) [ 166.986625][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.986635][ T7702] Call Trace: [ 166.986642][ T7702] [ 166.986650][ T7702] __dump_stack+0x1d/0x30 [ 166.986675][ T7702] dump_stack_lvl+0x95/0xd0 [ 166.986734][ T7702] dump_stack+0x15/0x1b [ 166.986764][ T7702] should_fail_ex+0x263/0x280 [ 166.986836][ T7702] should_fail+0xb/0x20 [ 166.986852][ T7702] should_fail_usercopy+0x1a/0x20 [ 166.986877][ T7702] _copy_to_user+0x20/0xa0 [ 166.986975][ T7702] simple_read_from_buffer+0xb5/0x130 [ 166.986998][ T7702] proc_fail_nth_read+0x10e/0x150 [ 166.987024][ T7702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.987093][ T7702] vfs_read+0x1ab/0x7f0 [ 166.987119][ T7702] ? __rcu_read_unlock+0x4e/0x70 [ 166.987197][ T7702] ? __fget_files+0x184/0x1c0 [ 166.987215][ T7702] ? sb_end_write+0x6e/0xc0 [ 166.987240][ T7702] ? mutex_lock+0x57/0x90 [ 166.987325][ T7702] ksys_read+0xdc/0x1a0 [ 166.987340][ T7702] __x64_sys_read+0x40/0x50 [ 166.987357][ T7702] x64_sys_call+0x2886/0x3020 [ 166.987386][ T7702] do_syscall_64+0x12c/0x370 [ 166.987405][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.987487][ T7702] RIP: 0033:0x7f335f83cfce [ 166.987500][ T7702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.987517][ T7702] RSP: 002b:00007f335e2cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.987535][ T7702] RAX: ffffffffffffffda RBX: 00007f335e2cf6c0 RCX: 00007f335f83cfce [ 166.987617][ T7702] RDX: 000000000000000f RSI: 00007f335e2cf0a0 RDI: 0000000000000004 [ 166.987628][ T7702] RBP: 00007f335e2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 166.987642][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.987652][ T7702] R13: 00007f335faf6038 R14: 00007f335faf5fa0 R15: 00007ffed0ae6778 [ 166.987671][ T7702] [ 167.220024][ T7703] batadv_slave_1: left promiscuous mode [ 167.313654][ T7707] bridge0: port 3(team0) entered disabled state [ 167.319989][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.327099][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.339290][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 167.509711][ T7727] netlink: 'syz.5.1085': attribute type 1 has an invalid length. [ 167.538101][ T7727] veth11: entered promiscuous mode [ 167.650719][ T7740] loop3: detected capacity change from 0 to 1024 [ 167.679701][ T7740] EXT4-fs: Ignoring removed orlov option [ 167.687993][ T7744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7744 comm=syz.5.1091 [ 167.727585][ T7740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.113638][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.282415][ T7755] __nla_validate_parse: 2 callbacks suppressed [ 168.282468][ T7755] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1093'. [ 168.406451][ T7762] loop3: detected capacity change from 0 to 512 [ 168.479448][ T7762] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.599859][ T7762] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1095: bad orphan inode 131083 [ 168.659025][ T7762] loop3: lost filesystem error report for type 5 error -117 [ 168.663512][ T7762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.731876][ T7771] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1098'. [ 168.762694][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 168.771858][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1096'. [ 168.859015][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 168.859039][ T28] audit: type=1400 audit(1774238853.212:6305): avc: denied { create } for pid=7770 comm="syz.5.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 168.989128][ T7774] netlink: 'syz.5.1099': attribute type 1 has an invalid length. [ 169.024022][ T28] audit: type=1400 audit(1774238853.222:6306): avc: denied { connect } for pid=7770 comm="syz.5.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 169.088841][ T28] audit: type=1400 audit(1774238853.292:6307): avc: denied { name_bind } for pid=7770 comm="syz.5.1098" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 169.115337][ T28] audit: type=1400 audit(1774238853.372:6308): avc: denied { read append open } for pid=7761 comm="syz.3.1095" path="/199/bus/hugetlb.1GB.usage_in_bytes" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 169.147737][ T7774] veth13: entered promiscuous mode [ 169.178954][ T7779] netlink: 'syz.4.1100': attribute type 21 has an invalid length. [ 169.196065][ T7779] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1100'. [ 169.205502][ T7779] netlink: 'syz.4.1100': attribute type 4 has an invalid length. [ 169.213565][ T7779] netlink: 'syz.4.1100': attribute type 5 has an invalid length. [ 169.221525][ T7779] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1100'. [ 169.232156][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.382310][ T28] audit: type=1400 audit(1774238853.872:6309): avc: denied { getopt } for pid=7789 comm="syz.3.