last executing test programs: 7m53.555626062s ago: executing program 32 (id=78): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) r0 = open(&(0x7f0000000240)='./file1\x00', 0x105342, 0x20) ftruncate(r0, 0x2007ffc) syz_open_dev$usbfs(0x0, 0x200000, 0x101080) sendfile(r0, r0, 0x0, 0x800000009) 6m41.992880035s ago: executing program 33 (id=1665): syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m21.813166152s ago: executing program 34 (id=2159): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0xfffffffffffffffb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tgkill(0x0, 0x0, 0x6) 6m0.630677128s ago: executing program 35 (id=2486): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) setsockopt(r0, 0x1, 0x9, &(0x7f0000000040), 0x29) 5m59.55859422s ago: executing program 36 (id=2264): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001b80)=""/4064, 0xfe0}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 5m58.639717003s ago: executing program 5 (id=2506): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 5m58.52909958s ago: executing program 5 (id=2508): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x2, @b={0x6, 0x5, 0x1, 0x3, {}, 0x2}}, 0x9) 5m55.588243781s ago: executing program 5 (id=2553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014000000600000000000007d01ff0200"/53], 0xfdef) 5m55.432629071s ago: executing program 5 (id=2556): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000840)={[0x3]}, 0x8, 0x80000) r1 = syz_io_uring_setup(0x5ea4, &(0x7f0000000380)={0x0, 0xd495, 0x10000, 0x0, 0x4, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 5m55.397261213s ago: executing program 5 (id=2557): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5m55.28252743s ago: executing program 5 (id=2559): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 5m40.924633977s ago: executing program 37 (id=2559): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 5m26.63767785s ago: executing program 3 (id=3054): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x8, 0x785, 0x1, 0x7, 0x10}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x1c) 5m26.47449624s ago: executing program 3 (id=3057): syz_open_dev$sg(0x0, 0x80, 0x80) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20008000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 5m26.397544414s ago: executing program 3 (id=3059): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGIDLE(r1, 0x8010743f, 0x0) 5m26.311949189s ago: executing program 3 (id=3060): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 5m26.286370951s ago: executing program 3 (id=3061): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5m26.031516496s ago: executing program 3 (id=3066): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) dup3(r0, r1, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3fe) fcntl$setstatus(r1, 0x4, 0x7c00) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44010000090601"], 0x144}, 0x1, 0x0, 0x0, 0x40015}, 0x44080) 5m25.982123218s ago: executing program 38 (id=3066): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) dup3(r0, r1, 0x80000) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x3fe) fcntl$setstatus(r1, 0x4, 0x7c00) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44010000090601"], 0x144}, 0x1, 0x0, 0x0, 0x40015}, 0x44080) 5m1.357589544s ago: executing program 2 (id=3735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220440a8}, 0x20004000) 5m1.301612468s ago: executing program 2 (id=3736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f", 0xb8}], 0x1, 0x0, 0x6b}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970006882b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 5m1.215873923s ago: executing program 2 (id=3737): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffffe, 0x4012011, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) 5m1.182273435s ago: executing program 2 (id=3738): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@fat=@sys_immutable}, {@utf8}, {@numtail}]}, 0x0, 0x2b6, &(0x7f0000001640)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 5m1.026583004s ago: executing program 2 (id=3739): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5m0.761842579s ago: executing program 2 (id=3746): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x81901) 5m0.714327352s ago: executing program 39 (id=3746): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x81901) 4m44.451118281s ago: executing program 4 (id=4085): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001340)=""/4110, 0x100e}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 4m44.220231324s ago: executing program 4 (id=4094): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x10890) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 4m44.059519143s ago: executing program 4 (id=4097): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x2]}, 0x8) 4m44.043505154s ago: executing program 4 (id=4098): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@fat=@sys_immutable}, {@utf8}, {@numtail}]}, 0x0, 0x2b6, &(0x7f0000001640)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r0, &(0x7f0000000600)=""/4099, 0x1003, 0x110) 4m43.978997638s ago: executing program 4 (id=4100): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) readv(r2, &(0x7f0000000540)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) 4m43.897752983s ago: executing program 4 (id=4103): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 4m43.884186693s ago: executing program 40 (id=4103): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 3m34.543189098s ago: executing program 7 (id=5561): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @rand_addr=0x64010102}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @multicast1}, 0x2, 0x0, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 3m34.491532731s ago: executing program 7 (id=5563): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0xa000, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x5, 0x0, 0x0, 0x0, 0x101, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x0, 0x7, 0x0, 0x1, 0x8, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) 3m34.428374064s ago: executing program 7 (id=5566): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4"], 0x0}, 0x94) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000007c0)='ext2\x00', &(0x7f0000000780)='./bus\x00', 0xe, &(0x7f0000000a00)={[{@noinit_itable}, {@grpjquota}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1000}}, {@nomblk_io_submit}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x0, 0x33, 0x33, 0x39, 0x37, 0x66], 0x2d, [0x66, 0x30, 0x30, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x39], 0x2d, [0x38, 0x34, 0x35, 0x35], 0x2d, [0x30, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@seclabel}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x400, 0x0) bind$unix(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000f14010028bd7000fbdbdf250c004500"], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4048084) 3m34.371464608s ago: executing program 7 (id=5569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000001f80)=r2, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @llc={@snap={0x1, 0xab, "a7", "7e8bc7", 0x952, "faa1542b18efd6dbeafc4c107346f45b2403e91ed538cafc10f4b6875727ede0f5"}}}}, 0x37) 3m34.264023514s ago: executing program 7 (id=5574): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(r0, &(0x7f0000000040)='./file1/file4/file5\x00', 0x100, 0xfffffffc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x2) 3m34.183923788s ago: executing program 7 (id=5575): r0 = socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x6}, 0x5}], 0x1, 0x102, 0x0) 3m19.891304442s ago: executing program 41 (id=5575): r0 = socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x6}, 0x5}], 0x1, 0x102, 0x0) 2.199724252s ago: executing program 6 (id=9464): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.89578964s ago: executing program 1 (id=9470): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x4, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006f40), 0x2002, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 1.568173969s ago: executing program 6 (id=9472): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) r3 = syz_open_dev$sg(&(0x7f0000000480), 0x0, 0x8a203) fcntl$dupfd(r3, 0x0, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) 1.489973463s ago: executing program 1 (id=9474): r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000134000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r0, 0x7617e000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x81, 0xfc039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x547b7e, 0x2, @perf_config_ext={0x80000000000006, 0xf60e}, 0x9092, 0x0, 0x43a1bd73, 0x4, 0x9, 0xa772da53, 0x8, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat(0xffffffffffffff9c, 0x0, 0x40140, 0x1) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x20}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) 1.290304315s ago: executing program 1 (id=9477): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) r4 = fsmount(r1, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.21112713s ago: executing program 6 (id=9479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x8000, 0xffff, 0xfffd, 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@float={0x6, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0xd, 0x3}, {0xa}, {0x40d, 0x8003}, {0x1, 0x45}, {0x6, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x4}}]}, {0x0, [0x5f, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000180)=""/14, 0x7f, 0xe, 0x1, 0x4}, 0x28) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") r2 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) pwritev2(r2, &(0x7f0000000000)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x7, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000006fe5e40cf1b400b3d550000000109021200014300a00009ac89a779981c5f69ae8704a600000e010000b18beebab4057565a9f628e745d0f81c32b2aa46dc1ef09562673f433c236783701f38d44d398938eefe56fabeb98028f3b96d0ddbb2671db5"], 0x0) 1.071550528s ago: executing program 8 (id=9482): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$eJzs3U1vW1kZAOD33thMk2ZIBljMjMTMiBmUVFAnmdBpxKKAhGBVCSj7EhI3iuLEVeK0TVRBKn4AEkKAxAZWbJD4AUioPwEhKsEeAQJV0LJhUbjI9nWapraTUn9onOeRTu6Hj/2eN5aP7/E99g3gzHonImYjIsuy7EJETOX707zEQbPU6z1+dHelXpLIsmv/SCLJ97Ue65V8eT6/27mI+MZXI76dPB93Z29/Y7lSKW/n23O1zeRJlu1fXN9cXiuvlbcWFxc+WLq8dGlpvid5TkfElS//9Uff/8VXrvzms7f/dP3vs99pJth0NI9eaqZebPwvWgoRsd2PYENSaGTYdGnIbQEAoLv68f7HIuJTEXEhpmKscTQHAAAAjJLsC5PxJGme/wMAAABGUxoRk5GkpXy+72SkaanUnMP7iZhIK9Wd2meyqcPPC6ajmN5Yr5Tn87kD01FM6tsL+Rzb1vb7x7YXI+K1iPjh1Hhju7RSrawO9ZMPAAAAODvOPx3/v5F/h7Mx/gcAAABGzPSwGwAAAAD0nfE/AAAAjD7jfwAAABhpX7t6tV6y1vWvV2/t7W5Ub11cLe9slDZ3V0or1e2bpbVqda3xm32bJz1epVq9+bnY2r0zVyvv1OZ29vavb1Z3t2rX15+5BDYAAAAwQK+9ff+PSUQcfH48jYgsOXJbMSIbO1q5MPj2Af2Tvkjlv/SvHcDgjQ27AcDQOKSHs6t4chXfDoARd1I/0HHyzm973xYAAKA/Zt44PP/fKMDZcf9hY5Ekw24IMHDdzv+bGwCj7RTn/4ARVez2Lm9QACMv7fJSb30h6OXP/2fZi7cMAADopclGSdJSPg6YjDQtlSJebUz8LyY31ivl+Yj4aET8Yar4Sn17oXHPxMcDAAAAAAAAAAAAAAAAAAAAAAAAAHBKWZZE1sH4YR0AAADgwywi/VuSX/9rZuq9yeaI/+lVQT+S/HuqsYyI2z+99uM7y7Xa9kJ9/z8P99d+ku9/fxifYAAAAADHtcbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTS40d3V1plkHEffikiptvFL8S5xvJcFCNi4l9JFI7cL4mIsR7EP5iIiNfbxU/qzYrpvBXH46cRMd6L+Pf+//jnexAfzrL79f7ni+1ef2m801i2f/0V8vKyOvd/6WH/N9ah/3u13QOmz+9688Gv5jrGvxfxZqF9/9OKn3SI/+4pc/zWN/f3O92W/Txipu37T/JMrLmkcHNuZ2//4vrm8lp5rby1uLjwwdLlpUtL83M31ivl/G/bGD/45K//2y3/iQ7xp0/I/71T5v+fB3cefby5Wjx2UzF+lmWz77Z//l/vEL/13vfp/Omub8+01g+a60e99cvfvfV2l/xXO+R/0vM/e8r8L3z9e38+ZVUAYAB29vY3liuV8rYVK31bGY8BBl2ObnVaB7EDaM9381D9CvH7YkT/shhipwQAAPTF04P+YbcEAAAAAAAAAAAAAAAAAAAAzq6TfgasFz8wdjzmwXBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo6n8BAAD///phy8c=") r0 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, r0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\a\x00', 0x4e, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "ef7cc1", 0x0, 0x0, 0x0, @private0, @dev, [], "2b03e411709c8af2a4e40d15eb620aa7b9a21c82b539efb86cae5c4cf594"}}}}}}}, 0x0) r2 = gettid() r3 = memfd_create(&(0x7f0000000100)='b\x98]\xb85\x84', 0x0) preadv(r3, 0x0, 0x0, 0xa, 0x203) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) creat(0x0, 0x12) 991.081912ms ago: executing program 0 (id=9486): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) creat(&(0x7f0000000000)='./bus\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000791260000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 969.344293ms ago: executing program 0 (id=9487): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 945.660615ms ago: executing program 0 (id=9489): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffffff1}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x4000, 0x0) r2 = fsmount(r0, 0x0, 0xc) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB='-pids Uk'], 0x1f) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x800001, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0xfffffffc, 0xb, 0x800000}, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r5, 0x0, 0x0}, 0x10) 921.846887ms ago: executing program 0 (id=9490): syz_open_dev$tty1(0xc, 0x4, 0x2) unshare(0x22020400) r0 = inotify_init1(0x80000) socket(0x11, 0x800000003, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xffffd000) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) r2 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400002a2) r3 = dup(r0) inotify_rm_watch(r3, r2) 830.181782ms ago: executing program 0 (id=9491): r0 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd41e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x6, 0x6, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x4000800) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r0}, 0x20) close(r0) 829.250302ms ago: executing program 8 (id=9492): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000740)={'xfrm0\x00', 0x0}) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_CS_CRC8={0x11e, 0x6, {0xfc, 0x0, 0x7c, 0x0, 0x0, "a667b51ee4532125e21a243c1685306f7c5d387de5cd8b8838cba7eb7069509fa783cabdcdfa6d242cca3df25f5dac4687ac8eac82c3ef67821f1fff7369acda843cafddb6410d0f75ce652118322448c2088fad839e889667f63cd45f2a55f7f29bffb2397f66f1ffc7f0a92c2c7807d3cbfc8e1f2c9462588ced6cf3c6892e6c0f15edf9d6a0a3ca539dad9e6bde1ae53876d0e5ce3642a42efa1e918b8dc406679f10aa42b0cb14136f2be49dbc989672fc9c6e506ac3481ab4f6cf3653497ad26c3d4fce93fdd8ab015b1e8ad181f85e70bd17f680ff8537e484a5ff1285ca414a5d5474e851022478168c52281600", 0x0, "d45c637c63381ef54f7b939bb9aba5df6218e9ac"}}, @CGW_MOD_XOR={0x15, 0x3, {{{}, 0xff, 0x2, 0x0, 0x0, "150200"}, 0x2}}]}, 0x14c}}, 0x0) 790.094714ms ago: executing program 8 (id=9493): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004080) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "3f69f5593d99b5b9", "ad19b9f81b7051508702a27013f65558c8a01f2ae65a25a4c4580daf90219442", "d78279e4", "ba02af61de6197b6"}, 0x38) r2 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 