last executing test programs: 2m6.933086954s ago: executing program 32 (id=811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f000df06712", 0x15}, {&(0x7f0000000200)='$', 0x1}], 0x2) 1m32.362278588s ago: executing program 33 (id=1639): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="a3", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 1m24.223034345s ago: executing program 3 (id=1834): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$eJzs3c9vG1kdAPCv3fxw03SThT0sCNiyLBRU1U7c3Wi1B1guSGi1WqRlTwh1o8SNothxFDulCZFIJW5ckajECf4EDkgckHrizg1uXIoEUoGKqkFCyGjscZo4dhM1cdzGn4808ps3k/l+n6V5L37+8QIYWlciYicixiLi04iYSusz6Rbvt7bkvCePthd2H20vZKLR+PifI+mZ2wvt89supdfMRXyU7I93iVvb3FqZL5dL6+l+oV5ZK9Q2t64vV+aXSkul1WJxbnZu5t0b7xRPra1vVH7z8DvLH3zy+9998cEfd77x4yTnb7UOjSVtO7VA+7Sel9GY3FeXPHMf9CPYAFxI2zM26ER4LtmI+ExEvJmW9+QGlxMA0F+NxlQ0pvbv95Y5xjkAwIsvec0/GZlsPn39PxnZbD7fnMPLvRYT2XK1Vr92q7qxuhjNOazpGM3eWi6XZtK5wukYzST7s83y0/1ix/6NiHg1In4+frG5n1+olhcH9U8PAAy5Sx3j/+Px1vh/DN4hAICXmZEcAIbP4fF/dCB5AABnx+t/ABg++8b/bt/VBQDOoVzHd/8BgPPvyPn/1+MnPzybVACAM+L9fwAYKt/78MNka+ymv3+9eHtzY6V6+/piqbaSr2ws5Beq62v5pWp1qfmbPZWjrleuVtdm346NO4V6qVYv1Da3blaqG6v1m83f9b5Z8sUCABi8V9+4/+dMROy8d7G5RXstBx8IgHPPbQ7D68KgEwAGZmTQCQADYz4eyBxxvOdHhO71/puLJ8gH6L+rn+sx/9/tf4O7e6X/Nc4uRaBPzP/D8DrZ/L/ZA3iZmf+H4dVoZKznDwBD5hiv4H1EEM65537/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbYZHPLZPPpWuCTkc3m8xGXI2I6RjO3lsulmYh4JSL+ND46nuzPDjppAOCEsn/PpOt/XZ16a7Lz6FjmP+PNx4j40S8//sWd+Xp9fTap/9deff1eWl/sGmC8/20AAPYZ6axoj9Ptcby9vu+TR9sL7e0sE3z47dbioknc3XRrp95KPhejETHx78yBxmROaWHinbsR8Xpn+7N7x6fTlU874yexL/ctfjRbOHkgfvZA/GzzWOsxeS4+ewq5wLC5n/Q/73e7/7JxpfmY3n+Zg51pLn52uHN9Du3+b7fR2f+17vePLueafU23/u/KcWO8/Yfv9jx290Lj8yMRu4f63/aK0LlmqVv8t7pd8KfffLzRUfWXL3zpzV7xG7+KuBrPit8qFeqVtUJtc+v6cmV+qbRUWi0W52bnZt698U6x0JyjLrRnqg/7x3vXXund/oiJHvFzR7T/q70u2uHX//30B19+Rvyvf6Vb/Gy89oz4yZj4tWPGn5/4bc/lu5P4iz3aP3Ig/tiBv0vqrh0z/oO/bi0e81QA4AzUNrdW5svl0rrCSQu5fl350gvSQIUehb99cuCeGng+p1IYWJcEnJGnN/2gMwEAAAAAAAAAAAAAAHqpfT/9yb8+fhlu0G0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/Pp/AAAA///RQMtW") lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)) 1m24.076599904s ago: executing program 3 (id=1838): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) close(r3) close(r0) 1m23.934511713s ago: executing program 3 (id=1844): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m23.748955923s ago: executing program 3 (id=1847): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 1m23.706524206s ago: executing program 3 (id=1848): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0x2c, 0x66, 0x0, 0x4, 0x11, 0x0, @remote, @multicast2}, {0x4e22, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x7000000000000000}}}}}}, 0x0) 1m23.050430874s ago: executing program 3 (id=1869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[], 0x0) 1m23.030941415s ago: executing program 34 (id=1869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[], 0x0) 1m16.906754294s ago: executing program 5 (id=2006): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x10) 1m16.858669167s ago: executing program 5 (id=2008): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='statm\x00') r1 = io_uring_setup(0x5902, &(0x7f0000000040)={0x0, 0x4f311, 0x10000, 0x4, 0x100172, 0x0, r0}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) pipe2(&(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) tee(r2, r3, 0xfffffffffffffffc, 0x0) close_range(r0, r1, 0x0) 1m16.001367437s ago: executing program 5 (id=2025): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 1m15.823113357s ago: executing program 5 (id=2030): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x100) 1m15.752070002s ago: executing program 5 (id=2031): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x2, 0x2, 0x1) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 1m15.555132774s ago: executing program 5 (id=2038): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m15.555016323s ago: executing program 35 (id=2038): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m3.000369609s ago: executing program 6 (id=2300): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t||') setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)}, 0xb00) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x80000, @dev, 0x0, 0x1}, 0x80, 0x0}, 0x5b4}], 0x1, 0x850) 1m2.799884681s ago: executing program 6 (id=2311): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x5}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r2 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40400) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) 1m1.741905943s ago: executing program 6 (id=2327): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, &(0x7f0000000040), 0x4) close(r0) 1m1.720615404s ago: executing program 6 (id=2318): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0/file0\x00') 1m1.697167365s ago: executing program 6 (id=2319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r1, 0x1}, 0x20) 1m1.502395117s ago: executing program 6 (id=2320): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32], 0x50) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1m1.43344975s ago: executing program 36 (id=2320): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32], 0x50) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 52.265524137s ago: executing program 7 (id=2496): socket$inet6(0xa, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 52.22725812s ago: executing program 7 (id=2498): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c1000000fff00204e0000", 0x58}], 0x1) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xb0000019}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000800)={0xa0000006}) epoll_wait(r1, &(0x7f00000001c0)=[{}, {}], 0x2, 0x7) 52.162401774s ago: executing program 7 (id=2499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0/../file0'}, 0x14) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) 52.162214723s ago: executing program 7 (id=2500): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) unshare(0x22020600) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ftruncate(0xffffffffffffffff, 0x2007ffb) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 52.044837931s ago: executing program 7 (id=2504): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x18, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x4, 0x1, 0x9, 0xe, 0x800, 0xfffffff8, 0x7, 0x3, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x57, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x2000008, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 51.854405082s ago: executing program 7 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 51.840694133s ago: executing program 37 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 9.923636428s ago: executing program 4 (id=3498): socket$unix(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a8, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7ffd, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x2, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x404fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x4, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x1, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0xfffffffd, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x8, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x40000, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x209, 0x100, 0x1, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x1000, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xffffff01, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x0, 0x9, 0x8, 0x1, 0xc2e6, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0xc, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0xab34, 0x0, 0x21000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x8, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x44291943, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000001, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x20009, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffff9, 0x5, 0x6, 0x2, 0x3f, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x1000009, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x3, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x1ff, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x80000000, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827787, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x5, 0x80, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x202, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0xfff, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1a2, 0x1, 0x3, 0x40, 0x1000, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x3, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x7fc, 0x6, 0xd19, 0x3, 0x800, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0xffffffff, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x2, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x4, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x6, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0x8, 0x5, 0xfff, 0x5, 0x9]}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 9.809615904s ago: executing program 4 (id=3502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 9.772739647s ago: executing program 4 (id=3503): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblc\x00', 0xd, 0x4, 0x7}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 9.651487524s ago: executing program 4 (id=3507): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x490, &(0x7f0000000580)="$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") syz_clone(0x1000000, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0) 8.505179381s ago: executing program 4 (id=3523): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000f40)=0x6c, 0x4) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 7.718112667s ago: executing program 4 (id=3541): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x100000}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.717770647s ago: executing program 38 (id=3541): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x2, 0x0, 0x100000}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.769176177s ago: executing program 2 (id=3614): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 2.706887211s ago: executing program 9 (id=3616): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 2.284030185s ago: executing program 9 (id=3617): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.118078986s ago: executing program 9 (id=3619): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.021049501s ago: executing program 9 (id=3621): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) 2.020094611s ago: executing program 2 (id=3622): syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000580)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x45d, &(0x7f0000000d80)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x181) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = open(&(0x7f0000000200)='./bus\x00', 0x64802, 0x389b0d52417bb201) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) 1.948240075s ago: executing program 9 (id=3624): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.557880188s ago: executing program 2 (id=3627): socket$l2tp(0x2, 0x2, 0x73) r0 = syz_io_uring_setup(0x643c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1a4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.479186773s ago: executing program 8 (id=3631): r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0xff, @empty, 0x8e1726d}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000002}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$netlink(r1, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) 1.375447249s ago: executing program 2 (id=3634): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0xc07b}, 0x0, 0x0, 0x800004, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmsg(r0, &(0x7f00000015c0)={&(0x7f0000000140)=@rc={0x1f, @none}, 0x80, &(0x7f0000001440)}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r1, 0x0) shutdown(r1, 0x0) 1.35758784s ago: executing program 8 (id=3636): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x0, 0x200, @empty, 0x80}}, 0x8f6, 0x1}, &(0x7f0000000000)=0x90) 1.311583623s ago: executing program 8 (id=3637): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x1}, {0x6, 0xf8}}}]}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="83", 0x1}], 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x6, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x4, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x7, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x796, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x10001, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0xb, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0xe, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0xfffffffffffffffd, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc3184d000071101d00000000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.142035412s ago: executing program 9 (id=3640): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, 0x0) 1.097314475s ago: executing program 8 (id=3642): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45fff219, 0x1, @perf_bp={0x0, 0x4}, 0x3110, 0x10000, 0x8, 0x1, 0x7, 0x397, 0xb, 0x0, 0x7, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x1, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x24, 0x0, 0x0) 1.072124577s ago: executing program 0 (id=3643): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) ftruncate(0xffffffffffffffff, 0x51a9497) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x8004) 1.071713727s ago: executing program 8 (id=3644): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_enter(r0, 0x4e14, 0x913a, 0x41, 0x0, 0x0) 700.679418ms ago: executing program 1 (id=3646): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xd8, 0x120, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 700.283948ms ago: executing program 1 (id=3647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_128={{0x304}, "68c40110c3a2c2a1", "43ce39d444a021c82eca1cc4bc46c789", '/:)N', "5f7b960b7f9d5422"}, 0x28) sendto$inet6(r0, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0xfffffffffffffff0}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) 642.417142ms ago: executing program 0 (id=3648): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 641.932972ms ago: executing program 1 (id=3649): ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r2, r2, 0x0, 0xe3aa6ea) 589.432805ms ago: executing program 1 (id=3650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) close(0x3) 588.063875ms ago: executing program 0 (id=3651): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x800) 515.682439ms ago: executing program 1 (id=3652): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) mmap(&(0x7f0000d8c000/0x1000)=nil, 0x1000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, r1, 0x2000) 455.932133ms ago: executing program 2 (id=3653): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4004000}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0xa}, 0x8) 444.073153ms ago: executing program 1 (id=3654): syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") inotify_init1(0x0) r0 = getpid() unshare(0x22020600) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, 0xffffffffffffffff, 0x0) 404.574766ms ago: executing program 