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.390650][ T7784] lo speed is unknown, defaulting to 1000 [ 169.446100][ T28] audit: type=1400 audit(1774238853.922:6310): avc: denied { getopt } for pid=7780 comm="syz.5.1102" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.477114][ T7784] lo speed is unknown, defaulting to 1000 [ 169.478369][ T7790] lo speed is unknown, defaulting to 1000 [ 169.501134][ T28] audit: type=1400 audit(1774238853.962:6311): avc: denied { ioctl } for pid=7789 comm="syz.3.1105" path="socket:[27332]" dev="sockfs" ino=27332 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.528631][ T28] audit: type=1400 audit(1774238853.982:6312): avc: denied { name_bind } for pid=7780 comm="syz.5.1102" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 169.551160][ T28] audit: type=1400 audit(1774238853.982:6313): avc: denied { node_bind } for pid=7780 comm="syz.5.1102" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 169.581062][ T7790] lo speed is unknown, defaulting to 1000 [ 169.604241][ T28] audit: type=1400 audit(1774238854.092:6314): avc: denied { create } for pid=7800 comm="syz.2.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.715020][ T7804] ip6erspan0: entered allmulticast mode [ 169.742766][ T7801] netlink: 'syz.2.1107': attribute type 15 has an invalid length. [ 169.800513][ T7810] loop1: detected capacity change from 0 to 128 [ 169.824431][ T7810] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.933165][ T7818] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 169.967039][ T7818] veth5: entered promiscuous mode [ 170.119246][ T7823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.139334][ T3400] lo speed is unknown, defaulting to 1000 [ 170.145192][ T3400] syz2: Port: 1 Link DOWN [ 170.169157][ T7824] lo speed is unknown, defaulting to 1000 [ 170.207076][ T7824] lo speed is unknown, defaulting to 1000 [ 171.103559][ T7847] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 171.112605][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 171.207021][ T7850] loop3: detected capacity change from 0 to 512 [ 171.241022][ T7852] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 172.147421][ T7856] veth11: entered promiscuous mode [ 172.160766][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1126'. [ 172.196471][ T7861] team_slave_0 (unregistering): left promiscuous mode [ 172.204225][ T7861] team_slave_0 (unregistering): left allmulticast mode [ 172.213659][ T7861] team0: Port device team_slave_0 removed [ 172.284851][ T7861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1126'. [ 172.310692][ T7867] lo speed is unknown, defaulting to 1000 [ 172.343813][ T7866] lo speed is unknown, defaulting to 1000 [ 172.377062][ T7866] lo speed is unknown, defaulting to 1000 [ 172.399846][ T7867] lo speed is unknown, defaulting to 1000 [ 172.465527][ T7874] tipc: Trying to set illegal importance in message [ 172.507715][ T7895] ip6erspan0: mtu less than device minimum [ 172.543699][ T7897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7897 comm=syz.4.1136 [ 173.161213][ T7911] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 173.813725][ T7906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.841945][ T7915] veth7: entered promiscuous mode [ 173.889958][ T28] kauditd_printk_skb: 152 callbacks suppressed [ 173.889970][ T28] audit: type=1400 audit(1774238858.382:6467): avc: denied { create } for pid=7927 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 173.960473][ T7938] __nla_validate_parse: 4 callbacks suppressed [ 173.960485][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1152'. [ 173.979880][ T28] audit: type=1400 audit(1774238858.402:6468): avc: denied { create } for pid=7930 comm="syz.5.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.045953][ T28] audit: type=1400 audit(1774238858.402:6469): avc: denied { write } for pid=7930 comm="syz.5.