781.924134ms ago: executing program 1 (id=9495): syz_open_dev$usbfs(0x0, 0x77, 0x141341) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrandom(0xfffffffffffffffe, 0x0, 0x0) r1 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) 699.9123ms ago: executing program 1 (id=9496): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1b459d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x0, 0x5, 0x7, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918ff00000000000000860188a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)=""/38, 0x26}], 0x1, 0xffff, 0xddd073cf) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11, r0, 0x200000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @broadcast}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x41, 0x9}}], 0x18}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) setsockopt$packet_int(r4, 0x107, 0x11, 0x0, 0x0) 699.44841ms ago: executing program 1 (id=9497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 612.217814ms ago: executing program 6 (id=9499): io_setup(0xbf3, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket(0x1, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000001c0)={0x80000002}) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x410682, 0x24) 506.98836ms ago: executing program 9 (id=9500): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) fallocate(r2, 0x10, 0x7, 0x10001) write$binfmt_misc(r3, &(0x7f0000001600)="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", 0x401) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 505.994871ms ago: executing program 9 (id=9501): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538"], 0xfdef) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc12082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 488.213392ms ago: executing program 9 (id=9502): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x676, &(0x7f0000000740)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) rename(&(0x7f00000003c0)='./file3\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 448.331964ms ago: executing program 6 (id=9503): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) get_mempolicy(0x0, &(0x7f00000001c0), 0x4, &(0x7f0000001000/0x1000)=nil, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'vxcan1\x00', 0x96}) 447.703164ms ago: executing program 9 (id=9504): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0xb, 0xcc, 0xe8}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x300}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f00000029c0)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0xffffffffffffffff}, 0x94) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x9) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 387.669928ms ago: executing program 9 (id=9505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 331.072001ms ago: executing program 9 (id=9506): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed721", 0xa) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 249.426045ms ago: executing program 6 (id=9507): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r2], 0x68}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue0\x00', 0x9}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x7}, 0x1820, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000580)=[{0x0}], 0x1) 85.845405ms ago: executing program 8 (id=9508): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 71.254526ms ago: executing program 8 (id=9509): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 50.716077ms ago: executing program 0 (id=9510): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff) r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000700)={0x0, 0x816d, 0x0, 0x5, 0x2ef}, &(0x7f0000000300)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) listen(r3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000980)="ee", 0x1}], 0x1) 0s ago: executing program 8 (id=9511): symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x188, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00') r3 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) fchdir(r2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000380)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@usrjquota}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x785, &(0x7f0000001c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): ed allmulticast mode [ 406.782208][T24684] bond8: (slave dummy0): Releasing active interface [ 406.792472][T24684] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 408.621351][T24793] __nla_validate_parse: 2 callbacks suppressed [ 408.621445][T24793] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7638'. [ 409.220292][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7655'. [ 409.229639][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7655'. [ 409.280037][T24835] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7656'. [ 409.309809][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 409.309829][ T29] audit: type=1326 audit(2000000056.888:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.373198][ T29] audit: type=1326 audit(2000000056.888:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.396844][ T29] audit: type=1326 audit(2000000056.888:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.420688][ T29] audit: type=1326 audit(2000000056.888:3634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.444428][ T29] audit: type=1326 audit(2000000056.909:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2dc0e9ac22 code=0x7ffc0000 [ 409.468355][ T29] audit: type=1326 audit(2000000056.909:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2dc0e9ac22 code=0x7ffc0000 [ 409.491786][ T29] audit: type=1326 audit(2000000056.909:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.515387][ T29] audit: type=1326 audit(2000000056.909:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.539062][ T29] audit: type=1326 audit(2000000056.909:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.562683][ T29] audit: type=1326 audit(2000000056.909:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24836 comm="syz.1.7657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 409.708071][T24848] kernel read not supported for file /s (pid: 24848 comm: syz.9.7662) [ 410.020605][T24864] netlink: 'syz.1.7668': attribute type 27 has an invalid length. [ 410.038634][T24864] erspan0: left allmulticast mode [ 410.054553][T24864] bond1: left promiscuous mode [ 410.066056][T24864] bond2: left promiscuous mode [ 410.070955][T24864] bridge2: left promiscuous mode [ 410.099345][T24864] vlan0: left promiscuous mode [ 410.111663][T24864] dummy0: left promiscuous mode [ 410.123131][T24864] bond3: left allmulticast mode [ 410.128146][T24864] bond3: left promiscuous mode [ 410.133211][T24864] macsec1: left promiscuous mode [ 410.138298][T24864] macsec1: left allmulticast mode [ 410.146103][T24864] gtp0: left promiscuous mode [ 410.153479][T24864] geneve3: left promiscuous mode [ 410.158481][T24864] geneve3: left allmulticast mode [ 410.186276][T24865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.197438][T24865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.312621][ T3332] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.321193][ T3332] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.341548][ T3332] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.350081][ T3332] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.395008][T24882] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7675'. [ 410.414837][ T3332] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.423615][ T3332] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.435508][ T3332] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.444231][ T3332] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.498105][T24886] loop1: detected capacity change from 0 to 2048 [ 410.593508][T24895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7680'. [ 411.271568][T24957] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.283924][T24957] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.433673][T24957] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.444888][T24957] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.535612][T24971] loop1: detected capacity change from 0 to 1024 [ 411.553357][T24971] EXT4-fs: Ignoring removed nobh option [ 411.627494][T24957] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.640856][T24957] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.726314][T24971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.769605][T24971] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.7710: Allocating blocks 465-513 which overlap fs metadata [ 411.773994][T24957] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.795392][T24957] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.831750][T24975] EXT4-fs (loop1): pa ffff88810827f770: logic 64, phys. 209, len 19 [ 411.839959][T24975] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 3 [ 411.899593][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.025802][T24979] netlink: 'syz.6.7712': attribute type 27 has an invalid length. [ 412.048945][T24979] dummy0: left promiscuous mode [ 412.053867][T24979] dummy0: left allmulticast mode [ 412.062540][T24979] xfrm1: left promiscuous mode [ 412.067494][T24979] xfrm1: left allmulticast mode [ 412.073134][T24979] geneve3: left promiscuous mode [ 412.078258][T24979] geneve3: left allmulticast mode [ 412.084032][T24979] geneve4: left promiscuous mode [ 412.089268][T24979] macvtap1: left promiscuous mode [ 412.094329][T24979] macvtap1: left allmulticast mode [ 412.100254][T24979] gre3: left promiscuous mode [ 412.104975][T24979] gre3: left allmulticast mode [ 412.110143][T24979] veth8: left promiscuous mode [ 412.114975][T24979] veth8: left allmulticast mode [ 412.120347][T24979] team1: left promiscuous mode [ 412.125496][T24979] team1: left allmulticast mode [ 412.131323][T24979] macsec1: left promiscuous mode [ 412.136361][T24979] macsec1: left allmulticast mode [ 412.234089][ T2259] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.242496][ T2259] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.263328][T24984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.271452][T24984] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.297255][T24984] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.436567][ T5238] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.445028][ T5238] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.539618][ T2259] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.548040][ T2259] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.645225][ T5238] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 412.653520][ T5238] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.774020][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7730'. [ 412.783074][T25023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7730'. [ 413.116990][T25035] cgroup: fork rejected by pids controller in /syz6 [ 413.175478][T25072] netlink: 'syz.6.7741': attribute type 2 has an invalid length. [ 413.184552][T25072] netlink: 'syz.6.7741': attribute type 8 has an invalid length. [ 413.196304][T25072] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7741'. [ 413.325358][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7748'. [ 413.419284][T25092] can: request_module (can-proto-0) failed. [ 413.567960][T25102] netlink: 'syz.9.7754': attribute type 13 has an invalid length. [ 413.953346][ T3332] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.961871][ T3332] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.984588][ T3332] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 413.993166][ T3332] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.010498][ T3332] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.019061][ T3332] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.045707][ T3332] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 414.054274][ T3332] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.217868][T25153] syz_tun: entered allmulticast mode [ 414.486863][T25168] __nla_validate_parse: 2 callbacks suppressed [ 414.486902][T25168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7780'. [ 414.990237][T25201] macvlan2: entered promiscuous mode [ 414.996201][T25201] batman_adv: batadv0: Adding interface: macvlan2 [ 415.002734][T25201] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.028313][T25201] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 415.693922][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 415.693937][ T29] audit: type=1326 audit(2000000063.596:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 415.729052][ T29] audit: type=1326 audit(2000000063.596:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 415.752679][ T29] audit: type=1326 audit(2000000063.628:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 415.776336][ T29] audit: type=1326 audit(2000000063.628:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 415.799896][ T29] audit: type=1326 audit(2000000063.628:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 415.858791][ T10] IPVS: starting estimator thread 0... [ 415.886720][ T29] audit: type=1326 audit(2000000063.743:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 415.910322][ T29] audit: type=1326 audit(2000000063.743:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 415.933978][ T29] audit: type=1326 audit(2000000063.743:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25242 comm="syz.1.7808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 416.011317][T25250] IPVS: using max 1776 ests per chain, 88800 per kthread [ 416.062028][T25261] netlink: 'syz.8.7814': attribute type 13 has an invalid length. [ 416.150240][ T29] audit: type=1400 audit(2000000064.069:3664): avc: denied { accept } for pid=25263 comm="syz.0.7815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 416.420320][ T5218] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 416.428783][ T5218] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 416.452553][ T5218] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 416.460947][ T5218] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 416.508172][ T5218] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 416.516599][ T5218] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 416.561952][ T5218] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 416.570423][ T5218] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 416.605951][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7821'. [ 416.623395][T25280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 416.640634][T25280] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 416.652521][T25280] bond7: entered allmulticast mode [ 416.657781][T25280] dummy0: entered allmulticast mode [ 416.776369][T25288] lo: entered allmulticast mode [ 416.809801][T25291] loop1: detected capacity change