2 (id=3655): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ftruncate(r0, 0x5) 340.14643ms ago: executing program 0 (id=3656): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)) r3 = syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000040)={r2, r1, 0x2}) 245.473945ms ago: executing program 0 (id=3657): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x7188, 0x10000, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 0s ago: executing program 0 (id=3659): unshare(0x2a020400) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$eJzs3V1v08gawPHHpYUoR6qODkcIVQWGco5UpBKcBIIirnycSTqQ2JHtoPaKU9EUVaRwRDnSthfLcsPuSrsfgtv9EPuN0N7vXrCynfQtb6zSNgj9f1E7E3vsecaNZurWHgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdh23pK68Vpraji3EviNw7fdrfsWyO1jyYh6Raz4SzIZuZouuvrPw9VX4m9L//02fbcomTjJyP7frvz94eXZmd72IwI+F7t7+y82Op3262kHcnZ+/3Rp+Mqa9kzom4ZT08qEviqXSvbd1Wqoqqauw/Uw0g3lBtqJ/EAtu7dVvlwuKp1b91tereLUdW/hgzsF2y6pR7mmdoLQ9+4+yoXuqqnXjVdLysSr4zIP4g/iYxOpSDsNpba2O+3iuBbEhfKfU6gwrlDBLhTy+UIhX7pfvv/Atmf7FtgnSF+J6X9oMV2n2HsDk5npjv9SFyOetGRN1MCXKxUJxJfGkPVdvfH/33f1yHqPjv+L6aLFq4erF+JvS3I9fXd92Pg/JJbze+3KnuzLC9mQjnSkLa+nHtH5vmqixRMjofhipCFOskR1lygpS0lKYstTWZWqhKKkKkbqoiWUdQklEp18olwJRIsjkfgSiJJlceW2KMlLWcpSFCVacrIuvrTEk5pUxEn2siXbyXEvirKGxXhQKD+0Gdne564thRGtZfzH5E61/wYm8ak3/gMAAAAAgK+Wlfz1PT7/n5NrSa5q6tqedlgAAAAAAOAUJf/5X4yTuTh3TSzO/wEAAAAA+NpYyT12lohk5Uaa2xIruV1q0B8BLkwhRAAAAAAAMKHk///X4ySZA+WGWAfTpXARAAAAAAAAX4kfDmbfHTbHbti8ZP36mwTBnPWuufYvayeZm9fZ6V4K0HdFQFRdsOa7O0mSUprMzrp60cqkhQ4mwfzYTbbkbTeOdId9cVhBMPfHp9RBAN8NDyAjJwO4PCs/yc20zM3NNN3srUlryVZNXedcv/4wL44zPxPptej/L7e/kaT5P3qNeSsj25127tmrzmZyMN7Fe3m3051AsW8exWEH4/KsvEnmW0juuRh45OeSGzG69WYt2drutO2kTidt/0y6+czxGt/Oj6jzvSylpZa6M95mj7c/E9eZzw1rfTeK/IQtfy+30jK3lm+lyYAoCuOiKByNYvCxmDyK4rgoihNGAQDTsjVmFLKODPxDxp1eZkQvtzXutwyrr5a/+utF0qMvp2WWF5KOdXZhQI9uj+vR7QlHt1/6noE0bIyN6/35xKj6Id7gw9B6w3rBig/hhTc7/5Mru3v7d7Z3Np63n7dfFgrFkn3Ptu8XZC5pRjdh7AEADDD+GTtjS1j3xpxV/+PgkoKcPJNX0pFNWUnuNkiuOBi41+yRyxBWxpy1ZpNhMn3Cy8qIs7qLyV0Ovf0WRpY9HkPx7H8QAACco6Ux4/DnjP8rY867j4/lo8+Os0ee1gYAAM6GDj5a2eh7KwhM82m+XM470apWge8+VoGp1LQyXqQDd9Xxalo1Az/yXb8eZ56Yig5V2Go2/SBSVT9QTT80a8n0gar76PdQNxwvMm7YrGsn1Mr1vchxI1Uxoauarf/UTbiqg2TjsKldUzWuExnfU6HfClydUyrU+khBU9FeZKomznqqGZiGE2TUE7/eamhV0aEbmGbkpzvs1WW8qh80kt3mpn2wAQD4Quzu7b/Y6HTar88qc3HaLQQAACcdDtfTjgQAAAAAAAAAAAAAAAAAAAAAAAxz5vf/ncx0HwAgE+9Qzi9mMqMP+Mxp/UzJfDmZsV3H2zPtmACcuT8DAAD///GvUk8=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) kernel console output (not intermixed with test programs): for pid=9296 comm="syz.2.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.943662][ T9302] loop6: detected capacity change from 0 to 128 [ 112.972653][ T9302] EXT4-fs: Ignoring removed orlov option [ 112.983975][ T9302] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.992033][ T9217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.003817][ T9302] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.071039][ T7970] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.144850][ T9217] veth0_vlan: entered promiscuous mode [ 113.152961][ T9217] veth1_vlan: entered promiscuous mode [ 113.171499][ T9217] veth0_macvtap: entered promiscuous mode [ 113.178968][ T9217] veth1_macvtap: entered promiscuous mode [ 113.190497][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.203016][ T9217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.213833][ T41] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.223016][ T41] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.233988][ T41] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.243233][ T41] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.268416][ T29] audit: type=1400 audit(1770214330.418:1916): avc: denied { mount } for pid=9217 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.850835][ T9366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2082'. [ 114.692578][ T9404] netlink: 'syz.0.2097': attribute type 1 has an invalid length. [ 114.711748][ T9404] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 114.720182][ T9404] bond1: (slave batadv1): making interface the new active one [ 114.728815][ T9404] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 114.741973][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 114.753974][ T9404] bond1 (unregistering): (slave batadv1): Releasing active interface [ 114.776395][ T9404] bond1 (unregistering): Released all slaves [ 115.615074][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2123'. [ 115.820688][ T9467] loop7: detected capacity change from 0 to 32768 [ 115.961833][ T29] audit: type=1400 audit(1770214333.118:1917): avc: denied { name_connect } for pid=9489 comm="syz.6.2135" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 116.039839][ T9506] loop8: detected capacity change from 0 to 512 [ 116.057129][ T29] audit: type=1400 audit(1770214333.208:1918): avc: denied { write } for pid=9502 comm="syz.2.2140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.100090][ T9506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.136644][ T9506] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.152794][ T29] audit: type=1326 audit(1770214333.308:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9515 comm="syz.7.2144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c465aeb9 code=0x0 [ 116.154520][ T9506] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.2141: corrupted inode contents [ 116.188907][ T9506] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.2141: mark_inode_dirty error [ 116.201635][ T9506] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.2141: corrupted inode contents [ 116.214361][ T9506] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.2141: mark_inode_dirty error [ 116.260145][ T9217] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.065226][ T9573] loop7: detected capacity change from 0 to 512 [ 117.093991][ T9573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.108549][ T9573] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.131153][ T9573] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.2158: corrupted inode contents [ 117.150919][ T9573] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #2: comm syz.7.2158: mark_inode_dirty error [ 117.162444][ T9573] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.2158: corrupted inode contents [ 117.177663][ T9573] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2158: mark_inode_dirty error [ 117.222864][ T8631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.244434][ T9588] xt_hashlimit: size too large, truncated to 1048576 [ 117.414357][ T29] audit: type=1400 audit(1770214334.568:1920): avc: denied { create } for pid=9606 comm="syz.8.2173" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 117.495899][ T9613] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2175'. [ 117.620065][ T29] audit: type=1400 audit(1770214334.768:1921): avc: denied { create } for pid=9630 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.640512][ T29] audit: type=1400 audit(1770214334.768:1922): avc: denied { ioctl } for pid=9630 comm="syz.2.2177" path="socket:[25895]" dev="sockfs" ino=25895 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 117.726845][ T9643] xt_hashlimit: size too large, truncated to 1048576 [ 117.800142][ T9645] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 117.800142][ T9645] The task syz.8.2179 (9645) triggered the difference, watch for misbehavior. [ 118.155966][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2185'. [ 118.608806][ T9685] loop6: detected capacity change from 0 to 1024 [ 118.632877][ T9685] EXT4-fs: Ignoring removed orlov option [ 118.638592][ T9685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.680967][ T9685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.812797][ T9708] netlink: 'syz.2.2198': attribute type 2 has an invalid length. [ 118.820614][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 118.851117][ T9708] netlink: 'syz.2.2198': attribute type 2 has an invalid length. [ 118.858971][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2198'. [ 118.898710][ T7970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.185732][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2207'. [ 119.396332][ T9748] geneve3: entered promiscuous mode [ 119.401662][ T9748] geneve3: entered allmulticast mode [ 119.412135][ T41] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.427513][ T41] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.449661][ T41] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.478851][ T29] audit: type=1400 audit(1770214336.628:1923): avc: denied { create } for pid=9756 comm="syz.6.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.498418][ T29] audit: type=1400 audit(1770214336.628:1924): avc: denied { read } for pid=9756 comm="syz.6.2213" path="socket:[26719]" dev="sockfs" ino=26719 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 119.530506][ T41] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 119.577299][ T29] audit: type=1400 audit(1770214336.728:1925): avc: denied { read } for pid=9762 comm="syz.6.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 119.662020][ T9767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26091 sclass=netlink_route_socket pid=9767 comm=syz.7.2216 [ 119.908127][ T29] audit: type=1326 audit(1770214337.058:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.0.2222" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f839777aeb9 code=0x0 [ 120.197307][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2229'. [ 120.255716][ T9800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.275920][ T9800] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 120.319412][ T9817] loop8: detected capacity change from 0 to 128 [ 120.338757][ T9815] loop7: detected capacity change from 0 to 1024 [ 120.403772][ T9815] EXT4-fs: Ignoring removed orlov option [ 120.440878][ T9815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.442256][ T9825] lo speed is unknown, defaulting to 1000 [ 120.459084][ T29] audit: type=1400 audit(1770214337.598:1927): avc: denied { write } for pid=9824 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.479381][ T9825] lo speed is unknown, defaulting to 1000 [ 120.485438][ T9825] lo speed is unknown, defaulting to 1000 [ 120.491757][ T9825] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.499238][ T9825] infiniband «;”: RDMA CMA: cma_listen_on_dev, error -98 [ 120.511944][ T9825] lo speed is unknown, defaulting to 1000 [ 120.520371][ T9825] lo speed is unknown, defaulting to 1000 [ 120.530829][ T9825] lo speed is unknown, defaulting to 1000 [ 120.553128][ T9825] lo speed is unknown, defaulting to 1000 [ 120.566442][ T9825] lo speed is unknown, defaulting to 1000 [ 120.579442][ T9825] lo speed is unknown, defaulting to 1000 [ 120.603239][ T9825] lo speed is unknown, defaulting to 1000 [ 120.620996][ T8631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.658089][ T9859] netlink: 'syz.6.2253': attribute type 5 has an invalid length. [ 121.801672][ T9871] loop7: detected capacity change from 0 to 1024 [ 121.811614][ T9871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.827137][ T9871] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2258: bg 0: block 392: padding at end of block bitmap is not set [ 121.847419][ T9871] EXT4-fs (loop7): Remounting filesystem read-only [ 121.861893][ T29] audit: type=1400 audit(1770214339.018:1928): avc: denied { execute_no_trans } for pid=9870 comm="syz.7.2258" path="/57/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.886697][ T9871] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 121.910569][ T8631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.034009][ T9901] loop6: detected capacity change from 0 to 512 [ 122.041240][ T9901] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.063525][ T9901] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.076267][ T9901] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.108699][ T7970] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.554790][ T29] audit: type=1326 audit(1770214339.708:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.578357][ T29] audit: type=1326 audit(1770214339.708:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.601875][ T29] audit: type=1326 audit(1770214339.708:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.625355][ T29] audit: type=1326 audit(1770214339.708:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.648771][ T29] audit: type=1326 audit(1770214339.708:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.672301][ T29] audit: type=1326 audit(1770214339.708:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.695750][ T29] audit: type=1326 audit(1770214339.708:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.769951][ T29] audit: type=1326 audit(1770214339.708:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.793501][ T29] audit: type=1326 audit(1770214339.708:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.829026][ T29] audit: type=1326 audit(1770214339.978:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9917 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 122.957136][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2273'. [ 123.151889][ T9951] siw: device registration error -23 [ 123.166715][ T9953] lo speed is unknown, defaulting to 1000 [ 123.327088][ T8690] IPVS: starting estimator thread 0... [ 123.419975][ T9962] IPVS: using max 3648 ests per chain, 182400 per kthread [ 124.952263][T10021] lo speed is unknown, defaulting to 1000 [ 124.958273][T10021] lo speed is unknown, defaulting to 1000 [ 124.964377][T10021] lo speed is unknown, defaulting to 1000 [ 124.970946][T10021] infiniband «;”: RDMA CMA: cma_listen_on_dev, error -98 [ 124.989663][T10021] lo speed is unknown, defaulting to 1000 [ 125.001703][T10021] lo speed is unknown, defaulting to 1000 [ 125.007813][T10021] lo speed is unknown, defaulting to 1000 [ 125.015852][T10021] lo speed is unknown, defaulting to 1000 [ 125.021968][T10021] lo speed is unknown, defaulting to 1000 [ 125.028133][T10021] lo speed is unknown, defaulting to 1000 [ 125.034448][T10021] lo speed is unknown, defaulting to 1000 [ 125.061610][T10027] tipc: Enabling of bearer rejected, failed to enable media [ 125.149193][T10035] lo: Caught tx_queue_len zero misconfig [ 125.195736][T10038] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2309'. [ 125.217603][T10038] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2309'. [ 125.227284][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2310'. [ 125.237164][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2310'. [ 125.784522][ T1705] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.794902][ T1705] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.805190][ T1705] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.841015][T10058] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2321'. [ 125.893969][ T1705] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.904413][ T1705] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.914882][ T1705] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.945603][T10063] loop7: detected capacity change from 0 to 512 [ 125.958029][T10063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.969302][ T1705] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 125.979694][ T1705] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.990013][ T1705] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.005880][T10063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.019075][T10063] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.065377][ T1705] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.075746][ T1705] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.086145][ T1705] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.097629][ T8631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.145004][T10065] lo speed is unknown, defaulting to 1000 [ 126.174177][T10065] lo speed is unknown, defaulting to 1000 [ 126.192112][ T1705] bridge_slave_1: left allmulticast mode [ 126.197780][ T1705] bridge_slave_1: left promiscuous mode [ 126.203449][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.311912][ T1705] bridge_slave_0: left allmulticast mode [ 126.317625][ T1705] bridge_slave_0: left promiscuous mode [ 126.323314][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.401017][ T1705] bond1 (unregistering): (slave geneve2): Releasing active interface [ 126.452641][ T1705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.464819][ T1705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.476417][ T1705] bond0 (unregistering): Released all slaves [ 126.484873][ T1705] bond1 (unregistering): Released all slaves [ 126.550876][ T1705] hsr_slave_0: left promiscuous mode [ 126.563350][ T1705] hsr_slave_1: left promiscuous mode [ 126.574594][ T1705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.582186][ T1705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.599274][ T1705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.606854][ T1705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.626440][ T1705] veth1_macvtap: left promiscuous mode [ 126.632204][ T1705] veth0_macvtap: left promiscuous mode [ 126.637839][ T1705] veth1_vlan: left promiscuous mode [ 126.643691][ T1705] veth0_vlan: left promiscuous mode [ 126.719269][ T1705] team0 (unregistering): Port device team_slave_1 removed [ 126.742751][ T1705] team0 (unregistering): Port device team_slave_0 removed [ 127.044218][T10065] chnl_net:caif_netlink_parms(): no params data found [ 127.131485][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.138593][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.147512][T10065] bridge_slave_0: entered allmulticast mode [ 127.155839][T10065] bridge_slave_0: entered promiscuous mode [ 127.163173][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.170273][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.177554][T10065] bridge_slave_1: entered allmulticast mode [ 127.184866][T10065] bridge_slave_1: entered promiscuous mode [ 127.202075][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.236446][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.252909][T10127] lo speed is unknown, defaulting to 1000 [ 127.275034][T10127] lo speed is unknown, defaulting to 1000 [ 127.328775][T10065] team0: Port device team_slave_0 added [ 127.340832][T10065] team0: Port device team_slave_1 added [ 127.384838][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.391966][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.417930][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.587850][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.594892][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.620923][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.842406][T10065] hsr_slave_0: entered promiscuous mode [ 127.864969][T10065] hsr_slave_1: entered promiscuous mode [ 127.882464][T10065] debugfs: 'hsr0' already exists in 'hsr' [ 127.888293][T10065] Cannot create hsr debugfs directory [ 128.104359][T10174] xt_hashlimit: size too large, truncated to 1048576 [ 128.124800][T10065] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 128.136087][T10065] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 128.163201][T10065] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 128.172467][T10065] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 128.333787][T10065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.388469][T10065] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.400175][ T3447] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.407301][ T3447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.450240][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.457337][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.481284][T10065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.491879][T10065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.608010][T10065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.743267][T10240] batadv_slave_0: entered promiscuous mode [ 128.805141][T10239] batadv_slave_0: left promiscuous mode [ 128.854920][T10065] veth0_vlan: entered promiscuous mode [ 128.870878][T10065] veth1_vlan: entered promiscuous mode [ 128.891681][T10065] veth0_macvtap: entered promiscuous mode [ 128.904386][T10065] veth1_macvtap: entered promiscuous mode [ 128.923166][T10065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.955235][T10065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.974991][ T50] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.004578][ T50] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.014840][ T50] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.030104][ T50] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.583712][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2364'. [ 129.878950][T10336] lo speed is unknown, defaulting to 1000 [ 129.890890][T10336] lo speed is unknown, defaulting to 1000 [ 130.081006][T10379] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2373'. [ 130.236208][T10396] netlink: 'syz.0.2378': attribute type 1 has an invalid length. [ 130.244161][T10396] netlink: 'syz.0.2378': attribute type 4 has an invalid length. [ 130.251974][T10396] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2378'. [ 130.637525][T10421] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2386'. [ 130.651313][T10421] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2386'. [ 131.103008][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 131.103025][ T29] audit: type=1400 audit(1770214348.258:1942): avc: denied { bind } for pid=10445 comm="syz.7.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.170175][ T29] audit: type=1400 audit(1770214348.258:1943): avc: denied { setopt } for pid=10445 comm="syz.7.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 131.232132][ T29] audit: type=1326 audit(1770214348.388:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10451 comm="syz.7.2398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c465aeb9 code=0x0 [ 131.762772][T10480] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.823478][T10480] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.839666][T10494] ªªªªªª: renamed from vlan0 (while UP) [ 131.882947][T10480] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.951186][T10480] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.021540][T10366] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.033683][T10366] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.045005][T10366] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.061497][T10366] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.364425][ T29] audit: type=1326 audit(1770214349.518:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 132.389324][ T29] audit: type=1326 audit(1770214349.518:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 132.413065][ T29] audit: type=1326 audit(1770214349.518:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 132.436535][ T29] audit: type=1326 audit(1770214349.548:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 132.460212][ T29] audit: type=1326 audit(1770214349.548:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 132.483783][ T29] audit: type=1326 audit(1770214349.548:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 132.507295][ T29] audit: type=1326 audit(1770214349.548:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.2.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 132.715545][T10539] lo speed is unknown, defaulting to 1000 [ 132.737241][T10539] lo speed is unknown, defaulting to 1000 [ 132.761517][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2430'. [ 132.868629][T10545] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 133.047589][T10553] lo speed is unknown, defaulting to 1000 [ 133.054109][T10553] lo speed is unknown, defaulting to 1000 [ 133.495651][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.513630][T10608] bridge_slave_1: left allmulticast mode [ 133.519401][T10608] bridge_slave_1: left promiscuous mode [ 133.525279][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.548717][T10608] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 133.563506][T10614] loop7: detected capacity change from 0 to 512 [ 133.610297][T10614] EXT4-fs: Ignoring removed nobh option [ 133.630725][T10614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.650379][T10614] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.701870][ T8631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.743160][T10641] loop7: detected capacity change from 0 to 1024 [ 133.753734][T10641] EXT4-fs: Ignoring removed orlov option [ 133.772589][T10641] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.798548][ T8631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.891645][T10670] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2467'. [ 134.235635][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2475'. [ 134.808445][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8881053e0400: rx timeout, send abort [ 134.824264][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.840073][T10796] bridge_slave_1: left allmulticast mode [ 134.845750][T10796] bridge_slave_1: left promiscuous mode [ 134.851470][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.872387][T10796] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 135.156040][T10815] loop7: detected capacity change from 0 to 1024 [ 135.164324][T10815] EXT4-fs: Ignoring removed bh option [ 135.181364][T10815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.235906][ T8631] EXT4-fs error (device loop7): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 135.260480][ T8631] EXT4-fs error (device loop7): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 135.270144][T10824] lo speed is unknown, defaulting to 1000 [ 135.293594][T10824] lo speed is unknown, defaulting to 1000 [ 135.304719][ T8631] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.313746][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8881053e1400: rx timeout, send abort [ 135.322065][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8881053e0400: abort rx timeout. Force session deactivation [ 135.340705][T10827] bridge_slave_1: left allmulticast mode [ 135.346394][T10827] bridge_slave_1: left promiscuous mode [ 135.352214][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.380454][T10827] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 135.395969][T10832] netlink: 'syz.2.2508': attribute type 4 has an invalid length. [ 135.433377][ T8690] lo speed is unknown, defaulting to 1000 [ 135.439168][ T8690] syz0: Port: 1 Link DOWN [ 135.449804][T10832] netlink: 'syz.2.2508': attribute type 4 has an invalid length. [ 135.489688][ T908] lo speed is unknown, defaulting to 1000 [ 135.495635][ T908] syz0: Port: 1 Link ACTIVE [ 135.597797][T10824] loop9: detected capacity change from 0 to 256 [ 135.625128][T10824] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 135.639269][T10840] lo speed is unknown, defaulting to 1000 [ 135.645790][T10840] lo speed is unknown, defaulting to 1000 [ 135.740308][T10840] chnl_net:caif_netlink_parms(): no params data found [ 135.793325][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.800615][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.807999][T10840] bridge_slave_0: entered allmulticast mode [ 135.814118][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8881053e1400: abort rx timeout. Force session deactivation [ 135.826831][T10840] bridge_slave_0: entered promiscuous mode [ 135.834483][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.841896][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.849350][T10840] bridge_slave_1: entered allmulticast mode [ 135.856658][T10840] bridge_slave_1: entered promiscuous mode [ 135.877439][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.888913][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.907991][T10840] team0: Port device team_slave_0 added [ 135.914897][T10840] team0: Port device team_slave_1 added [ 135.930446][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.938060][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.964097][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.976120][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.983124][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.009053][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.037469][T10840] hsr_slave_0: entered promiscuous mode [ 136.043538][T10840] hsr_slave_1: entered promiscuous mode [ 136.049365][T10840] debugfs: 'hsr0' already exists in 'hsr' [ 136.055225][T10840] Cannot create hsr debugfs directory [ 136.275081][T10840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.293326][T10840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.302829][T10840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.322555][T10840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.356443][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.363588][T10840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.370941][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.378054][T10840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.494712][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.510056][ T3447] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.526214][ T3447] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.562391][T10840] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.600504][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.607720][T10361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.627944][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.635168][T10361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.732886][T10840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.833314][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.064412][T10840] veth0_vlan: entered promiscuous mode [ 137.085278][T10840] veth1_vlan: entered promiscuous mode [ 137.141923][T10840] veth0_macvtap: entered promiscuous mode [ 137.158967][T10840] veth1_macvtap: entered promiscuous mode [ 137.196817][T10840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.218534][T10840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.328556][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.379357][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.400606][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.409749][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.435887][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2511'. [ 137.444914][T11051] netlink: 'syz.4.2511': attribute type 5 has an invalid length. [ 137.452733][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2511'. [ 137.467307][T11051] geneve2: entered promiscuous mode [ 137.472814][T11051] geneve2: entered allmulticast mode [ 137.479457][ T31] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 65535 - 0 [ 137.485955][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 137.486021][ T29] audit: type=1400 audit(1770214354.628:2027): avc: denied { setopt } for pid=11050 comm="syz.9.