last executing test programs: 5m29.774861527s ago: executing program 3 (id=762): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffffffffff7c}, {0xfffffffffffffffc, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x3, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}]}, 0x148}}, 0x844) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x204, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0x24, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 5m29.700492761s ago: executing program 3 (id=765): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) close(0x3) 5m29.700095131s ago: executing program 3 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m29.54869725s ago: executing program 3 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x40020480) syz_pidfd_open(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) umount2(0x0, 0x2) 5m29.400770288s ago: executing program 3 (id=773): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x24, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m28.832570642s ago: executing program 3 (id=787): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff7, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x40003800, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0x800, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0xf, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff7d, 0x80000000, 0x80000c, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x60000000, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x3, 0xff, 0xa0, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0xfe, 0x401, 0xf8a, 0x7ffffffe, 0xffff, 0x6, 0x0, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0xa, 0x6, 0x10000, 0xffffffff, 0x9, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x0, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x4, 0x400, 0xa000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b3, 0x1, 0x8, 0xe, 0x8, 0x0, 0x9, 0xfffffffd, 0x4, 0xb, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2, 0x40]}]}}]}, 0x434}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m28.811717793s ago: executing program 32 (id=787): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008044}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff7, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x40003800, 0x1, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0x800, 0xffffe4f5, 0x7, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0xf, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff7d, 0x80000000, 0x80000c, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x60000000, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x3, 0xff, 0xa0, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0xfe, 0x401, 0xf8a, 0x7ffffffe, 0xffff, 0x6, 0x0, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0xa, 0x6, 0x10000, 0xffffffff, 0x9, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x0, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x6, 0x4, 0x400, 0xa000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b3, 0x1, 0x8, 0xe, 0x8, 0x0, 0x9, 0xfffffffd, 0x4, 0xb, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2, 0x40]}]}}]}, 0x434}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m43.697607599s ago: executing program 5 (id=1561): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x20000009}, 0xc880) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_macvtap\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m43.561778427s ago: executing program 5 (id=1563): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x17, 0x80000000, 0x4e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x700, 0x40, 0x8, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x52, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000044000000000067907800000000e000000121009078120002282a0000240000000000170000e0000002e0000000440c0003e00000020000000000004404c2030000"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x510, 0x328, 0x18c, 0x203, 0x328, 0x19030000, 0x440, 0x2e0, 0x2e0, 0x440, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x30ec}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], {0x1}}}, @common=@hl={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x9, 0xb6e85e2bba0197}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) 4m43.484128212s ago: executing program 5 (id=1564): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x20000000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4m43.269091624s ago: executing program 5 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x40020480) syz_pidfd_open(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) umount2(0x0, 0x2) 4m43.181455859s ago: executing program 5 (id=1567): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffee}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000002d40)=""/4104, 0x1008) 4m42.964880132s ago: executing program 5 (id=1568): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000000400000006000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00d27649bb00004500623d000000000000000000130000c805eac020c9ff0d1ed37f2e6e7640db8c0288912935c0e8f51b1c95d91674fa637f90eedd8eb5a7d167ac1c8a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x40000000}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) close_range(r1, 0xffffffffffffffff, 0x0) 4m42.964582422s ago: executing program 33 (id=1568): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060000000400000006000000080000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00d27649bb00004500623d000000000000000000130000c805eac020c9ff0d1ed37f2e6e7640db8c0288912935c0e8f51b1c95d91674fa637f90eedd8eb5a7d167ac1c8a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x40000000}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x4, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @private=0xa010102}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) close_range(r1, 0xffffffffffffffff, 0x0) 28.813545874s ago: executing program 1 (id=6694): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="17000000000000008400000005"], 0x20, 0x48d5}, 0x8050) 28.812929424s ago: executing program 1 (id=6696): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) fcntl$notify(r1, 0x402, 0x16) getdents64(r0, &(0x7f00000001c0)=""/122, 0x7a) 28.812719284s ago: executing program 1 (id=6698): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x8000000d}) ppoll(&(0x7f00000000c0)=[{r1, 0x8000}], 0x1, &(0x7f0000000140), 0x0, 0x0) 28.760537607s ago: executing program 1 (id=6701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x30000c6, &(0x7f00000134c0), 0x1, 0x561, &(0x7f0000001c40)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x101080, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 28.757574587s ago: executing program 1 (id=6704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) 28.283949415s ago: executing program 1 (id=6717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)="df", &(0x7f0000000300), 0x4, r1}, 0x38) 28.232533438s ago: executing program 34 (id=6717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)="df", &(0x7f0000000300), 0x4, r1}, 0x38) 1.87504777s ago: executing program 7 (id=7657): syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff02000000000000000000000000000100040b6e4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000010000000000008001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f0000000000000000fdffffffffffffff0000000000000000000000002cbd700000350000020000005000000000000000600012"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.716469819s ago: executing program 7 (id=7659): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x10, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x1, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000340)=0x14) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 1.1959739s ago: executing program 6 (id=7672): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28000) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.19103325s ago: executing program 0 (id=7673): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xe8, 0x30, 0x7, 0x2, 0x4, 0x5, 0x7, 0x8, 0xa, 0x4c, 0x0, 0x54, 0x2, 0x3}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={r1, 0xa52}, &(0x7f0000000480)=0x8) 1.18605963s ago: executing program 6 (id=7674): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000800)={'#! ', './file2', [{0x20, 'cgroup.controllers\x00'}, {0x20, '#! iO\xe6\x0e\xff\xaa\x92\x93\xbc\xbe\xbdlY\xcc_z\xf9\xa6{;\x80\xe8\xa3\x84\x9d\r\xee\x1a\xdd\xa8,?w8\x87O\a\xfe\xf1\x9c\xc7\x06z.\x87-\x1c\x02$\xa6\xa7\xfc\x0f\x01\x1fj\xf0Rd\x14ca&\xc1\xf5\x10`\xbc\x87\xbbt\xdc\x8c\x86\xbf\xa9P\x9f\b}\x94k\x82\xa5\xf2\xdaos\x00\xaf\xc0\xe4\xcb\xd9\x11t\x19\xe9\x81\xd6\x91A)\xe9\xb2P\xe8g\x96i\xc3\x90\xc9\x16\xd6\xfa\x1e\a\x13\t\xab\xd9\x8e\x1dn:_\xf5\xe3\\\xb3\xe7\xda\x05\xfa\xc6s2\xda\xbf\xa0V\nV\x10\x8e\xf3[\xceq\xa0\xc1\x17Z\x89Z\x1ffaD\xcb\x93~\xe9\x1c\xe0'}, {0x20, '/\xfb'}, {0x20, ',\x00'}, {0x20, 'netdevsim0\x00'}], 0xa, "332acac7ccf1c8178d07199e3726bfabd4617619928ac3087a1558578418f49d1fb5608f2a64a8a0a1"}, 0x104) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x5410, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x900, 0xfffd, 0x0, 0xf}}) 1.150124852s ago: executing program 6 (id=7675): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.149814973s ago: executing program 0 (id=7676): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x6, 0x5, 0x9, 0x7fff, 0x800008}, 0x14) 1.149505783s ago: executing program 6 (id=7677): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000180)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom(r0, 0x0, 0x0, 0x40000141, 0x0, 0x0) 1.034214359s ago: executing program 6 (id=7683): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6a040000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 1.032316979s ago: executing program 7 (id=7685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r0, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) 994.115622ms ago: executing program 7 (id=7687): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) socket$netlink(0x10, 0x3, 0x0) 873.619659ms ago: executing program 7 (id=7689): r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x102, 0x155) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) 740.713746ms ago: executing program 6 (id=7692): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) close(0x3) 458.571813ms ago: executing program 4 (id=7702): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) r1 = epoll_create1(0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)=0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x8000000d}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 442.986364ms ago: executing program 4 (id=7703): timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) unshare(0x44040200) 272.457294ms ago: executing program 0 (id=7712): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@inlinecrypt}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") 216.701708ms ago: executing program 2 (id=7713): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080), 0x4) 216.375747ms ago: executing program 4 (id=7714): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}}, 0x8000) 172.9615ms ago: executing program 0 (id=7715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20008814) 137.184062ms ago: executing program 2 (id=7716): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020600) syz_open_dev$tty1(0xc, 0x4, 0x4) sendfile(r0, r0, &(0x7f0000000280)=0xfffffffffffffffe, 0x7) 88.762695ms ago: executing program 0 (id=7717): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$pid(0x2, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) sendfile(r0, r0, 0x0, 0x1000000201005) 88.464835ms ago: executing program 2 (id=7718): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000080)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@dioread_nolock}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x484, &(0x7f0000000200)="$eJzs3MtvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGloNIJFijCsTQ6Jr49LoX+DOmBgfGxO3rlwZEiJsAFc19869ZTr0AelML2E+n+R2zrn33Dnn2/s6c860AXStoexHErEtIv6MiIFGdmmBocbL9avnJm9cPTeZxMLCW/8keblrV89NlkXL/bYWmeE0Iv0kKSpZavbM2eMT9XrtVJEfnTvx3ujsmbPPfHBi4ljtWO3k+KFDBw+MPf/c+LNtiTOL69qej2b27n71nYuvTx65+O4v32Xt3VZsb46jXYaywK8s5Fq3Pdnuyiq2vSmd9FbYEO5IT0Rkh6svv/4HoiduHryBeOXjShsHdFT2bNq08ub5BeAelkTVLQCqUT7os8+/5bJBXY+7wuUXGx+AsrivF0tjS2+kRZm+ls+37TQUEUfm//0qW6JD4xAAAM0+m/zycH9EfHjj29eyvsfA4pY0Hshf/8p/7ijmUAYj4v8RsTMi7ouIXRFxf0Re9sGIeGid7bm1/5NeWudbrirr/71QzG0t7f+Vvb8Y7Cly2/P4+5Kj0/Xa/uJ3Mhx9m7L82Cp1/PDyH5+vtK25/5ctWf1lX7Box6XelgG6qYm5ibxT2gaXL0Ts6V0u/mRxJiCJiN0RsefO3npHmZh+6pu9KxVaLf7Na9XQhnmmha+z8Oaz+OejJf5S0jw/OX3L/OTo5qjX9o+WZ8Wtfv390zdXqn/t499Zl2uN16bj31pkMGmer51tb/23df63nOtTE3Npf/J2Ps/cX6w7PTE3d2osoj85nOeXrB+/uW+ZL8tn5//wvuWv/53FPln8D0dEdhI/EhGPRsRjRdsfj4gnImLfKjH+/NLa8Uda0fG/EDG17P1v8fxvOf53nug5/tP3K9V/e/e/g3lquFiT3//WsFxzsttFnvitt0NnMwAAANyd0vw78Ek6sphO05GRxnf4d8X/0vrM7NzTR2fePznV+K78YPSl5UjXQDEeWp+u18aS+eIdG+Oj48VYcTleeqAYN/6iZ0ueH5mcqU9VHDt0u60rXP+Zv3uqbh3QYVuWXTvev+ENASrQOo+eLs2efyPcDOBe5e+1oXutcf2nG9UOYON5/kP3Wu76P9+SNxcA9ybPf+hern/oUumPVbcAqJDnP3Sl9fxdfwcTm++OZlST6PRBGbyyjt0jykRa+S+qexIXThf/umLjKq36zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAe/wUAAP//ykPlug==") 88.221715ms ago: executing program 0 (id=7719): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x400000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={r2}, &(0x7f0000000400)=0x8) 87.954045ms ago: executing program 4 (id=7720): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0xb7, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000ff851000000600000018100000", @ANYRES32=r2, @ANYBLOB="00000000000000006600000000000000180000000003000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001d00010029bd7000fedbdf6507000000", @ANYRES32=r1, @ANYBLOB="80007e0a0a000200ffffffffffff0000060005"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) 69.938096ms ago: executing program 4 (id=7721): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x57c, &(0x7f0000005c40)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f00000000c0)=""/55, 0x37) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 59.449187ms ago: executing program 2 (id=7722): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000140)=0x2, 0x4) 748.69µs ago: executing program 2 (id=7723): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600c0a3500140600fe8000000000000000000000000000bbfe800000006808a75b0000000e00000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 501.53µs ago: executing program 4 (id=7724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8004745a, 0x0) 248.17µs ago: executing program 2 (id=7725): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) unshare(0x28000600) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x200040, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xfe, 0x4, 0x6, 0x9, 0xe6d1, 0x2, 0x40000065, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0xf, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x9, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x2, 0xc5, 0x99, 0x4, 0x2ed, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000004, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x6910, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x8, 0x5597, 0x800003, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x20000003, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x5, 0x5, 0x9, 0xfc, 0x7fff, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x9, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=7726): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @random="ecbeba5e4101", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x4400, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "87404a1521cd01f9df5ed1edadd5f225602902d238b3605ef3d3776442bc6a4a", "f34f90b9c395844234c7cdd78918f38e", {"876f904f4b9b8b0be78ecf3ecf498db8", "6fce414cc0adba1f2cab5d665e273346"}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 334.031550][ T29] audit: type=1326 audit(1769144801.209:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.2.