from 0 to 164 [ 416.830109][T25291] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 416.891462][T25291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7826'. [ 416.925664][T25297] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7829'. [ 417.005523][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7834'. [ 417.033095][T25307] 8021q: adding VLAN 0 to HW filter on device bond9 [ 417.069616][T25307] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 417.089392][T25307] bond9: entered allmulticast mode [ 417.094662][T25307] dummy0: entered allmulticast mode [ 417.125123][T25318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7838'. [ 417.249975][T25332] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7842'. [ 417.360385][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7846'. [ 417.381668][T25343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7846'. [ 417.611828][ T29] audit: type=1326 audit(2000000065.612:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25361 comm="syz.9.7854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45869aeb9 code=0x7ffc0000 [ 417.663987][T25365] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7855'. [ 417.782946][T25378] netlink: 'syz.6.7861': attribute type 13 has an invalid length. [ 417.967692][T25394] bond3: option mode: unable to set because the bond device has slaves [ 418.152761][T25419] netlink: 'syz.0.7878': attribute type 13 has an invalid length. [ 418.842802][T25441] loop1: detected capacity change from 0 to 2048 [ 418.871585][T25441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.016365][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.185303][T25489] netlink: 'syz.9.7904': attribute type 83 has an invalid length. [ 419.268309][T25496] __nla_validate_parse: 4 callbacks suppressed [ 419.268325][T25496] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7908'. [ 419.770167][T25536] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7924'. [ 420.419501][T25580] netlink: 'syz.6.7941': attribute type 1 has an invalid length. [ 420.427424][T25580] netlink: 'syz.6.7941': attribute type 4 has an invalid length. [ 420.435328][T25580] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.7941'. [ 420.897912][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 420.897930][ T29] audit: type=1326 audit(2000000069.066:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25591 comm="syz.1.7945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 420.962880][ T29] audit: type=1326 audit(2000000069.097:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25591 comm="syz.1.7945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 420.987039][ T29] audit: type=1326 audit(2000000069.097:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25591 comm="syz.1.7945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 421.011249][ T29] audit: type=1326 audit(2000000069.097:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25591 comm="syz.1.7945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dc0e9aeb9 code=0x7ffc0000 [ 422.110157][T25644] loop1: detected capacity change from 0 to 128 [ 422.193577][T25649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.216506][T25649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.296252][T25656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7968'. [ 422.814985][T25691] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7983'. [ 423.108600][T25706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7989'. [ 423.416892][T25719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7993'. [ 423.425873][T25719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7993'. [ 423.503825][T25719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7993'. [ 423.512836][T25719] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7993'. [ 423.676827][T25735] netlink: 'syz.9.7998': attribute type 1 has an invalid length. [ 423.692386][T25735] 8021q: adding VLAN 0 to HW filter on device bond6 [ 423.710774][T25735] vlan0: entered allmulticast mode [ 423.716093][T25735] veth0_to_bond: entered allmulticast mode [ 423.723592][T25735] bond6: (slave vlan0): Opening slave failed [ 423.983671][T25758] tipc: Enabling of bearer rejected, failed to enable media [ 424.853216][T25804] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8021'. [ 424.939430][T25804] 8021q: adding VLAN 0 to HW filter on device bond8 [ 424.989557][T25810] bond8: (slave ip6tnl4): refused to change device type [ 426.384371][T25869] loop1: detected capacity change from 0 to 1024 [ 426.453191][T25869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.574659][T25869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8044'. [ 426.669603][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.763947][T25890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8052'. [ 427.038522][ T36] IPVS: starting estimator thread 0... [ 427.127242][T25910] IPVS: using max 2112 ests per chain, 105600 per kthread [ 427.560145][ T29] audit: type=1326 audit(2000000076.058:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.583865][ T29] audit: type=1326 audit(2000000076.058:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.590595][T25937] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8068'. [ 427.607654][ T29] audit: type=1326 audit(2000000076.058:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.640460][ T29] audit: type=1326 audit(2000000076.058:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.664046][ T29] audit: type=1326 audit(2000000076.058:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.687673][ T29] audit: type=1326 audit(2000000076.058:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.711499][ T29] audit: type=1326 audit(2000000076.058:3751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.735317][ T29] audit: type=1326 audit(2000000076.058:3752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.759094][ T29] audit: type=1326 audit(2000000076.058:3753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.782873][ T29] audit: type=1326 audit(2000000076.058:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25936 comm="syz.6.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 427.994429][ T3408] IPVS: starting estimator thread 0... [ 427.995781][T25950] tipc: Enabled bearer , priority 0 [ 428.033709][T25949] tipc: Resetting bearer [ 428.050394][T25949] tipc: Disabling bearer [ 428.079506][T25956] IPVS: using max 1536 ests per chain, 76800 per kthread [ 428.472879][T25998] netlink: 'syz.8.8092': attribute type 1 has an invalid length. [ 428.557633][T26000] bond9: (slave veth25): Enslaving as an active interface with a down link [ 428.567625][ T5220] IPVS: stop unused estimator thread 0... [ 428.610522][T25998] bond9: entered promiscuous mode [ 428.615743][T25998] bond9: entered allmulticast mode [ 428.621513][T25998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 428.749161][T26012] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8096'. [ 429.017375][T26033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8103'. [ 429.189486][T26041] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8106'. [ 429.198556][T26041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8106'. [ 430.447423][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8127'. [ 430.589207][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8130'. [ 430.660931][T26117] netlink: 'syz.0.8134': attribute type 13 has an invalid length. [ 430.795600][T26123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8138'. [ 430.819486][T26120] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=26120 comm=syz.1.8136 [ 430.833338][T26120] netlink: 232 bytes leftover after parsing attributes in process `syz.1.8136'. [ 431.731243][T15788] Bluetooth: hci0: Frame reassembly failed (-84) [ 432.506822][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 432.506844][ T29] audit: type=1326 audit(2000000081.233:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 432.536798][ T29] audit: type=1326 audit(2000000081.233:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 432.560363][ T29] audit: type=1326 audit(2000000081.233:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 432.583951][ T29] audit: type=1326 audit(2000000081.233:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 432.800643][ T29] audit: type=1326 audit(2000000081.286:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 432.824476][ T29] audit: type=1326 audit(2000000081.286:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7a87fac22 code=0x7ffc0000 [ 432.847880][ T29] audit: type=1326 audit(2000000081.286:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd7a87facb7 code=0x7ffc0000 [ 432.871361][ T29] audit: type=1326 audit(2000000081.286:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd7a87b7c51 code=0x7ffc0000 [ 432.895079][ T29] audit: type=1326 audit(2000000081.286:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd7a87fbcc9 code=0x7ffc0000 [ 432.918694][ T29] audit: type=1326 audit(2000000081.296:3904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26176 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd7a87b7cbb code=0x7ffc0000 [ 432.980601][T26190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8165'. [ 432.989570][T26190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8165'. [ 433.031393][T26194] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8167'. [ 433.051842][T26194] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8167'. [ 433.091482][T26200] netlink: 'syz.9.8170': attribute type 1 has an invalid length. [ 433.134571][T26200] bond7: (slave bridge11): making interface the new active one [ 433.142912][T26200] bond7: (slave bridge11): Enslaving as an active interface with an up link [ 433.157588][T26200] bond7: entered promiscuous mode [ 433.163224][T26200] bridge11: entered promiscuous mode [ 433.168838][T26200] bond7: entered allmulticast mode [ 433.174018][T26200] bridge11: entered allmulticast mode [ 433.180277][T26200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 433.308069][T26220] netlink: 'syz.0.8178': attribute type 4 has an invalid length. [ 433.315903][T26220] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8178'. [ 433.327130][T26220] .`: renamed from bond0 [ 433.354734][T26224] bond5: (slave dummy0): Releasing active interface [ 433.372100][T26224] veth0_to_bridge: left allmulticast mode [ 433.377978][T26224] veth0_to_bridge: left promiscuous mode [ 433.383920][T26224] bridge0: port 3(veth0_to_bridge) entered disabled state [ 433.412506][T26224] bridge_slave_0: left allmulticast mode [ 433.418296][T26224] bridge_slave_0: left promiscuous mode [ 433.424093][T26224] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.444787][T26224] bridge_slave_1: left allmulticast mode [ 433.450522][T26224] bridge_slave_1: left promiscuous mode [ 433.456373][T26224] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.464131][T26231] 9p: Bad value for 'rfdno' [ 433.485394][T26224] bond0: (slave bond_slave_0): Releasing backup interface [ 433.500917][T26224] bond0: (slave bond_slave_1): Releasing backup interface [ 433.520134][T26224] team0: Port device team_slave_1 removed [ 433.526140][T26224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.547719][T26224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.566397][T26224] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.584834][T26227] team0: Mode changed to "loadbalance" [ 433.652323][ T5808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 433.658586][ T4897] Bluetooth: hci0: command 0x1003 tx timeout [ 433.818912][T26248] vhci_hcd vhci_hcd.2: invalid port number 98 [ 433.825216][T26248] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffc i0062 l0 [ 433.884706][T26252] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 434.105360][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8198'. [ 434.437884][T26299] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 434.543046][T26305] lo speed is unknown, defaulting to 1000 [ 434.552633][T26305] lo speed is unknown, defaulting to 1000 [ 434.558858][T26305] lo speed is unknown, defaulting to 1000 [ 434.572924][T26305] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 434.584909][T26305] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 434.615427][T26305] lo speed is unknown, defaulting to 1000 [ 434.635052][T26305] lo speed is unknown, defaulting to 1000 [ 434.643922][T26305] lo speed is unknown, defaulting to 1000 [ 434.651672][T26305] lo speed is unknown, defaulting to 1000 [ 434.659518][T26305] lo speed is unknown, defaulting to 1000 [ 434.689180][T26305] lo speed is unknown, defaulting to 1000 [ 434.704627][T26305] lo speed is unknown, defaulting to 1000 [ 434.713482][T26305] lo speed is unknown, defaulting to 1000 [ 434.721153][T26305] lo speed is unknown, defaulting to 1000 [ 435.905046][T26343] __nla_validate_parse: 1 callbacks suppressed [ 435.905081][T26343] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8224'. [ 436.367489][T26363] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8232'. [ 436.953254][T26370] tipc: Failed to remove unknown binding: 66,0,0/0:2513624073/2513624074 [ 437.000611][T26374] tipc: Failed to remove unknown binding: 66,0,0/0:2513624073/2513624074 [ 437.852736][T26373] lo speed is unknown, defaulting to 1000 [ 437.937437][T26397] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 438.107877][T26413] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8253'. [ 438.439299][T26443] siw: device registration error -23 [ 438.466245][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.472391][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.478568][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.485870][T26444] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 438.499558][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.509729][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.516087][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.522817][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.529185][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.535561][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.542530][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.548906][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.555120][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.561766][T26444] wg1 speed is unknown, defaulting to 1000 [ 438.612735][T26450] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8269'. [ 438.628188][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 438.628208][ T29] audit: type=1326 audit(2000000087.668:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.658193][ T29] audit: type=1326 audit(2000000087.668:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.682779][ T29] audit: type=1326 audit(2000000087.668:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.706495][ T29] audit: type=1326 audit(2000000087.668:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.730196][ T29] audit: type=1326 audit(2000000087.668:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.753766][ T29] audit: type=1326 audit(2000000087.668:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.777398][ T29] audit: type=1326 audit(2000000087.668:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.801029][ T29] audit: type=1326 audit(2000000087.668:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.824757][ T29] audit: type=1326 audit(2000000087.668:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 438.848224][ T29] audit: type=1326 audit(2000000087.668:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26451 comm="syz.8.8270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 439.368155][T26485] netlink: 'syz.9.8282': attribute type 2 has an invalid length. [ 439.376175][T26485] netlink: 199792 bytes leftover after parsing attributes in process `syz.9.8282'. [ 439.698446][T26503] tipc: Failed to remove unknown binding: 66,0,0/4:3122746438/3122746439 [ 439.730513][T26503] tipc: Failed to remove unknown binding: 66,0,0/4:3122746438/3122746439 [ 440.358144][ T4897] Bluetooth: hci0: command 0x1003 tx timeout [ 440.364300][ T5808] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 440.476048][T26521] netlink: 84 bytes leftover after parsing attributes in process `syz.6.8295'. [ 440.485196][T26521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 440.692606][T26546] veth24: entered promiscuous mode [ 440.697808][T26546] veth24: entered allmulticast mode [ 440.899715][T26568] tipc: Failed to remove unknown binding: 66,1,1/0:3394411512/3394411514 [ 440.971059][T26570] tipc: Failed to remove unknown binding: 66,1,1/0:3394411512/3394411514 [ 440.979721][T26570] tipc: Failed to remove unknown binding: 66,1,1/0:3394411512/3394411514 [ 441.126883][T26574] siw: device registration error -23 [ 442.111998][T26600] loop1: detected capacity change from 0 to 8192 [ 442.141506][T26603] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8325'. [ 442.329408][T26616] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8329'. [ 442.640335][T26638] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8336'. [ 442.766876][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8340'. [ 442.830819][T26646] chnl_net:caif_netlink_parms(): no params data found [ 443.273274][T26668] netlink: 'syz.9.8348': attribute type 4 has an invalid length. [ 443.303491][T26668] netlink: 'syz.9.8348': attribute type 4 has an invalid length. [ 443.561596][T26685] lo speed is unknown, defaulting to 1000 [ 443.580373][T26685] wg1 speed is unknown, defaulting to 1000 [ 443.754274][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 443.754293][ T29] audit: type=1326 audit(2000000093.054:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.787959][ T29] audit: type=1326 audit(2000000093.085:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.811661][ T29] audit: type=1326 audit(2000000093.085:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.836057][ T29] audit: type=1326 audit(2000000093.085:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.859965][ T29] audit: type=1326 audit(2000000093.085:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.883757][ T29] audit: type=1326 audit(2000000093.085:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.907758][ T29] audit: type=1326 audit(2000000093.085:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.931479][ T29] audit: type=1326 audit(2000000093.085:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.955095][ T29] audit: type=1326 audit(2000000093.085:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 443.978736][ T29] audit: type=1326 audit(2000000093.085:4101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26711 comm="syz.0.8361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 444.025966][T26720] lo speed is unknown, defaulting to 1000 [ 444.032279][T26720] wg1 speed is unknown, defaulting to 1000 [ 444.246952][T26733] lo speed is unknown, defaulting to 1000 [ 444.253327][T26733] wg1 speed is unknown, defaulting to 1000 [ 444.574710][T26755] ref_ctr increment failed for inode: 0x12ee offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810daa86c0 [ 445.357239][T26796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8392'. [ 445.385266][T26796] sch_tbf: burst 88 is lower than device veth21 mtu (1514) ! [ 445.411787][T26800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8394'. [ 445.422211][T26800] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 445.610500][T26809] ref_ctr increment failed for inode: 0x22ec offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881077b8d80 [ 445.787261][T26823] bond7: (slave dummy0): Releasing backup interface [ 445.817232][T26823] dummy0: left allmulticast mode [ 445.832637][T26823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.927950][T26834] netlink: 'syz.8.8407': attribute type 1 has an invalid length. [ 445.954717][T26834] bond10: entered promiscuous mode [ 445.960355][T26834] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.980336][T26834] 8021q: adding VLAN 0 to HW filter on device bond10 [ 445.987984][T26834] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 445.998746][T26834] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 446.022109][T26834] bond10: (slave wireguard0): making interface the new active one [ 446.030305][T26834] wireguard0: entered promiscuous mode [ 446.038230][T26834] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 446.117743][T26840] lo speed is unknown, defaulting to 1000 [ 446.134907][T26840] wg1 speed is unknown, defaulting to 1000 [ 446.145179][T26838] hub 3-0:1.0: USB hub found [ 446.156887][T26838] hub 3-0:1.0: 8 ports detected [ 446.308041][T26854] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8413'. [ 446.403116][T26824] lo speed is unknown, defaulting to 1000 [ 446.428356][T26824] wg1 speed is unknown, defaulting to 1000 [ 446.995309][T26868] dummy0: Caught tx_queue_len zero misconfig [ 447.155752][T26848] syz.6.8411 (26848) used greatest stack depth: 6104 bytes left [ 447.767499][T26902] lo speed is unknown, defaulting to 1000 [ 447.796124][T26902] wg1 speed is unknown, defaulting to 1000 [ 447.833712][T26913] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8437'. [ 447.863745][T26916] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8438'. [ 447.879947][T26913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26913 comm=syz.9.8437 [ 447.959948][T26920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8440'. [ 448.182251][T26927] lo speed is unknown, defaulting to 1000 [ 448.188940][T26927] wg1 speed is unknown, defaulting to 1000 [ 448.496255][T26950] lo speed is unknown, defaulting to 1000 [ 448.514532][T26950] wg1 speed is unknown, defaulting to 1000 [ 448.649481][T26959] netlink: 'syz.8.8455': attribute type 39 has an invalid length. [ 448.721972][T26963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8458'. [ 449.077106][T26986] netlink: 'syz.1.8467': attribute type 4 has an invalid length. [ 449.087377][ T10] lo speed is unknown, defaulting to 1000 [ 449.093180][ T10] syz2: Port: 1 Link DOWN [ 449.103145][T26986] netlink: 'syz.1.8467': attribute type 4 has an invalid length. [ 449.113745][ T10] lo speed is unknown, defaulting to 1000 [ 449.119701][ T10] syz2: Port: 1 Link ACTIVE [ 449.350951][T14124] lo speed is unknown, defaulting to 1000 [ 449.361756][T14124] syz2: Port: 1 Link DOWN [ 449.583012][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 449.583079][ T29] audit: type=1326 audit(2000000099.174:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.626083][ T29] audit: type=1326 audit(2000000099.174:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.650182][ T29] audit: type=1326 audit(2000000099.174:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.674137][ T29] audit: type=1326 audit(2000000099.174:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.697747][ T29] audit: type=1326 audit(2000000099.174:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.721324][ T29] audit: type=1326 audit(2000000099.174:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.744897][ T29] audit: type=1326 audit(2000000099.174:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.768746][ T29] audit: type=1326 audit(2000000099.174:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.790978][T26992] tipc: Enabling of bearer rejected, failed to enable media [ 449.792609][ T29] audit: type=1326 audit(2000000099.174:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.824915][ T29] audit: type=1326 audit(2000000099.174:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26989 comm="syz.0.8468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 449.945869][T27003] tipc: Cannot configure node identity twice [ 450.124552][T27017] loop1: detected capacity change from 0 to 8192 [ 450.144786][T27017] bio_check_eod: 102 callbacks suppressed [ 450.144805][T27017] syz.1.8479: attempt to access beyond end of device [ 450.144805][T27017] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 450.495289][T27038] netlink: 'syz.0.8488': attribute type 29 has an invalid length. [ 450.573506][T27038] netlink: 'syz.0.8488': attribute type 29 has an invalid length. [ 450.609295][T27038] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8488'. [ 450.759082][T27055] x_tables: unsorted entry at hook 3 [ 450.942028][T27023] syz.6.8482 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 450.956042][T27023] CPU: 0 UID: 0 PID: 27023 Comm: syz.6.8482 Not tainted syzkaller #0 PREEMPT(voluntary) [ 450.956146][T27023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.956166][T27023] Call Trace: [ 450.956177][T27023] [ 450.956191][T27023] __dump_stack+0x1d/0x30 [ 450.956222][T27023] dump_stack_lvl+0x95/0xd0 [ 450.956253][T27023] dump_stack+0x15/0x1b [ 450.956276][T27023] dump_header+0x80/0x240 [ 450.956368][T27023] oom_kill_process+0x295/0x350 [ 450.956405][T27023] out_of_memory+0x97d/0xb80 [ 450.956442][T27023] try_charge_memcg+0x62e/0xa10 [ 450.956545][T27023] obj_cgroup_charge_pages+0x23/0xc0 [ 450.956578][T27023] __memcg_kmem_charge_page+0x9e/0x170 [ 450.956615][T27023] __alloc_frozen_pages_noprof+0x18a/0x350 [ 450.956688][T27023] alloc_pages_mpol+0xb3/0x260 [ 450.956732][T27023] alloc_pages_noprof+0x8f/0x130 [ 450.956815][T27023] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 450.956949][T27023] __kvmalloc_node_noprof+0x471/0x680 [ 450.957020][T27023] ? ip_set_alloc+0x24/0x30 [ 450.957056][T27023] ? ip_set_alloc+0x24/0x30 [ 450.957098][T27023] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 450.957178][T27023] ip_set_alloc+0x24/0x30 [ 450.957209][T27023] hash_netiface_create+0x282/0x740 [ 450.957243][T27023] ? __pfx_hash_netiface_create+0x10/0x10 [ 450.957357][T27023] ip_set_create+0x3cf/0x970 [ 450.957390][T27023] ? __nla_parse+0x40/0x60 [ 450.957417][T27023] nfnetlink_rcv_msg+0x509/0x5d0 [ 450.957476][T27023] netlink_rcv_skb+0x123/0x220 [ 450.957525][T27023] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 450.957575][T27023] nfnetlink_rcv+0x167/0x1720 [ 450.957748][T27023] ? __list_del_entry_valid_or_report+0x65/0x130 [ 450.957786][T27023] ? __rmqueue_pcplist+0x9b6/0xb80 [ 450.957821][T27023] ? _raw_spin_lock_bh+0x56/0xb0 [ 450.957882][T27023] ? should_fail_ex+0x30/0x280 [ 450.957921][T27023] ? selinux_nlmsg_lookup+0x99/0x890 [ 450.957943][T27023] ? __rcu_read_unlock+0x33/0x70 [ 450.957980][T27023] ? __netlink_lookup+0x276/0x2b0 [ 450.958029][T27023] netlink_unicast+0x5c0/0x690 [ 450.958064][T27023] netlink_sendmsg+0x5c8/0x6f0 [ 450.958124][T27023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.958145][T27023] ____sys_sendmsg+0x5af/0x600 [ 450.958169][T27023] ___sys_sendmsg+0x195/0x1e0 [ 450.958216][T27023] __x64_sys_sendmsg+0xd4/0x160 [ 450.958256][T27023] x64_sys_call+0x17ba/0x3000 [ 450.958367][T27023] do_syscall_64+0xc0/0x2a0 [ 450.958412][T27023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.958443][T27023] RIP: 0033:0x7fc45ec0aeb9 [ 450.958476][T27023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.958519][T27023] RSP: 002b:00007fc45d667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.958546][T27023] RAX: ffffffffffffffda RBX: 00007fc45ee85fa0 RCX: 00007fc45ec0aeb9 [ 450.958567][T27023] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 450.958583][T27023] RBP: 00007fc45ec78c1f R08: 0000000000000000 R09: 0000000000000000 [ 450.958640][T27023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.958658][T27023] R13: 00007fc45ee86038 R14: 00007fc45ee85fa0 R15: 00007fffc49408b8 [ 450.958680][T27023] [ 450.958686][T27023] memory: usage 307200kB, limit 307200kB, failcnt 614 [ 451.281024][T27023] memory+swap: usage 292488kB, limit 9007199254740988kB, failcnt 0 [ 451.288993][T27023] kmem: usage 220784kB, limit 9007199254740988kB, failcnt 0 [ 451.296350][T27023] Memory cgroup stats for /syz6: [ 451.301946][T27023] cache 0 [ 451.310030][T27023] rss 106496 [ 451.313289][T27023] shmem 0 [ 451.316249][T27023] mapped_file 0 [ 451.319750][T27023] dirty 0 [ 451.322793][T27023] writeback 0 [ 451.326278][T27023] workingset_refault_anon 4834 [ 451.331156][T27023] workingset_refault_file 0 [ 451.335865][T27023] swap 70664192 [ 451.339356][T27023] swapcached 32768 [ 451.343241][T27023] pgpgin 635431 [ 451.346727][T27023] pgpgout 635400 [ 451.350293][T27023] pgfault 400957 [ 451.353901][T27023] pgmajfault 778 [ 451.357594][T27023] inactive_anon 24576 [ 451.361666][T27023] active_anon 94208 [ 451.365568][T27023] inactive_file 0 [ 451.369228][T27023] active_file 0 [ 451.372766][T27023] unevictable 8192 [ 451.376529][T27023] hierarchical_memory_limit 314572800 [ 451.382017][T27023] hierarchical_memsw_limit 9223372036854771712 [ 451.388206][T27023] total_cache 0 [ 451.391769][T27023] total_rss 106496 [ 451.395515][T27023] total_shmem 0 [ 451.399070][T27023] total_mapped_file 0 [ 451.403108][T27023] total_dirty 0 [ 451.406589][T27023] total_writeback 0 [ 451.410541][T27023] total_workingset_refault_anon 4834 [ 451.415951][T27023] total_workingset_refault_file 0 [ 451.421173][T27023] total_swap 70664192 [ 451.425299][T27023] total_swapcached 32768 [ 451.429588][T27023] total_pgpgin 635431 [ 451.433655][T27023] total_pgpgout 635400 [ 451.437786][T27023] total_pgfault 400957 [ 451.441980][T27023] total_pgmajfault 778 [ 451.446145][T27023] total_inactive_anon 24576 [ 451.450680][T27023] total_active_anon 94208 [ 451.455043][T27023] total_inactive_file 0 [ 451.459326][T27023] total_active_file 0 [ 451.463354][T27023] total_unevictable 8192 [ 451.467669][T27023] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3231,pid=12678,uid=0 [ 451.482557][T27023] Memory cgroup out of memory: Killed process 12678 (syz.6.3231) total-vm:96048kB, anon-rss:1320kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 451.788714][T27023] syz.6.8482 (27023) used greatest stack depth: 5064 bytes left [ 451.867197][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8505'. [ 