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.109989][ T28] audit: type=1400 audit(1774238858.412:6470): avc: denied { ioctl } for pid=7927 comm="syz.4.1146" path="socket:[27560]" dev="sockfs" ino=27560 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.141570][ T28] audit: type=1400 audit(1774238858.412:6471): avc: denied { accept } for pid=7927 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.162165][ T28] audit: type=1400 audit(1774238858.412:6472): avc: denied { prog_load } for pid=7927 comm="syz.4.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.181574][ T28] audit: type=1400 audit(1774238858.412:6473): avc: denied { bpf } for pid=7927 comm="syz.4.1146" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.346916][ T7938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7938 comm=syz.1.1152 [ 174.385309][ T28] audit: type=1400 audit(1774238858.442:6474): avc: denied { write } for pid=7934 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.430560][ T7952] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.449221][ T7952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1155'. [ 174.458806][ T28] audit: type=1400 audit(1774238858.442:6475): avc: denied { create } for pid=7934 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 174.463908][ T7953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.501065][ T7954] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1155'. [ 174.573266][ T28] audit: type=1400 audit(1774238858.442:6476): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 174.654089][ T7952] loop1: detected capacity change from 0 to 8192 [ 174.822315][ T7958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=7958 comm=syz.4.1156 [ 174.977301][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1156'. [ 176.882092][ T7954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.919774][ T7954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.929688][ T7954] bond0 (unregistering): Released all slaves [ 176.937186][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 177.131192][ T7974] netlink: 'syz.4.1162': attribute type 1 has an invalid length. [ 177.170966][ T7974] veth11: entered promiscuous mode [ 177.332020][ T7988] 9p: Bad value for 'rfdno' [ 177.710050][ T7998] tmpfs: Bad value for 'mpol' [ 178.574647][ T8010] loop3: detected capacity change from 0 to 512 [ 178.591710][ T8010] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 178.619001][ T8010] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 178.655216][ T8010] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1172: Corrupt directory, running e2fsck is recommended [ 178.714326][ T8010] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 178.744917][ T8010] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1172: corrupted in-inode xattr: e_name out of bounds [ 178.773717][ T8010] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.773889][ T8010] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1172: couldn't read orphan inode 15 (err -117) [ 178.783089][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 178.783103][ C1] EXT4-fs (loop3): initial error at time 1774239119: ext4_iget_extra_inode:5025: inode 15 [ 178.783129][ C1] EXT4-fs (loop3): last error at time 1774239119: ext4_iget_extra_inode:5025: inode 15 [ 178.828973][ T8010] loop3: lost filesystem error report for type 5 error -117 [ 178.910996][ T8010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.936599][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 178.936613][ T28] audit: type=1400 audit(1774239119.419:6607): avc: denied { mount } for pid=8009 comm="syz.3.1172" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 179.032945][ T28] audit: type=1326 audit(1774239119.469:6608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f335f83cfce code=0x7ffc0000 [ 179.057803][ T8015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=8015 comm=syz.3.1172 [ 179.138950][ T28] audit: type=1326 audit(1774239119.469:6609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f335f87abd7 code=0x7ffc0000 [ 179.168923][ T28] audit: type=1326 audit(1774239119.469:6610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f335f83cfce code=0x7ffc0000 [ 179.205536][ T28] audit: type=1326 audit(1774239119.469:6611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 179.233527][ T8005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.248734][ T28] audit: type=1326 audit(1774239119.469:6612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 179.250487][ T8018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 179.290073][ T28] audit: type=1326 audit(1774239119.479:6613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 179.360950][ T28] audit: type=1400 audit(1774239119.849:6614): avc: denied { write } for pid=8019 comm="syz.5.