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 334.055175][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 334.062205][ T29] audit: type=1326 audit(1769144801.209:8157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.2.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 334.085608][ T29] audit: type=1326 audit(1769144801.209:8158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.2.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 334.109128][ T29] audit: type=1326 audit(1769144801.209:8159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.2.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 334.132723][ T29] audit: type=1326 audit(1769144801.209:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.2.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 334.156235][ T29] audit: type=1326 audit(1769144801.209:8161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15467 comm="syz.2.4106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 335.094239][ C0] net_ratelimit: 1 callbacks suppressed [ 335.094255][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 335.106881][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 335.386178][T15535] rdma_op ffff888104bed580 conn xmit_rdma 0000000000000000 [ 335.447248][T15537] netlink: zone id is out of range [ 335.452424][T15537] netlink: zone id is out of range [ 335.491941][T15537] netlink: set zone limit has 8 unknown bytes [ 335.767023][T15556] __nla_validate_parse: 13 callbacks suppressed [ 335.767040][T15556] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4144'. [ 335.784182][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4144'. [ 335.874871][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4142'. [ 335.885931][T15564] netlink: 'syz.2.4147': attribute type 2 has an invalid length. [ 336.137261][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 336.149612][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 336.518611][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4142'. [ 336.870459][T15598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4157'. [ 336.965830][T15604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.973137][T15604] IPv6: NLM_F_CREATE should be set when creating new route [ 336.981979][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4157'. [ 337.101649][T15610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4160'. [ 337.174093][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 337.181131][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 337.207712][T15618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'. [ 337.219848][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4164'. [ 337.530818][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4172'. [ 337.873404][T15662] 9p: Bad value for 'rfdno' [ 338.177506][T15678] new mount options do not match the existing superblock, will be ignored [ 338.214039][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 338.472875][T15701] netlink: 'syz.4.4195': attribute type 1 has an invalid length. [ 338.796931][T15713] netlink: 'syz.6.4196': attribute type 1 has an invalid length. [ 339.135599][T15701] 8021q: adding VLAN 0 to HW filter on device bond17 [ 339.497479][T15705] 8021q: adding VLAN 0 to HW filter on device bond17 [ 339.510492][T15705] bond17: (slave vxcan4): The slave device specified does not support setting the MAC address [ 339.541276][T15705] bond17: (slave vxcan4): Error -95 calling set_mac_address [ 339.589267][T15731] xt_l2tp: missing protocol rule (udp|l2tpip) [ 339.788014][T15706] gretap0: entered promiscuous mode [ 339.940984][T15706] bond17: (slave gretap0): making interface the new active one [ 339.953924][T15706] bond17: (slave gretap0): Enslaving as an active interface with an up link [ 339.966473][T15711] macvlan4: entered promiscuous mode [ 339.971950][T15711] macvlan4: entered allmulticast mode [ 339.980085][T15711] bond17: entered promiscuous mode [ 339.989787][T15711] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 340.000623][T15711] bond17: (slave macvlan4): the slave hw address is in use by the bond; giving it the hw address of gretap0 [ 340.013342][T15711] bond17: left promiscuous mode [ 340.065862][T15713] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 340.303931][ C0] net_ratelimit: 3 callbacks suppressed [ 340.303974][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 340.324963][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 340.538624][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 340.538642][ T29] audit: type=1400 audit(1769144808.805:8172): avc: denied { connect } for pid=15794 comm="syz.2.4223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 340.783988][T15818] __nla_validate_parse: 20 callbacks suppressed [ 340.784014][T15818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4233'. [ 340.846586][T15824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4236'. [ 340.868184][T15826] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4238'. [ 340.878439][T15828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4237'. [ 340.898993][T15826] netlink: 9 bytes leftover after parsing attributes in process `syz.6.4238'. [ 340.911447][T15824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4236'. [ 340.930726][T15833] 9p: Bad value for 'rfdno' [ 341.025115][T15850] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4245'. [ 341.053295][T15854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4247'. [ 341.074729][T15854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4247'. [ 341.092918][T15859] netlink: 'syz.2.4249': attribute type 11 has an invalid length. [ 341.162297][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4253'. [ 341.343852][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 341.350905][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 341.950434][ T29] audit: type=1326 audit(1769144810.215:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 341.982231][ T29] audit: type=1326 audit(1769144810.245:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.006009][ T29] audit: type=1326 audit(1769144810.245:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.029676][ T29] audit: type=1326 audit(1769144810.245:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.054419][ T29] audit: type=1326 audit(1769144810.245:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.077944][ T29] audit: type=1326 audit(1769144810.245:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.101503][ T29] audit: type=1326 audit(1769144810.245:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15954 comm="syz.2.4294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.328733][ T29] audit: type=1326 audit(1769144810.595:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.2.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.352400][ T29] audit: type=1326 audit(1769144810.595:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15992 comm="syz.2.4312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 342.383824][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 342.390838][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 343.413714][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 343.420756][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 343.942487][T16160] netlink: 'syz.6.4382': attribute type 1 has an invalid length. [ 343.960223][T16160] 8021q: adding VLAN 0 to HW filter on device bond13 [ 343.995262][T16160] 8021q: adding VLAN 0 to HW filter on device bond13 [ 344.004139][T16160] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 344.015539][T16160] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 344.077050][T16171] gretap1: entered promiscuous mode [ 344.084515][T16171] bond13: (slave gretap1): making interface the new active one [ 344.092517][T16171] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 344.463687][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 344.470858][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 344.569782][T16268] netlink: 'syz.4.4433': attribute type 2 has an invalid length. [ 344.923372][T16323] netlink: 'syz.2.4457': attribute type 1 has an invalid length. [ 344.939759][T16323] 8021q: adding VLAN 0 to HW filter on device bond14 [ 344.972003][T16323] 8021q: adding VLAN 0 to HW filter on device bond14 [ 344.979669][T16323] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 344.993674][T16323] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 345.041218][T16331] gretap2: entered promiscuous mode [ 345.060187][T16331] bond14: (slave gretap2): making interface the new active one [ 345.079820][T16331] bond14: (slave gretap2): Enslaving as an active interface with an up link [ 345.493613][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.500627][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 345.799444][T16442] __nla_validate_parse: 41 callbacks suppressed [ 345.799464][T16442] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4510'. [ 345.854041][T16446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4510'. [ 346.435122][T16467] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4519'. [ 346.456100][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4519'. [ 346.472679][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4508'. [ 346.533548][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 346.540627][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 346.626863][T16487] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4528'. [ 346.645758][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4528'. [ 346.822674][T16505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4538'. [ 346.860910][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4540'. [ 346.901976][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4540'. [ 346.994904][T16532] 9p: Bad value for 'rfdno' [ 347.071445][T16540] netlink: 'syz.1.4554': attribute type 1 has an invalid length. [ 347.089319][T16540] 8021q: adding VLAN 0 to HW filter on device bond13 [ 347.108089][T16540] 8021q: adding VLAN 0 to HW filter on device bond13 [ 347.115562][T16540] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 347.127165][T16540] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 347.195828][T16540] macvlan3: entered promiscuous mode [ 347.201211][T16540] macvlan3: entered allmulticast mode [ 347.222825][T16540] bond13: entered promiscuous mode [ 347.228476][T16540] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 347.237578][T16540] bond13: left promiscuous mode [ 347.362439][T16576] tipc: MTU too low for tipc bearer [ 347.573534][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 347.580585][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 347.998859][T16658] netlink: 'syz.6.4604': attribute type 1 has an invalid length. [ 348.032779][T16658] 8021q: adding VLAN 0 to HW filter on device bond14 [ 348.057645][T16658] 8021q: adding VLAN 0 to HW filter on device bond14 [ 348.070772][T16658] bond14: (slave vxcan1): The slave device specified does not support setting the MAC address [ 348.082531][T16658] bond14: (slave vxcan1): Error -95 calling set_mac_address [ 348.136987][T16662] macvlan3: entered promiscuous mode [ 348.142356][T16662] macvlan3: entered allmulticast mode [ 348.172200][T16662] bond14: entered promiscuous mode [ 348.181131][T16662] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 348.193684][T16662] bond14: left promiscuous mode [ 348.613451][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 348.620554][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 349.338767][ T8512] IPVS: ip_vs_send_async error -101 [ 349.570068][T16760] tipc: Enabling of bearer rejected, failed to enable media [ 349.655439][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 349.665629][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 349.807350][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 349.807369][ T29] audit: type=1326 audit(1769144818.075:8195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 349.837226][ T29] audit: type=1326 audit(1769144818.075:8196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 349.927626][ T29] audit: type=1326 audit(1769144818.075:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 349.951257][ T29] audit: type=1326 audit(1769144818.135:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 349.974977][ T29] audit: type=1326 audit(1769144818.135:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 349.998673][ T29] audit: type=1326 audit(1769144818.155:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 350.022209][ T29] audit: type=1326 audit(1769144818.155:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 350.045867][ T29] audit: type=1326 audit(1769144818.155:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16775 comm="syz.6.4653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 350.693346][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 350.700362][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 350.804619][T16846] __nla_validate_parse: 33 callbacks suppressed [ 350.804641][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4684'. [ 350.974028][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4701'. [ 350.996835][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4701'. [ 351.074531][ T29] audit: type=1400 audit(1769144819.345:8203): avc: denied { write } for pid=16867 comm="syz.4.