451.949706][T27090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8509'. [ 452.519179][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8520'. [ 452.528302][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8520'. [ 452.767940][T27133] lo speed is unknown, defaulting to 1000 [ 452.774625][T27133] wg1 speed is unknown, defaulting to 1000 [ 452.918910][T27141] bond9: (slave dummy0): Releasing backup interface [ 452.948199][T27141] dummy0: left allmulticast mode [ 452.973915][T27141] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.085638][T27159] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8535'. [ 453.116012][T27162] netlink: 'syz.1.8537': attribute type 1 has an invalid length. [ 453.138445][T27163] netlink: 'syz.0.8536': attribute type 1 has an invalid length. [ 453.143938][T27162] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.164320][T27162] vlan3: entered promiscuous mode [ 453.169494][T27162] bond7: entered promiscuous mode [ 453.214826][T27170] bond0: entered promiscuous mode [ 453.220020][T27170] bond0: entered allmulticast mode [ 453.285882][T27170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.338782][T27163] bridge7: entered promiscuous mode [ 453.344219][T27163] bridge7: entered allmulticast mode [ 453.352142][T27163] bond0: (slave bridge7): Enslaving as a backup interface with an up link [ 453.427409][ T5229] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 453.541594][ T5220] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.207836][T27230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.237988][T27230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.510108][T27245] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8564'. [ 454.553622][T27245] bond8: (slave bridge15): Enslaving as an active interface with an up link [ 454.575472][T27245] bond8: entered promiscuous mode [ 454.580638][T27245] bridge15: entered promiscuous mode [ 454.586055][T27245] bond8: entered allmulticast mode [ 454.591334][T27245] bridge15: entered allmulticast mode [ 454.598062][T27245] 8021q: adding VLAN 0 to HW filter on device bond8 [ 455.273707][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8577'. [ 455.391674][T27290] 8021q: VLANs not supported on ip6_vti0 [ 455.672568][T27310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8586'. [ 455.715854][T27307] 8021q: VLANs not supported on ip6gre0 [ 455.838820][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 455.838840][ T29] audit: type=1400 audit(2000000105.746:4289): avc: denied { setattr } for pid=27326 comm="syz.0.8596" name="RDS" dev="sockfs" ino=99227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 455.960846][T27338] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 455.970285][T27338] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8601'. [ 456.453715][T27342] loop1: detected capacity change from 0 to 32768 [ 456.929924][T27364] lo speed is unknown, defaulting to 1000 [ 456.980496][T27364] wg1 speed is unknown, defaulting to 1000 [ 457.176620][ T29] audit: type=1326 audit(2000000107.142:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.249584][ T29] audit: type=1326 audit(2000000107.142:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.275156][ T29] audit: type=1326 audit(2000000107.153:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.299644][ T29] audit: type=1326 audit(2000000107.153:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.323881][ T29] audit: type=1326 audit(2000000107.153:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.347436][ T29] audit: type=1326 audit(2000000107.153:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.371836][ T29] audit: type=1326 audit(2000000107.153:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.400120][ T29] audit: type=1326 audit(2000000107.153:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.426622][ T29] audit: type=1326 audit(2000000107.153:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27373 comm="syz.0.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 457.548048][T27380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8617'. [ 458.016935][T27419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8633'. [ 458.026883][T27419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8633'. [ 458.322661][T27427] batadv_slave_0: entered promiscuous mode [ 458.392402][T27426] batadv_slave_0: left promiscuous mode [ 458.626915][T27446] lo speed is unknown, defaulting to 1000 [ 458.633088][T27446] wg1 speed is unknown, defaulting to 1000 [ 459.027965][T27470] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8652'. [ 459.186494][T27459] lo speed is unknown, defaulting to 1000 [ 459.240190][T27459] wg1 speed is unknown, defaulting to 1000 [ 459.285212][T27481] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 459.599286][T27502] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8667'. [ 459.625580][T27504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8666'. [ 459.719121][T27504] gtp1: entered promiscuous mode [ 459.726460][T27509] gre3: entered allmulticast mode [ 459.894124][T27519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8673'. [ 459.994776][T27530] bridge0: entered allmulticast mode [ 460.244689][T27538] ip6t_rpfilter: unknown options [ 460.311403][T27540] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8681'. [ 460.321204][T27540] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8681'. [ 460.339045][T27540] bridge0: port 1(vlan3) entered blocking state [ 460.346221][T27540] bridge0: port 1(vlan3) entered disabled state [ 460.356259][T27540] vlan3: entered allmulticast mode [ 460.361497][T27540] bridge0: entered allmulticast mode [ 460.368168][T27540] vlan3: left allmulticast mode [ 460.373138][T27540] bridge0: left allmulticast mode [ 460.522336][T27552] netlink: 'syz.9.8686': attribute type 11 has an invalid length. [ 460.960071][T27582] lo speed is unknown, defaulting to 1000 [ 460.987285][T27582] wg1 speed is unknown, defaulting to 1000 [ 461.256575][T27598] netlink: 84 bytes leftover after parsing attributes in process `syz.8.8705'. [ 461.265815][T27598] netlink: 'syz.8.8705': attribute type 2 has an invalid length. [ 461.515449][T27582] netlink: 764 bytes leftover after parsing attributes in process `syz.6.8700'. [ 461.607842][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 461.607866][ T29] audit: type=1326 audit(2000000111.793:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.637794][ T29] audit: type=1326 audit(2000000111.793:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.661592][ T29] audit: type=1326 audit(2000000111.793:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.685242][ T29] audit: type=1326 audit(2000000111.793:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.709111][ T29] audit: type=1326 audit(2000000111.793:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.732698][ T29] audit: type=1326 audit(2000000111.793:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.756335][ T29] audit: type=1326 audit(2000000111.793:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.780004][ T29] audit: type=1326 audit(2000000111.793:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.803619][ T29] audit: type=1326 audit(2000000111.793:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 461.827236][ T29] audit: type=1326 audit(2000000111.793:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27603 comm="syz.0.8708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 462.736408][T27642] VFS: Mount too revealing [ 462.784802][T27645] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 462.796817][T27645] __nla_validate_parse: 4 callbacks suppressed [ 462.796854][T27645] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8725'. [ 462.981446][T27659] netlink: 14 bytes leftover after parsing attributes in process `syz.8.8731'. [ 463.014927][T27659] bond0 (unregistering): Released all slaves [ 463.203123][T27675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8737'. [ 463.224640][T27675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8737'. [ 463.258624][T27678] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 463.296962][T27678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8738'. [ 463.328058][T27683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8740'. [ 463.337638][T27683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8740'. [ 463.376874][T27689] netlink: 'syz.0.8742': attribute type 1 has an invalid length. [ 463.412344][T27689] bond10: entered promiscuous mode [ 463.417625][T27689] bond10: entered allmulticast mode [ 463.439814][T27689] 8021q: adding VLAN 0 to HW filter on device bond10 [ 463.464265][T27691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8742'. [ 463.476510][T27691] bond10 (unregistering): Released all slaves [ 464.890244][T27738] loop1: detected capacity change from 0 to 8192 [ 465.135508][ T23] IPVS: starting estimator thread 0... [ 465.229716][T27755] IPVS: using max 1488 ests per chain, 74400 per kthread [ 465.287817][T27760] netlink: 80 bytes leftover after parsing attributes in process `syz.8.8772'. [ 465.296899][T27760] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8772'. [ 465.634123][T27753] hsr_slave_1 (unregistering): left promiscuous mode [ 466.116795][T27805] ref_ctr increment failed for inode: 0x19dd offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810daab600 [ 466.588046][T27818] lo speed is unknown, defaulting to 1000 [ 466.599724][T27818] wg1 speed is unknown, defaulting to 1000 [ 467.061225][T27846] vlan3: entered allmulticast mode [ 467.066887][T27846] dummy0: entered allmulticast mode [ 467.442282][T27861] netlink: 'syz.6.8807': attribute type 30 has an invalid length. [ 467.515293][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 467.515312][ T29] audit: type=1326 audit(2000000117.997:4478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.9.8808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd45869aeb9 code=0x0 [ 467.687602][T27870] __nla_validate_parse: 3 callbacks suppressed [ 467.687623][T27870] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8810'. [ 467.728538][T27873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27873 comm=syz.8.8810 [ 467.747599][T27873] netlink: 76 bytes leftover after parsing attributes in process `syz.8.8810'. [ 467.768153][T27873] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8810'. [ 467.955652][T27880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8813'. [ 468.027548][T27882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8814'. [ 468.349135][ T29] audit: type=1326 audit(2000000118.868:4479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27893 comm="syz.0.8819" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x0 [ 468.368535][T27897] lo speed is unknown, defaulting to 1000 [ 468.378628][T27897] wg1 speed is unknown, defaulting to 1000 [ 468.477951][ T29] audit: type=1326 audit(2000000119.005:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45869aeb9 code=0x7ffc0000 [ 468.503175][ T29] audit: type=1326 audit(2000000119.005:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45869aeb9 code=0x7ffc0000 [ 468.528497][ T29] audit: type=1326 audit(2000000119.005:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45869aeb9 code=0x7ffc0000 [ 468.552068][ T29] audit: type=1326 audit(2000000119.005:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd45869aeb9 code=0x7ffc0000 [ 468.577400][ T29] audit: type=1326 audit(2000000119.068:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45869aeb9 code=0x7ffc0000 [ 468.601318][ T29] audit: type=1326 audit(2000000119.068:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd45869ac22 code=0x7ffc0000 [ 468.627344][ T29] audit: type=1326 audit(2000000119.068:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd45869acb7 code=0x7ffc0000 [ 468.652459][ T29] audit: type=1326 audit(2000000119.068:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.9.8822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd458657c51 code=0x7ffc0000 [ 468.727611][T27909] loop1: detected capacity change from 0 to 2048 [ 468.734488][T27909] EXT4-fs: Ignoring removed mblk_io_submit option [ 468.802276][T27909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.814705][T27909] ext4 filesystem being mounted at /535/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.915577][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.190220][T27938] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8832'. [ 469.225760][T27938] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8832'. [ 469.246356][T27945] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8832'. [ 469.272760][T27945] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8832'. [ 469.289233][T27948] sctp: [Deprecated]: syz.0.8831 (pid 27948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.289233][T27948] Use struct sctp_sack_info instead [ 469.323902][T27952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8836'. [ 469.341446][T27952] x_tables: duplicate underflow at hook 2 [ 469.880921][T27991] team0: entered promiscuous mode [ 469.886124][T27991] team0: entered allmulticast mode [ 470.012324][T27996] loop1: detected capacity change from 0 to 4096 [ 470.046795][T27996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.209797][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.405287][T28011] loop1: detected capacity change from 0 to 512 [ 470.446538][T28011] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8856: invalid indirect mapped block 4294967295 (level 1) [ 470.508125][T28011] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8856: invalid indirect mapped block 4294967295 (level 1) [ 470.541711][T28011] EXT4-fs (loop1): 2 truncates cleaned up [ 470.549304][T28011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.606119][T28011] netlink: 'syz.1.8856': attribute type 2 has an invalid length. [ 470.642807][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.756616][T28037] macvlan2: entered promiscuous mode [ 470.762079][T28037] dummy0: entered promiscuous mode [ 470.768174][T28037] macvlan2: entered allmulticast mode [ 470.798734][T28043] netlink: 'syz.0.8867': attribute type 1 has an invalid length. [ 470.814080][T28043] 8021q: adding VLAN 0 to HW filter on device bond10 [ 470.824636][T28043] bond10: entered allmulticast mode [ 470.828721][T28042] loop1: detected capacity change from 0 to 1024 [ 470.842399][T28043] bond10: (slave ip6gretap1): making interface the new active one [ 470.851042][T28043] ip6gretap1: entered allmulticast mode [ 470.858491][T28043] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 470.863728][T28042] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 471.700448][T28092] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28092 comm=syz.0.8885 [ 471.815542][T28102] lo speed is unknown, defaulting to 1000 [ 471.833384][T28102] wg1 speed is unknown, defaulting to 1000 [ 472.852629][T28156] netlink: 