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.489335][ T31] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 65535 - 0 [ 137.553888][T10361] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 65535 - 0 [ 137.570586][T10361] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 65535 - 0 [ 137.647450][ T29] audit: type=1400 audit(1770214354.798:2028): avc: denied { getopt } for pid=11064 comm="syz.9.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 137.878833][ T29] audit: type=1400 audit(1770214355.028:2029): avc: denied { create } for pid=11109 comm="syz.9.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 137.908914][ T29] audit: type=1400 audit(1770214355.058:2030): avc: denied { bind } for pid=11109 comm="syz.9.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.009263][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a073600: rx timeout, send abort [ 138.077396][T11145] netlink: 'syz.9.2565': attribute type 1 has an invalid length. [ 138.100969][T11145] bond1: (slave geneve2): making interface the new active one [ 138.115527][T11145] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 138.124686][ T31] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.165814][ T31] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.190081][ T31] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.205948][ T3447] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 138.230975][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.241373][ T31] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.315569][T11171] netlink: 'syz.0.2570': attribute type 1 has an invalid length. [ 138.329626][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.339971][ T31] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.361728][T11171] bond1: entered promiscuous mode [ 138.367895][T11171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.392653][T11171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.402345][T11171] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 138.412617][T11171] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 138.431811][T11171] bond1: (slave xfrm1): making interface the new active one [ 138.439168][T11171] xfrm1: entered promiscuous mode [ 138.459668][ T29] audit: type=1326 audit(1770214355.608:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11183 comm="syz.4.2573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e1033aeb9 code=0x0 [ 138.463678][T11171] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 138.496150][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.506524][ T31] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.517693][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a073600: abort rx timeout. Force session deactivation [ 138.583171][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.593628][ T31] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.723628][ T31] bridge_slave_0: left allmulticast mode [ 138.729335][ T31] bridge_slave_0: left promiscuous mode [ 138.735098][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.853263][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.869063][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.881301][ T31] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 138.902806][ T31] bond0 (unregistering): Released all slaves [ 138.917844][ T31] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 138.927770][ T31] bond1 (unregistering): Released all slaves [ 138.987355][ T31] hsr_slave_0: left promiscuous mode [ 139.004236][ T31] hsr_slave_1: left promiscuous mode [ 139.023576][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.031436][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.099996][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.107516][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.121827][ T31] veth1_macvtap: left promiscuous mode [ 139.122784][T11234] syz.9.2580 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 139.127551][ T31] veth0_macvtap: left promiscuous mode [ 139.137911][ T29] audit: type=1326 audit(1770214356.278:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.9.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 139.143706][ T31] veth1_vlan: left promiscuous mode [ 139.166840][ T29] audit: type=1326 audit(1770214356.278:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.9.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 139.178582][ T31] veth0_vlan: left promiscuous mode [ 139.196260][ T29] audit: type=1326 audit(1770214356.278:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.9.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 139.224919][ T29] audit: type=1326 audit(1770214356.278:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.9.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 139.248592][ T29] audit: type=1326 audit(1770214356.278:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11233 comm="syz.9.2580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 139.499680][ T31] team0 (unregistering): Port device team_slave_1 removed [ 139.513973][ T31] team0 (unregistering): Port device team_slave_0 removed [ 139.571332][T11259] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 139.590296][ T8691] lo speed is unknown, defaulting to 1000 [ 139.596093][ T8691] infiniband «;”: ib_query_port failed (-19) [ 139.738499][T11285] netlink: 'syz.4.2594': attribute type 4 has an invalid length. [ 139.752729][T11285] netlink: 'syz.4.2594': attribute type 4 has an invalid length. [ 139.779356][T11289] netlink: 'syz.9.2595': attribute type 9 has an invalid length. [ 139.787199][T11289] netlink: 16166 bytes leftover after parsing attributes in process `syz.9.2595'. [ 139.813192][ T31] IPVS: stop unused estimator thread 0... [ 140.102718][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2605'. [ 140.111880][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2605'. [ 140.140107][T11334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2605'. [ 140.149077][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2605'. [ 140.638825][T11399] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2620'. [ 140.874829][T11426] lo speed is unknown, defaulting to 1000 [ 140.940547][T11435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2629'. [ 141.104843][T11450] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2634'. [ 141.156334][T11456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.580566][T11484] lo speed is unknown, defaulting to 1000 [ 141.677932][T11489] lo speed is unknown, defaulting to 1000 [ 141.717300][T11493] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 141.742426][T11495] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 141.905767][T11485] loop8: detected capacity change from 0 to 32768 [ 141.975427][T11485] loop8: p1 p3 < p5 p6 > [ 141.979784][T11485] loop8: partition table partially beyond EOD, truncated [ 142.129044][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 142.142054][ T7681] udevd[7681]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 142.147386][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop8p5, 10) failed: No such file or directory [ 142.161822][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 142.656289][T11544] __nla_validate_parse: 7 callbacks suppressed [ 142.656309][T11544] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2666'. [ 142.719773][T11554] lo speed is unknown, defaulting to 1000 [ 143.178734][T11565] syz.9.2673 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 143.192899][T11565] CPU: 0 UID: 0 PID: 11565 Comm: syz.9.2673 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.192930][T11565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.192988][T11565] Call Trace: [ 143.192999][T11565] [ 143.193059][T11565] __dump_stack+0x1d/0x30 [ 143.193087][T11565] dump_stack_lvl+0x95/0xd0 [ 143.193111][T11565] dump_stack+0x15/0x1b [ 143.193129][T11565] dump_header+0x80/0x240 [ 143.193277][T11565] oom_kill_process+0x295/0x350 [ 143.193335][T11565] out_of_memory+0x97d/0xb80 [ 143.193364][T11565] try_charge_memcg+0x62e/0xa10 [ 143.193395][T11565] obj_cgroup_charge_pages+0x23/0xc0 [ 143.193485][T11565] __memcg_kmem_charge_page+0x9e/0x170 [ 143.193518][T11565] __alloc_frozen_pages_noprof+0x18a/0x350 [ 143.193555][T11565] alloc_pages_mpol+0xb3/0x260 [ 143.193635][T11565] alloc_pages_noprof+0x8f/0x130 [ 143.193718][T11565] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 143.193771][T11565] __kvmalloc_node_noprof+0x471/0x680 [ 143.193865][T11565] ? ip_set_alloc+0x24/0x30 [ 143.193896][T11565] ? ip_set_alloc+0x24/0x30 [ 143.193996][T11565] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 143.194102][T11565] ip_set_alloc+0x24/0x30 [ 143.194168][T11565] hash_netiface_create+0x282/0x740 [ 143.194202][T11565] ? __pfx_hash_netiface_create+0x10/0x10 [ 143.194229][T11565] ip_set_create+0x3cf/0x970 [ 143.194299][T11565] ? __nla_parse+0x40/0x60 [ 143.194321][T11565] nfnetlink_rcv_msg+0x509/0x5d0 [ 143.194374][T11565] netlink_rcv_skb+0x123/0x220 [ 143.194437][T11565] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 143.194507][T11565] nfnetlink_rcv+0x167/0x1720 [ 143.194533][T11565] ? __kfree_skb+0x109/0x150 [ 143.194640][T11565] ? nlmon_xmit+0x4f/0x60 [ 143.194676][T11565] ? consume_skb+0x49/0x140 [ 143.194771][T11565] ? nlmon_xmit+0x4f/0x60 [ 143.194807][T11565] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 143.194847][T11565] ? __dev_queue_xmit+0x139a/0x1f20 [ 143.194921][T11565] ? __dev_queue_xmit+0x148/0x1f20 [ 143.194957][T11565] ? ref_tracker_free+0x37d/0x3e0 [ 143.195036][T11565] ? __netlink_deliver_tap+0x4dc/0x500 [ 143.195077][T11565] netlink_unicast+0x5c0/0x690 [ 143.195113][T11565] netlink_sendmsg+0x5c8/0x6f0 [ 143.195155][T11565] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.195174][T11565] ____sys_sendmsg+0x5af/0x600 [ 143.195207][T11565] ___sys_sendmsg+0x195/0x1e0 [ 143.195268][T11565] __x64_sys_sendmsg+0xd4/0x160 [ 143.195295][T11565] x64_sys_call+0x17ba/0x3000 [ 143.195389][T11565] do_syscall_64+0xc0/0x2a0 [ 143.195428][T11565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.195454][T11565] RIP: 0033:0x7f20d828aeb9 [ 143.195472][T11565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.195492][T11565] RSP: 002b:00007f20d6ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.195514][T11565] RAX: ffffffffffffffda RBX: 00007f20d8505fa0 RCX: 00007f20d828aeb9 [ 143.195594][T11565] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 143.195606][T11565] RBP: 00007f20d82f8c1f R08: 0000000000000000 R09: 0000000000000000 [ 143.195619][T11565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.195632][T11565] R13: 00007f20d8506038 R14: 00007f20d8505fa0 R15: 00007ffc1ce8c3e8 [ 143.195654][T11565] [ 143.195663][T11565] memory: usage 307200kB, limit 307200kB, failcnt 91 [ 143.387897][T11583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.388484][T11565] memory+swap: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 143.388526][T11565] kmem: usage 306776kB, limit 9007199254740988kB, failcnt 0 [ 143.395089][T11583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2680'. [ 143.398740][T11565] Memory cgroup stats for /syz9: [ 143.418355][T11565] cache 0 [ 143.560803][T11565] rss 200704 [ 143.564019][T11565] shmem 0 [ 143.566984][T11565] mapped_file 0 [ 143.570483][T11565] dirty 0 [ 143.573426][T11565] writeback 0 [ 143.576747][T11565] workingset_refault_anon 0 [ 143.581304][T11565] workingset_refault_file 0 [ 143.585881][T11565] swap 131072 [ 143.589162][T11565] swapcached 49152 [ 143.592952][T11565] pgpgin 28103 [ 143.596317][T11565] pgpgout 28043 [ 143.599772][T11565] pgfault 35676 [ 143.603248][T11565] pgmajfault 0 [ 143.606697][T11565] inactive_anon 0 [ 143.610343][T11565] active_anon 49152 [ 143.614135][T11565] inactive_file 0 [ 143.617757][T11565] active_file 0 [ 143.621265][T11565] unevictable 196608 [ 143.625159][T11565] hierarchical_memory_limit 314572800 [ 143.630541][T11565] hierarchical_memsw_limit 9223372036854771712 [ 143.636688][T11565] total_cache 0 [ 143.640218][T11565] total_rss 200704 [ 143.643935][T11565] total_shmem 0 [ 143.647387][T11565] total_mapped_file 0 [ 143.651562][T11565] total_dirty 0 [ 143.655018][T11565] total_writeback 0 [ 143.658827][T11565] total_workingset_refault_anon 0 [ 143.664087][T11565] total_workingset_refault_file 0 [ 143.669121][T11565] total_swap 131072 [ 143.673038][T11565] total_swapcached 49152 [ 143.677269][T11565] total_pgpgin 28103 [ 143.681168][T11565] total_pgpgout 28043 [ 143.685198][T11565] total_pgfault 35676 [ 143.689245][T11565] total_pgmajfault 0 [ 143.693270][T11565] total_inactive_anon 0 [ 143.697464][T11565] total_active_anon 49152 [ 143.701839][T11565] total_inactive_file 0 [ 143.706071][T11565] total_active_file 0 [ 143.710110][T11565] total_unevictable 196608 [ 143.714520][T11565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.2673,pid=11563,uid=0 [ 143.729216][T11565] Memory cgroup out of memory: Killed process 11563 (syz.9.2673) total-vm:96180kB, anon-rss:1204kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 143.762458][T11587] netlink: 'syz.0.2681': attribute type 15 has an invalid length. [ 143.770441][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 143.837930][T11587] netlink: 'syz.0.2681': attribute type 15 has an invalid length. [ 143.845850][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2681'. [ 143.855047][ T41] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 143.867903][ T41] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 143.895448][ T41] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 143.907027][ T41] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 143.968967][T11593] lo speed is unknown, defaulting to 1000 [ 143.981360][T11605] netlink: 'syz.2.2689': attribute type 4 has an invalid length. [ 144.020476][T11605] netlink: 'syz.2.2689': attribute type 4 has an invalid length. [ 144.028248][ T8690] lo speed is unknown, defaulting to 1000 [ 144.034027][ T8690] syz0: Port: 1 Link DOWN [ 144.048572][ T8690] lo speed is unknown, defaulting to 1000 [ 144.054393][ T8690] syz0: Port: 1 Link ACTIVE [ 144.127683][T11618] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2694'. [ 144.182926][T11624] lo speed is unknown, defaulting to 1000 [ 144.394798][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 144.394813][ T29] audit: type=1400 audit(1770214361.548:2045): avc: denied { remount } for pid=11635 comm="syz.8.2701" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 144.433197][ T29] audit: type=1400 audit(1770214361.588:2046): avc: denied { view } for pid=11637 comm="syz.9.2702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 144.472388][T11645] netlink: 'syz.8.2703': attribute type 4 has an invalid length. [ 144.494260][T11645] netlink: 'syz.8.2703': attribute type 4 has an invalid length. [ 144.611508][ T29] audit: type=1400 audit(1770214361.768:2047): avc: denied { write } for pid=11654 comm="syz.9.2710" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 144.990615][ T29] audit: type=1326 audit(1770214362.148:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11677 comm="syz.9.2719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x0 [ 145.058538][T11685] netlink: 'syz.4.2723': attribute type 83 has an invalid length. [ 145.189667][ T29] audit: type=1400 audit(1770214362.338:2049): avc: denied { bind } for pid=11699 comm="syz.0.