last executing test programs: 4m22.441002054s ago: executing program 4 (id=218): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x48800, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4m22.086289084s ago: executing program 4 (id=222): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed0, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) iopl(0x3) timer_delete(r1) 4m21.746930524s ago: executing program 4 (id=234): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 4m20.222925804s ago: executing program 4 (id=229): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 4m19.923529932s ago: executing program 3 (id=232): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 4m19.847149766s ago: executing program 4 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 4m19.456715769s ago: executing program 4 (id=236): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syslog(0x3, &(0x7f0000000000)=""/22, 0x16) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x88800, 0x0) 4m19.447304019s ago: executing program 32 (id=236): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syslog(0x3, &(0x7f0000000000)=""/22, 0x16) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x20004000) openat$vcsu(0xffffffffffffff9c, 0x0, 0x88800, 0x0) 4m18.717133603s ago: executing program 3 (id=245): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x29}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 4m18.192675733s ago: executing program 3 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 4m18.058536521s ago: executing program 3 (id=254): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 4m17.760803939s ago: executing program 3 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 4m17.624658037s ago: executing program 3 (id=256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x408cd, 0x0) dup3(r1, r3, 0x0) 4m17.598066718s ago: executing program 33 (id=256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x408cd, 0x0) dup3(r1, r3, 0x0) 4m17.443659097s ago: executing program 2 (id=258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x7) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 4m17.41105154s ago: executing program 2 (id=259): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000f00)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f6649d204a1065dad7cffef082a59ee2b21eb73656d3dc03547888735d83669614e4eb5b9be7e4e76b2bb0c2e504c0f86b616d14acae75b2855f9964778238b006b976edd5e4bbda0c7cb669c25fabc598f5bd5a6ec98a63d59dac5436c04687dad36064d69599f981550ae4beb469332d52226990d21a6f7178ba83cff18b65d698afdf08e245a1868ff7a9117d11ed243932580e8d1f8e4ef583656940b7b2178789b452f6115", 0xf8, 0x4c840, 0x0, 0x0) 4m17.047490101s ago: executing program 2 (id=261): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 4m16.069964708s ago: executing program 2 (id=267): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 4m15.960561165s ago: executing program 2 (id=270): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.920800456s ago: executing program 2 (id=276): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4m14.890329138s ago: executing program 34 (id=276): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 4.784794798s ago: executing program 6 (id=2794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec21, 0x1000, 0x400001, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.483677836s ago: executing program 7 (id=2797): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x74, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x40, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "cca6f1e10194fd9304e8689818861d84be21875faed70061c5322a4ca48de2c8afc31232034c834cdc4586231d4cd7fcc6c6ad00"}, 0x48}, 0x2, 0x0, 0x0, 0x20000004}, 0x10044009) r0 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x19980330}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x66ab, 0x4, 0x2, 0x0, 0x0) 4.406532311s ago: executing program 0 (id=2799): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000001c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@nouser_xattr}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x579, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) pwrite64(r0, &(0x7f0000000180)="ff5dc2eb6e0802deee212e65f957acd84716b78d143321e4498b4cea384cc6cf1ff1e8b66f6575bb1b1723252b174610605c872a1e57cf58c9217c179933d4b1154d7b4a44c594fc25f6d594c787e39eb47bc37c93ed3a724a73b7e212720cf372904bc715dbe4594210ac63ff976c18d263d7bc371b6f3f30c7e8551b1323c0ab326b47ec1ee32d580732b94e5920e9cbedc2a2dd", 0x95, 0xad96) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getpeername$packet(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)=0x2) openat$cgroup_ro(r1, &(0x7f0000000280)='io.stat\x00', 0x0, 0x0) 3.90790763s ago: executing program 6 (id=2800): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0xa691a4c7c8bfed69, 0x2, 0xfffffffd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x1, 