'syz.6.8909': attribute type 16 has an invalid length. [ 472.861340][T28156] netlink: 'syz.6.8909': attribute type 17 has an invalid length. [ 472.933088][T28159] loop1: detected capacity change from 0 to 512 [ 472.961393][T28159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 472.976002][T28162] __nla_validate_parse: 6 callbacks suppressed [ 472.976021][T28162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8911'. [ 472.979874][T28156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.001126][T28159] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 473.009513][T28159] EXT4-fs (loop1): orphan cleanup on readonly fs [ 473.018692][T28159] __quota_error: 140 callbacks suppressed [ 473.018708][T28159] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (4398046510080 > 6144). [ 473.039784][T28156] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.051570][T28159] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 473.068429][T28156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.085284][T28166] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28166 comm=syz.0.8911 [ 473.111517][T28159] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 473.137560][T28159] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.8907: corrupted inode contents [ 473.170937][T28159] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.8907: mark_inode_dirty error [ 473.196710][T28159] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.8907: corrupted inode contents [ 473.224212][T28159] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8907: mark_inode_dirty error [ 473.249457][T28159] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.8907: corrupted inode contents [ 473.262118][T28172] netlink: 'syz.0.8914': attribute type 1 has an invalid length. [ 473.273103][T28172] 8021q: adding VLAN 0 to HW filter on device bond11 [ 473.295193][T28159] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 473.317966][T28172] veth27: entered promiscuous mode [ 473.326111][T28159] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.8907: corrupted inode contents [ 473.332241][T28172] bond11: (slave veth27): Enslaving as an active interface with a down link [ 473.356497][T28172] bond11: entered allmulticast mode [ 473.376855][T28159] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.8907: mark_inode_dirty error [ 473.388214][T28159] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 473.397626][T28159] EXT4-fs (loop1): 1 truncate cleaned up [ 473.404651][T28159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 473.427704][T28151] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 473.453449][ T29] audit: type=1326 audit(2000000124.233:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.453569][ T29] audit: type=1326 audit(2000000124.233:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.453605][ T29] audit: type=1326 audit(2000000124.233:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.453787][ T29] audit: type=1326 audit(2000000124.233:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.453895][ T29] audit: type=1326 audit(2000000124.233:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.453967][ T29] audit: type=1326 audit(2000000124.233:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.454004][ T29] audit: type=1326 audit(2000000124.233:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.454038][ T29] audit: type=1326 audit(2000000124.233:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.454077][ T29] audit: type=1326 audit(2000000124.233:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28174 comm="syz.0.8915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 473.810160][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.857591][T28185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8919'. [ 473.906525][T28185] team2: entered promiscuous mode [ 473.911702][T28185] team2: entered allmulticast mode [ 474.116695][T28202] xt_policy: output policy not valid in PREROUTING and INPUT [ 474.231360][T28208] pim6reg9: entered allmulticast mode [ 474.334262][T28210] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 474.630639][T28223] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 475.197262][T28239] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8938'. [ 475.256312][T28239] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28239 comm=syz.9.8938 [ 475.650194][T28251] netlink: 'syz.9.8943': attribute type 4 has an invalid length. [ 475.681425][T28251] netlink: 'syz.9.8943': attribute type 4 has an invalid length. [ 476.153152][T28272] netlink: 'syz.0.8951': attribute type 39 has an invalid length. [ 476.600236][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8961'. [ 476.763236][T28310] batadv_slave_1: entered promiscuous mode [ 476.770995][T28309] batadv_slave_1: left promiscuous mode [ 477.099556][T28320] loop1: detected capacity change from 0 to 512 [ 477.154162][T28320] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 477.214214][T28320] EXT4-fs (loop1): orphan cleanup on readonly fs [ 477.280362][T28320] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.8969: Allocating blocks 41-42 which overlap fs metadata [ 477.406869][T28333] batadv_slave_0: entered promiscuous mode [ 477.475058][T28320] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.8969: Allocating blocks 41-42 which overlap fs metadata [ 477.565405][T28339] lo speed is unknown, defaulting to 1000 [ 477.571680][T28339] wg1 speed is unknown, defaulting to 1000 [ 477.585091][T28320] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.8969: Failed to acquire dquot type 1 [ 477.650359][T28320] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 477.734201][T28320] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.8969: corrupted inode contents [ 477.795519][T28320] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.8969: mark_inode_dirty error [ 477.889060][T28320] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.8969: corrupted inode contents [ 477.928736][T28320] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.8969: mark_inode_dirty error [ 478.001450][T28320] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.8969: corrupted inode contents [ 478.069944][T28320] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 478.122247][T28320] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.8969: corrupted inode contents [ 478.155786][T28320] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.8969: mark_inode_dirty error [ 478.196045][T28357] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.8981'. [ 478.206844][T28357] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8981'. [ 478.243332][T28320] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 478.282589][T28320] EXT4-fs (loop1): 1 truncate cleaned up [ 478.430440][T28320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.626792][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.734460][T28366] syzkaller0: entered promiscuous mode [ 478.740090][T28366] syzkaller0: entered allmulticast mode [ 479.188691][T28389] lo: Caught tx_queue_len zero misconfig [ 479.217178][T28391] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8997'. [ 479.290719][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 479.290811][ T29] audit: type=1326 audit(2000000130.364:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.321572][ T29] audit: type=1326 audit(2000000130.364:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.345307][ T29] audit: type=1326 audit(2000000130.364:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.369883][ T29] audit: type=1326 audit(2000000130.364:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.661028][ T29] audit: type=1326 audit(2000000130.364:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.685676][ T29] audit: type=1326 audit(2000000130.364:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.710054][ T29] audit: type=1326 audit(2000000130.364:4655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.733624][ T29] audit: type=1326 audit(2000000130.364:4656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 479.758098][ T29] audit: type=1326 audit(2000000130.364:4657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28390 comm="syz.8.8997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 480.279496][T28433] lo speed is unknown, defaulting to 1000 [ 480.318602][T28433] wg1 speed is unknown, defaulting to 1000 [ 480.683386][T28452] uprobe: syz.9.9017:28452 failed to unregister, leaking uprobe [ 481.136005][T28462] syzkaller0: entered promiscuous mode [ 481.141689][T28462] syzkaller0: entered allmulticast mode [ 481.198909][T28472] tipc: Failed to remove unknown binding: 66,0,0/0:2363712865/2363712866 [ 481.216626][T28472] tipc: Failed to remove unknown binding: 66,0,0/0:2363712865/2363712866 [ 481.368338][T28485] netlink: 'syz.1.9032': attribute type 4 has an invalid length. [ 481.417104][T28485] netlink: 'syz.1.9032': attribute type 4 has an invalid length. [ 481.449105][T14124] lo speed is unknown, defaulting to 1000 [ 481.456278][T14124] syz2: Port: 1 Link ACTIVE [ 481.613725][ T29] audit: type=1400 audit(2000000132.789:4658): avc: denied { watch } for pid=28498 comm="syz.0.9035" path="/1857/file0" dev="tmpfs" ino=9626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 481.926838][T28510] syzkaller0: entered promiscuous mode [ 481.933099][T28510] syzkaller0: entered allmulticast mode [ 482.053061][T28521] netlink: 'syz.9.9043': attribute type 1 has an invalid length. [ 482.117943][T28521] bond9: (slave gretap1): making interface the new active one [ 482.198021][T28521] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 482.212008][T28525] vlan0: entered allmulticast mode [ 482.217251][T28525] bond9: entered allmulticast mode [ 482.222434][T28525] gretap1: entered allmulticast mode [ 482.290641][T28525] bond9: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 482.692503][T28537] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9047'. [ 483.048857][T28537] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28537 comm=syz.6.9047 [ 483.344045][T28563] netlink: 'syz.8.9059': attribute type 39 has an invalid length. [ 484.925213][T28623] loop1: detected capacity change from 0 to 512 [ 484.935442][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 484.935465][ T29] audit: type=1326 audit(2000000136.285:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28625 comm="syz.8.9082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x0 [ 484.994127][T28623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.010698][T28623] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 485.376605][T28639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9086'. [ 485.385690][T28639] netem: unknown loss type 12 [ 485.390484][T28639] netem: change failed [ 485.723557][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.860828][T28650] netlink: 182 bytes leftover after parsing attributes in process `syz.8.9090'. [ 485.982557][T28658] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9093'. [ 486.125909][ T29] audit: type=1400 audit(2000000137.534:4753): avc: denied { connect } for pid=28660 comm="syz.0.9095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.162306][T28668] netlink: 'syz.6.9097': attribute type 1 has an invalid length. [ 486.196062][T28668] bond10: entered promiscuous mode [ 486.201487][T28668] 8021q: adding VLAN 0 to HW filter on device bond10 [ 486.292437][T15788] bond0: (slave bridge7): link status up again after 0 ms [ 486.310333][T15788] bond0: (slave bridge7): link status up again after 0 ms [ 486.328694][T15788] bond0: (slave bridge7): link status up again after 0 ms [ 486.336552][T28671] netlink: 'syz.0.9098': attribute type 16 has an invalid length. [ 486.344579][T28671] netlink: 'syz.0.9098': attribute type 17 has an invalid length. [ 486.353296][T15788] bond0: (slave bridge7): link status up again after 0 ms [ 486.354069][T28668] 8021q: adding VLAN 0 to HW filter on device bond10 [ 486.376907][T15788] bond0: (slave bridge7): link status up again after 0 ms [ 486.387623][T28668] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 486.398489][T28668] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 486.408940][T15788] bond0: (slave bridge7): link status up again after 0 ms [ 486.421348][T28668] bond10: (slave wireguard0): making interface the new active one [ 486.429418][T28668] wireguard0: entered promiscuous mode [ 486.435852][ T5234] bond0: (slave bridge7): link status up again after 0 ms [ 486.445448][T28668] bond10: (slave wireguard0): Enslaving as an active interface with an up link [ 486.454620][ T5220] bond0: (slave bridge7): link status up again after 0 ms [ 486.461863][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 486.491888][T28673] bond10: (slave wireguard1): The slave device specified does not support setting the MAC address [ 486.507268][T28673] bond10: (slave wireguard1): Enslaving as a backup interface with an up link [ 486.524873][T28671] erspan0: left allmulticast mode [ 486.555984][T28671] 8021q: adding VLAN 0 to HW filter on device .