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.479279][T11727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2741'. [ 145.865052][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2744'. [ 145.916404][ T29] audit: type=1326 audit(1770214363.068:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.9.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 145.940109][ T29] audit: type=1326 audit(1770214363.068:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.9.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 145.990002][ T29] audit: type=1326 audit(1770214363.128:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.9.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 146.013934][ T29] audit: type=1326 audit(1770214363.128:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.9.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 146.037653][ T29] audit: type=1326 audit(1770214363.128:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11737 comm="syz.9.2745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 146.340571][T11753] loop2: detected capacity change from 0 to 7 [ 146.471741][T11765] ipip0: entered promiscuous mode [ 146.940503][T11794] netlink: 'syz.9.2767': attribute type 1 has an invalid length. [ 146.965104][T11794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.015989][T11794] bond2: (slave gretap1): making interface the new active one [ 147.078206][T11794] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 147.143743][T11814] xt_hashlimit: size too large, truncated to 1048576 [ 147.766296][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2783'. [ 147.797824][T11836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.825007][T11836] bond2: option ad_select: unable to set because the bond device is up [ 148.060441][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2793'. [ 148.118662][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2794'. [ 148.229756][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2794'. [ 148.469183][T11876] netlink: 'syz.8.2797': attribute type 3 has an invalid length. [ 148.492318][T11876] netlink: 'syz.8.2797': attribute type 3 has an invalid length. [ 148.787700][T11897] loop8: detected capacity change from 0 to 256 [ 148.811835][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2806'. [ 148.869139][T11903] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.2809'. [ 148.900466][T11903] netlink: zone id is out of range [ 148.906765][T11903] netlink: zone id is out of range [ 148.920731][T11903] netlink: zone id is out of range [ 148.938126][T11903] netlink: del zone limit has 8 unknown bytes [ 149.057731][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'. [ 149.125531][T11927] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.154747][T11929] loop9: detected capacity change from 0 to 512 [ 149.193815][T11938] IPv6: Can't replace route, no match found [ 149.201063][T11929] EXT4-fs (loop9): too many log groups per flexible block group [ 149.211030][T11929] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 149.218164][T11929] EXT4-fs (loop9): mount failed [ 149.867326][T11960] loop8: detected capacity change from 0 to 4096 [ 149.886400][T11962] netlink: 'syz.0.2833': attribute type 1 has an invalid length. [ 149.905777][T11962] bond3: entered promiscuous mode [ 149.916471][T11960] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #3: comm syz.8.2832: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 149.936659][T11962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 149.945937][T11960] EXT4-fs error (device loop8): ext4_quota_enable:7180: comm syz.8.2832: Bad quota inode: 3, type: 0 [ 149.982701][T11960] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 149.989547][T11962] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.004791][T11962] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 150.010474][T11960] EXT4-fs (loop8): mount failed [ 150.014881][T11962] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 150.038043][T11962] bond3: (slave vti0): making interface the new active one [ 150.045309][T11962] vti0: entered promiscuous mode [ 150.054832][T11962] bond3: (slave vti0): Enslaving as an active interface with an up link [ 150.274692][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2838'. [ 150.353845][T11992] lo speed is unknown, defaulting to 1000 [ 150.509258][T12012] loop4: detected capacity change from 0 to 512 [ 150.532863][T12010] team0 (unregistering): Port device team_slave_0 removed [ 150.534119][T12012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.560198][T12012] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.570902][T12010] team0 (unregistering): Port device team_slave_1 removed [ 150.590043][T12012] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2853: corrupted inode contents [ 150.603489][T12012] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.2853: mark_inode_dirty error [ 150.615534][T12012] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.2853: corrupted inode contents [ 150.628688][T12012] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2853: mark_inode_dirty error [ 150.674548][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 150.674564][ T29] audit: type=1400 audit(1770214367.828:2073): avc: denied { add_name } for pid=12011 comm="syz.4.2853" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 150.720642][T10840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.729669][ T8690] IPVS: starting estimator thread 0... [ 150.778550][T12025] loop4: detected capacity change from 0 to 128 [ 150.820162][T12019] IPVS: using max 2160 ests per chain, 108000 per kthread [ 150.869945][T12025] bio_check_eod: 74 callbacks suppressed [ 150.869964][T12025] syz.4.2857: attempt to access beyond end of device [ 150.869964][T12025] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 150.890215][T12025] syz.4.2857: attempt to access beyond end of device [ 150.890215][T12025] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 150.904055][T12025] syz.4.2857: attempt to access beyond end of device [ 150.904055][T12025] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 150.917787][T12025] syz.4.2857: attempt to access beyond end of device [ 150.917787][T12025] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 150.932878][T12025] syz.4.2857: attempt to access beyond end of device [ 150.932878][T12025] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 150.948897][T12025] syz.4.2857: attempt to access beyond end of device [ 150.948897][T12025] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 150.962575][T12025] syz.4.2857: attempt to access beyond end of device [ 150.962575][T12025] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 150.976429][T12025] syz.4.2857: attempt to access beyond end of device [ 150.976429][T12025] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 150.990120][T12025] syz.4.2857: attempt to access beyond end of device [ 150.990120][T12025] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 151.004148][T12025] syz.4.2857: attempt to access beyond end of device [ 151.004148][T12025] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 151.127045][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2861'. [ 151.237457][ T29] audit: type=1326 audit(1770214368.388:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.282607][ T29] audit: type=1326 audit(1770214368.388:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.306256][ T29] audit: type=1326 audit(1770214368.428:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.329832][ T29] audit: type=1326 audit(1770214368.428:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.353582][ T29] audit: type=1326 audit(1770214368.428:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.377651][ T29] audit: type=1326 audit(1770214368.428:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.401212][ T29] audit: type=1326 audit(1770214368.428:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.424786][ T29] audit: type=1326 audit(1770214368.428:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12043 comm="syz.2.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 151.502135][T12057] smc: net device bond0 applied user defined pnetid SYZ2 [ 151.512631][T12057] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2867'. [ 151.559086][T12057] smc: removing net device bond0 with user defined pnetid SYZ2 [ 151.592358][T12057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.641844][T12057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.660209][T12057] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 151.681087][T12057] bond0 (unregistering): Released all slaves [ 153.042985][T12184] netlink: 'syz.8.2902': attribute type 2 has an invalid length. [ 153.050783][T12184] __nla_validate_parse: 5 callbacks suppressed [ 153.050798][T12184] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2902'. [ 153.330184][T12196] loop4: detected capacity change from 0 to 8192 [ 153.355184][T12198] loop9: detected capacity change from 0 to 512 [ 153.362035][T12198] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.370386][T12198] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 153.378750][T12198] EXT4-fs error (device loop9): ext4_clear_blocks:876: inode #13: comm syz.9.2907: attempt to clear invalid blocks 2 len 1 [ 153.392128][T12198] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 153.407968][T12198] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2907: invalid indirect mapped block 1819239214 (level 0) [ 153.422244][T12198] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2907: invalid indirect mapped block 1819239214 (level 1) [ 153.436844][T12198] EXT4-fs (loop9): 1 truncate cleaned up [ 153.443181][T12198] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.462487][ T29] audit: type=1400 audit(1770214370.618:2082): avc: denied { create } for pid=12197 comm="syz.9.2907" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 153.508370][T10065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.696016][T12216] lo speed is unknown, defaulting to 1000 [ 153.850308][ T908] Process accounting resumed [ 154.039484][T12240] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2923'. [ 154.270389][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 154.279286][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2926'. [ 154.544951][T12259] loop9: detected capacity change from 0 to 128 [ 154.567398][T12259] FAT-fs (loop9): Directory bread(block 32) failed [ 154.575961][T12259] FAT-fs (loop9): Directory bread(block 33) failed [ 154.582998][T12259] FAT-fs (loop9): Directory bread(block 34) failed [ 154.589636][T12259] FAT-fs (loop9): Directory bread(block 35) failed [ 154.618090][T12259] FAT-fs (loop9): Directory bread(block 36) failed [ 154.624924][T12259] FAT-fs (loop9): Directory bread(block 37) failed [ 154.633593][T12259] FAT-fs (loop9): Directory bread(block 38) failed [ 154.640694][T12259] FAT-fs (loop9): Directory bread(block 39) failed [ 154.647305][T12259] FAT-fs (loop9): Directory bread(block 40) failed [ 154.654220][T12259] FAT-fs (loop9): Directory bread(block 41) failed [ 154.859359][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2944'. [ 154.874448][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.932115][T12290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.072305][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2957'. [ 155.218721][T12345] loop9: detected capacity change from 0 to 512 [ 155.225757][T12345] EXT4-fs: Ignoring removed oldalloc option [ 155.232500][T12345] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 155.244687][T12345] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #11: comm syz.9.2969: corrupted in-inode xattr: invalid ea_ino [ 155.258476][T12345] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2969: couldn't read orphan inode 11 (err -117) [ 155.271171][T12345] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.297793][T10065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.438034][T12360] syz_tun: entered allmulticast mode [ 155.443922][T12359] syz_tun: left allmulticast mode [ 155.465194][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2976'. [ 155.475321][T12362] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2976'. [ 155.566327][T12365] sctp: [Deprecated]: syz.9.2977 (pid 12365) Use of int in maxseg socket option. [ 155.566327][T12365] Use struct sctp_assoc_value instead [ 155.603569][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.612161][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.875451][T12369] netlink: 'syz.4.2979': attribute type 1 has an invalid length. [ 155.888214][T12369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.906942][T12369] bond1 (unregistering): Released all slaves [ 155.927538][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 155.927609][ T29] audit: type=1400 audit(1770214373.078:2104): avc: denied { create } for pid=12371 comm="syz.8.2980" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 156.025147][ T29] audit: type=1400 audit(1770214373.178:2105): avc: denied { create } for pid=12378 comm="syz.8.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.079789][ T29] audit: type=1400 audit(1770214373.228:2106): avc: denied { mount } for pid=12385 comm="syz.8.2986" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 156.224194][ T29] audit: type=1326 audit(1770214373.378:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1033aeb9 code=0x7ffc0000 [ 156.247835][ T29] audit: type=1326 audit(1770214373.378:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e1033aeb9 code=0x7ffc0000 [ 156.271328][ T29] audit: type=1326 audit(1770214373.378:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1033aeb9 code=0x7ffc0000 [ 156.294928][ T29] audit: type=1326 audit(1770214373.378:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3e1033aeb9 code=0x7ffc0000 [ 156.318536][ T29] audit: type=1326 audit(1770214373.378:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1033aeb9 code=0x7ffc0000 [ 156.342173][ T29] audit: type=1326 audit(1770214373.378:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f3e1033aeb9 code=0x7ffc0000 [ 156.365713][ T29] audit: type=1326 audit(1770214373.378:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12400 comm="syz.4.