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 179.390894][ T8020] lo speed is unknown, defaulting to 1000 [ 179.401009][ T8023] netlink: 'syz.1.1174': attribute type 1 has an invalid length. [ 179.415392][ T28] audit: type=1326 audit(1774239119.879:6615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 179.438943][ T28] audit: type=1326 audit(1774239119.879:6616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8009 comm="syz.3.1172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335f87c799 code=0x7ffc0000 [ 179.473114][ T8023] veth9: entered promiscuous mode [ 179.483121][ T8020] lo speed is unknown, defaulting to 1000 [ 179.532004][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.569880][ T8030] netlink: 'syz.1.1178': attribute type 2 has an invalid length. [ 179.589252][ T8030] netlink: 'syz.1.1178': attribute type 1 has an invalid length. [ 180.262697][ T8055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.927229][ T8065] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 181.935432][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 181.949641][ T8069] loop3: detected capacity change from 0 to 512 [ 181.964418][ T8063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=8063 comm=syz.5.1188 [ 181.984888][ T8065] veth9: entered promiscuous mode [ 182.018141][ T8069] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 182.032968][ T8069] EXT4-fs (loop3): orphan cleanup on readonly fs [ 182.045359][ T8069] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.1191: corrupted inode contents [ 182.057604][ T8069] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 182.058828][ T8069] EXT4-fs (loop3): Remounting filesystem read-only [ 182.074646][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 182.074665][ C0] EXT4-fs (loop3): initial error at time 1774239122: ext4_do_update_inode:5569: inode 16 [ 182.074690][ C0] EXT4-fs (loop3): last error at time 1774239122: ext4_do_update_inode:5569: inode 16 [ 182.101474][ T8069] EXT4-fs (loop3): 1 truncate cleaned up [ 182.108218][ T6478] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 182.120626][ T6478] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 182.121187][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1188'. [ 182.131186][ T6478] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 182.131665][ T8069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.348494][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.621441][ T8099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.957010][ T8102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1201'. [ 184.096685][ T28] kauditd_printk_skb: 146 callbacks suppressed [ 184.096700][ T28] audit: type=1400 audit(1774239124.579:6757): avc: denied { allowed } for pid=8105 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.123096][ T28] audit: type=1400 audit(1774239124.579:6758): avc: denied { name_bind } for pid=8109 comm="syz.4.1204" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 184.160194][ T28] audit: type=1400 audit(1774239124.629:6759): avc: denied { tracepoint } for pid=8107 comm="syz.5.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 184.212075][ T8116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8116 comm=syz.1.1206 [ 184.244247][ T28] audit: type=1400 audit(1774239124.729:6760): avc: denied { create } for pid=8118 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.266430][ T8120] loop1: detected capacity change from 0 to 512 [ 184.278017][ T28] audit: type=1400 audit(1774239124.729:6761): avc: denied { create } for pid=8107 comm="syz.5.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 184.293951][ T8120] EXT4-fs: Ignoring removed bh option [ 184.317593][ T28] audit: type=1400 audit(1774239124.739:6762): avc: denied { connect } for pid=8118 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.360718][ T28] audit: type=1400 audit(1774239124.759:6763): avc: denied { ioctl } for pid=8107 comm="syz.5.1203" path="socket:[28587]" dev="sockfs" ino=28587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 184.360828][ T8120] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 184.428982][ T8120] EXT4-fs (loop1): 1 truncate cleaned up [ 184.435075][ T8120] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.462171][ T28] audit: type=1400 audit(1774239124.759:6764): avc: denied { bind } for pid=8107 comm="syz.5.