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 351.119537][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'. [ 351.337860][T16882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4699'. [ 351.733317][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 351.740353][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 351.811228][T16882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4699'. [ 351.903329][T16899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4707'. [ 351.970151][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4707'. [ 352.503856][T16943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4725'. [ 352.615356][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4729'. [ 352.773243][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 352.780313][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 353.813234][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 353.820268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 354.244777][T17123] tipc: Enabling of bearer rejected, already enabled [ 354.408601][T17143] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 354.856992][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 354.868432][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.150101][T17248] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 355.411592][T17271] 9p: Bad value for 'rfdno' [ 355.658960][T17312] tipc: Started in network mode [ 355.663926][T17312] tipc: Node identity , cluster identity 9 [ 355.669764][T17312] tipc: Failed to obtain node identity [ 355.675289][T17312] tipc: Enabling of bearer rejected, failed to enable media [ 355.887382][T17335] __nla_validate_parse: 26 callbacks suppressed [ 355.887403][T17335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4906'. [ 355.894038][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.894150][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 355.917621][T17335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4906'. [ 355.926639][T17335] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4906'. [ 356.136110][T17359] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4917'. [ 356.174987][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4917'. [ 356.194747][T17365] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4916'. [ 356.226685][T17369] tipc: Enabled bearer , priority 10 [ 356.276726][ T29] audit: type=1400 audit(1769144824.546:8204): avc: denied { shutdown } for pid=17373 comm="syz.6.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 356.474988][T17394] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4934'. [ 356.486023][T17392] xt_hashlimit: max too large, truncated to 1048576 [ 356.498396][T17392] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 356.525180][T17398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4935'. [ 356.544814][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'. [ 356.599898][T17402] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4937'. [ 356.942663][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 356.953792][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 357.277060][T17472] netlink: 'syz.1.4969': attribute type 1 has an invalid length. [ 357.297732][T17472] 8021q: adding VLAN 0 to HW filter on device bond14 [ 357.314830][T17472] 8021q: adding VLAN 0 to HW filter on device bond14 [ 357.322319][T17472] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 357.334389][T17472] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 357.574274][T17496] xt_hashlimit: max too large, truncated to 1048576 [ 357.581815][T17496] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 357.975845][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 357.984773][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 358.661676][T17537] IPVS: Error connecting to the multicast addr [ 359.012876][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 359.019899][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 359.031079][T17561] tipc: Enabling of bearer rejected, failed to enable media [ 359.264051][T17586] IPVS: Error connecting to the multicast addr [ 360.052826][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 360.060059][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 360.995983][T17756] __nla_validate_parse: 29 callbacks suppressed [ 360.996052][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5096'. [ 361.023781][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5096'. [ 361.092806][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 361.099868][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 361.116224][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5102'. [ 361.261822][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5112'. [ 361.293233][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5112'. [ 361.419363][T17806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5120'. [ 361.571784][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5127'. [ 361.594509][T17828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5130'. [ 361.618954][T17828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5130'. [ 361.889930][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5143'. [ 361.973984][T17867] 9p: Bad value for 'rfdno' [ 362.132724][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.139766][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 362.211416][ T29] audit: type=1326 audit(1769144830.476:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 362.237501][ T29] audit: type=1326 audit(1769144830.506:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 362.270105][ T29] audit: type=1326 audit(1769144830.536:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 362.293987][ T29] audit: type=1326 audit(1769144830.536:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 362.320623][ T29] audit: type=1326 audit(1769144830.596:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 362.345011][ T29] audit: type=1326 audit(1769144830.616:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 362.368732][ T29] audit: type=1326 audit(1769144830.616:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17889 comm="syz.0.5158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 362.675159][ T29] audit: type=1326 audit(1769144830.946:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 362.703595][ T29] audit: type=1326 audit(1769144830.976:8213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 362.727235][ T29] audit: type=1326 audit(1769144830.976:8214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17931 comm="syz.2.5177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 363.172647][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.179695][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 363.217783][T18006] netlink: 'syz.6.5212': attribute type 32 has an invalid length. [ 363.282779][T18014] 9p: Bad value for 'rfdno' [ 363.620734][T18045] tipc: Enabling of bearer rejected, already enabled [ 363.673313][T18053] netlink: 'syz.6.5233': attribute type 1 has an invalid length. [ 363.681115][T18053] netlink: 'syz.6.5233': attribute type 2 has an invalid length. [ 364.081854][T18093] netlink: 'syz.6.5253': attribute type 1 has an invalid length. [ 364.112694][T18093] 8021q: adding VLAN 0 to HW filter on device bond15 [ 364.141198][T18093] 8021q: adding VLAN 0 to HW filter on device bond15 [ 364.149259][T18093] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 364.160857][T18093] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 364.219601][T18099] macvlan3: entered promiscuous mode [ 364.221939][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.224967][T18099] macvlan3: entered allmulticast mode [ 364.233538][T18099] bond15: entered promiscuous mode [ 364.233858][T18099] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 364.256503][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 364.279214][T18099] bond15: left promiscuous mode [ 364.384219][T18114] netlink: 'syz.0.5261': attribute type 24 has an invalid length. [ 364.504763][T18127] netlink: 'syz.1.5269': attribute type 1 has an invalid length. [ 364.512611][T18127] netlink: 'syz.1.5269': attribute type 2 has an invalid length. [ 364.683729][T18131] lo speed is unknown, defaulting to 1000 [ 364.802440][T18131] lo speed is unknown, defaulting to 1000 [ 365.101475][T18172] netlink: 'syz.4.5281': attribute type 1 has an invalid length. [ 365.109400][T18172] netlink: 'syz.4.5281': attribute type 2 has an invalid length. [ 365.252525][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 365.259572][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 365.379029][T18205] xt_policy: output policy not valid in PREROUTING and INPUT [ 365.793857][T18256] bond18: option ad_user_port_key: invalid value (1136) [ 365.800878][T18256] bond18: option ad_user_port_key: allowed values 0 - 1023 [ 365.823046][T18256] bond18 (unregistering): Released all slaves [ 366.015102][T18267] pim6reg: entered allmulticast mode [ 366.021101][T18267] pim6reg: left allmulticast mode [ 366.292442][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.299566][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 366.344967][T18286] __nla_validate_parse: 25 callbacks suppressed [ 366.344988][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5342'. [ 366.360324][T18286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5342'. [ 366.461206][T18296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'. [ 366.578855][T18306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5353'. [ 366.846096][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5367'. [ 366.893927][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5369'. [ 366.908895][T18340] bond15: option ad_user_port_key: invalid value (1136) [ 366.915938][T18340] bond15: option ad_user_port_key: allowed values 0 - 1023 [ 366.924468][T18340] bond15 (unregistering): Released all slaves [ 367.040268][T18363] 9p: Bad value for 'rfdno' [ 367.232469][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5392'. [ 367.323316][T18399] pim6reg: entered allmulticast mode [ 367.330656][T18399] pim6reg: left allmulticast mode [ 367.332720][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 367.342752][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 367.507554][T18426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5410'. [ 367.622607][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5419'. [ 367.798082][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5435'. [ 368.026574][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 368.026594][ T29] audit: type=1400 audit(1769144836.296:8251): avc: denied { shutdown } for pid=18509 comm="syz.6.5451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 368.372328][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.379479][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 368.885663][ T29] audit: type=1400 audit(1769144837.156:8252): avc: denied { setopt } for pid=18646 comm="syz.2.5517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 369.208180][ T29] audit: type=1400 audit(1769144837.476:8253): avc: denied { setopt } for pid=18672 comm="syz.2.5527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 369.412256][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.419337][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 369.429460][T18700] SET target dimension over the limit! [ 369.437278][ T29] audit: type=1400 audit(1769144837.706:8254): avc: denied { map } for pid=18703 comm="syz.4.5543" path="socket:[59843]" dev="sockfs" ino=59843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 369.515487][T18715] SELinux: Context system_u:object_r:event_device_t:s0 is not valid (left unmapped). [ 369.525541][ T29] audit: type=1400 audit(1769144837.796:8255): avc: denied { relabelto } for pid=18710 comm="syz.2.5546" name="file0" dev="tmpfs" ino=6372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:event_device_t:s0" [ 369.552459][ T29] audit: type=1400 audit(1769144837.796:8256): avc: denied { associate } for pid=18710 comm="syz.2.5546" name="file0" dev="tmpfs" ino=6372 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:event_device_t:s0" [ 369.636747][ T29] audit: type=1326 audit(1769144837.906:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2395b1acb9 code=0x7ffc0000 [ 369.662471][ T29] audit: type=1326 audit(1769144837.906:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2395b1acb9 code=0x7ffc0000 [ 369.686150][ T29] audit: type=1326 audit(1769144837.906:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2395b1acb9 code=0x7ffc0000 [ 369.709961][ T29] audit: type=1326 audit(1769144837.936:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.5552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2395b1acb9 code=0x7ffc0000 [ 370.117610][T18794] tmpfs: Bad value for 'mpol' [ 370.347488][T18826] SET target dimension over the limit! [ 370.452221][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 370.459268][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 370.642494][T18886] netlink: 'syz.1.5632': attribute type 1 has an invalid length. [ 370.936134][T18935] tmpfs: Bad value for 'mpol' [ 371.079071][T18957] netlink: 'syz.6.5666': attribute type 49 has an invalid length. [ 371.120493][T18965] netlink: 'syz.6.5669': attribute type 1 has an invalid length. [ 371.260243][T18986] IPVS: set_ctl: invalid protocol: 35143 10.1.1.2:20004 [ 371.492146][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.499170][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 371.520450][T19022] pim6reg: entered allmulticast mode [ 371.910338][T19087] xt_TCPMSS: Only works on TCP SYN packets [ 372.004749][T19095] __nla_validate_parse: 21 callbacks suppressed [ 372.004769][T19095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5734'. [ 372.370152][T19113] pim6reg: entered allmulticast mode [ 372.504052][T19129] xt_TCPMSS: Only works on TCP SYN packets [ 372.532132][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 372.539194][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 372.595320][T19135] pim6reg: entered allmulticast mode [ 372.944806][T19164] xt_TCPMSS: Only works on TCP SYN packets [ 373.015858][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5772'. [ 373.572040][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 373.579089][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.622041][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.629155][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 374.657661][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 374.657677][ T29] audit: type=1400 audit(1769144842.927:8302): avc: denied { module_load } for pid=19225 comm="syz.2.5793" path="/1300/bus" dev="tmpfs" ino=6754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 374.687909][T19226] Invalid ELF header magic: != ELF [ 374.867043][T19254] 9p: p9: multiple sources not supported [ 375.610529][T19326] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5841'. [ 375.620485][T19326] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5841'. [ 375.661903][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 375.668980][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 375.777927][T19340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5848'. [ 375.918376][T19350] netlink: 'syz.4.5850': attribute type 1 has an invalid length. [ 375.935052][T19350] 8021q: adding VLAN 0 to HW filter on device bond18 [ 375.980606][T19350] 8021q: adding VLAN 0 to HW filter on device bond18 [ 375.988393][T19350] bond18: (slave vxcan4): The slave device specified does not support setting the MAC address [ 376.000342][T19350] bond18: (slave vxcan4): Error -95 calling set_mac_address [ 376.027810][ T29] audit: type=1326 audit(1769144844.297:8303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.054227][ T29] audit: type=1326 audit(1769144844.317:8304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.078043][ T29] audit: type=1326 audit(1769144844.327:8305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.101771][ T29] audit: type=1326 audit(1769144844.327:8306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.125505][ T29] audit: type=1326 audit(1769144844.327:8307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.149141][ T29] audit: type=1326 audit(1769144844.327:8308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.172579][ T29] audit: type=1326 audit(1769144844.327:8309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.196093][ T29] audit: type=1326 audit(1769144844.327:8310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19359 comm="syz.2.5856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.238946][T19361] macvlan4: entered promiscuous mode [ 376.244366][T19361] macvlan4: entered allmulticast mode [ 376.250698][T19361] bond18: entered promiscuous mode [ 376.256381][T19361] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 376.354288][T19361] bond18: left promiscuous mode [ 376.481234][T19363] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5857'. [ 376.496898][T19370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5857'. [ 376.537488][T19397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5874'. [ 376.571050][ T29] audit: type=1326 audit(1769144844.837:8311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19401 comm="syz.2.5877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 376.701853][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.708913][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 376.912361][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5899'. [ 376.926948][T19455] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 377.116690][T19484] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5910'. [ 377.126074][T19484] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 377.168290][T19488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5913'. [ 377.177716][T19488] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5913'. [ 377.503433][T19547] geneve3: entered promiscuous mode [ 377.512321][ T1960] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.528247][ T1960] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.540913][ T1960] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.549761][ T1960] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.731809][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.738869][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 377.803056][T19592] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5963'. [ 377.812282][T19592] netlink: 'syz.2.5963': attribute type 1 has an invalid length. [ 377.820047][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5963'. [ 377.907867][T19607] 9p: Bad value for 'rfdno' [ 377.932272][T19609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5970'. [ 377.954657][T19611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5971'. [ 378.069730][T19626] 9p: Bad value for 'wfdno' [ 378.322088][T19671] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6000'. [ 378.664417][T19692] netlink: 'syz.2.6009': attribute type 1 has an invalid length. [ 378.680383][T19692] 8021q: adding VLAN 0 to HW filter on device bond15 [ 378.697957][T19692] 8021q: adding VLAN 0 to HW filter on device bond15 [ 378.706064][T19692] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.718939][T19692] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 378.749815][T19701] macvlan2: entered promiscuous mode [ 378.755302][T19701] macvlan2: entered allmulticast mode [ 378.764548][T19701] bond15: entered promiscuous mode [ 378.770310][T19701] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 378.777342][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.777475][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 378.793384][T19701] bond15: left promiscuous mode [ 379.727516][T19796] netlink: 'syz.1.6056': attribute type 1 has an invalid length. [ 379.744143][T19796] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.762151][T19796] 8021q: adding VLAN 0 to HW filter on device bond15 [ 379.769684][T19796] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 379.781152][T19796] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 379.811807][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.818868][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 379.824585][T19801] macvlan3: entered promiscuous mode [ 379.831106][T19801] macvlan3: entered allmulticast mode [ 379.848186][T19801] bond15: entered promiscuous mode [ 379.860152][T19801] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 379.878646][T19801] bond15: left promiscuous mode [ 380.674865][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 380.674883][ T29] audit: type=1326 audit(1769144848.947:8339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.0.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 380.713507][ T29] audit: type=1326 audit(1769144848.947:8340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.0.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 380.737135][ T29] audit: type=1326 audit(1769144848.947:8341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.0.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 380.761016][ T29] audit: type=1326 audit(1769144848.947:8342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19858 comm="syz.0.6082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 380.934333][ T29] audit: type=1326 audit(1769144849.207:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.0.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 380.960758][T19880] lo speed is unknown, defaulting to 1000 [ 380.990401][ T29] audit: type=1326 audit(1769144849.207:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.0.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 381.014341][ T29] audit: type=1326 audit(1769144849.207:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.0.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 381.038113][ T29] audit: type=1326 audit(1769144849.207:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.0.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 381.061749][ T29] audit: type=1326 audit(1769144849.207:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.0.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 381.085493][ T29] audit: type=1326 audit(1769144849.207:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19891 comm="syz.0.6098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 381.137476][T19880] lo speed is unknown, defaulting to 1000 [ 381.369140][T19924] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6112'. [ 381.383169][T19924] ip6gre2: entered promiscuous mode [ 381.388536][T19924] ip6gre2: entered allmulticast mode [ 381.584192][T19953] netlink: 'syz.0.6124': attribute type 1 has an invalid length. [ 381.600953][T19953] 8021q: adding VLAN 0 to HW filter on device bond11 [ 381.639301][T19953] 8021q: adding VLAN 0 to HW filter on device bond11 [ 381.646691][T19953] bond11: (slave vxcan1): The slave device specified does not support setting the MAC address [ 381.658351][T19953] bond11: (slave vxcan1): Error -95 calling set_mac_address [ 381.673618][T19969] macvlan0: entered promiscuous mode [ 381.679136][T19969] macvlan0: entered allmulticast mode [ 381.685438][T19969] bond11: entered promiscuous mode [ 381.690797][T19969] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 381.699990][T19969] bond11: left promiscuous mode [ 381.794182][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6138'. [ 381.834498][T19984] netlink: 'syz.4.6139': attribute type 10 has an invalid length. [ 381.891614][ C0] net_ratelimit: 2 callbacks suppressed [ 381.891632][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 381.904316][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.208721][T20006] team0: Refused to change device type [ 382.593139][T20051] __nla_validate_parse: 1 callbacks suppressed [ 382.593160][T20051] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6168'. [ 382.724437][T20068] netlink: 360 bytes leftover after parsing attributes in process `syz.1.6176'. [ 382.931495][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 382.938524][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.203541][T20145] xt_hashlimit: size too large, truncated to 1048576 [ 383.398945][T20169] ip6gre0: entered promiscuous mode [ 383.405976][T20169] team0: Refused to change device type [ 383.971487][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 383.978542][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 384.113178][T20250] 9p: Bad value for 'rfdno' [ 384.494035][T20310] xt_hashlimit: size too large, truncated to 1048576 [ 385.011494][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 385.018570][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 385.064231][ T3319] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 385.075205][ T3319] CPU: 1 UID: 0 PID: 3319 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 385.075307][ T3319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.075322][ T3319] Call Trace: [ 385.075330][ T3319] [ 385.075352][ T3319] __dump_stack+0x1d/0x30 [ 385.075387][ T3319] dump_stack_lvl+0x95/0xd0 [ 385.075481][ T3319] dump_stack+0x15/0x1b [ 385.075508][ T3319] dump_header+0x80/0x240 [ 385.075536][ T3319] oom_kill_process+0x295/0x350 [ 385.075680][ T3319] out_of_memory+0x97d/0xb80 [ 385.075707][ T3319] try_charge_memcg+0x62e/0xa10 [ 385.075764][ T3319] charge_memcg+0x51/0xc0 [ 385.075805][ T3319] __mem_cgroup_charge+0x28/0xb0 [ 385.075891][ T3319] filemap_add_folio+0x110/0x350 [ 385.075920][ T3319] __filemap_get_folio_mpol+0x326/0x680 [ 385.075955][ T3319] filemap_fault+0x473/0xbb0 [ 385.075992][ T3319] __do_fault+0xbc/0x200 [ 385.076113][ T3319] handle_mm_fault+0x11d7/0x3030 [ 385.076155][ T3319] ? vma_start_read+0x1c7/0x2c0 [ 385.076193][ T3319] do_user_addr_fault+0x62f/0x1050 [ 385.076237][ T3319] exc_page_fault+0x62/0xa0 [ 385.076337][ T3319] asm_exc_page_fault+0x26/0x30 [ 385.076364][ T3319] RIP: 0033:0x7f1715fe8db4 [ 385.076385][ T3319] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 ca ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 c8 ed 00 48 01 d1 [ 385.076437][ T3319] RSP: 002b:00007ffcdc253ff0 EFLAGS: 00010206 [ 385.076460][ T3319] RAX: 0000001b34224000 RBX: 0000000000000a7f RCX: 000000000005dfe8 [ 385.076483][ T3319] RDX: 000000000074555f RSI: 00007ffcdc254080 RDI: 0000000000000001 [ 385.076502][ T3319] RBP: 00007ffcdc25402c R08: 0000000001bbc6eb R09: 7fffffffffffffff [ 385.076520][ T3319] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 385.076537][ T3319] R13: 00000000000927c0 R14: 000000000005de8d R15: 00007ffcdc254080 [ 385.076565][ T3319] [ 385.076607][ T3319] memory: usage 307200kB, limit 307200kB, failcnt 3761 [ 385.140249][T20353] netlink: 'syz.0.6304': attribute type 1 has an invalid length. [ 385.144137][ T3319] memory+swap: usage 374024kB, limit 9007199254740988kB, failcnt 0 [ 385.144158][ T3319] kmem: usage 247676kB, limit 9007199254740988kB, failcnt 0 [ 385.144173][ T3319] Memory cgroup stats for /syz4: [ 385.292388][ T3319] cache 58773504 [ 385.301059][ T3319] rss 1884160 [ 385.304401][ T3319] shmem 58773504 [ 385.307995][ T3319] mapped_file 2768896 [ 385.312010][ T3319] dirty 0 [ 385.314971][ T3319] writeback 0 [ 385.318277][ T3319] workingset_refault_anon 2001 [ 385.323093][ T3319] workingset_refault_file 6031 [ 385.327235][T20353] 8021q: adding VLAN 0 to HW filter on device bond12 [ 385.327880][ T3319] swap 68427776 [ 385.327891][ T3319] swapcached 294912 [ 385.341944][ T3319] pgpgin 511892 [ 385.345425][ T3319] pgpgout 497011 [ 385.348992][ T3319] pgfault 441152 [ 385.352608][ T3319] pgmajfault 470 [ 385.356184][ T3319] inactive_anon 60600320 [ 385.360516][ T3319] active_anon 352256 [ 385.364477][ T3319] inactive_file 0 [ 385.368138][ T3319] active_file 0 [ 385.371829][ T3319] unevictable 0 [ 385.375345][ T3319] hierarchical_memory_limit 314572800 [ 385.380750][ T3319] hierarchical_memsw_limit 9223372036854771712 [ 385.386971][ T3319] total_cache 58773504 [ 385.391073][ T3319] total_rss 1884160 [ 385.394933][ T3319] total_shmem 58773504 [ 385.399027][ T3319] total_mapped_file 2768896 [ 385.403603][ T3319] total_dirty 0 [ 385.407233][ T3319] total_writeback 0 [ 385.411288][ T3319] total_workingset_refault_anon 2001 [ 385.416607][ T3319] total_workingset_refault_file 6031 [ 385.421957][ T3319] total_swap 68427776 [ 385.425951][ T3319] total_swapcached 294912 [ 385.430285][ T3319] total_pgpgin 528813 [ 385.434453][ T3319] total_pgpgout 513932 [ 385.438553][ T3319] total_pgfault 441897 [ 385.442706][ T3319] total_pgmajfault 470 [ 385.446809][ T3319] total_inactive_anon 60600320 [ 385.451623][ T3319] total_active_anon 352256 [ 385.456050][ T3319] total_inactive_file 0 [ 385.460228][ T3319] total_active_file 0 [ 385.464450][ T3319] total_unevictable 0 [ 385.468445][ T3319] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1067,pid=6434,uid=0 [ 385.483384][ T3319] Memory cgroup out of memory: Killed process 6434 (syz.4.1067) total-vm:94000kB, anon-rss:1240kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 385.528515][T20353] macvlan0: entered promiscuous mode [ 385.533912][T20353] macvlan0: entered allmulticast mode [ 385.548696][T20353] bond12: entered promiscuous mode [ 385.559910][T20353] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 385.586467][T20353] bond12: left promiscuous mode [ 385.611581][T20334] syz.4.6295 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 385.625677][T20334] CPU: 0 UID: 0 PID: 20334 Comm: syz.4.6295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 385.625739][T20334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.625816][T20334] Call Trace: [ 385.625825][T20334] [ 385.625854][T20334] __dump_stack+0x1d/0x30 [ 385.625887][T20334] dump_stack_lvl+0x95/0xd0 [ 385.625909][T20334] dump_stack+0x15/0x1b [ 385.625932][T20334] dump_header+0x80/0x240 [ 385.626010][T20334] oom_kill_process+0x295/0x350 [ 385.626102][T20334] out_of_memory+0x97d/0xb80 [ 385.626134][T20334] try_charge_memcg+0x62e/0xa10 [ 385.626229][T20334] obj_cgroup_charge_pages+0xa6/0x150 [ 385.626268][T20334] __memcg_kmem_charge_page+0x9e/0x170 [ 385.626380][T20334] __alloc_frozen_pages_noprof+0x18a/0x350 [ 385.626413][T20334] alloc_pages_mpol+0xb3/0x260 [ 385.626538][T20334] alloc_pages_noprof+0x8f/0x130 [ 385.626644][T20334] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 385.626696][T20334] __kvmalloc_node_noprof+0x471/0x680 [ 385.626743][T20334] ? ip_set_alloc+0x24/0x30 [ 385.626777][T20334] ? ip_set_alloc+0x24/0x30 [ 385.626819][T20334] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 385.626882][T20334] ip_set_alloc+0x24/0x30 [ 385.626935][T20334] hash_netiface_create+0x282/0x740 [ 385.627039][T20334] ? __pfx_hash_netiface_create+0x10/0x10 [ 385.627078][T20334] ip_set_create+0x3cf/0x970 [ 385.627121][T20334] ? __nla_parse+0x40/0x60 [ 385.627154][T20334] nfnetlink_rcv_msg+0x509/0x5d0 [ 385.627203][T20334] netlink_rcv_skb+0x123/0x220 [ 385.627228][T20334] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 