0x0, {@ip4=@empty, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24000840) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 3.484795715s ago: executing program 7 (id=2803): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x1, 0x6, 0xb}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x20, r4, 0x9c3fa077fa966179, 0x0, 0x25dfdbfe, {{0x7e}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x8004800}, 0x8) 3.483936865s ago: executing program 0 (id=2813): socket$nl_generic(0x10, 0x3, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x340, 0x11, 0x148, 0x340, 0x0, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x560) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x108}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, 0x0, 0x4000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x3ff, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 3.368717672s ago: executing program 6 (id=2805): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0x0, 0x0) getresgid(&(0x7f0000000080), &(0x7f00000000c0)=0x0, &(0x7f0000000100)) setresgid(0x0, 0xee01, r1) sysinfo(&(0x7f0000000540)=""/4096) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@delalloc}, {}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000000)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000000000071121000000000009500008206000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) 2.631252955s ago: executing program 0 (id=2807): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.620284716s ago: executing program 7 (id=2808): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, 0x0, 0x1ff) unshare(0x20040400) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r3) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x20000055}, {@empty, 0x4e21, 0x10000, 0x1000, 0x12d5c, 0x12d5b}}, 0x44) r4 = openat$vcs(0xffffffffffffff9c, 0x0, 0x200100, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) 2.540750411s ago: executing program 7 (id=2809): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getnexthop={0x20, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff7ffe}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2.462702765s ago: executing program 5 (id=2811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0xdf, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 2.305108265s ago: executing program 6 (id=2812): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r0, 0xc) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x80000001}, 0x48, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r2, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) sendfile(r2, r1, 0x0, 0x40001) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000200004025e7a1a440000102030109025c0002010000000904000001020d00000526060001"], 0x0) 2.20813196s ago: executing program 5 (id=2814): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) perf_event_open(0x0, 0x0, 0x10, r0, 0xa) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @multicast}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000140)='+*\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, &(0x7f00000005c0), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x80108907, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ef, 0x0) 1.517084461s ago: executing program 7 (id=2818): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x50) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x0, r2, 0x1e, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair(0x18, 0x2, 0x1, 0x0) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 1.385250058s ago: executing program 1 (id=2819): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.296861424s ago: executing program 6 (id=2820): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) syz_pidfd_open(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) 1.267250085s ago: executing program 1 (id=2821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu<-0\t\t\t') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) io_setup(0x7, 0x0) io_submit(0x0, 0x0, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0xf0ff, r4, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 1.088322216s ago: executing program 1 (id=2822): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) 1.046868028s ago: executing program 0 (id=2823): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0xc010) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x80) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xb}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x34000}], 0x1}, 0x40) 961.968883ms ago: executing program 1 (id=2824): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x18522, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xd, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0xd, &(0x7f0000000000), 0x143}, 0x48) 883.803548ms ago: executing program 0 (id=2825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000140)={&(0x7f0000000100)=""/32, 0x20}) 