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.481975][ T28] audit: type=1400 audit(1774239124.759:6765): avc: denied { write } for pid=8107 comm="syz.5.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 184.501685][ T28] audit: type=1400 audit(1774239124.779:6766): avc: denied { mounton } for pid=8115 comm="syz.1.1206" path="/207/file0" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 184.651412][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.711765][ T8143] loop3: detected capacity change from 0 to 512 [ 184.965128][ T8152] loop1: detected capacity change from 0 to 128 [ 185.000134][ T8150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.030490][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 185.051349][ T8155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=8155 comm=syz.2.1216 [ 185.101959][ T8155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8155 comm=syz.2.1216 [ 185.300936][ T8159] vlan2: entered allmulticast mode [ 185.685406][ T8143] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 185.816352][ T8143] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 185.837241][ T8143] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1213: Corrupt directory, running e2fsck is recommended [ 186.145055][ T8143] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 186.183358][ T8143] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1213: corrupted in-inode xattr: e_name out of bounds [ 186.242712][ T8143] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 186.242921][ T8143] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1213: couldn't read orphan inode 15 (err -117) [ 186.252169][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 186.252183][ C0] EXT4-fs (loop3): initial error at time 1774239126: ext4_iget_extra_inode:5025: inode 15 [ 186.252206][ C0] EXT4-fs (loop3): last error at time 1774239126: ext4_iget_extra_inode:5025: inode 15 [ 186.299913][ T8143] loop3: lost filesystem error report for type 5 error -117 [ 186.300955][ T8143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.391618][ T8171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=8171 comm=syz.3.1213 [ 186.528638][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 188.286385][ T8195] veth11: entered promiscuous mode [ 188.378350][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.403971][ T8207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1231'. [ 188.417132][ T3001] ================================================================== [ 188.425222][ T3001] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 188.433210][ T3001] [ 188.435526][ T3001] write to 0xffff8881085becf0 of 8 bytes by task 4943 on cpu 0: [ 188.443134][ T3001] dentry_unlink_inode+0x65/0x260 [ 188.448150][ T3001] d_delete+0xc8/0xe0 [ 188.452118][ T3001] d_delete_notify+0x32/0x100 [ 188.456774][ T3001] vfs_unlink+0x289/0x490 [ 188.461086][ T3001] filename_unlinkat+0x1e2/0x410 [ 188.466003][ T3001] __se_sys_unlink+0x2b/0xe0 [ 188.470574][ T3001] __x64_sys_unlink+0x1f/0x30 [ 188.475239][ T3001] x64_sys_call+0x2eb6/0x3020 [ 188.479907][ T3001] do_syscall_64+0x12c/0x370 [ 188.484486][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.490359][ T3001] [ 188.492664][ T3001] read to 0xffff8881085becf0 of 8 bytes by task 3001 on cpu 1: [ 188.500183][ T3001] step_into_slowpath+0x12c/0x4c0 [ 188.505193][ T3001] path_lookupat+0x330/0x500 [ 188.509767][ T3001] filename_lookup+0x190/0x390 [ 188.514515][ T3001] do_readlinkat+0x74/0x2f0 [ 188.519005][ T3001] __x64_sys_readlink+0x47/0x60 [ 188.523839][ T3001] x64_sys_call+0x2b51/0x3020 [ 188.528501][ T3001] do_syscall_64+0x12c/0x370 [ 188.533074][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.538947][ T3001] [ 188.541250][ T3001] value changed: 0xffff88811ded2930 -> 0x0000000000000000 [ 188.548333][ T3001] [ 188.550633][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 188.556760][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 188.565589][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 188.575628][ T3001] ================================================================== [ 188.616043][ T8215] loop1: detected capacity change from 0 to 164 [ 188.626268][ T8215] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 189.069295][ T6471] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 189.078790][ T6471] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 189.095888][ T6471] bond3 (unregistering): (slave gretap2): Releasing active interface [ 189.209921][ T6471] bond0 (unregistering): left promiscuous