385.627264][T20334] nfnetlink_rcv+0x167/0x1720 [ 385.627303][T20334] ? trace_event_reg+0xe0/0x190 [ 385.627357][T20334] ? __list_add_valid_or_report+0x38/0xe0 [ 385.627396][T20334] ? merge_sched_in+0x605/0xa30 [ 385.627517][T20334] ? rb_next+0x5c/0x80 [ 385.627547][T20334] ? visit_groups_merge+0xf7e/0xfd0 [ 385.627578][T20334] ? _raw_spin_lock_bh+0x56/0xb0 [ 385.627620][T20334] ? should_fail_ex+0x30/0x280 [ 385.627642][T20334] ? selinux_nlmsg_lookup+0x99/0x890 [ 385.627713][T20334] ? __rcu_read_unlock+0x33/0x70 [ 385.627733][T20334] ? __netlink_lookup+0x276/0x2b0 [ 385.627771][T20334] netlink_unicast+0x5c0/0x690 [ 385.627806][T20334] netlink_sendmsg+0x5c8/0x6f0 [ 385.627867][T20334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.627895][T20334] __sock_sendmsg+0x145/0x170 [ 385.627935][T20334] ____sys_sendmsg+0x31e/0x4a0 [ 385.627972][T20334] ___sys_sendmsg+0x195/0x1e0 [ 385.628028][T20334] __x64_sys_sendmsg+0xd4/0x160 [ 385.628057][T20334] x64_sys_call+0x17ba/0x3000 [ 385.628158][T20334] do_syscall_64+0xc0/0x2a0 [ 385.628209][T20334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.628239][T20334] RIP: 0033:0x7f171611acb9 [ 385.628261][T20334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.628317][T20334] RSP: 002b:00007f1714b77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.628384][T20334] RAX: ffffffffffffffda RBX: 00007f1716395fa0 RCX: 00007f171611acb9 [ 385.628404][T20334] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 385.628465][T20334] RBP: 00007f1716188bf7 R08: 0000000000000000 R09: 0000000000000000 [ 385.628478][T20334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.628491][T20334] R13: 00007f1716396038 R14: 00007f1716395fa0 R15: 00007ffcdc253c88 [ 385.628512][T20334] [ 385.628521][T20334] memory: usage 307200kB, limit 307200kB, failcnt 3938 [ 385.969036][T20334] memory+swap: usage 373848kB, limit 9007199254740988kB, failcnt 0 [ 385.977241][T20334] kmem: usage 247672kB, limit 9007199254740988kB, failcnt 0 [ 385.984703][T20334] Memory cgroup stats for /syz4: [ 385.987187][T20334] cache 58777600 [ 385.995791][T20334] rss 1884160 [ 385.999112][T20334] shmem 58773504 [ 386.002750][T20334] mapped_file 2768896 [ 386.007370][T20334] dirty 0 [ 386.010339][T20334] writeback 0 [ 386.013700][T20334] workingset_refault_anon 2001 [ 386.018491][T20334] workingset_refault_file 6067 [ 386.023353][T20334] swap 68247552 [ 386.026841][T20334] swapcached 294912 [ 386.030676][T20334] pgpgin 511929 [ 386.034202][T20334] pgpgout 497047 [ 386.037898][T20334] pgfault 441157 [ 386.041497][T20334] pgmajfault 475 [ 386.045268][T20334] inactive_anon 60600320 [ 386.049775][T20334] active_anon 352256 [ 386.053852][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 386.053944][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 386.067756][T20334] inactive_file 0 [ 386.071466][T20334] active_file 4096 [ 386.075209][T20334] unevictable 0 [ 386.078694][T20334] hierarchical_memory_limit 314572800 [ 386.084219][T20334] hierarchical_memsw_limit 9223372036854771712 [ 386.090400][T20334] total_cache 58777600 [ 386.094690][T20334] total_rss 1884160 [ 386.098574][T20334] total_shmem 58773504 [ 386.102787][T20334] total_mapped_file 2768896 [ 386.107316][T20334] total_dirty 0 [ 386.110798][T20334] total_writeback 0 [ 386.114670][T20334] total_workingset_refault_anon 2001 [ 386.119972][T20334] total_workingset_refault_file 6067 [ 386.125323][T20334] total_swap 68247552 [ 386.129456][T20334] total_swapcached 294912 [ 386.133936][T20334] total_pgpgin 528850 [ 386.137945][T20334] total_pgpgout 513968 [ 386.142213][T20334] total_pgfault 441902 [ 386.146327][T20334] total_pgmajfault 475 [ 386.150424][T20334] total_inactive_anon 60600320 [ 386.155245][T20334] total_active_anon 352256 [ 386.159709][T20334] total_inactive_file 0 [ 386.163928][T20334] total_active_file 4096 [ 386.168257][T20334] total_unevictable 0 [ 386.172313][T20334] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1168,pid=6706,uid=0 [ 386.187419][T20334] Memory cgroup out of memory: Killed process 6706 (syz.4.1168) total-vm:94000kB, anon-rss:1216kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 386.388096][T20332] syz.4.6295 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 386.401174][T20332] CPU: 1 UID: 0 PID: 20332 Comm: syz.4.6295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 386.401210][T20332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 386.401227][T20332] Call Trace: [ 386.401235][T20332] [ 386.401260][T20332] __dump_stack+0x1d/0x30 [ 386.401287][T20332] dump_stack_lvl+0x95/0xd0 [ 386.401414][T20332] dump_stack+0x15/0x1b [ 386.401435][T20332] dump_header+0x80/0x240 [ 386.401456][T20332] oom_kill_process+0x295/0x350 [ 386.401523][T20332] out_of_memory+0x97d/0xb80 [ 386.401546][T20332] try_charge_memcg+0x62e/0xa10 [ 386.401618][T20332] obj_cgroup_charge_pages+0xa6/0x150 [ 386.401654][T20332] obj_cgroup_charge_account+0x73/0x1a0 [ 386.401707][T20332] __memcg_slab_post_alloc_hook+0x396/0x530 [ 386.401749][T20332] kmem_cache_alloc_noprof+0x2b4/0x490 [ 386.401776][T20332] ? alloc_buffer_head+0x35/0x1f0 [ 386.401807][T20332] alloc_buffer_head+0x35/0x1f0 [ 386.401919][T20332] folio_alloc_buffers+0x149/0x310 [ 386.401950][T20332] create_empty_buffers+0x2c/0x200 [ 386.401979][T20332] __block_write_begin_int+0x1d4/0xf90 [ 386.402070][T20332] ? queue_delayed_work_on+0xd7/0x140 [ 386.402109][T20332] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 386.402152][T20332] ? _raw_spin_unlock_irq+0x9/0x30 [ 386.402191][T20332] ? wb_wakeup_delayed+0x9b/0xb0 [ 386.402278][T20332] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 386.402326][T20332] block_page_mkwrite+0x1a8/0x3c0 [ 386.402357][T20332] ext4_page_mkwrite+0x859/0xb90 [ 386.402517][T20332] ? folio_unlock+0xfe/0x150 [ 386.402540][T20332] handle_mm_fault+0x18fb/0x3030 [ 386.402622][T20332] ? mt_find+0x291/0x3b0 [ 386.402668][T20332] do_user_addr_fault+0x3fd/0x1050 [ 386.402730][T20332] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 386.402756][T20332] exc_page_fault+0x62/0xa0 [ 386.402783][T20332] asm_exc_page_fault+0x26/0x30 [ 386.402864][T20332] RIP: 0033:0x7f1715fe3a82 [ 386.402882][T20332] Code: 00 48 89 ef 48 8d 50 fc 48 89 15 f9 1c ee 00 89 58 fc 8b 1d e0 1c ee 00 e8 4b 4f ff ff 48 8b 05 ec 1c ee 00 41 b8 08 00 00 00 <89> 18 48 83 c0 08 66 44 89 40 fc 83 05 dc 1c ee 00 01 66 83 3d d8 [ 386.402903][T20332] RSP: 002b:00007ffcdc253d80 EFLAGS: 00010206 [ 386.402924][T20332] RAX: 0000001b3422422c RBX: 0000000000000058 RCX: ffffffff81889bfb [ 386.402997][T20332] RDX: 0000001b3422422c RSI: 0000000000000008 RDI: 00007f1716ec5720 [ 386.403020][T20332] RBP: 00007f1716ec5720 R08: 0000000000000008 R09: 0000000000000006 [ 386.403035][T20332] R10: 0000000000000006 R11: 0000000000000004 R12: 0000000000000000 [ 386.403047][T20332] R13: ffffffffffffffac R14: 0000000000000000 R15: 0000000000000000 [ 386.403064][T20332] ? __vmalloc_node_range_noprof+0xf2b/0x12b0 [ 386.403092][T20332] [ 386.662428][T20332] memory: usage 307200kB, limit 307200kB, failcnt 4069 [ 386.669350][T20332] memory+swap: usage 373872kB, limit 9007199254740988kB, failcnt 0 [ 386.677367][T20332] kmem: usage 247796kB, limit 9007199254740988kB, failcnt 0 [ 386.684703][T20332] Memory cgroup stats for /syz4: [ 386.685421][T20332] cache 58773504 [ 386.694171][T20332] rss 1662976 [ 386.697480][T20332] shmem 58769408 [ 386.701109][T20332] mapped_file 2772992 [ 386.705159][T20332] dirty 0 [ 386.708127][T20332] writeback 0 [ 386.711458][T20332] workingset_refault_anon 2001 [ 386.716244][T20332] workingset_refault_file 6071 [ 386.721090][T20332] swap 68272128 [ 386.724614][T20332] swapcached 393216 [ 386.728459][T20332] pgpgin 511933 [ 386.732109][T20332] pgpgout 497082 [ 386.735735][T20332] pgfault 441163 [ 386.739310][T20332] pgmajfault 477 [ 386.742918][T20332] inactive_anon 60600320 [ 386.747215][T20332] active_anon 225280 [ 386.751264][T20332] inactive_file 0 [ 386.754922][T20332] active_file 4096 [ 386.758657][T20332] unevictable 0 [ 386.762186][T20332] hierarchical_memory_limit 314572800 [ 386.767624][T20332] hierarchical_memsw_limit 9223372036854771712 [ 386.773972][T20332] total_cache 58773504 [ 386.778170][T20332] total_rss 1662976 [ 386.782125][T20332] total_shmem 58769408 [ 386.786251][T20332] total_mapped_file 2772992 [ 386.790812][T20332] total_dirty 0 [ 386.794359][T20332] total_writeback 0 [ 386.798209][T20332] total_workingset_refault_anon 2001 [ 386.803563][T20332] total_workingset_refault_file 6071 [ 386.808872][T20332] total_swap 68272128 [ 386.812932][T20332] total_swapcached 393216 [ 386.817282][T20332] total_pgpgin 528854 [ 386.821338][T20332] total_pgpgout 514003 [ 386.825423][T20332] total_pgfault 441908 [ 386.829512][T20332] total_pgmajfault 477 [ 386.833710][T20332] total_inactive_anon 60600320 [ 386.838637][T20332] total_active_anon 225280 [ 386.843102][T20332] total_inactive_file 0 [ 386.847288][T20332] total_active_file 4096 [ 386.851586][T20332] total_unevictable 0 [ 386.855597][T20332] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6295,pid=20332,uid=0 [ 386.870615][T20332] Memory cgroup out of memory: Killed process 20332 (syz.4.6295) total-vm:94000kB, anon-rss:1332kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 387.091296][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.098344][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 387.495307][T20434] netlink: 'syz.6.6339': attribute type 1 has an invalid length. [ 387.512932][T20434] 8021q: adding VLAN 0 to HW filter on device bond16 [ 387.526950][T20434] macvlan4: entered promiscuous mode [ 387.532439][T20434] macvlan4: entered allmulticast mode [ 387.539111][T20434] bond16: entered promiscuous mode [ 387.544692][T20434] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 387.553384][T20434] bond16: left promiscuous mode [ 387.707326][T20470] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6355'. [ 387.737425][T20475] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6356'. [ 387.796489][T20485] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6361'. [ 387.917948][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 387.917969][ T29] audit: type=1326 audit(1769144856.187:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 387.948270][ T29] audit: type=1326 audit(1769144856.187:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 387.972174][ T29] audit: type=1326 audit(1769144856.197:8366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 387.995722][ T29] audit: type=1326 audit(1769144856.197:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 388.019383][ T29] audit: type=1326 audit(1769144856.197:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 388.043004][ T29] audit: type=1326 audit(1769144856.197:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 388.066581][ T29] audit: type=1326 audit(1769144856.197:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 388.090262][ T29] audit: type=1326 audit(1769144856.197:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20503 comm="syz.2.6370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 388.131247][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 388.138322][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 388.218997][T20516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6376'. [ 388.233860][ T29] audit: type=1400 audit(1769144856.507:8372): avc: denied { execstack } for pid=20517 comm="syz.6.6377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 388.814177][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6412'. [ 389.088679][T20631] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 389.139414][T20639] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6431'. [ 389.171258][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 389.178437][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 389.435502][T20675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6448'. [ 389.447577][T20675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6448'. [ 389.806778][T20728] xt_hashlimit: size too large, truncated to 1048576 [ 389.941823][T20739] netlink: 360 bytes leftover after parsing attributes in process `syz.0.6476'. [ 390.167780][ T29] audit: type=1326 audit(1769144858.437:8373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20768 comm="syz.6.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 390.211204][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.218286][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 390.633009][T20817] 9p: Bad value for 'rfdno' [ 390.738196][T20824] lo speed is unknown, defaulting to 1000 [ 390.851947][T20824] lo speed is unknown, defaulting to 1000 [ 391.004918][T20875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6533'. [ 391.189216][T20899] netlink: 'syz.2.6545': attribute type 1 has an invalid length. [ 391.251061][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 391.343164][T20923] xt_hashlimit: size too large, truncated to 1048576 [ 392.044236][T21016] 9p: Bad value for 'rfdno' [ 392.291003][ C0] net_ratelimit: 1 callbacks suppressed [ 392.291026][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 392.303680][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 392.701724][T21100] netlink: 'syz.2.6639': attribute type 1 has an invalid length. [ 392.727509][T21100] 8021q: adding VLAN 0 to HW filter on device bond17 [ 392.736053][T21092] lo speed is unknown, defaulting to 1000 [ 392.826161][T21092] lo speed is unknown, defaulting to 1000 [ 393.008726][T21112] __nla_validate_parse: 2 callbacks suppressed [ 393.008816][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6641'. [ 393.330925][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.337973][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 393.579319][T21204] xt_hashlimit: size too large, truncated to 1048576 [ 394.223478][T21268] vlan1: entered allmulticast mode [ 394.228739][T21268] veth0_vlan: entered allmulticast mode [ 394.234468][T21268] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 394.319287][T21277] 9p: Bad value for 'rfdno' [ 394.518020][T21284] lo speed is unknown, defaulting to 1000 [ 394.587383][T21284] lo speed is unknown, defaulting to 1000 [ 394.625364][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 394.625408][ T29] audit: type=1326 audit(1769144862.898:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21305 comm="syz.6.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 394.656133][ T29] audit: type=1326 audit(1769144862.928:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21305 comm="syz.6.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 394.679786][ T29] audit: type=1326 audit(1769144862.928:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21305 comm="syz.6.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 394.703666][ T29] audit: type=1326 audit(1769144862.928:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21305 comm="syz.6.