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e1033aeb9 code=0x7ffc0000 [ 156.683119][T12430] lo speed is unknown, defaulting to 1000 [ 157.027075][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3016'. [ 157.198847][T12474] loop4: detected capacity change from 0 to 128 [ 157.272201][T12481] bio_check_eod: 81 callbacks suppressed [ 157.272226][T12481] syz.4.3024: attempt to access beyond end of device [ 157.272226][T12481] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 157.292573][T12481] syz.4.3024: attempt to access beyond end of device [ 157.292573][T12481] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 157.317945][T12481] syz.4.3024: attempt to access beyond end of device [ 157.317945][T12481] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 157.365469][T12481] syz.4.3024: attempt to access beyond end of device [ 157.365469][T12481] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 157.379526][T12481] syz.4.3024: attempt to access beyond end of device [ 157.379526][T12481] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 157.393888][T12481] syz.4.3024: attempt to access beyond end of device [ 157.393888][T12481] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 157.410374][T12481] syz.4.3024: attempt to access beyond end of device [ 157.410374][T12481] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 157.445749][T12481] syz.4.3024: attempt to access beyond end of device [ 157.445749][T12481] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 157.466848][T12481] syz.4.3024: attempt to access beyond end of device [ 157.466848][T12481] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 157.480780][T12481] syz.4.3024: attempt to access beyond end of device [ 157.480780][T12481] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 158.131155][T12581] netlink: 566 bytes leftover after parsing attributes in process `syz.0.3041'. [ 158.315418][T12616] loop9: detected capacity change from 0 to 1024 [ 158.342282][T12616] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.354613][T12616] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.377074][T12627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3050'. [ 158.439759][T12616] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.3046: Freeing blocks not in datazone - block = 0, count = 16 [ 158.469001][ T1705] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 158.484084][ T1705] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 158.496424][ T1705] EXT4-fs (loop9): This should not happen!! Data will be lost [ 158.496424][ T1705] [ 158.506074][ T1705] EXT4-fs (loop9): Total free blocks count 0 [ 158.512139][ T1705] EXT4-fs (loop9): Free/Dirty block details [ 158.518012][ T1705] EXT4-fs (loop9): free_blocks=16 [ 158.523070][ T1705] EXT4-fs (loop9): dirty_blocks=32 [ 158.528175][ T1705] EXT4-fs (loop9): Block reservation details [ 158.534207][ T1705] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 158.541026][ T1705] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 3 with error 28 [ 158.931966][T12674] netlink: 'syz.9.3069': attribute type 4 has an invalid length. [ 159.010069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.196079][T12692] geneve2: entered promiscuous mode [ 159.250862][T12695] netlink: 'syz.8.3077': attribute type 12 has an invalid length. [ 159.258729][T12695] netlink: 'syz.8.3077': attribute type 29 has an invalid length. [ 159.266590][T12695] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3077'. [ 159.275662][T12695] netlink: 'syz.8.3077': attribute type 2 has an invalid length. [ 159.284118][T12695] netlink: 43 bytes leftover after parsing attributes in process `syz.8.3077'. [ 159.504598][T12709] loop4: detected capacity change from 0 to 512 [ 159.562729][T12709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.597995][T10840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.647605][T12724] lo speed is unknown, defaulting to 1000 [ 160.286480][T12768] IPv6: sit2: Disabled Multicast RS [ 160.342113][T12774] gretap0: entered promiscuous mode [ 160.496140][T12788] loop4: detected capacity change from 0 to 8192 [ 160.580708][T10840] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 160.588559][T10840] FAT-fs (loop4): Filesystem has been set read-only [ 160.724689][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 160.733673][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3131'. [ 160.771950][T10361] Bluetooth: hci0: Frame reassembly failed (-84) [ 160.885714][T12844] xt_hashlimit: size too large, truncated to 1048576 [ 161.010650][T12850] lo speed is unknown, defaulting to 1000 [ 161.497706][T12876] xt_hashlimit: size too large, truncated to 1048576 [ 161.702551][T12880] tipc: Failed to remove unknown binding: 66,1,1/0:468901356/468901358 [ 161.710941][T12880] tipc: Failed to remove unknown binding: 66,1,1/0:468901356/468901358 [ 162.029145][T12900] netlink: 'syz.2.3161': attribute type 1 has an invalid length. [ 162.036993][T12900] netlink: 'syz.2.3161': attribute type 4 has an invalid length. [ 162.044750][T12900] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3161'. [ 162.338086][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 162.338099][ T29] audit: type=1326 audit(1770214379.488:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.347756][T12935] lo speed is unknown, defaulting to 1000 [ 162.391627][ T29] audit: type=1326 audit(1770214379.528:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.415190][ T29] audit: type=1326 audit(1770214379.538:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.438690][ T29] audit: type=1326 audit(1770214379.538:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.462197][ T29] audit: type=1326 audit(1770214379.538:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.485746][ T29] audit: type=1326 audit(1770214379.538:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.509233][ T29] audit: type=1326 audit(1770214379.538:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.532872][ T29] audit: type=1326 audit(1770214379.538:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.556411][ T29] audit: type=1326 audit(1770214379.538:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.579933][ T29] audit: type=1326 audit(1770214379.538:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12932 comm="syz.0.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f839777aeb9 code=0x7ffc0000 [ 162.647180][T12943] sctp: [Deprecated]: syz.0.3178 (pid 12943) Use of int in max_burst socket option. [ 162.647180][T12943] Use struct sctp_assoc_value instead [ 162.752065][T12952] netlink: 'syz.0.3182': attribute type 4 has an invalid length. [ 162.761807][T12952] netlink: 'syz.0.3182': attribute type 4 has an invalid length. [ 162.866009][ T6489] Bluetooth: hci0: command 0x1003 tx timeout [ 162.872105][ T3514] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.975732][T12964] lo speed is unknown, defaulting to 1000 [ 163.129010][T12975] netlink: 'syz.0.3192': attribute type 2 has an invalid length. [ 163.538971][T13010] team0: entered promiscuous mode [ 163.544087][T13010] team_slave_0: entered promiscuous mode [ 163.549875][T13010] team_slave_1: entered promiscuous mode [ 163.615562][T13009] team0: left promiscuous mode [ 163.620428][T13009] team_slave_0: left promiscuous mode [ 163.625964][T13009] team_slave_1: left promiscuous mode [ 163.838522][T13024] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.845741][T13024] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.253433][T13024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.381819][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 164.505947][ T908] lo speed is unknown, defaulting to 1000 [ 164.511755][ T908] syz0: Port: 1 Link DOWN [ 164.530288][T13029] tipc: Started in network mode [ 164.535182][T13029] tipc: Node identity 4, cluster identity 4711 [ 164.541402][T13029] tipc: Node number set to 4 [ 164.590723][T13042] 8021q: adding VLAN 0 to HW filter on device bond4 [ 164.610064][ T31] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.618959][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.627876][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 65535 - 0 [ 164.637349][T13051] bond4: Unable to set up delay as MII monitoring is disabled [ 164.645764][ T31] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.654708][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.663701][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 65535 - 0 [ 164.674546][ T31] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.683525][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.692575][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 65535 - 0 [ 164.780214][ T31] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.789137][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.798139][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 65535 - 0 [ 165.274628][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3232'. [ 165.286318][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3232'. [ 165.433945][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3233'. [ 165.801839][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3244'. [ 165.933472][T13124] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.474444][T13155] all: renamed from bridge_slave_0 (while UP) [ 166.529723][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3260'. [ 166.612838][T13157] team1: entered promiscuous mode [ 166.617913][T13157] team1: entered allmulticast mode [ 166.625604][T13157] 8021q: adding VLAN 0 to HW filter on device team1 [ 166.804908][T13049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.812560][T13049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.820116][T13049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.827651][T13049] rtc_cmos 00:00: Alarms can be up to one day in the future [ 166.834964][T13049] rtc rtc0: __rtc_set_alarm: err=-22 [ 166.877641][T13163] smc: adding net device bond0 with user defined pnetid SYZ2 [ 166.892390][T13163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.917496][T13163] team0: Failed to send port change of device bond0 via netlink (err -105) [ 166.939755][T13163] team0: Failed to send options change via netlink (err -105) [ 166.947620][T13163] team0: Port device bond0 added [ 166.956025][ T31] team0: Failed to send port change of device bond0 via netlink (err -105) [ 166.965996][T13171] tipc: Started in network mode [ 166.971089][T13171] tipc: Node identity 4, cluster identity 4711 [ 166.977239][T13171] tipc: Node number set to 4 [ 167.192218][T13192] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.252801][T13192] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.313840][T13201] lo speed is unknown, defaulting to 1000 [ 167.349273][T13192] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.416607][T13192] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.517790][ T3341] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.557402][ T3447] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.576214][ T3447] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.642614][ T1705] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.890606][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'. [ 167.899805][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 167.915142][T13236] sch_tbf: burst 19360 is lower than device lo mtu (11337746) ! [ 167.938717][T13234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3292'. [ 167.947863][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 167.970376][T13243] geneve3: entered promiscuous mode [ 167.981829][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 167.981843][ T29] audit: type=1326 audit(1770214385.128:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.011458][ T29] audit: type=1326 audit(1770214385.128:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.035035][ T29] audit: type=1326 audit(1770214385.128:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.058981][ T29] audit: type=1326 audit(1770214385.128:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.082636][ T29] audit: type=1326 audit(1770214385.128:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.106190][ T29] audit: type=1326 audit(1770214385.128:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.129804][ T29] audit: type=1326 audit(1770214385.128:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.153295][ T29] audit: type=1326 audit(1770214385.128:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.176932][ T29] audit: type=1326 audit(1770214385.138:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.200361][ T29] audit: type=1326 audit(1770214385.138:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.8.3296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 168.252593][T13249] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.327720][T13249] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.401218][T13249] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.472819][T13249] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 168.573393][ T3447] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.588259][ T3447] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.603406][ T3447] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.642912][ T3447] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 168.734769][T13274] netlink: 'syz.0.3308': attribute type 12 has an invalid length. [ 168.756625][T13274] netlink: 'syz.0.3308': attribute type 12 has an invalid length. [ 168.906522][T13285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.991636][T13294] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.002031][T13294] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 169.061672][T13294] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.071980][T13294] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 169.141121][T13294] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.151608][T13294] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 169.228470][T13294] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.238912][T13294] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 169.348524][ T12] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.356896][ T12] netdevsim netdevsim9 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.402425][T13313] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.409609][T13313] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.489072][T13313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.528357][T13313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.569846][ T12] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.578293][ T12] netdevsim netdevsim9 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.587305][ T12] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.597203][T13323] all: renamed from lo (while UP) [ 169.617234][ T12] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.651733][ T12] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.689348][T13336] bridge_slave_0: left allmulticast mode [ 169.695099][T13336] bridge_slave_0: left promiscuous mode [ 169.700925][T13336] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.713294][T13336] bridge_slave_1: left allmulticast mode [ 169.719008][T13336] bridge_slave_1: left promiscuous mode [ 169.724703][T13336] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.737303][T13336] bond0: (slave bond_slave_0): Releasing backup interface [ 169.763378][T13336] bond0: (slave bond_slave_1): Releasing backup interface [ 169.795779][T13336] team0: Port device team_slave_0 removed [ 169.829053][T13336] team0: Port device team_slave_1 removed [ 169.836667][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.844234][T13336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.864455][T13336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.871925][T13336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.886167][T13336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 169.902625][ T12] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.952286][ T12] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.960807][ T12] netdevsim netdevsim9 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 