mode [ 189.216460][ T6471] team0: Port device bond0 removed [ 189.222052][ T6471] bond0 (unregistering): Released all slaves [ 189.229244][ T6471] bond1 (unregistering): Released all slaves [ 189.236916][ T6471] bond2 (unregistering): Released all slaves [ 189.246364][ T6471] bond3 (unregistering): Released all slaves [ 189.254138][ T6471] bond4 (unregistering): Released all slaves [ 189.262109][ T6471] bond5 (unregistering): (slave veth5): Releasing backup interface [ 189.270447][ T6471] bond5 (unregistering): Released all slaves [ 189.278427][ T6471] bond6 (unregistering): (slave veth7): Releasing backup interface [ 189.286923][ T6471] bond6 (unregistering): Released all slaves [ 189.295603][ T6471] bond7 (unregistering): (slave veth9): Releasing backup interface [ 189.303923][ T6471] bond7 (unregistering): Released all slaves [ 189.315298][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 189.315319][ T28] audit: type=1400 audit(1774239129.799:6828): avc: denied { search } for pid=3040 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.342926][ T28] audit: type=1400 audit(1774239129.799:6829): avc: denied { search } for pid=3040 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.364970][ T28] audit: type=1400 audit(1774239129.799:6830): avc: denied { search } for pid=3040 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.391879][ T28] audit: type=1400 audit(1774239129.799:6831): avc: denied { read } for pid=3040 comm="dhcpcd" name="n29" dev="tmpfs" ino=7043 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.414956][ T28] audit: type=1400 audit(1774239129.799:6832): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=7043 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.438008][ T28] audit: type=1400 audit(1774239129.799:6833): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=7043 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.461380][ T28] audit: type=1400 audit(1774239129.879:6834): avc: denied { read open } for pid=8218 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.505174][ T28] audit: type=1400 audit(1774239129.879:6835): avc: denied { getattr } for pid=8218 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.530468][ T6471] hsr_slave_0: left promiscuous mode [ 189.536254][ T6471] hsr_slave_1: left promiscuous mode [ 189.553535][ T28] audit: type=1400 audit(1774239129.989:6836): avc: denied { add_name } for pid=8217 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.576017][ T28] audit: type=1400 audit(1774239129.989:6837): avc: denied { create } for pid=8217 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 189.634721][ T6464] smc: removing ib device syU× [ 189.861985][ T6471] IPVS: stop unused estimator thread 0... [ 189.922524][ T6471] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.970087][ T6471] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.000507][ T6471] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.050342][ T6471] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.126795][ T6471] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.136703][ T6471] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.182470][ T6471] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.192262][ T6471] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.250692][ T6471] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.260674][ T6471] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.320459][ T6471] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.330689][ T6471] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.578052][ T6471] team0: left allmulticast mode [ 190.583085][ T6471] team_slave_1: left allmulticast mode [ 190.588608][ T6471] team0: left promiscuous mode [ 190.593553][ T6471] team_slave_1: left promiscuous mode [ 190.599402][ T6471] bridge0: port 3(team0) entered disabled state [ 190.606003][ T6471] bridge_slave_1: left allmulticast mode [ 190.611769][ T6471] bridge_slave_1: left promiscuous mode [ 190.617388][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.624913][ T6471] bridge_slave_0: left allmulticast mode [ 190.630697][ T6471] bridge_slave_0: left promiscuous mode [ 190.636290][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.644663][ T6471] team0: left allmulticast mode [ 190.649636][ T6471] team_slave_0: left allmulticast mode [ 190.655127][ T6471] team_slave_1: left allmulticast mode [ 190.660621][ T6471] team0: left promiscuous mode [ 190.665376][ T6471] team_slave_0: left promiscuous mode [ 