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083181acb9 code=0x7ffc0000 [ 394.713913][T21310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6726'. [ 394.748223][T21284] chnl_net:caif_netlink_parms(): no params data found [ 394.796901][T21284] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.804066][T21284] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.820701][T21284] bridge_slave_0: entered allmulticast mode [ 394.827627][T21284] bridge_slave_0: entered promiscuous mode [ 394.834941][T21284] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.842267][T21284] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.849619][T21284] bridge_slave_1: entered allmulticast mode [ 394.857102][T21284] bridge_slave_1: entered promiscuous mode [ 394.879184][T21284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.890247][T21284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.913667][T21284] team0: Port device team_slave_0 added [ 394.921141][T21284] team0: Port device team_slave_1 added [ 394.938248][T21284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.945403][T21284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.971727][T21284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.983276][T21284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.990220][T21284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.016229][T21284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.045959][T21284] hsr_slave_0: entered promiscuous mode [ 395.052786][T21284] hsr_slave_1: entered promiscuous mode [ 395.127573][T21284] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 395.136958][T21284] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 395.146494][T21284] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 395.155729][T21284] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 395.226535][T21284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.249505][T21284] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.272606][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.280010][ T7374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.296593][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.303736][ T7374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.354093][T21351] netlink: 'syz.6.6743': attribute type 1 has an invalid length. [ 395.388896][T21351] 8021q: adding VLAN 0 to HW filter on device bond17 [ 395.445269][T21366] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6750'. [ 395.506670][T21284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.675058][T21284] veth0_vlan: entered promiscuous mode [ 395.684898][T21284] veth1_vlan: entered promiscuous mode [ 395.706575][T21284] veth0_macvtap: entered promiscuous mode [ 395.715560][T21284] veth1_macvtap: entered promiscuous mode [ 395.738226][T21284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.753360][T21284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.766250][ T88] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.782370][ T88] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.796580][ T88] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.812020][ T88] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.884321][ T29] audit: type=1326 audit(1769144864.158:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 395.907951][ T29] audit: type=1326 audit(1769144864.158:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 395.991031][ T29] audit: type=1326 audit(1769144864.158:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 396.014697][ T29] audit: type=1326 audit(1769144864.158:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 396.038403][ T29] audit: type=1326 audit(1769144864.158:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21397 comm="syz.7.6754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 396.061974][ T29] audit: type=1400 audit(1769144864.248:8391): avc: denied { write } for pid=21404 comm="syz.7.6758" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 396.108264][T21411] loop7: detected capacity change from 0 to 512 [ 396.144812][T21411] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 396.164564][T21411] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 396.172943][T21411] System zones: 1-12 [ 396.182287][T21411] EXT4-fs (loop7): 1 truncate cleaned up [ 396.188331][T21411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.205069][T21411] EXT4-fs warning (device loop7): verify_group_input:156: Last group not full [ 396.255163][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.301371][T21432] netlink: 'syz.6.6769': attribute type 1 has an invalid length. [ 396.319743][T21440] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.326989][T21440] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.480411][T21461] loop7: detected capacity change from 0 to 164 [ 396.601158][T21463] loop7: detected capacity change from 0 to 8192 [ 397.177322][T21510] loop7: detected capacity change from 0 to 1024 [ 397.191267][T21510] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 397.202373][T21510] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 397.221252][T21510] JBD2: no valid journal superblock found [ 397.227039][T21510] EXT4-fs (loop7): Could not load journal inode [ 397.289593][T21518] loop7: detected capacity change from 0 to 512 [ 397.306942][T21518] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 397.343000][T21518] EXT4-fs (loop7): 1 orphan inode deleted [ 397.348926][T21518] EXT4-fs (loop7): 1 truncate cleaned up [ 397.359917][T21518] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.377571][T21527] netlink: 'syz.4.6799': attribute type 1 has an invalid length. [ 397.381426][T21518] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.7.6808: path /14/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 397.429398][T21518] EXT4-fs (loop7): Remounting filesystem read-only [ 397.449283][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.474960][T21533] loop7: detected capacity change from 0 to 256 [ 397.494616][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.503461][T21533] FAT-fs (loop7): Filesystem has been set read-only [ 397.521045][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.529894][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.539542][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.549118][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.559872][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.569653][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.579016][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.587934][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 397.597012][T21533] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 398.132534][T21552] netlink: 1143 bytes leftover after parsing attributes in process `syz.2.6822'. [ 398.247707][T21568] netlink: 'syz.0.6830': attribute type 1 has an invalid length. [ 398.267993][T21568] gretap0: entered promiscuous mode [ 398.363361][T21580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21580 comm=syz.2.6833 [ 398.591054][T21603] loop7: detected capacity change from 0 to 2048 [ 398.608115][T21603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.642601][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.670651][T21613] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6847'. [ 399.081189][T21650] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6863'. [ 399.545628][T21694] loop7: detected capacity change from 0 to 2048 [ 399.560372][T21694] EXT4-fs: Ignoring removed bh option [ 399.569272][T21697] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 399.592464][T21694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.634931][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.704238][T21713] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6892'. [ 400.077992][T21770] loop7: detected capacity change from 0 to 1024 [ 400.104219][T21770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.118284][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 400.118302][ T29] audit: type=1400 audit(1769144868.388:8399): avc: denied { watch watch_reads } for pid=21769 comm="syz.7.6918" path="/37/file1/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.162009][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.186249][T21781] loop7: detected capacity change from 0 to 512 [ 400.196432][T21781] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 400.212286][T21781] EXT4-fs (loop7): 1 truncate cleaned up [ 400.222015][T21781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.278914][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.281933][T21790] bridge0: port 1(macvtap1) entered blocking state [ 400.294614][T21790] bridge0: port 1(macvtap1) entered disabled state [ 400.305319][T21790] macvtap1: entered allmulticast mode [ 400.310924][T21790] bridge0: entered allmulticast mode [ 400.333053][T21790] macvtap1: left allmulticast mode [ 400.338298][T21790] bridge0: left allmulticast mode [ 400.415170][T21805] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.439036][T21805] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.517700][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.536987][T21820] cgroup: fork rejected by pids controller in /syz2 [ 400.551878][T21828] gretap1: entered promiscuous mode [ 400.654803][T21836] lo speed is unknown, defaulting to 1000 [ 400.732069][T21836] lo speed is unknown, defaulting to 1000 [ 400.901099][ T29] audit: type=1326 audit(1769144869.178:8400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 400.930171][ T29] audit: type=1326 audit(1769144869.198:8401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 400.953982][ T29] audit: type=1326 audit(1769144869.198:8402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 400.978106][ T29] audit: type=1326 audit(1769144869.198:8403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 401.001747][ T29] audit: type=1326 audit(1769144869.198:8404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 401.025652][ T29] audit: type=1326 audit(1769144869.198:8405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 401.049394][ T29] audit: type=1326 audit(1769144869.198:8406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 401.073344][ T29] audit: type=1326 audit(1769144869.198:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 401.097176][ T29] audit: type=1326 audit(1769144869.198:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21851 comm="syz.2.6950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 401.371247][T21899] netlink: 'syz.2.6971': attribute type 1 has an invalid length. [ 401.387892][T21899] 8021q: adding VLAN 0 to HW filter on device bond18 [ 401.405251][T21899] 8021q: adding VLAN 0 to HW filter on device bond18 [ 401.414021][T21899] bond18: (slave vxcan7): The slave device specified does not support setting the MAC address [ 401.426413][T21899] bond18: (slave vxcan7): Error -95 calling set_mac_address [ 401.460280][T21913] macvlan3: entered promiscuous mode [ 401.465725][T21913] macvlan3: entered allmulticast mode [ 401.476861][T21913] bond18: entered promiscuous mode [ 401.482677][T21913] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 401.500759][T21913] bond18: left promiscuous mode [ 401.802367][T21931] team_slave_1: Caught tx_queue_len zero misconfig [ 402.133228][T21972] set_capacity_and_notify: 1 callbacks suppressed [ 402.133248][T21972] loop7: detected capacity change from 0 to 1024 [ 402.147025][T21972] EXT4-fs: Ignoring removed orlov option [ 402.187410][T21972] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.241143][T21983] dvmrp6: left allmulticast mode [ 402.246420][T21983] dvmrp9: left allmulticast mode [ 402.324519][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.388107][T22009] netlink: 'syz.2.7016': attribute type 1 has an invalid length. [ 402.417583][T22009] 8021q: adding VLAN 0 to HW filter on device bond19 [ 402.433774][T22009] 8021q: adding VLAN 0 to HW filter on device bond19 [ 402.441513][T22009] bond19: (slave vxcan7): The slave device specified does not support setting the MAC address [ 402.453503][T22009] bond19: (slave vxcan7): Error -95 calling set_mac_address [ 402.483060][T22016] macvlan3: entered promiscuous mode [ 402.488406][T22016] macvlan3: entered allmulticast mode [ 402.494539][T22016] bond19: entered promiscuous mode [ 402.499890][T22016] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 402.509935][T22016] bond19: left promiscuous mode [ 402.534760][T22018] loop7: detected capacity change from 0 to 2048 [ 402.562121][T22018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.633069][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.803373][T22032] loop7: detected capacity change from 0 to 1024 [ 402.810886][T22032] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 402.820648][T22032] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 402.831219][T22032] EXT4-fs (loop7): invalid journal inode [ 402.836943][T22032] EXT4-fs (loop7): can't get journal size [ 402.843323][T22032] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 17104912: comm syz.7.7025: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 402.858987][T22032] EXT4-fs (loop7): failed to initialize system zone (-117) [ 402.869457][T22032] EXT4-fs (loop7): mount failed [ 403.146825][T22055] loop7: detected capacity change from 0 to 512 [ 403.157186][T22055] EXT4-fs (loop7): 1 truncate cleaned up [ 403.169885][T22055] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.188343][T22055] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.7036: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 403.300697][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.443546][T22073] loop7: detected capacity change from 0 to 512 [ 403.473828][T22073] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.7044: bad orphan inode 15 [ 403.507264][T22073] ext4_test_bit(bit=14, block=18) = 1 [ 403.512739][T22073] is_bad_inode(inode)=0 [ 403.516922][T22073] NEXT_ORPHAN(inode)=1023 [ 403.521312][T22073] max_ino=32 [ 403.524537][T22073] i_nlink=0 [ 403.563648][T22073] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2972: inode #15: comm syz.7.7044: corrupted xattr block 19: invalid header [ 403.607288][T22073] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -117) [ 403.636295][T22073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 403.665909][T22073] ext4 filesystem being mounted at /62/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 403.683920][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7044'. [ 403.697169][T22080] netlink: 'syz.2.7046': attribute type 1 has an invalid length. [ 403.717929][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 403.732268][T22080] 8021q: adding VLAN 0 to HW filter on device bond20 [ 403.764091][T22080] 8021q: adding VLAN 0 to HW filter on device bond20 [ 403.784470][T22080] bond20: (slave vxcan7): The slave device specified does not support setting the MAC address [ 403.802245][T22080] bond20: (slave vxcan7): Error -95 calling set_mac_address [ 403.880493][T22086] macvlan3: entered promiscuous mode [ 403.885917][T22086] macvlan3: entered allmulticast mode [ 403.892613][T22086] bond20: entered promiscuous mode [ 403.898161][T22086] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 403.907231][T22086] bond20: left promiscuous mode [ 404.393688][T22097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7052'. [ 