169.969187][ T12] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.977678][ T12] netdevsim netdevsim9 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.036816][T13359] netlink: 'syz.2.3343': attribute type 142 has an invalid length. [ 170.045012][T13359] __nla_validate_parse: 2 callbacks suppressed [ 170.045028][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3343'. [ 170.137476][T13370] loop4: detected capacity change from 0 to 2048 [ 170.206482][ T3306] loop4: p3 p4 < > [ 170.210575][ T3306] loop4: p3 start 11362048 is beyond EOD, truncated [ 170.232010][T13370] loop4: p3 p4 < > [ 170.240097][T13370] loop4: p3 start 11362048 is beyond EOD, truncated [ 170.255307][ T3001] loop4: p3 p4 < > [ 170.259315][ T3001] loop4: p3 start 11362048 is beyond EOD, truncated [ 170.330109][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 170.353453][T13393] loop4: detected capacity change from 0 to 128 [ 170.363161][T13393] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.375861][T13393] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.414093][T10840] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.510858][T13412] sch_fq: defrate 7 ignored. [ 171.111225][T13438] 9p: Bad value for 'rfdno' [ 171.791278][T13456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.801610][T13456] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 171.883223][T13456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.893759][T13456] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 171.944150][T13456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.954540][T13456] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 172.010748][T13456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.021103][T13456] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 172.103510][T10372] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 65535 - 0 [ 172.112046][T10372] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.124139][T10372] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 65535 - 0 [ 172.132540][T10372] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.139676][T13488] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3396'. [ 172.168349][T10372] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 65535 - 0 [ 172.176787][T10372] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.195465][T10372] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 65535 - 0 [ 172.203940][T10372] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.550536][T13555] loop9: detected capacity change from 0 to 1024 [ 174.559005][T13555] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.569445][T13555] EXT4-fs (loop9): can't mount with commit=, fs mounted w/o journal [ 174.597012][T13555] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3421'. [ 174.606042][T13555] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3421'. [ 174.681601][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 174.681614][ T29] audit: type=1326 audit(1770214391.838:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 174.711657][ T29] audit: type=1326 audit(1770214391.838:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 174.737692][ T29] audit: type=1326 audit(1770214391.838:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 174.761344][ T29] audit: type=1326 audit(1770214391.848:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13570 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f49af6db78e code=0x7ffc0000 [ 174.784938][ T29] audit: type=1326 audit(1770214391.848:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 174.808706][ T29] audit: type=1326 audit(1770214391.848:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 174.832455][ T29] audit: type=1326 audit(1770214391.868:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49af6db78e code=0x7ffc0000 [ 174.856226][ T29] audit: type=1326 audit(1770214391.868:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49af6db78e code=0x7ffc0000 [ 174.879906][ T29] audit: type=1326 audit(1770214391.868:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 174.903523][ T29] audit: type=1326 audit(1770214391.868:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13568 comm="syz.8.3427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49af71aeb9 code=0x7ffc0000 [ 174.951610][T13580] 9p: Bad value for 'rfdno' [ 174.978014][T13582] loop9: detected capacity change from 0 to 2048 [ 174.988430][T13582] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.004488][T13582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.069248][T10065] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.116006][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 175.178961][T13611] netlink: 'syz.9.3445': attribute type 29 has an invalid length. [ 175.187656][T13611] netlink: 'syz.9.3445': attribute type 29 has an invalid length. [ 175.197184][T13611] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3445'. [ 175.206346][T13611] unsupported nla_type 66 [ 175.300372][T13625] bridge_slave_0: left allmulticast mode [ 175.306074][T13625] bridge_slave_0: left promiscuous mode [ 175.311876][T13625] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.333953][T13625] bridge_slave_1: left allmulticast mode [ 175.339644][T13625] bridge_slave_1: left promiscuous mode [ 175.345471][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.354125][T13625] bond0: (slave bond_slave_0): Releasing backup interface [ 175.366415][T13625] bond0: (slave bond_slave_1): Releasing backup interface [ 175.391776][T13625] team0: Port device team_slave_0 removed [ 175.408634][T13625] team0: Port device team_slave_1 removed [ 175.418172][T13625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.435258][T13625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.443545][T13625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 175.503866][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3450'. [ 175.630239][T13644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3452'. [ 175.644929][T13644] syz_tun (unregistering): left allmulticast mode [ 175.651665][T13644] syz_tun (unregistering): left promiscuous mode [ 175.658185][T13644] bridge0: port 3(syz_tun) entered disabled state [ 175.908647][T13661] loop4: detected capacity change from 0 to 1024 [ 175.960281][T13661] EXT4-fs: Ignoring removed orlov option [ 176.047173][T13669] tipc: Started in network mode [ 176.052104][T13669] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 176.059281][T13669] tipc: Enabled bearer , priority 18 [ 176.119419][T13661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.778385][T10840] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.822377][T13708] loop4: detected capacity change from 0 to 8192 [ 177.039085][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3486'. [ 177.050087][ T8690] tipc: Node number set to 10463914 [ 177.054818][T13721] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 177.564234][ T8690] IPVS: starting estimator thread 0... [ 177.587596][ T1705] bridge_slave_1: left allmulticast mode [ 177.593379][ T1705] bridge_slave_1: left promiscuous mode [ 177.599239][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.608215][ T1705] bridge_slave_0: left allmulticast mode [ 177.613927][ T1705] bridge_slave_0: left promiscuous mode [ 177.619657][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.662421][T13763] IPVS: using max 2208 ests per chain, 110400 per kthread [ 177.775272][T13770] loop9: detected capacity change from 0 to 256 [ 178.092421][T13771] loop4: detected capacity change from 0 to 512 [ 178.169047][ T1705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.189191][ T1705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.207436][ T1705] bond0 (unregistering): Released all slaves [ 178.315580][ T1705] hsr_slave_0: left promiscuous mode [ 178.325172][ T1705] hsr_slave_1: left promiscuous mode [ 178.350400][T13771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.363484][ T1705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.370918][ T1705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.379566][T13771] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.389199][ T1705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.397497][ T1705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.450609][ T1705] veth1_macvtap: left promiscuous mode [ 178.456112][ T1705] veth0_macvtap: left promiscuous mode [ 178.480265][ T1705] veth1_vlan: left promiscuous mode [ 178.485643][ T1705] veth0_vlan: left promiscuous mode [ 178.544436][T13786] netlink: 'syz.9.3512': attribute type 4 has an invalid length. [ 178.601286][T13793] netlink: 'syz.9.3512': attribute type 4 has an invalid length. [ 178.671742][ T1705] team0 (unregistering): Port device team_slave_1 removed [ 178.682569][ T1705] team0 (unregistering): Port device team_slave_0 removed [ 178.890124][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3525'. [ 178.899017][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3525'. [ 178.941477][T13823] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3526'. [ 178.991490][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3526'. [ 179.271517][T13843] xt_hashlimit: size too large, truncated to 1048576 [ 179.278247][T13843] xt_hashlimit: max too large, truncated to 1048576 [ 179.511109][T13804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.802215][T13869] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 179.843997][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 179.844013][ T29] audit: type=1400 audit(1770214396.988:2564): avc: denied { setopt } for pid=13872 comm="syz.8.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 179.884734][T13861] lo speed is unknown, defaulting to 1000 [ 180.011328][T13861] chnl_net:caif_netlink_parms(): no params data found [ 180.102021][T13861] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.109182][T13861] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.116560][T13861] bridge_slave_0: entered allmulticast mode [ 180.123320][T13861] bridge_slave_0: entered promiscuous mode [ 180.131921][T13861] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.139008][T13861] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.146545][T13861] bridge_slave_1: entered allmulticast mode [ 180.153204][T13861] bridge_slave_1: entered promiscuous mode [ 180.171272][T13861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.181968][T13861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.202100][T13861] team0: Port device team_slave_0 added [ 180.208917][T13861] team0: Port device team_slave_1 added [ 180.225807][T13861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.232925][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.258946][T13861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.270438][T13861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.277445][T13861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.303398][T13861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.332147][T13861] hsr_slave_0: entered promiscuous mode [ 180.338620][T13861] hsr_slave_1: entered promiscuous mode [ 180.678019][T13847] syz.2.3538 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 180.691050][T13847] CPU: 1 UID: 0 PID: 13847 Comm: syz.2.3538 Not tainted syzkaller #0 PREEMPT(voluntary) [ 180.691079][T13847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.691093][T13847] Call Trace: [ 180.691101][T13847] [ 180.691109][T13847] __dump_stack+0x1d/0x30 [ 180.691131][T13847] dump_stack_lvl+0x95/0xd0 [ 180.691151][T13847] dump_stack+0x15/0x1b [ 180.691251][T13847] dump_header+0x80/0x240 [ 180.691273][T13847] oom_kill_process+0x295/0x350 [ 180.691380][T13847] out_of_memory+0x97d/0xb80 [ 180.691408][T13847] try_charge_memcg+0x62e/0xa10 [ 180.691499][T13847] obj_cgroup_charge_pages+0x23/0xc0 [ 180.691582][T13847] obj_cgroup_charge_account+0x73/0x1a0 [ 180.691658][T13847] __memcg_slab_post_alloc_hook+0x396/0x530 [ 180.691761][T13847] kmem_cache_alloc_noprof+0x2b4/0x490 [ 180.691785][T13847] ? alloc_buffer_head+0x35/0x1f0 [ 180.691818][T13847] alloc_buffer_head+0x35/0x1f0 [ 180.691843][T13847] folio_alloc_buffers+0x149/0x310 [ 180.691870][T13847] create_empty_buffers+0x2c/0x200 [ 180.691898][T13847] __block_write_begin_int+0x1d4/0xf90 [ 180.691991][T13847] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 180.692024][T13847] ? inode_io_list_move_locked+0x1d0/0x2d0 [ 180.692056][T13847] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 180.692154][T13847] block_page_mkwrite+0x1a8/0x3c0 [ 180.692179][T13847] ext4_page_mkwrite+0x859/0xb90 [ 180.692204][T13847] ? folio_unlock+0xfe/0x150 [ 180.692234][T13847] handle_mm_fault+0x18fb/0x3030 [ 180.692366][T13847] do_user_addr_fault+0x3fd/0x1050 [ 180.692391][T13847] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 180.692424][T13847] exc_page_fault+0x62/0xa0 [ 180.692490][T13847] asm_exc_page_fault+0x26/0x30 [ 180.692511][T13847] RIP: 0033:0x7f24849cfe32 [ 180.692526][T13847] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 a3 8d fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 180.692545][T13847] RSP: 002b:00007fff42c00310 EFLAGS: 00010202 [ 180.692625][T13847] RAX: 000000000000b008 RBX: 00007f24858a5720 RCX: 0000000000000000 [ 180.692639][T13847] RDX: 0000001b33f19000 RSI: 0000000000000008 RDI: 00007f24858a5720 [ 180.692654][T13847] RBP: 0000000000000819 R08: 00007f2484d60000 R09: 00007f2484d76038 [ 180.692667][T13847] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff81e6784a [ 180.692679][T13847] R13: 00007f2484d76038 R14: 000000000000022d R15: ffffffffffff5000 [ 180.692768][T13847] ? blk_mq_start_request+0x5a/0x3c0 [ 180.692814][T13847] [ 180.692821][T13847] memory: usage 307200kB, limit 307200kB, failcnt 2037 [ 180.736586][T13861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.741374][T13847] memory+swap: usage 307608kB, limit 9007199254740988kB, failcnt 0 [ 180.957665][T13847] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 180.965051][T13847] Memory cgroup stats for /syz2: [ 180.965674][T13847] cache 4096 [ 180.973840][T13847] rss 0 [ 180.976598][T13847] shmem 0 [ 180.979569][T13847] mapped_file 0 [ 180.983094][T13847] dirty 0 [ 180.986317][T13847] writeback 0 [ 180.989663][T13847] workingset_refault_anon 144 [ 180.994559][T13847] workingset_refault_file 889 [ 180.999250][T13847] swap 417792 [ 181.002742][T13847] swapcached 16384 [ 181.006458][T13847] pgpgin 215861 [ 181.009933][T13847] pgpgout 215856 [ 181.013552][T13847] pgfault 234292 [ 181.017092][T13847] pgmajfault 54 [ 181.020707][T13847] inactive_anon 0 [ 181.024464][T13847] active_anon 16384 [ 181.028364][T13847] inactive_file 0 [ 181.032024][T13847] active_file 4096 [ 181.035750][T13847] unevictable 0 [ 181.039242][T13847] hierarchical_memory_limit 314572800 [ 181.044641][T13847] hierarchical_memsw_limit 9223372036854771712 [ 181.050829][T13847] total_cache 4096 [ 181.054588][T13847] total_rss 0 [ 181.057867][T13847] total_shmem 0 [ 181.061453][T13847] total_mapped_file 0 [ 181.065453][T13847] total_dirty 0 [ 181.068902][T13847] total_writeback 0 [ 181.072803][T13847] total_workingset_refault_anon 144 [ 181.078016][T13847] total_workingset_refault_file 889 [ 181.083236][T13847] total_swap 417792 [ 181.087045][T13847] total_swapcached 16384 [ 181.091378][T13847] total_pgpgin 215861 [ 181.095364][T13847] total_pgpgout 215856 [ 181.099482][T13847] total_pgfault 234292 [ 181.103579][T13847] total_pgmajfault 54 [ 181.107554][T13847] total_inactive_anon 0 [ 181.111729][T13847] total_active_anon 16384 [ 181.116046][T13847] total_inactive_file 0 [ 181.120228][T13847] total_active_file 4096 [ 181.124465][T13847] total_unevictable 0 [ 181.128445][T13847] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3538,pid=13847,uid=0 [ 181.143197][T13847] Memory cgroup out of memory: Killed process 13847 (syz.2.3538) total-vm:96312kB, anon-rss:1204kB, file-rss:22428kB, shmem-rss:128kB, UID:0 pgtables:156kB oom_score_adj:0 [ 181.161296][ T29] audit: type=1400 audit(1770214654.243:2565): avc: denied { watch } for pid=13945 comm="syz.9.3557" path="/" dev="ramfs" ino=39130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 181.192933][T13861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.233024][T13861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.247960][T13849] syz.2.3538 (13849) used greatest stack depth: 7232 bytes left [ 181.271087][T13861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.344264][T13970] uprobe: syz.0.3562:13970 failed to unregister, leaking uprobe [ 181.421969][T13861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.449785][T13861] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.471531][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.478687][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.509900][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.517059][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.591318][T13861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.601780][T13861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.613345][T14011] sock: sock_set_timeout: `syz.0.3571' (pid 14011) tries to set negative timeout [ 181.718453][ T29] audit: type=1400 audit(1770214654.873:2566): avc: denied { associate } for pid=14022 comm="syz.0.3575" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 181.867740][ T29] audit: type=1400 audit(1770214655.013:2567): avc: denied { create } for pid=14032 comm="syz.8.