190.670867][ T6471] team_slave_1: left promiscuous mode [ 190.676529][ T6471] bridge0: port 3(team0) entered disabled state [ 190.683332][ T6471] bridge_slave_1: left allmulticast mode [ 190.689059][ T6471] bridge_slave_1: left promiscuous mode [ 190.694657][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.702097][ T6471] bridge_slave_0: left allmulticast mode [ 190.707712][ T6471] bridge_slave_0: left promiscuous mode [ 190.713380][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.721426][ T6471] bridge_slave_1: left allmulticast mode [ 190.727039][ T6471] bridge_slave_1: left promiscuous mode [ 190.732817][ T6471] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.740404][ T6471] bridge_slave_0: left allmulticast mode [ 190.746069][ T6471] bridge_slave_0: left promiscuous mode [ 190.751696][ T6471] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.890725][ T6471] team0: Port device bridge1 removed [ 190.939060][ T3400] SELinux: failure in sel_netif_sid_slow(), invalid network interface (83) [ 190.949448][ T6471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.959002][ T6471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.968384][ T6471] bond0 (unregistering): Released all slaves [ 190.975568][ T6471] bond1 (unregistering): Released all slaves [ 190.983671][ T6471] bond2 (unregistering): (slave veth5): Releasing backup interface [ 190.992509][ T6471] bond2 (unregistering): Released all slaves [ 191.000724][ T6471] bond3 (unregistering): (slave veth7): Releasing backup interface [ 191.009732][ T6471] bond3 (unregistering): Released all slaves [ 191.017831][ T6471] bond4 (unregistering): (slave veth9): Releasing backup interface [ 191.026734][ T6471] bond4 (unregistering): Released all slaves [ 191.034809][ T6471] bond5 (unregistering): Released all slaves [ 191.043186][ T6471] bond6 (unregistering): Released all slaves [ 191.063589][ T6471] bond2 (unregistering): (slave gretap2): Releasing active interface [ 191.139945][ T6471] team0: Port device bridge1 removed [ 191.190646][ T6471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.200153][ T6471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.209703][ T6471] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 191.218462][ T6471] bond0 (unregistering): Released all slaves [ 191.226140][ T6471] bond1 (unregistering): (slave veth5): Releasing backup interface [ 191.234759][ T6471] bond1 (unregistering): Released all slaves [ 191.242703][ T6471] bond2 (unregistering): Released all slaves [ 191.250616][ T6471] bond3 (unregistering): Released all slaves [ 191.258388][ T6471] bond4 (unregistering): (slave veth9): Releasing backup interface [ 191.267133][ T6471] bond4 (unregistering): Released all slaves [ 191.284390][ T6471] bond2 (unregistering): (slave gretap1): Releasing active interface [ 191.360227][ T6471] bond1 (unregistering): Released all slaves [ 191.368218][ T6471] bond2 (unregistering): Released all slaves [ 191.376235][ T6471] bond3 (unregistering): Released all slaves [ 191.384206][ T6471] bond4 (unregistering): Released all slaves [ 191.440979][ T6471] IPVS: stopping backup sync thread 3673 ... [ 191.450992][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.458461][ T6471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.467170][ T6471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.474973][ T6471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.483683][ T6471] hsr_slave_0: left promiscuous mode [ 191.490032][ T6471] hsr_slave_1: left promiscuous mode [ 191.497296][ T6471] hsr_slave_0: left promiscuous mode [ 191.503008][ T6471] hsr_slave_1: left promiscuous mode [ 191.512439][ T6471] hsr0: left allmulticast mode [ 191.517247][ T6471] veth1_macvtap: left promiscuous mode [ 191.522859][ T6471] veth0_macvtap: left promiscuous mode [ 191.528385][ T6471] veth1_vlan: left promiscuous mode [ 191.533696][ T6471] veth0_vlan: left promiscuous mode [ 191.539323][ T6471] veth0_macvtap: left promiscuous mode [ 191.594862][ T6471] pim6reg4 (unregistering): left allmulticast mode [ 191.628911][ T6471] team0 (unregistering): Port device team_slave_1 removed [ 191.679455][ T6471] team0 (unregistering): Port device team_slave_1 removed [ 191.688555][ T6471] team0 (unregistering): Port device team_slave_0 removed [ 191.740541][ T6471] team0 (unregistering): Port device team_slave_1 removed [ 191.749612][ T6471] team0 (unregistering): Port device team_slave_0 removed [ 192.287411][ T6471] IPVS: stop unused estimator thread 0...