804.485722ms ago: executing program 5 (id=2826): socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) 100.214954ms ago: executing program 5 (id=2827): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 90.282055ms ago: executing program 7 (id=2828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket$inet6_sctp(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x12, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r2}, &(0x7f0000000a40), &(0x7f0000000a80)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 47.960847ms ago: executing program 6 (id=2829): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = getpid() r3 = gettid() socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f00000004c0)={0x0, 0x0, 0x4}) getsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000280)=0x4) 44.274517ms ago: executing program 1 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xaf8, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 0 (id=2831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xb0, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) kernel console output (not intermixed with test programs): context=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 132.570994][ T6914] loop0: detected capacity change from 0 to 512 [ 133.355719][ T6940] loop0: detected capacity change from 0 to 256 [ 133.553199][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1129'. [ 134.019963][ T6967] netlink: 'syz.6.1138': attribute type 4 has an invalid length. [ 134.327742][ T3373] syz1: Port: 1 Link DOWN [ 134.332225][ T55] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.364674][ T1999] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.387623][ T1999] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.420217][ T1999] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.487158][ T6991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1143'. [ 134.947695][ T7020] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 134.983728][ T7020] bond2: (slave gretap1): making interface the new active one [ 135.026401][ T7020] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 135.154139][ T7034] loop7: detected capacity change from 0 to 1024 [ 135.165475][ T7034] EXT4-fs: Ignoring removed orlov option [ 135.191916][ T7034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.234700][ T28] audit: type=1400 audit(1771197587.892:510): avc: denied { map } for pid=7033 comm="syz.7.1160" path="/186/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.258266][ T28] audit: type=1400 audit(1771197587.892:511): avc: denied { execute } for pid=7033 comm="syz.7.1160" path="/186/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 135.333422][ T4409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.696882][ T7071] netlink: 'syz.6.1173': attribute type 13 has an invalid length. [ 136.093283][ T7091] netlink: 'syz.0.1180': attribute type 4 has an invalid length. [ 136.105130][ T7091] netlink: 'syz.0.1180': attribute type 4 has an invalid length. [ 136.151160][ T55] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 37546 - 0 [ 136.161393][ T55] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 37546 - 0 [ 136.180716][ T55] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 37546 - 0 [ 136.204777][ T55] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 37546 - 0 [ 137.277941][ T7123] loop1: detected capacity change from 0 to 512 [ 137.581956][ T7123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.692968][ T7123] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.833200][ T7123] EXT4-fs (loop1): shut down requested (0) [ 137.891279][ T28] audit: type=1400 audit(1771197590.552:512): avc: denied { setattr } for pid=7122 comm="syz.1.1190" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 138.031749][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.336757][ T7166] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1202'. [ 138.388073][ T7169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7169 comm=syz.6.1202 [ 138.607665][ T7173] loop7: detected capacity change from 0 to 128 [ 138.640721][ T10] Process accounting resumed [ 138.651265][ T10] FAT-fs (loop7): error, corrupted file size (i_pos 548, 512) [ 138.667796][ T10] FAT-fs (loop7): Filesystem has been set read-only [ 138.838369][ T7184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1209'. [ 138.913977][ T7188] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 139.085461][ T7197] netlink: 'syz.5.1214': attribute type 4 has an invalid length. [ 139.096790][ T7197] netlink: 'syz.5.1214': attribute type 4 has an invalid length. [ 139.262240][ T28] audit: type=1326 audit(1771197591.922:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 139.322122][ T28] audit: type=1326 audit(1771197591.922:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 139.351651][ T7208] tipc: Started in network mode [ 139.357191][ T28] audit: type=1326 