404.402693][T22097] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7052'. [ 404.419980][ T1960] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.428730][ T1960] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.445767][T22099] loop7: detected capacity change from 0 to 1024 [ 404.452642][ T1960] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.463853][T22099] EXT4-fs: Ignoring removed bh option [ 404.469322][T22099] EXT4-fs: inline encryption not supported [ 404.475403][ T1960] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.492727][T22099] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.523985][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.569403][T22107] loop7: detected capacity change from 0 to 512 [ 404.588199][T22107] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.618615][T22107] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 404.647094][T22107] System zones: 1-2, 4-12, 8-8 [ 404.675431][T22107] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.7055: iget: bad i_size value: 38620345925642 [ 404.720551][T22107] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.7055: couldn't read orphan inode 15 (err -117) [ 404.760866][T22107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.826268][T22130] netlink: 'syz.4.7067': attribute type 1 has an invalid length. [ 404.836484][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.847648][T22130] 8021q: adding VLAN 0 to HW filter on device bond19 [ 404.873640][T22130] 8021q: adding VLAN 0 to HW filter on device bond19 [ 404.881230][T22130] bond19: (slave vxcan6): The slave device specified does not support setting the MAC address [ 404.893111][T22130] bond19: (slave vxcan6): Error -95 calling set_mac_address [ 404.974615][T22130] macvlan4: entered promiscuous mode [ 404.979992][T22130] macvlan4: entered allmulticast mode [ 404.996133][T22130] bond19: entered promiscuous mode [ 405.001738][T22130] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 405.030488][T22130] bond19: left promiscuous mode [ 405.229882][T22166] netlink: 'syz.0.7081': attribute type 10 has an invalid length. [ 405.302008][T22176] ip6gre0: left promiscuous mode [ 405.312205][T22176] bond7: left promiscuous mode [ 405.317453][T22176] erspan1: left allmulticast mode [ 405.322718][T22176] vlan0: left allmulticast mode [ 405.327605][T22176] bond7: left allmulticast mode [ 405.371432][T22176] bridge7: left promiscuous mode [ 405.376446][T22176] bridge7: left allmulticast mode [ 405.391409][T22176] gretap1: left promiscuous mode [ 405.407649][T22176] ip6gre2: left promiscuous mode [ 405.412804][T22176] ip6gre2: left allmulticast mode [ 405.456127][ T1960] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.467782][ T1960] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.476833][ T1960] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.485614][ T1960] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.858881][T22220] netlink: 'syz.0.7106': attribute type 29 has an invalid length. [ 405.867465][T22220] netlink: 'syz.0.7106': attribute type 29 has an invalid length. [ 405.924646][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 405.944608][T22228] netlink: 'syz.6.7110': attribute type 1 has an invalid length. [ 405.974978][T22231] loop7: detected capacity change from 0 to 128 [ 405.987454][T22228] 8021q: adding VLAN 0 to HW filter on device bond18 [ 406.005857][T22233] netlink: 'syz.0.7112': attribute type 4 has an invalid length. [ 406.029075][T22234] 8021q: adding VLAN 0 to HW filter on device bond18 [ 406.036857][T22234] bond18: (slave vxcan5): The slave device specified does not support setting the MAC address [ 406.050808][T22234] bond18: (slave vxcan5): Error -95 calling set_mac_address [ 406.072812][T22228] macvlan5: entered promiscuous mode [ 406.078191][T22228] macvlan5: entered allmulticast mode [ 406.097868][T22228] bond18: entered promiscuous mode [ 406.110449][T22228] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 406.119948][T22228] bond18: left promiscuous mode [ 406.452011][ T3408] Process accounting resumed [ 407.174788][T22309] netlink: 'syz.6.7143': attribute type 1 has an invalid length. [ 407.198229][T22309] 8021q: adding VLAN 0 to HW filter on device bond19 [ 407.242354][T22309] 8021q: adding VLAN 0 to HW filter on device bond19 [ 407.250279][T22309] bond19: (slave vxcan5): The slave device specified does not support setting the MAC address [ 407.262396][T22309] bond19: (slave vxcan5): Error -95 calling set_mac_address [ 407.288277][T22320] macvlan5: entered promiscuous mode [ 407.293676][T22320] macvlan5: entered allmulticast mode [ 407.301090][T22320] bond19: entered promiscuous mode [ 407.306557][T22320] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 407.315757][T22320] bond19: left promiscuous mode [ 407.857757][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 407.857823][ T29] audit: type=1326 audit(1769144877.125:8485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 407.887698][ T29] audit: type=1326 audit(1769144877.125:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 407.911580][ T29] audit: type=1326 audit(1769144877.135:8487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 407.935229][ T29] audit: type=1326 audit(1769144877.135:8488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 407.959158][ T29] audit: type=1326 audit(1769144877.135:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 407.982820][ T29] audit: type=1326 audit(1769144877.135:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 408.006212][ T29] audit: type=1326 audit(1769144877.135:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 408.029998][ T29] audit: type=1326 audit(1769144877.135:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 408.053616][ T29] audit: type=1326 audit(1769144877.135:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 408.077188][ T29] audit: type=1326 audit(1769144877.135:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22346 comm="syz.4.7160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f171611acb9 code=0x7ffc0000 [ 408.228084][T22376] netlink: 'syz.6.7172': attribute type 1 has an invalid length. [ 408.243583][T22376] 8021q: adding VLAN 0 to HW filter on device bond20 [ 408.260465][T22376] 8021q: adding VLAN 0 to HW filter on device bond20 [ 408.279351][T22376] bond20: (slave vxcan5): The slave device specified does not support setting the MAC address [ 408.292338][T22376] bond20: (slave vxcan5): Error -95 calling set_mac_address [ 408.328633][T22384] macvlan5: entered promiscuous mode [ 408.334066][T22384] macvlan5: entered allmulticast mode [ 408.338347][T22386] netlink: 391 bytes leftover after parsing attributes in process `syz.4.7174'. [ 408.348634][T22386] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 408.356821][T22386] openvswitch: netlink: Message has 4 unknown bytes. [ 408.367609][T22384] bond20: entered promiscuous mode [ 408.370282][ T3536] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 408.374041][T22384] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 408.378956][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 408.404011][T22384] bond20: left promiscuous mode [ 408.453376][T22394] loop7: detected capacity change from 0 to 512 [ 408.584453][T22416] loop7: detected capacity change from 0 to 512 [ 408.611056][T22416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.623985][T22416] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.649468][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.835938][ T3408] kernel write not supported for file bpf-prog (pid: 3408 comm: kworker/1:3) [ 408.886204][T22453] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 409.155023][T22478] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7215'. [ 409.165834][T22480] netlink: 'syz.2.7217': attribute type 1 has an invalid length. [ 409.173723][T22480] netlink: 'syz.2.7217': attribute type 2 has an invalid length. [ 409.270262][T22488] netlink: 'syz.4.7220': attribute type 1 has an invalid length. [ 409.309261][T22488] 8021q: adding VLAN 0 to HW filter on device bond20 [ 409.338548][T22488] 8021q: adding VLAN 0 to HW filter on device bond20 [ 409.345967][T22488] bond20: (slave vxcan6): The slave device specified does not support setting the MAC address [ 409.357608][T22488] bond20: (slave vxcan6): Error -95 calling set_mac_address [ 409.384451][T22497] macvlan4: entered promiscuous mode [ 409.389959][T22497] macvlan4: entered allmulticast mode [ 409.395894][T22497] bond20: entered promiscuous mode [ 409.401359][T22497] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 409.428675][T22497] bond20: left promiscuous mode [ 409.566379][T22503] lo speed is unknown, defaulting to 1000 [ 409.635372][T22503] lo speed is unknown, defaulting to 1000 [ 409.711097][T22512] loop7: detected capacity change from 0 to 512 [ 409.717780][T22512] EXT4-fs: Ignoring removed orlov option [ 409.723648][T22512] EXT4-fs: Ignoring removed i_version option [ 409.730778][T22512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.751943][T22512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.764634][T22512] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 409.779292][T22512] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7230'. [ 409.788527][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7230'. [ 409.898317][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.071654][T22553] loop7: detected capacity change from 0 to 164 [ 410.080717][T22553] Unable to read rock-ridge attributes [ 410.089817][T22553] Unable to read rock-ridge attributes [ 410.098042][T22553] bio_check_eod: 25820 callbacks suppressed [ 410.098060][T22553] syz.7.7249: attempt to access beyond end of device [ 410.098060][T22553] loop7: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 410.172991][T22564] loop7: detected capacity change from 0 to 512 [ 410.192152][T22564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.204951][T22564] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.219805][T22564] EXT4-fs (loop7): shut down requested (2) [ 410.239884][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.274994][T22572] loop7: detected capacity change from 0 to 2048 [ 410.340211][T21447] loop7: p1 p3 p4 [ 410.345625][T21447] loop7: p4 size 589824 extends beyond EOD, truncated [ 410.364233][T22572] loop7: p1 p3 p4 [ 410.374557][T22572] loop7: p4 size 589824 extends beyond EOD, truncated [ 410.451706][T20826] udevd[20826]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 410.456197][T21202] udevd[21202]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 410.463978][T21447] udevd[21447]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 410.503667][T22585] SELinux: failed to load policy [ 410.530376][T22587] netlink: 'syz.7.7263': attribute type 1 has an invalid length. [ 410.558800][T22587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.587436][T22587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.600482][T22587] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 410.623950][T22587] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 410.644451][T22595] gretap1: entered promiscuous mode [ 410.652844][T22595] bond1: (slave gretap1): making interface the new active one [ 410.660856][T22595] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 410.669338][T22580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7260'. [ 410.680936][T22595] macvlan2: entered promiscuous mode [ 410.686276][T22595] macvlan2: entered allmulticast mode [ 410.692081][ T8512] IPVS: ip_vs_send_async error -101 [ 410.716169][T22595] bond1: entered promiscuous mode [ 410.721859][T22595] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 410.735509][T22595] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 410.747707][T22595] bond1: left promiscuous mode [ 410.915137][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7276'. [ 411.038296][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7282'. [ 411.058744][T22632] macsec3: entered allmulticast mode [ 411.064185][T22632] bond0: entered allmulticast mode [ 411.070772][T22632] bond0: left allmulticast mode [ 411.190260][T22659] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7292'. [ 411.210494][T22656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7293'. [ 411.339636][T22781] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7302'. [ 411.367921][T22781] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7302'. [ 411.468916][T22788] lo speed is unknown, defaulting to 1000 [ 411.564624][T22788] lo speed is unknown, defaulting to 1000 [ 411.607891][T22803] netlink: 'syz.4.7313': attribute type 1 has an invalid length. [ 411.645684][T22803] 8021q: adding VLAN 0 to HW filter on device bond21 [ 411.686632][T22810] loop7: detected capacity change from 0 to 1024 [ 411.693537][T22810] EXT4-fs: Ignoring removed mblk_io_submit option [ 411.700177][T22810] EXT4-fs: Ignoring removed nobh option [ 411.705787][T22810] EXT4-fs: inline encryption not supported [ 411.734941][T22810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.772341][T22809] 8021q: adding VLAN 0 to HW filter on device bond21 [ 411.780722][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.781393][T22809] bond21: (slave vxcan6): The slave device specified does not support setting the MAC address [ 411.801915][T22809] bond21: (slave vxcan6): Error -95 calling set_mac_address [ 411.871910][T22803] macvlan4: entered promiscuous mode [ 411.877372][T22803] macvlan4: entered allmulticast mode [ 411.883598][T22803] bond21: entered promiscuous mode [ 411.889283][T22803] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 411.898456][T22803] bond21: left promiscuous mode [ 412.745358][T22856] sctp: [Deprecated]: syz.6.7335 (pid 22856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.745358][T22856] Use struct sctp_sack_info instead [ 412.924907][T22853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.934176][T22853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.015000][T22894] netlink: 'syz.0.7351': attribute type 1 has an invalid length. [ 413.029335][T22894] 8021q: adding VLAN 0 to HW filter on device bond13 [ 413.049266][T22894] 8021q: adding VLAN 0 to HW filter on device bond13 [ 413.056606][T22894] bond13: (slave vxcan5): The slave device specified does not support setting the MAC address [ 413.068403][T22894] bond13: (slave vxcan5): Error -95 calling set_mac_address [ 413.086765][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 413.086792][ T29] audit: type=1326 audit(1769144882.356:8533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.117508][ T29] audit: type=1326 audit(1769144882.386:8534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.141092][ T29] audit: type=1326 audit(1769144882.386:8535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.164754][ T29] audit: type=1326 audit(1769144882.386:8536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.188444][ T29] audit: type=1326 audit(1769144882.386:8537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.211963][ T29] audit: type=1326 