` [ 486.570664][T28671] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.584194][T28671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.641494][T28682] loop1: detected capacity change from 0 to 512 [ 486.672501][T28682] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.9102: corrupted inode contents [ 486.716938][T28682] EXT4-fs (loop1): Remounting filesystem read-only [ 486.736358][T28682] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 486.769113][T28682] EXT4-fs (loop1): 1 orphan inode deleted [ 486.807187][T28682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.885055][T28682] batadv_slave_1: entered promiscuous mode [ 486.921213][T28682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9102'. [ 486.942812][T28682] batadv_slave_1 (unregistering): left promiscuous mode [ 486.984443][T28682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.102471][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.210232][T28700] syz.8.9108 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 487.221374][T28700] CPU: 0 UID: 0 PID: 28700 Comm: syz.8.9108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 487.221452][T28700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 487.221470][T28700] Call Trace: [ 487.221480][T28700] [ 487.221491][T28700] __dump_stack+0x1d/0x30 [ 487.221524][T28700] dump_stack_lvl+0x95/0xd0 [ 487.221561][T28700] dump_stack+0x15/0x1b [ 487.221582][T28700] dump_header+0x80/0x240 [ 487.221608][T28700] oom_kill_process+0x295/0x350 [ 487.221683][T28700] out_of_memory+0x97d/0xb80 [ 487.221791][T28700] try_charge_memcg+0x62e/0xa10 [ 487.221822][T28700] __mem_cgroup_charge+0x65/0x150 [ 487.221860][T28700] shmem_get_folio_gfp+0x47b/0xd60 [ 487.221950][T28700] shmem_write_begin+0xfc/0x1f0 [ 487.221993][T28700] generic_perform_write+0x183/0x490 [ 487.222166][T28700] shmem_file_write_iter+0xc5/0xf0 [ 487.222225][T28700] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 487.222299][T28700] vfs_write+0x5a6/0x9f0 [ 487.222326][T28700] ksys_write+0xdc/0x1a0 [ 487.222350][T28700] __x64_sys_write+0x40/0x50 [ 487.222437][T28700] x64_sys_call+0x2847/0x3000 [ 487.222464][T28700] do_syscall_64+0xc0/0x2a0 [ 487.222605][T28700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.222636][T28700] RIP: 0033:0x7f92c542aeb9 [ 487.222659][T28700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.222685][T28700] RSP: 002b:00007f92c3e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.222712][T28700] RAX: ffffffffffffffda RBX: 00007f92c56a6090 RCX: 00007f92c542aeb9 [ 487.222740][T28700] RDX: 00000000ffffffc1 RSI: 0000200000000200 RDI: 0000000000000007 [ 487.222754][T28700] RBP: 00007f92c5498c1f R08: 0000000000000000 R09: 0000000000000000 [ 487.222774][T28700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.222786][T28700] R13: 00007f92c56a6128 R14: 00007f92c56a6090 R15: 00007ffeda04d088 [ 487.222815][T28700] [ 487.222825][T28700] memory: usage 307200kB, limit 307200kB, failcnt 201 [ 487.433977][T28700] memory+swap: usage 312496kB, limit 9007199254740988kB, failcnt 0 [ 487.441904][T28700] kmem: usage 175868kB, limit 9007199254740988kB, failcnt 0 [ 487.449242][T28700] Memory cgroup stats for /syz8: [ 487.489664][T28700] cache 120610816 [ 487.498431][T28700] rss 1126400 [ 487.501796][T28700] shmem 53403648 [ 487.505490][T28700] mapped_file 0 [ 487.509011][T28700] dirty 0 [ 487.513464][T28700] writeback 0 [ 487.516779][T28700] workingset_refault_anon 1016 [ 487.521597][T28700] workingset_refault_file 0 [ 487.526125][T28700] swap 17936384 [ 487.529642][T28700] swapcached 0 [ 487.533123][T28700] pgpgin 565586 [ 487.536634][T28700] pgpgout 535865 [ 487.541662][T28700] pgfault 431960 [ 487.545325][T28700] pgmajfault 162 [ 487.548924][T28700] inactive_anon 376832 [ 487.553013][T28700] active_anon 54153216 [ 487.557148][T28700] inactive_file 0 [ 487.560838][T28700] active_file 0 [ 487.564360][T28700] unevictable 67207168 [ 487.570047][T28700] hierarchical_memory_limit 314572800 [ 487.575475][T28700] hierarchical_memsw_limit 9223372036854771712 [ 487.581786][T28700] total_cache 120610816 [ 487.585970][T28700] total_rss 1126400 [ 487.589841][T28700] total_shmem 53403648 [ 487.594017][T28700] total_mapped_file 0 [ 487.599419][T28700] total_dirty 0 [ 487.602952][T28700] total_writeback 0 [ 487.606796][T28700] total_workingset_refault_anon 1016 [ 487.612093][T28700] total_workingset_refault_file 0 [ 487.617201][T28700] total_swap 17936384 [ 487.621366][T28700] total_swapcached 0 [ 487.626657][T28700] total_pgpgin 565586 [ 487.630722][T28700] total_pgpgout 535865 [ 487.634868][T28700] total_pgfault 431960 [ 487.638972][T28700] total_pgmajfault 162 [ 487.643065][T28700] total_inactive_anon 376832 [ 487.647783][T28700] total_active_anon 54153216 [ 487.652523][T28700] total_inactive_file 0 [ 487.658211][T28700] total_active_file 0 [ 487.662220][T28700] total_unevictable 67207168 [ 487.666921][T28700] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.9108,pid=28697,uid=0 [ 487.683079][T28700] Memory cgroup out of memory: Killed process 28697 (syz.8.9108) total-vm:96312kB, anon-rss:1720kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 488.109911][T28711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9112'. [ 488.246419][T28711] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28711 comm=syz.0.9112 [ 488.321161][T28713] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9113'. [ 488.352374][T28720] netlink: 277 bytes leftover after parsing attributes in process `syz.8.9117'. [ 488.363347][T28721] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=28721 comm=syz.0.9114 [ 488.582233][ T29] audit: type=1400 audit(2000000140.116:4754): avc: denied { connect } for pid=28722 comm="syz.8.9118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 488.639280][T28733] loop1: detected capacity change from 0 to 512 [ 488.674076][T28733] EXT4-fs: Ignoring removed bh option [ 488.692715][T28733] EXT4-fs: Ignoring removed oldalloc option [ 488.709153][T28733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 488.756667][T28733] EXT4-fs (loop1): 1 truncate cleaned up [ 488.775127][T28733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.132170][T28744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9125'. [ 489.153463][T28744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28744 comm=syz.6.9125 [ 489.207654][T19578] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.779291][T28801] lo speed is unknown, defaulting to 1000 [ 489.792929][T28801] wg1 speed is unknown, defaulting to 1000 [ 489.871854][T28809] netlink: 'syz.9.9145': attribute type 16 has an invalid length. [ 489.881118][T28809] netlink: 'syz.9.9145': attribute type 17 has an invalid length. [ 489.939868][T28809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.959274][T28809] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.083046][T15788] net_ratelimit: 37 callbacks suppressed [ 491.083069][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 491.600228][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 492.211254][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 492.292679][ T29] audit: type=1400 audit(2000000144.011:4755): avc: denied { lock } for pid=28853 comm="syz.8.9162" path="/" dev="configfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 492.336143][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 492.457359][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 492.569487][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 492.683595][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 492.789800][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 492.903760][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 493.008587][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 493.065250][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9176'. [ 493.095550][T28897] bond12: (slave veth31): Enslaving as an active interface with a down link [ 493.137088][T28897] bond12: (slave veth33): Enslaving as an active interface with a down link [ 493.174316][ T29] audit: type=1326 audit(2000000144.935:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28899 comm="syz.8.9178" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92c542aeb9 code=0x0 [ 493.272022][T28918] netlink: 'syz.9.9186': attribute type 3 has an invalid length. [ 493.279994][T28918] netlink: 'syz.9.9186': attribute type 1 has an invalid length. [ 493.287890][T28918] netlink: 198116 bytes leftover after parsing attributes in process `syz.9.9186'. [ 493.314525][T28923] xt_hashlimit: size too large, truncated to 1048576 [ 493.584713][T28941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9193'. [ 493.779282][T28962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9200'. [ 494.231904][T28983] lo speed is unknown, defaulting to 1000 [ 494.238742][T28983] lo speed is unknown, defaulting to 1000 [ 494.244771][T28983] lo speed is unknown, defaulting to 1000 [ 494.252179][T28983] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 494.264573][T28983] lo speed is unknown, defaulting to 1000 [ 494.271305][T28983] lo speed is unknown, defaulting to 1000 [ 494.278353][T28983] lo speed is unknown, defaulting to 1000 [ 494.285235][T28983] lo speed is unknown, defaulting to 1000 [ 494.291792][T28983] lo speed is unknown, defaulting to 1000 [ 494.298921][T28983] lo speed is unknown, defaulting to 1000 [ 494.305693][T28983] lo speed is unknown, defaulting to 1000 [ 494.311896][T28983] lo speed is unknown, defaulting to 1000 [ 494.318635][T28983] lo speed is unknown, defaulting to 1000 [ 494.999839][T29002] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9216'. [ 495.332287][T29018] lo speed is unknown, defaulting to 1000 [ 495.375299][T29018] wg1 speed is unknown, defaulting to 1000 [ 495.415100][T29018] lo speed is unknown, defaulting to 1000 [ 495.623199][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.636630][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.649369][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.662186][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.684679][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.710823][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.744907][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.809780][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.881222][T29028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9225'. [ 495.882145][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.934991][T29022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29022 comm=syz.9.9222 [ 495.948564][T15788] net_ratelimit: 21 callbacks suppressed [ 495.948581][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 496.074561][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 496.131737][T29037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9229'. [ 496.176416][T29039] loop1: detected capacity change from 0 to 128 [ 496.188411][ T5229] bond0: (slave bridge7): failed to get link speed/duplex [ 496.303024][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 496.417258][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 496.522333][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 496.625747][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 496.730876][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 496.836079][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 496.940363][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 497.371531][T29084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.457037][ T29] audit: type=1326 audit(2000000405.429:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.481849][ T29] audit: type=1326 audit(2000000405.429:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.506369][ T29] audit: type=1326 audit(2000000405.429:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.532042][ T29] audit: type=1326 audit(2000000405.429:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.555575][ T29] audit: type=1326 audit(2000000405.429:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.579825][ T29] audit: type=1326 audit(2000000405.429:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.719596][T29097] netlink: 'syz.6.9251': attribute type 13 has an invalid length. [ 497.731592][ T29] audit: type=1326 audit(2000000405.429:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a87fc747 code=0x7ffc0000 [ 497.735015][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9252'. [ 497.755130][ T29] audit: type=1326 audit(2000000405.429:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.755189][ T29] audit: type=1326 audit(2000000405.429:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 497.755257][ T29] audit: type=1326 audit(2000000405.429:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29085 comm="syz.0.9248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a87faeb9 code=0x7ffc0000 [ 498.459162][T29122] netlink: 'syz.0.9261': attribute type 4 has an invalid length. [ 498.594999][T29126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9262'. [ 498.604061][T29126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9262'. [ 498.719195][T29144] netlink: 'syz.0.9267': attribute type 1 has an invalid length. [ 498.827601][T29144] 8021q: adding VLAN 0 to HW filter on device bond14 [ 498.854175][T29144] bond13: (slave bond14): making interface the new active one [ 498.901501][T29144] bond13: (slave bond14): Enslaving as an active interface with an up link [ 498.952172][T29150] bond13: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 498.964875][T29150] bond13: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 499.084779][T29161] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9274'. [ 499.258582][T29172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9277'. [ 500.209535][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9283'. [ 500.218675][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9283'. [ 500.632734][T29195] netlink: 'syz.6.9284': attribute type 4 has an invalid length. [ 500.846194][T15788] net_ratelimit: 28 callbacks suppressed [ 500.846296][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 500.971695][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 501.692441][T29204] bond11: (slave veth39): Enslaving as an active interface with a down link [ 501.701789][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 501.773333][T29203] bond11: (slave veth41): Enslaving as an active interface with a down link [ 501.808453][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 501.834991][T29216] gre7: entered promiscuous mode [ 501.840779][T29216] gre7: entered allmulticast mode [ 501.923364][ T5229] bond0: (slave bridge7): failed to get link speed/duplex [ 502.121175][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 502.246435][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 502.401919][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 502.548338][ T5229] bond0: (slave bridge7): failed to get link speed/duplex [ 502.684525][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 503.340815][T29276] netlink: 'syz.0.9310': attribute type 39 has an invalid length. [ 503.698679][T29305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9322'. [ 503.708143][T29305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9322'. [ 503.755111][T29305] ip6gretap0: entered promiscuous mode [ 503.779882][T29305] syz_tun: entered promiscuous mode [ 503.796350][T29305] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 503.806848][T29305] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 504.078176][T29307] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 504.342227][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9330'. [ 504.368829][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9330'. [ 504.387686][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9330'. [ 504.398407][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9330'. [ 504.428612][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9330'. [ 504.463832][T29325] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9330'. [ 504.534063][T29344] netlink: 'syz.1.9337': attribute type 83 has an invalid length. [ 504.921907][T29359] netlink: 'syz.8.9341': attribute type 1 has an invalid length. [ 504.985393][T29358] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 504.998113][T29358] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 505.008765][T29358] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 505.475350][T29368] erspan0: entered promiscuous mode [ 505.502131][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9344'. [ 505.685206][ T5213] net_ratelimit: 23 callbacks suppressed [ 505.685227][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 505.750397][T29372] uprobe: syz.6.9346:29372 failed to unregister, leaking uprobe [ 505.799836][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 