audit(1771197591.952:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 139.380701][ T28] audit: type=1326 audit(1771197591.952:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 139.381790][ T7208] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 139.431539][ T7208] tipc: Enabling of bearer rejected, failed to enable media [ 139.452467][ T28] audit: type=1326 audit(1771197591.952:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 139.476282][ T28] audit: type=1326 audit(1771197591.952:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 139.500892][ T28] audit: type=1326 audit(1771197591.952:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7203 comm="syz.1.1217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 139.606164][ T7227] netlink: 'syz.6.1227': attribute type 4 has an invalid length. [ 139.668203][ T7233] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.737519][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1234'. [ 139.755824][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1234'. [ 139.817859][ T7248] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 139.833685][ T7248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.854006][ T7248] bond3: (slave bridge3): making interface the new active one [ 139.863540][ T7248] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 140.321729][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 140.321744][ T28] audit: type=1400 audit(1771197592.982:537): avc: denied { lock } for pid=7297 comm="syz.5.1259" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=19689 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 140.662309][ T7312] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1264'. [ 140.673099][ T7305] xt_l2tp: v2 tid > 0xffff: 37482740 [ 140.694434][ T7312] net_ratelimit: 8 callbacks suppressed [ 140.694449][ T7312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.801900][ T7329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1270'. [ 140.883817][ T7329] ip6gre1: entered promiscuous mode [ 140.896756][ T7329] ip6gre1: entered allmulticast mode [ 140.967711][ T7329] netlink: 'syz.5.1270': attribute type 6 has an invalid length. [ 140.984702][ T7329] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1270'. [ 141.047828][ T7348] SET target dimension over the limit! [ 141.339917][ T7365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.361429][ T7365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.550890][ T7382] ------------[ cut here ]------------ [ 141.556639][ T7382] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0) [ 141.572669][ T7382] WARNING: kernel/bpf/verifier.c:2769 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.5.1289/7382 [ 141.583809][ T7382] Modules linked in: [ 141.587917][ T7382] CPU: 1 UID: 0 PID: 7382 Comm: syz.5.1289 Not tainted syzkaller #0 PREEMPT(full) [ 141.597393][ T7382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.607723][ T7382] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 141.614162][ T7382] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 141.634015][ T7382] RSP: 0018:ffffc90000eb3368 EFLAGS: 00010246 [ 141.640378][ T7382] RAX: ffff8881041f3bf8 RBX: 0000000000000000 RCX: 0000000000000002 [ 141.648583][ T7382] RDX: ffffffff8681261d RSI: ffffffff867e6bc9 RDI: ffffffff871d3750 [ 141.656745][ T7382] RBP: ffff88810d7b3350 R08: 0000000000000000 R09: 0000000000000002 [ 141.664931][ T7382] R10: ffffffff893c9b38 R11: 0000000000000006 R12: ffff88810d7b3310 [ 141.673187][ T7382] R13: 0000000000000000 R14: ffff88810d7b335c R15: ffff88810d7b3348 [ 141.681339][ T7382] FS: 00007f0f1ea976c0(0000) GS:ffff8882ae9e4000(0000) knlGS:0000000000000000 [ 141.690713][ T7382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.697498][ T7382] CR2: 000000110c2509f7 CR3: 0000000117b84000 CR4: 00000000003506f0 [ 141.705751][ T7382] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.713905][ T7382] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 141.722046][ T7382] Call Trace: [ 141.725496][ T7382] [ 141.728552][ T7382] reg_set_min_max+0x21c/0x260 [ 141.733423][ T7382] check_cond_jmp_op+0x1355/0x1ab0 [ 141.738783][ T7382] do_check+0x4a9b/0x9860 [ 141.743228][ T7382] ? irqentry_exit+0x91/0x520 [ 141.748215][ T7382] do_check_common+0xd0b/0x1630 [ 141.753222][ T7382] bpf_check+0x2f6d/0xcc10 [ 141.757823][ T7382] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 141.763953][ T7382] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 141.770162][ T7382] ? irqentry_exit+0x91/0x520 [ 141.775078][ T7382] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 141.781093][ T7382] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 141.787047][ T7382] ? pcpu_block_update+0x24e/0x3b0 [ 141.792354][ T7382] ? _find_next_zero_bit+0x29/0xa0 [ 141.797592][ T7382] ? pcpu_block_refresh_hint+0x157/0x170 [ 141.803420][ T7382] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 141.809643][ T7382] ? irqentry_exit+0x91/0x520 [ 141.814464][ T7382] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 141.820647][ T7382] ? css_rstat_updated+0xbb/0x280 [ 141.825885][ T7382] ? mod_memcg_state+0x182/0x270 [ 141.830904][ T7382] ? __rcu_read_unlock+0x4e/0x70 [ 141.836000][ T7382] ? avc_has_perm_noaudit+0xab/0x130 [ 141.841380][ T7382] ? avc_has_perm+0x101/0x190 [ 141.846195][ T7382] ? selinux_bpf_prog_load+0x197/0x1c0 [ 141.851850][ T7382] ? security_bpf_prog_load+0x9e/0x140 [ 141.857483][ T7382] bpf_prog_load+0xf76/0x1140 [ 141.862319][ T7382] ? security_bpf+0x2b/0x90 [ 141.867019][ T7382] __sys_bpf+0x505/0x7e0 [ 141.871551][ T7382] __x64_sys_bpf+0x41/0x50 [ 141.876304][ T7382] x64_sys_call+0x10cb/0x3020 [ 141.881069][ T7382] do_syscall_64+0x12c/0x370 [ 141.885794][ T7382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.891901][ T7382] RIP: 0033:0x7f0f2003bf79 [ 141.896464][ T7382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.916431][ T7382] RSP: 002b:00007f0f1ea97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.925016][ T7382] RAX: ffffffffffffffda RBX: 00007f0f202b5fa0 RCX: 00007f0f2003bf79 [ 141.933103][ T7382] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 141.941217][ T7382] RBP: 00007f0f200d27e0 R08: 0000000000000000 R09: 0000000000000000 [ 141.949350][ T7382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.957625][ T7382] R13: 00007f0f202b6038 R14: 00007f0f202b5fa0 R15: 00007ffd2889dd78 [ 141.965818][ T7382] [ 141.969034][ T7382] ---[ end trace 0000000000000000 ]--- [ 142.002576][ T28] audit: type=1400 audit(1771197594.662:538): avc: denied { nlmsg_read } for pid=7395 comm="syz.5.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.051355][ T7401] loop0: detected capacity change from 0 to 512 [ 142.059037][ T7401] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.073382][ T7401] EXT4-fs (loop0): 1 truncate cleaned up [ 142.079960][ T7401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.338578][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.652808][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.703985][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.790614][ T7406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 143.002603][ T7421] loop0: detected capacity change from 0 to 4096 [ 143.022427][ T7421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.114335][ T28] audit: type=1400 audit(1771197595.772:539): avc: denied { unmount } for pid=7425 comm="syz.5.1302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 143.283751][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.731710][ T28] audit: type=1400 audit(1771197596.392:540): avc: denied { watch } for pid=7456 comm="syz.1.1316" path="/" dev="ramfs" ino=20668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 143.792443][ T28] audit: type=1400 audit(1771197596.392:541): avc: denied { execute_no_trans } for pid=7456 comm="syz.1.1316" path="/file0" dev="ramfs" ino=20669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 144.168303][ T7471] raw_sendmsg: syz.1.1319 forgot to set AF_INET. Fix it! [ 144.656744][ T28] audit: type=1400 audit(1771197597.322:542): avc: denied { setopt } for pid=7491 comm="syz.6.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.783095][ T7480] bond2: Removing last arp target with arp_interval on [ 144.801847][ T7480] bond2: entered promiscuous mode [ 144.808652][ T7480] bond2: entered allmulticast mode [ 144.817278][ T7480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.558851][ T7513] tipc: Failed to remove unknown binding: 66,0,0/0:1527190471/1527190473 [ 145.574037][ T7513] tipc: Failed to remove unknown binding: 66,0,0/0:1527190471/1527190472 [ 145.730612][ T28] audit: type=1326 audit(1771197598.392:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7517 comm="syz.0.1337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x0 [ 146.019518][ T7529] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1341'. [ 146.301205][ T7545] lo: Caught tx_queue_len zero misconfig [ 146.767646][ T28] audit: type=1400 audit(1771197599.422:544): avc: denied { read } for pid=7567 comm="syz.1.1356" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.938109][ T28] audit: type=1400 audit(1771197599.432:545): avc: denied { open } for pid=7567 comm="syz.1.1356" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.038000][ T28] audit: type=1400 audit(1771197599.472:546): avc: denied { ioctl } for pid=7567 comm="syz.1.1356" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 147.622533][ T1999] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.629315][ T1999] Bluetooth: hci0: Frame reassembly failed (-84) [ 147.661997][ T28] audit: type=1400 audit(1771197600.312:547): avc: denied { ioctl } for pid=7592 comm="syz.0.1364" path="socket:[20050]" dev="sockfs" ino=20050 ioctlcmd=0x48cb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.398692][ T7609] bond3: (slave ip6gretap1): making