audit(1769144882.386:8538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.235691][ T29] audit: type=1326 audit(1769144882.386:8539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.259403][ T29] audit: type=1326 audit(1769144882.386:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.274845][T22902] macvlan0: entered promiscuous mode [ 413.288336][T22902] macvlan0: entered allmulticast mode [ 413.317028][T22902] bond13: entered promiscuous mode [ 413.322994][T22902] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 413.335493][T22902] bond13: left promiscuous mode [ 413.449348][ T29] audit: type=1326 audit(1769144882.716:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22900 comm="syz.2.7354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.540883][ T29] audit: type=1326 audit(1769144882.816:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22923 comm="syz.2.7364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc83dacb9 code=0x7ffc0000 [ 413.730027][T22944] lo: Caught tx_queue_len zero misconfig [ 413.840404][T22961] loop7: detected capacity change from 0 to 128 [ 414.045773][T22996] netlink: 'syz.7.7398': attribute type 1 has an invalid length. [ 414.056916][T22999] netlink: 'syz.6.7399': attribute type 13 has an invalid length. [ 414.064739][T22996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.081415][T22996] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.089172][T22996] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 414.101231][T22996] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 414.115694][T22999] syz_tun: refused to change device tx_queue_len [ 414.122196][T22999] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 414.143925][T23003] macvlan2: entered promiscuous mode [ 414.149262][T23003] macvlan2: entered allmulticast mode [ 414.155361][T23003] bond2: entered promiscuous mode [ 414.160634][T23003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 414.174151][T23003] bond2: left promiscuous mode [ 414.600750][T23046] 9p: Bad value for 'wfdno' [ 414.691191][T23055] netlink: 'syz.0.7423': attribute type 15 has an invalid length. [ 414.699106][T23055] __nla_validate_parse: 1 callbacks suppressed [ 414.699123][T23055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7423'. [ 414.740999][T23050] lo speed is unknown, defaulting to 1000 [ 414.826178][T23050] lo speed is unknown, defaulting to 1000 [ 414.971603][T23088] netlink: 'syz.0.7439': attribute type 1 has an invalid length. [ 414.995946][T23091] netlink: 100 bytes leftover after parsing attributes in process `syz.6.7440'. [ 415.055956][T23088] 8021q: adding VLAN 0 to HW filter on device bond14 [ 415.073247][T23094] 8021q: adding VLAN 0 to HW filter on device bond14 [ 415.080727][T23094] bond14: (slave vxcan5): The slave device specified does not support setting the MAC address [ 415.092205][T23094] bond14: (slave vxcan5): Error -95 calling set_mac_address [ 415.110965][T23088] macvlan0: entered promiscuous mode [ 415.116328][T23088] macvlan0: entered allmulticast mode [ 415.122650][T23088] bond14: entered promiscuous mode [ 415.128114][T23088] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 415.137758][T23088] bond14: left promiscuous mode [ 415.280758][T23127] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7454'. [ 415.387605][T23148] netlink: 'syz.0.7464': attribute type 1 has an invalid length. [ 415.402738][T23148] 8021q: adding VLAN 0 to HW filter on device bond15 [ 415.418322][T23148] 8021q: adding VLAN 0 to HW filter on device bond15 [ 415.425623][T23148] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address [ 415.437408][T23148] bond15: (slave vxcan5): Error -95 calling set_mac_address [ 415.467786][T23153] macvlan0: entered promiscuous mode [ 415.473224][T23153] macvlan0: entered allmulticast mode [ 415.479308][T23153] bond15: entered promiscuous mode [ 415.485514][T23153] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 415.494123][T23153] bond15: left promiscuous mode [ 415.542526][T23155] lo speed is unknown, defaulting to 1000 [ 415.627791][T23155] lo speed is unknown, defaulting to 1000 [ 415.670226][T23167] bond3: option min_links: invalid value (18446744073709551601) [ 415.677929][T23167] bond3: option min_links: allowed values 0 - 2147483647 [ 415.686491][T23167] bond3 (unregistering): Released all slaves [ 415.792861][T23176] loop7: detected capacity change from 0 to 512 [ 415.830627][T23176] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 415.845894][T23176] EXT4-fs (loop7): 1 truncate cleaned up [ 415.852271][T23176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.878681][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.977431][T23190] netlink: 'syz.2.7478': attribute type 1 has an invalid length. [ 416.084331][T23195] loop7: detected capacity change from 0 to 8192 [ 416.151612][T21284] FAT-fs (loop7): error, invalid access to FAT (entry 0x0000e1b1) [ 416.159596][T21284] FAT-fs (loop7): Filesystem has been set read-only [ 416.205548][T23299] loop7: detected capacity change from 0 to 128 [ 416.280316][T23190] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 416.580495][T23335] netlink: 'syz.7.7500': attribute type 1 has an invalid length. [ 416.606256][T23335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.624035][T23335] 8021q: adding VLAN 0 to HW filter on device bond3 [ 416.632262][T23335] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 416.644820][T23335] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 416.673394][T23347] macvlan2: entered promiscuous mode [ 416.678761][T23347] macvlan2: entered allmulticast mode [ 416.693804][T23347] bond3: entered promiscuous mode [ 416.699295][T23347] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 416.711081][T23347] bond3: left promiscuous mode [ 417.115100][T23382] 9p: Bad value for 'rfdno' [ 417.173555][T23392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=23392 comm=syz.6.7525 [ 417.314811][T23410] loop7: detected capacity change from 0 to 256 [ 417.326822][T23410] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 417.340286][T23410] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.441008][T23426] netlink: 'syz.6.7542': attribute type 1 has an invalid length. [ 417.460228][T23426] 8021q: adding VLAN 0 to HW filter on device bond21 [ 417.468138][T23431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7543'. [ 417.493544][T23426] 8021q: adding VLAN 0 to HW filter on device bond21 [ 417.504055][T23426] bond21: (slave vxcan5): The slave device specified does not support setting the MAC address [ 417.516270][T23426] bond21: (slave vxcan5): Error -95 calling set_mac_address [ 417.536678][T23435] macvlan5: entered promiscuous mode [ 417.542081][T23435] macvlan5: entered allmulticast mode [ 417.548425][T23435] bond21: entered promiscuous mode [ 417.554523][T23435] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 417.565818][T23435] bond21: left promiscuous mode [ 417.619580][T23444] loop7: detected capacity change from 0 to 512 [ 417.626325][T23444] EXT4-fs: Ignoring removed bh option [ 417.646811][T23444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.659783][T23444] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.675046][T23444] EXT4-fs: Cannot change journaled quota options when quota turned on [ 417.692524][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7550'. [ 417.701638][T23481] netlink: 'syz.4.7550': attribute type 29 has an invalid length. [ 417.709592][T23481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7550'. [ 417.720303][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.769498][T23559] sctp: [Deprecated]: syz.2.7554 (pid 23559) Use of int in max_burst socket option deprecated. [ 417.769498][T23559] Use struct sctp_assoc_value instead [ 417.893597][T23570] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7559'. [ 417.903442][T23570] netlink: 292 bytes leftover after parsing attributes in process `syz.0.7559'. [ 418.106311][T23589] lo speed is unknown, defaulting to 1000 [ 418.208670][T23589] lo speed is unknown, defaulting to 1000 [ 418.425074][T23626] netlink: 'syz.2.7585': attribute type 1 has an invalid length. [ 418.491251][T23626] 8021q: adding VLAN 0 to HW filter on device bond21 [ 418.519888][T23718] 8021q: adding VLAN 0 to HW filter on device bond21 [ 418.527310][T23718] bond21: (slave vxcan7): The slave device specified does not support setting the MAC address [ 418.560755][T23718] bond21: (slave vxcan7): Error -95 calling set_mac_address [ 418.583543][T23636] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7589'. [ 418.598057][T23626] macvlan3: entered promiscuous mode [ 418.603519][T23626] macvlan3: entered allmulticast mode [ 418.610423][T23626] bond21: entered promiscuous mode [ 418.644383][T23626] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 418.645873][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 418.645917][ T29] audit: type=1400 audit(1769144887.916:8593): avc: denied { remount } for pid=23726 comm="syz.6.7594" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 418.678078][T23730] netlink: 'syz.7.7593': attribute type 15 has an invalid length. [ 418.687201][T23626] bond21: left promiscuous mode [ 418.803894][T23747] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7603'. [ 418.842416][T23749] loop7: detected capacity change from 0 to 256 [ 419.152968][ T29] audit: type=1326 audit(1769144888.426:8594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.7.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 419.177149][ T29] audit: type=1326 audit(1769144888.426:8595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.7.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 419.200783][ T29] audit: type=1326 audit(1769144888.426:8596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.7.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 419.224235][ T29] audit: type=1326 audit(1769144888.426:8597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.7.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 419.247867][ T29] audit: type=1326 audit(1769144888.426:8598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23764 comm="syz.7.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0322acb9 code=0x7ffc0000 [ 419.357273][T23777] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 419.587531][T23792] netlink: 'syz.4.7624': attribute type 1 has an invalid length. [ 419.606995][T23792] 8021q: adding VLAN 0 to HW filter on device bond22 [ 419.649164][T23792] 8021q: adding VLAN 0 to HW filter on device bond22 [ 419.656990][T23792] bond22: (slave vxcan6): The slave device specified does not support setting the MAC address [ 419.669578][T23792] bond22: (slave vxcan6): Error -95 calling set_mac_address [ 419.714495][T23798] macvlan4: entered promiscuous mode [ 419.719982][T23798] macvlan4: entered allmulticast mode [ 419.726211][T23798] bond22: entered promiscuous mode [ 419.731979][T23798] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 419.741457][T23798] bond22: left promiscuous mode [ 419.893301][ T29] audit: type=1326 audit(1769144889.166:8599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23812 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 419.918248][ T29] audit: type=1326 audit(1769144889.196:8600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23812 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 419.942174][ T29] audit: type=1326 audit(1769144889.196:8601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23812 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 419.966019][ T29] audit: type=1326 audit(1769144889.196:8602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23812 comm="syz.0.7632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f143c2cacb9 code=0x7ffc0000 [ 420.058913][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7636'. [ 420.087109][T23822] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 420.651297][T23982] loop7: detected capacity change from 0 to 512 [ 420.680619][T23982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.702567][T23982] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.734201][T21284] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.782228][T23998] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7657'. [ 420.865018][T24004] netlink: 'syz.7.7659': attribute type 1 has an invalid length. [ 420.892222][T24004] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.915378][T24004] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.922995][T24004] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 420.935531][T24004] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 420.974509][T24010] macvlan2: entered promiscuous mode [ 420.979914][T24010] macvlan2: entered allmulticast mode [ 420.994154][T24010] bond4: entered promiscuous mode [ 421.008978][T24010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 421.027238][T24010] bond4: left promiscuous mode [ 421.400883][T24035] 9p: Bad value for 'rfdno' [ 421.619438][T24059] lo speed is unknown, defaulting to 1000 [ 421.780442][T24059] lo speed is unknown, defaulting to 1000 [ 422.219560][T24222] lo speed is unknown, defaulting to 1000 [ 422.295792][T24222] lo speed is unknown, defaulting to 1000 [ 422.309891][T24236] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7710'. [ 422.601379][T24271] loop7: detected capacity change from 0 to 256 [ 422.608500][ T3008] ================================================================== [ 422.616623][ T3008] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 422.624643][ T3008] [ 422.626986][ T3008] write to 0xffff88811abc4330 of 8 bytes by task 21447 on cpu 0: [ 422.634733][ T3008] dentry_unlink_inode+0x65/0x260 [ 422.639789][ T3008] d_delete+0x164/0x180 [ 422.643971][ T3008] d_delete_notify+0x32/0x100 [ 422.648669][ T3008] vfs_unlink+0x32c/0x440 [ 422.653020][ T3008] do_unlinkat+0x1e2/0x4b0 [ 422.657461][ T3008] __x64_sys_unlink+0x2e/0x40 [ 422.662155][ T3008] x64_sys_call+0x2f48/0x3000 [ 422.666857][ T3008] do_syscall_64+0xc0/0x2a0 [ 422.671389][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.677305][ T3008] [ 422.679643][ T3008] read to 0xffff88811abc4330 of 8 bytes by task 3008 on cpu 1: [ 422.687204][ T3008] step_into_slowpath+0x12c/0x4c0 [ 422.692252][ T3008] path_lookupat+0x330/0x500 [ 422.696866][ T3008] filename_lookup+0x190/0x390 [ 422.701749][ T3008] do_readlinkat+0x7d/0x340 [ 422.706286][ T3008] __x64_sys_readlink+0x47/0x60 [ 422.711168][ T3008] x64_sys_call+0x2af1/0x3000 [ 422.715877][ T3008] do_syscall_64+0xc0/0x2a0 [ 422.720423][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.726343][ T3008] [ 422.728680][ T3008] value changed: 0xffff888126f0a648 -> 0x0000000000000000 [ 422.735814][ T3008] [ 422.738236][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 422.744400][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 422.753801][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 422.763874][ T3008] ================================================================== [ 422.772524][T24271] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.786102][T24271] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.