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.887534][ T29] audit: type=1400 audit(1770214655.013:2568): avc: denied { connect } for pid=14032 comm="syz.8.3578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.100634][T13861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.533768][T13861] veth0_vlan: entered promiscuous mode [ 182.548743][T13861] veth1_vlan: entered promiscuous mode [ 182.576294][T13861] veth0_macvtap: entered promiscuous mode [ 182.617034][T13861] veth1_macvtap: entered promiscuous mode [ 182.641436][T13861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.672548][T13861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.703067][ T3341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.751902][ T3341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.783157][ T3341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.812913][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3583'. [ 182.866353][ T1705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.880171][T14090] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3583'. [ 182.918594][ T1705] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.940104][ T1705] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.980182][ T1705] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.018277][ T1705] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.157775][ T29] audit: type=1326 audit(1770214656.313:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 183.246008][ T29] audit: type=1326 audit(1770214656.313:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 183.269924][ T29] audit: type=1326 audit(1770214656.313:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 183.293432][ T29] audit: type=1326 audit(1770214656.383:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 183.422816][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.470593][ T29] audit: type=1326 audit(1770214656.383:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14126 comm="syz.2.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2484afaeb9 code=0x7ffc0000 [ 183.710888][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3597'. [ 183.777789][T14124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.796908][T14171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3597'. [ 183.934503][T14124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.114430][ T12] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.123066][ T12] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.131662][ T12] netdevsim netdevsim9 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.190200][ T12] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.198687][ T12] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.207216][ T12] netdevsim netdevsim9 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.263952][ T12] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.272612][ T12] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.281161][ T12] netdevsim netdevsim9 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.363076][ T12] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.371503][ T12] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 184.379962][ T12] netdevsim netdevsim9 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.596912][T14238] lo speed is unknown, defaulting to 1000 [ 184.640004][T14244] netlink: 'syz.9.3616': attribute type 1 has an invalid length. [ 184.708438][T14244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 184.812855][T14244] bond3: (slave veth5): Enslaving as an active interface with a down link [ 184.862453][T14259] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 184.869636][T14259] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 185.102856][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 185.102871][ T29] audit: type=1400 audit(1770214658.263:2576): avc: denied { create } for pid=14269 comm="syz.9.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.195355][ T29] audit: type=1400 audit(1770214658.293:2577): avc: denied { bind } for pid=14269 comm="syz.9.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 185.305302][T14277] tunl0: Caught tx_queue_len zero misconfig [ 185.382899][T14284] netlink: 'syz.8.3623': attribute type 1 has an invalid length. [ 185.397463][T14284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.437525][T14290] netlink: 'syz.0.3625': attribute type 8 has an invalid length. [ 185.445416][T14290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3625'. [ 185.456361][T14284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.500659][T14284] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.533029][T14284] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 185.631130][T14290] bond0: entered promiscuous mode [ 185.636210][T14290] bond_slave_0: entered promiscuous mode [ 185.641968][T14290] bond_slave_1: entered promiscuous mode [ 185.647798][T14290] bridge_slave_1: entered promiscuous mode [ 185.658799][T14290] gretap0: entered promiscuous mode [ 185.664845][T14290] bond0: left promiscuous mode [ 185.669652][T14290] bond_slave_0: left promiscuous mode [ 185.675231][T14290] bond_slave_1: left promiscuous mode [ 185.680714][T14290] bridge_slave_1: left promiscuous mode [ 185.689266][T14290] gretap0: left promiscuous mode [ 185.830302][T14298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3629'. [ 185.885769][ T29] audit: type=1400 audit(1770214659.043:2578): avc: denied { cmd } for pid=14303 comm="syz.2.3627" path="socket:[40125]" dev="sockfs" ino=40125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 185.984167][T14312] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 186.247505][ T29] audit: type=1326 audit(1770214659.403:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 186.271220][ T29] audit: type=1326 audit(1770214659.403:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 186.294967][ T29] audit: type=1326 audit(1770214659.403:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 186.318641][ T29] audit: type=1326 audit(1770214659.403:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 186.376632][T14336] netlink: 'syz.0.3643': attribute type 21 has an invalid length. [ 186.384623][T14336] IPv6: NLM_F_CREATE should be specified when creating new route [ 186.408064][T14336] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.415334][T14336] IPv6: NLM_F_CREATE should be set when creating new route [ 186.422570][T14336] IPv6: NLM_F_CREATE should be set when creating new route [ 186.429805][T14336] IPv6: NLM_F_CREATE should be set when creating new route [ 186.429941][ T29] audit: type=1326 audit(1770214659.403:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 186.460580][ T29] audit: type=1326 audit(1770214659.403:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 186.484257][ T29] audit: type=1326 audit(1770214659.403:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14324 comm="syz.9.3640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d828aeb9 code=0x7ffc0000 [ 186.668101][T14345] netlink: 'syz.0.3648': attribute type 4 has an invalid length. [ 187.296442][T14367] ================================================================== [ 187.304557][T14367] BUG: KCSAN: data-race in smc_switch_to_fallback / sock_poll [ 187.312060][T14367] [ 187.314389][T14367] write to 0xffff888127398c18 of 8 bytes by task 14369 on cpu 1: [ 187.322199][T14367] smc_switch_to_fallback+0x4ea/0x7e0 [ 187.327581][T14367] smc_sendmsg+0xce/0x2f0 [ 187.331910][T14367] ____sys_sendmsg+0x5af/0x600 [ 187.336666][T14367] ___sys_sendmsg+0x195/0x1e0 [ 187.341328][T14367] __x64_sys_sendmsg+0xd4/0x160 [ 187.346168][T14367] x64_sys_call+0x17ba/0x3000 [ 187.350935][T14367] do_syscall_64+0xc0/0x2a0 [ 187.355434][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.361318][T14367] [ 187.363630][T14367] read to 0xffff888127398c18 of 8 bytes by task 14367 on cpu 0: [ 187.371242][T14367] sock_poll+0x27/0x240 [ 187.375392][T14367] __io_arm_poll_handler+0x1ee/0xb80 [ 187.380685][T14367] io_poll_add+0x69/0xf0 [ 187.384928][T14367] __io_issue_sqe+0xfd/0x2d0 [ 187.389522][T14367] io_issue_sqe+0x20b/0xc20 [ 187.394049][T14367] io_submit_sqes+0x78a/0x11b0 [ 187.398817][T14367] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 187.404360][T14367] __x64_sys_io_uring_enter+0x78/0x90 [ 187.409817][T14367] x64_sys_call+0x27e4/0x3000 [ 187.414488][T14367] do_syscall_64+0xc0/0x2a0 [ 187.418986][T14367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.424957][T14367] [ 187.427275][T14367] value changed: 0xffff88811a6056c0 -> 0xffff88811a606080 [ 187.434366][T14367] [ 187.436675][T14367] Reported by Kernel Concurrency Sanitizer on: [ 187.442807][T14367] CPU: 0 UID: 0 PID: 14367 Comm: syz.8.3658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.452605][T14367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.462657][T14367] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.830236][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.840629][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.901702][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.912029][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.984158][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.994495][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.123541][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.133954][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.244406][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.293717][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.354163][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.393346][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.463971][ T12] bridge_slave_1: left allmulticast mode [ 188.469634][ T12] bridge_slave_1: left promiscuous mode [ 188.475402][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.483947][ T12] bridge_slave_0: left allmulticast mode [ 188.489595][ T12] bridge_slave_0: left promiscuous mode [ 188.495290][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.503914][ T12] bridge_slave_1: left allmulticast mode [ 188.509531][ T12] bridge_slave_1: left promiscuous mode [ 188.515240][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.522939][ T12] bridge_slave_0: left allmulticast mode [ 188.528562][ T12] bridge_slave_0: left promiscuous mode [ 188.534350][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.701700][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.711570][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.721050][ T12] bond0 (unregistering): Released all slaves [ 188.782801][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.792702][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.802245][ T12] bond0 (unregistering): Released all slaves [ 188.832023][ T12] hsr_slave_0: left promiscuous mode [ 188.837758][ T12] hsr_slave_1: left promiscuous mode [ 188.843533][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.850967][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.858606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.866095][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.876350][ T12] hsr_slave_0: left promiscuous mode [ 188.882208][ T12] hsr_slave_1: left promiscuous mode [ 188.888046][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.895773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.903569][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.910989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.925472][ T12] veth1_macvtap: left promiscuous mode [ 188.931076][ T12] veth0_macvtap: left promiscuous mode [ 188.936575][ T12] veth1_vlan: left promiscuous mode [ 188.942258][ T12] veth0_vlan: left promiscuous mode [ 188.947962][ T12] veth1_macvtap: left promiscuous mode [ 188.953480][ T12] veth0_macvtap: left promiscuous mode [ 188.958957][ T12] veth1_vlan: left promiscuous mode [ 188.964327][ T12] veth0_vlan: left promiscuous mode [ 189.054189][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.065260][ T12] team0 (unregistering): Port device team_slave_0 removed [ 189.118396][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.129184][ T12] team0 (unregistering): Port device team_slave_0 removed [ 189.812941][ T12] bridge_slave_0: left allmulticast mode [ 189.818767][ T12] bridge_slave_0: left promiscuous mode [ 189.824538][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.845121][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 189.857577][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 190.011087][ T12] bond1 (unregistering): Released all slaves [ 190.018974][ T12] bond2 (unregistering): Released all slaves [ 190.027172][ T12] team0: Port device bond0 removed [ 190.032811][ T12] smc: removing net device bond0 with user defined pnetid SYZ2 [ 190.040707][ T12] bond0 (unregistering): Released all slaves [ 190.048797][ T12] bond3 (unregistering): (slave veth5): Releasing active interface [ 190.057547][ T12] bond3 (unregistering): Released all slaves [ 190.105714][ T12] tipc: Left network mode [ 190.120433][ T12] hsr_slave_0: left promiscuous mode [ 190.127116][ T12] hsr_slave_1: left promiscuous mode [ 190.133243][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.141002][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.181525][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.191684][ T12] team0 (unregistering): Port device team_slave_0 removed