interface the new active one [ 148.407336][ T7609] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 148.417059][ T70] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.428947][ T70] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.438203][ T70] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.447306][ T70] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.097619][ T7626] netlink: 'syz.7.1385': attribute type 4 has an invalid length. [ 149.160862][ T7626] netlink: 'syz.7.1385': attribute type 4 has an invalid length. [ 149.188639][ T7628] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1374'. [ 149.374941][ T28] audit: type=1326 audit(1771197858.030:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.5.1378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x0 [ 149.698712][ T3588] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 150.798785][ T28] audit: type=1400 audit(1771197859.460:549): avc: denied { read } for pid=7664 comm="syz.5.1389" lport=51641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 150.982799][ T28] audit: type=1400 audit(1771197859.640:550): avc: denied { create } for pid=7666 comm="syz.7.1391" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 151.491847][ T28] audit: type=1326 audit(1771197860.150:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7676 comm="syz.1.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x0 [ 151.857073][ T28] audit: type=1400 audit(1771197860.510:552): avc: denied { unlink } for pid=4409 comm="syz-executor" name="file0" dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 152.101726][ T28] audit: type=1400 audit(1771197860.760:553): avc: denied { bind } for pid=7701 comm="syz.1.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 152.916934][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.935318][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.946326][ T7698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.103166][ T7715] loop1: detected capacity change from 0 to 512 [ 153.144976][ T7715] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 153.158106][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 153.372460][ T70] bridge_slave_1: left allmulticast mode [ 153.398758][ T70] bridge_slave_1: left promiscuous mode [ 153.408710][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.465042][ T70] bridge_slave_0: left allmulticast mode [ 153.470777][ T70] bridge_slave_0: left promiscuous mode [ 153.477717][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.586725][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.615114][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.645702][ T70] bond0 (unregistering): Released all slaves [ 153.703544][ T70] bond1 (unregistering): (slave veth3): Releasing active interface [ 153.726528][ T70] bond1 (unregistering): (slave batadv1): Releasing active interface [ 153.754993][ T70] bond1 (unregistering): Released all slaves [ 153.861460][ T70] hsr_slave_0: left promiscuous mode [ 153.875715][ T70] hsr_slave_1: left promiscuous mode [ 153.883519][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.902157][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.939974][ T28] audit: type=1326 audit(1771197862.600:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7740 comm="syz.6.1410" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde8f96bf79 code=0x0 [ 154.058004][ T70] team0 (unregistering): Port device team_slave_1 removed [ 154.085083][ T70] team0 (unregistering): Port device team_slave_0 removed [ 154.345221][ T7771] netlink: 'syz.0.1415': attribute type 13 has an invalid length. [ 154.976775][ T7872] loop1: detected capacity change from 0 to 2048 [ 155.069083][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1425'. [ 155.091896][ T7872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.160496][ T7872] netlink: 'syz.1.1422': attribute type 2 has an invalid length. [ 155.194830][ T7872] netlink: 199792 bytes leftover after parsing attributes in process `syz.1.1422'. [ 155.328156][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.398122][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1435'. [ 156.085097][ T7935] bond4: Removing last arp target with arp_interval on [ 156.121898][ T7935] bond4: entered promiscuous mode [ 156.134153][ T7935] bond4: entered allmulticast mode [ 156.171780][ T7935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.511195][ T7955] batadv_slave_1: entered promiscuous mode [ 156.531843][ T7955] pimreg: entered allmulticast mode [ 156.546500][ T7955] pimreg: left allmulticast mode [ 156.605288][ T7954] batadv_slave_1: left promiscuous mode [ 156.790604][ T7965] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 156.810137][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.834743][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.946200][ T7980] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1450'. [ 156.989656][ T7984] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 157.201927][ T7995] bond3: Removing last arp target with arp_interval on [ 157.221328][ T7995] bond3: entered promiscuous mode [ 157.226856][ T7995] bond3: entered allmulticast mode [ 157.233190][ T7995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.307891][ T28] audit: type=1400 audit(1771197865.960:555): avc: denied { write } for pid=8007 comm="syz.7.1460" path="socket:[22114]" dev="sockfs" ino=22114 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 157.340651][ T28] audit: type=1400 audit(1771197866.000:556): avc: denied { open } for pid=8009 comm="syz.5.