505.861076][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 505.861095][ T29] audit: type=1326 audit(2000000414.248:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 505.890935][ T29] audit: type=1326 audit(2000000414.248:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 505.915486][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 506.009004][ T29] audit: type=1326 audit(2000000414.331:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.018469][T29380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9349'. [ 506.032571][ T29] audit: type=1326 audit(2000000414.331:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.032610][ T29] audit: type=1326 audit(2000000414.331:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.032670][ T29] audit: type=1326 audit(2000000414.352:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.032702][ T29] audit: type=1326 audit(2000000414.352:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.032736][ T29] audit: type=1326 audit(2000000414.352:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.032770][ T29] audit: type=1326 audit(2000000414.352:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.032875][ T29] audit: type=1326 audit(2000000414.352:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29376 comm="syz.6.9348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc45ec0aeb9 code=0x7ffc0000 [ 506.033608][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 506.291910][T29380] selinux_netlink_send: 47 callbacks suppressed [ 506.291930][T29380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29380 comm=syz.0.9349 [ 506.399517][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 506.504228][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 506.609023][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 506.713430][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 506.879086][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 506.990089][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 507.348530][T29421] netlink: 'syz.9.9363': attribute type 13 has an invalid length. [ 507.868849][T29434] netlink: 'syz.6.9368': attribute type 10 has an invalid length. [ 508.031340][ T5220] bridge_slave_1: left allmulticast mode [ 508.037063][ T5220] bridge_slave_1: left promiscuous mode [ 508.043116][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.086026][ T5220] bridge_slave_0: left allmulticast mode [ 508.091759][ T5220] bridge_slave_0: left promiscuous mode [ 508.097555][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.203555][T29443] netlink: 'syz.9.9372': attribute type 1 has an invalid length. [ 508.496516][ T5220] bond0 (unregistering): (slave bridge1): Releasing active interface [ 508.534769][ T5220] bond0 (unregistering): Released all slaves [ 508.544902][T29441] bond11: option mode: unable to set because the bond device has slaves [ 508.575758][T29463] __nla_validate_parse: 1 callbacks suppressed [ 508.575781][T29463] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9379'. [ 508.596031][T29444] vlan3: entered allmulticast mode [ 508.601268][T29444] bond11: entered allmulticast mode [ 508.641330][ T5220] tipc: Disabling bearer [ 508.647789][ T5220] tipc: Left network mode [ 508.658577][T29447] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 508.671182][T29447] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 508.692006][T29448] bond10: (slave gretap2): making interface the new active one [ 508.701887][T29448] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 508.725518][ T5220] hsr_slave_0: left promiscuous mode [ 508.753792][ T5220] hsr_slave_1: left promiscuous mode [ 508.759970][ T5220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.767813][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.853248][ T5220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.861023][ T5220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.914837][ T5220] veth1_macvtap: left promiscuous mode [ 508.925261][ T5220] veth0_macvtap: left promiscuous mode [ 508.931655][ T5220] veth1_vlan: left promiscuous mode [ 508.946026][ T5220] veth0_vlan: left promiscuous mode [ 509.226971][ T5220] team0 (unregistering): Port device team_slave_1 removed [ 509.238153][ T5220] team0 (unregistering): Port device team_slave_0 removed [ 509.376157][T29492] bond12: option mode: unable to set because the bond device has slaves [ 509.407937][T29492] vlan1: entered allmulticast mode [ 509.413910][T29492] bond12: entered allmulticast mode [ 509.442763][T29498] netlink: 'syz.6.9392': attribute type 142 has an invalid length. [ 509.450805][T29498] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9392'. [ 509.635010][T29506] netlink: 'syz.0.9396': attribute type 1 has an invalid length. [ 509.656576][ T5220] IPVS: stop unused estimator thread 0... [ 509.744900][T29506] 8021q: adding VLAN 0 to HW filter on device bond15 [ 509.854985][T29514] lo speed is unknown, defaulting to 1000 [ 509.861428][T29514] wg1 speed is unknown, defaulting to 1000 [ 509.867662][T29514] lo speed is unknown, defaulting to 1000 [ 510.173391][T29515] bond15: (slave gretap1): making interface the new active one [ 510.507700][T29515] bond15: (slave gretap1): Enslaving as an active interface with an up link [ 510.524847][T15788] net_ratelimit: 12 callbacks suppressed [ 510.524871][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 510.642650][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 510.668562][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9397'. [ 510.677595][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9397'. [ 510.749483][T29527] netlink: 'syz.0.9402': attribute type 39 has an invalid length. [ 510.761725][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 510.874596][T25918] bond0: (slave bridge7): failed to get link speed/duplex [ 510.981754][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 511.045052][T29542] netlink: 'syz.1.9407': attribute type 13 has an invalid length. [ 511.190800][T15788] bond0: (slave bridge7): failed to get link speed/duplex [ 511.238464][T29551] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9410'. [ 511.293085][T29551] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29551 comm=syz.0.9410 [ 511.295388][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 511.412156][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 511.523899][ T5220] bond0: (slave bridge7): failed to get link speed/duplex [ 511.628632][ T5213] bond0: (slave bridge7): failed to get link speed/duplex [ 511.663874][T29571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9416'. [ 511.812710][T29574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9417'. [ 511.855950][T29577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9418'. [ 511.873168][T29574] 8021q: adding VLAN 0 to HW filter on device bond12 [ 511.889822][T29578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9417'. [ 511.922408][T29578] macvlan3: entered promiscuous mode [ 511.927931][T29578] macvlan3: entered allmulticast mode [ 511.975457][T29574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9417'. [ 512.170974][T29586] netlink: 'syz.6.9421': attribute type 4 has an invalid length. [ 512.197874][T29586] netlink: 'syz.6.9421': attribute type 4 has an invalid length. [ 512.380568][T29594] lo speed is unknown, defaulting to 1000 [ 512.401277][T29594] wg1 speed is unknown, defaulting to 1000 [ 512.419685][T29594] lo speed is unknown, defaulting to 1000 [ 513.194336][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 513.194417][ T29] audit: type=1326 audit(2000000677.956:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.252742][ T29] audit: type=1326 audit(2000000677.956:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.264541][T29628] xt_hashlimit: size too large, truncated to 1048576 [ 513.276358][ T29] audit: type=1326 audit(2000000677.988:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.306832][ T29] audit: type=1326 audit(2000000677.988:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.331251][ T29] audit: type=1326 audit(2000000677.988:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.355609][ T29] audit: type=1326 audit(2000000677.988:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.379126][ T29] audit: type=1326 audit(2000000677.988:4842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.406067][ T29] audit: type=1326 audit(2000000677.988:4843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.430372][ T29] audit: type=1326 audit(2000000677.988:4844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.454525][ T29] audit: type=1326 audit(2000000677.988:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29623 comm="syz.8.9436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92c542aeb9 code=0x7ffc0000 [ 513.842428][T29656] __nla_validate_parse: 3 callbacks suppressed [ 513.842450][T29656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9446'. [ 513.974334][T29665] netlink: 'syz.9.9450': attribute type 33 has an invalid length. [ 513.982412][T29665] netlink: 164 bytes leftover after parsing attributes in process `syz.9.9450'. [ 514.012330][T29665] netlink: 14 bytes leftover after parsing attributes in process `syz.9.9450'. [ 514.166374][T29681] uprobe: syz.9.9455:29681 failed to unregister, leaking uprobe [ 514.255035][T29690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9459'. [ 514.265084][T29690] ip6gretap0 (unregistering): left promiscuous mode [ 514.529368][T29707] lo: Caught tx_queue_len zero misconfig [ 514.546013][T29708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9467'. [ 514.852496][T29718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9470'. [ 514.861552][T29718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.910842][T29720] netlink: 'syz.8.9471': attribute type 13 has an invalid length. [ 515.316399][T29732] bridge13: entered promiscuous mode [ 515.321834][T29732] bridge13: entered allmulticast mode [ 515.429361][T29732] team0: Port device bridge13 added [ 515.435532][T29733] bridge0: port 1(team0) entered blocking state [ 515.441905][T29733] bridge0: port 1(team0) entered disabled state [ 515.455701][T29733] team0: entered allmulticast mode [ 515.461698][T29733] team0: entered promiscuous mode [ 515.504339][T29741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 515.511782][T29740] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.9480'. [ 515.609954][T29750] netlink: 'syz.9.9484': attribute type 1 has an invalid length. [ 515.618554][T29750] netlink: 668 bytes leftover after parsing attributes in process `syz.9.9484'. [ 515.865929][T29775] net_ratelimit: 2 callbacks suppressed [ 515.865948][T29775] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 516.165750][T29797] xt_hashlimit: size too large, truncated to 1048576 [ 516.261937][T29802] : renamed from vxcan1 [ 516.417045][T29812] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9507'. [ 516.660965][T29813] ================================================================== [ 516.669843][T29813] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 516.678604][T29813] [ 516.680962][T29813] write to 0xffff888123b043a8 of 8 bytes by task 29810 on cpu 0: [ 516.688797][T29813] shmem_file_splice_read+0x470/0x600 [ 516.694254][T29813] splice_direct_to_actor+0x26e/0x670 [ 516.699988][T29813] do_splice_direct+0x119/0x1a0 [ 516.705068][T29813] do_sendfile+0x382/0x650 [ 516.709541][T29813] __x64_sys_sendfile64+0x105/0x150 [ 516.714787][T29813] x64_sys_call+0x2db1/0x3000 [ 516.719523][T29813] do_syscall_64+0xc0/0x2a0 [ 516.724687][T29813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.730623][T29813] [ 516.732977][T29813] write to 0xffff888123b043a8 of 8 bytes by task 29813 on cpu 1: [ 516.740732][T29813] shmem_file_splice_read+0x470/0x600 [ 516.746208][T29813] splice_direct_to_actor+0x26e/0x670 [ 516.752055][T29813] do_splice_direct+0x119/0x1a0 [ 516.756941][T29813] do_sendfile+0x382/0x650 [ 516.761407][T29813] __x64_sys_sendfile64+0x105/0x150 [ 516.766647][T29813] x64_sys_call+0x2db1/0x3000 [ 516.771464][T29813] do_syscall_64+0xc0/0x2a0 [ 516.776062][T29813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.782345][T29813] [ 516.784699][T29813] value changed: 0x000000000001471c -> 0x0000000000014730 [ 516.791929][T29813] [ 516.794278][T29813] Reported by Kernel Concurrency Sanitizer on: [ 516.800465][T29813] CPU: 1 UID: 0 PID: 29813 Comm: syz.9.9506 Not tainted syzkaller #0 PREEMPT(voluntary) [ 516.810400][T29813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.820492][T29813] ================================================================== [ 517.788506][ T5234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.798970][ T5234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.809464][ T5234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 517.853285][ T5234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.863922][ T5234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.874442][ T5234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 517.929327][ T5234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.939802][ T5234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.950302][ T5234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 517.995234][ T5234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.005703][ T5234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.016287][ T5234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 65535 - 0 [ 518.093308][ T5234] bridge_slave_1: left allmulticast mode [ 518.099813][ T5234] bridge_slave_1: left promiscuous mode [ 518.105558][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.113538][ T5234] bridge_slave_0: left allmulticast mode [ 518.119263][ T5234] bridge_slave_0: left promiscuous mode [ 518.124991][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.290926][ T5234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.301236][ T5234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.310911][ T5234] bond0 (unregistering): Released all slaves [ 518.319732][ T5234] bond1 (unregistering): (slave macvlan1): Releasing active interface [ 518.329367][ T5234] bond1 (unregistering): Released all slaves [ 518.380299][ T5234] hsr_slave_0: left promiscuous mode [ 518.386885][ T5234] hsr_slave_1: left promiscuous mode [ 518.395864][ T5234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.403340][ T5234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.411380][ T5234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.418818][ T5234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.431482][ T5234] veth1_macvtap: left promiscuous mode [ 518.437057][ T5234] veth0_macvtap: left promiscuous mode [ 518.442786][ T5234] veth1_vlan: left promiscuous mode [ 518.448118][ T5234] veth0_vlan: left promiscuous mode [ 518.530223][ T5234] team0 (unregistering): Port device team_slave_1 removed [ 518.540216][ T5234] team0 (unregistering): Port device team_slave_0 removed