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 157.364594][ T28] audit: type=1400 audit(1771197866.000:557): avc: denied { kernel } for pid=8009 comm="syz.5.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 157.386600][ T28] audit: type=1400 audit(1771197866.000:558): avc: denied { tracepoint } for pid=8009 comm="syz.5.1461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 157.437649][ T8016] syzkaller0: entered promiscuous mode [ 157.443316][ T8016] syzkaller0: entered allmulticast mode [ 157.454321][ T8016] tipc: Enabled bearer , priority 0 [ 157.461880][ T8016] tipc: Resetting bearer [ 157.484976][ T8016] tipc: Disabling bearer [ 157.497395][ T28] audit: type=1400 audit(1771197866.130:559): avc: denied { write } for pid=8011 comm="syz.7.1464" name="file2" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.527985][ T28] audit: type=1400 audit(1771197866.130:560): avc: denied { open } for pid=8011 comm="syz.7.1464" path="/248/file2" dev="tmpfs" ino=1312 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.591171][ T28] audit: type=1400 audit(1771197866.130:561): avc: denied { ioctl } for pid=8011 comm="syz.7.1464" path="/248/file2" dev="tmpfs" ino=1312 ioctlcmd=0x1282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.615340][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'. [ 157.628812][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'. [ 157.639038][ T28] audit: type=1400 audit(1771197866.290:562): avc: denied { sys_module } for pid=8019 comm="syz.7.1468" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 157.672933][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'. [ 157.835561][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'. [ 157.855175][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1468'. [ 158.204605][ T28] audit: type=1400 audit(1771197866.370:563): avc: denied { setattr } for pid=8028 comm="syz.6.1469" name="RDS" dev="sockfs" ino=21396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.227415][ T28] audit: type=1400 audit(1771197866.580:564): avc: denied { create } for pid=8034 comm="syz.6.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 159.146768][ T8138] netlink: 'syz.1.1478': attribute type 1 has an invalid length. [ 159.245853][ T8079] bond4: Removing last arp target with arp_interval on [ 159.270385][ T8079] bond4: entered promiscuous mode [ 159.325183][ T8079] bond4: entered allmulticast mode [ 159.359049][ T8079] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.458489][ T8138] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.495906][ T8139] vlan2: entered promiscuous mode [ 159.501004][ T8139] bond5: entered promiscuous mode [ 159.576678][ T8140] bond5: (slave geneve2): making interface the new active one [ 159.610299][ T8140] geneve2: entered promiscuous mode [ 159.623209][ T4409] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 159.645811][ T8140] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 159.664930][ T7834] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.676951][ T7834] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.695591][ T7834] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.712606][ T4409] CPU: 0 UID: 0 PID: 4409 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 159.712650][ T4409] Tainted: [W]=WARN [ 159.712695][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 159.712717][ T4409] Call Trace: [ 159.712739][ T4409] [ 159.712748][ T4409] __dump_stack+0x1d/0x30 [ 159.712781][ T4409] dump_stack_lvl+0x95/0xd0 [ 159.712863][ T4409] dump_stack+0x15/0x1b [ 159.712914][ T4409] dump_header+0x80/0x240 [ 159.712937][ T4409] oom_kill_process+0x295/0x350 [ 159.712972][ T4409] out_of_memory+0x97d/0xb80 [ 159.713009][ T4409] try_charge_memcg+0x62e/0xa10 [ 159.713044][ T4409] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 159.713131][ T4409] __swap_cache_prepare_and_add+0x386/0x530 [ 159.713168][ T4409] swap_cache_alloc_folio+0xa2/0x120 [ 159.713202][ T4409] swap_cluster_readahead+0x26e/0x3d0 [ 159.713307][ T4409] swapin_readahead+0xde/0x840 [ 159.713336][ T4409] ? __rcu_read_unlock+0x4e/0x70 [ 159.713355][ T4409] ? __perf_event_task_sched_in+0xa65/0xad0 [ 159.713394][ T4409] ? __list_add_valid_or_report+0x38/0xe0 [ 159.713441][ T4409] ? xfd_validate_state+0x45/0xf0 [ 159.713477][ T4409] ? __rcu_read_unlock+0x4e/0x70 [ 159.713578][ T4409] ? swap_cache_get_folio+0x26f/0x280 [ 159.713609][ T4409] do_swap_page+0x309/0x2210 [ 159.713680][ T4409] ? __schedule+0x85a/0xd40 [ 159.713707][ T4409] ? __rcu_read_lock+0x36/0x50 [ 159.713728][ T4409] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 159.713779][ T4409] handle_mm_fault+0xb40/0x3020 [ 159.713810][ T4409] ? vma_start_read+0x1c7/0x2c0 [ 159.713835][ T4409] do_user_addr_fault+0x62f/0x1050 [ 159.713921][ T4409] ? trace_page_fault_user+0x1f/0xe0 [ 159.714033][ T4409] exc_page_fault+0x62/0xa0 [ 159.714065][ T4409] asm_exc_page_fault+0x26/0x30 [ 159.714120][ T4409] RIP: 0033:0x7f01c3c87197 [ 159.714140][ T4409] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 159.714230][ T4409] RSP: 002b:00007ffe9671aa70 EFLAGS: 00010202 [ 159.714252][ T4409] RAX: 0000000000000000 RBX: 0000555582937500 RCX: 00007f01c3c87197 [ 159.714356][ T4409] RDX: 00007ffe9671aab0 RSI: 0000000000000000 RDI: 0000000000000000 [ 159.714370][ T4409] RBP: 00007ffe9671ab1c R08: 0000000000000000 R09: 0000000000000000 [ 159.714392][ T4409] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 159.714407][ T4409] R13: 00000000000927c0 R14: 0000000000026e82 R15: 00007ffe9671ab70 [ 159.714428][ T4409] [ 159.734503][ T7834] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.985392][ T4409] memory: usage 307200kB, limit 307200kB, failcnt 4660 [ 159.992309][ T4409] memory+swap: usage 323852kB, limit 9007199254740988kB, failcnt 0 [ 160.033076][ T4409] kmem: usage 298132kB, limit 9007199254740988kB, failcnt 0 [ 160.069839][ T4409] Memory cgroup stats for /syz7: [ 160.081947][ T4409] cache 0 [ 160.107189][ T4409] rss 8192 [ 160.110471][ T4409] shmem 0 [ 160.114005][ T4409] mapped_file 0 [ 160.123467][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 160.136309][ T4409] dirty 0 [ 160.142388][ T4409] writeback 0 [ 160.152627][ T4409] workingset_refault_anon 502 [ 160.170972][ T4409] workingset_refault_file 0 [ 160.176199][ T4409] swap 17035264 [ 160.180021][ T4409] swapcached 17408000 [ 160.185969][ T4409] pgpgin 85170 [ 160.189712][ T4409] pgpgout 85166 [ 160.210810][ T4409] pgfault 101059 [ 160.226010][ T4409] pgmajfault 79 [ 160.230157][ T4409] inactive_anon 0 [ 160.234807][ T4409] active_anon 12288 [ 160.241616][ T4409] inactive_file 0 [ 160.249337][ T4409] active_file 0 [ 160.260370][ T4409] unevictable 0 [ 160.269654][ T4409] hierarchical_memory_limit 314572800 [ 160.275959][ T4409] hierarchical_memsw_limit 9223372036854771712 [ 160.299424][ T4409] total_cache 0 [ 160.313225][ T4409] total_rss 8192 [ 160.319275][ T4409] total_shmem 0 [ 160.322884][ T4409] total_mapped_file 0 [ 160.327263][ T4409] total_dirty 0 [ 160.330804][ T4409] total_writeback 0 [ 160.335585][ T4409] total_workingset_refault_anon 502 [ 160.341296][ T4409] total_workingset_refault_file 0 [ 160.347114][ T4409] total_swap 17035264 [ 160.351307][ T4409] total_swapcached 17408000 [ 160.359645][ T4409] total_pgpgin 85170 [ 160.363644][ T4409] total_pgpgout 85166 [ 160.368565][ T4409] total_pgfault 101059 [ 160.372756][ T4409] total_pgmajfault 79 [ 160.377468][ T4409] total_inactive_anon 0 [ 160.381732][ T4409] total_active_anon 12288 [ 160.388417][ T4409] total_inactive_file 0 [ 160.392805][ T4409] total_active_file 0 [ 160.397577][ T4409] total_unevictable 0 [ 160.401660][ T4409] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1484,pid=8076,uid=0 [ 160.417691][ T4409] Memory cgroup out of memory: Killed process 8076 (syz.7.1484) total-vm:96336kB, anon-rss:1252kB, file-rss:22384kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 161.035728][ T8178] bond4: Removing last arp target with arp_interval on [ 161.063263][ T8178] bond4: entered promiscuous mode [ 161.069673][ T8178] bond4: entered allmulticast mode [ 161.094257][ T8178] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.446299][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1500'. [ 161.478380][ T8193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.499845][ T8193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.747502][ T8242] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 163.787540][ T8242] ref_ctr increment failed for inode: 0x6a3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881052c86c0 [ 163.806959][ T8241] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 163.816743][ T8241] ref_ctr decrement failed for inode: 0x6a3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881052c86c0 [ 163.844390][ T8241] uprobe: syz.0.1515:8241 failed to unregister, leaking uprobe [ 163.909663][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 163.909682][ T28] audit: type=1400 audit(1771197872.570:597): avc: denied { connect } for pid=8245 comm="syz.6.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 164.135937][ T8270] syz_tun: entered allmulticast mode [ 164.154994][ T8270] syz_tun: left allmulticast mode [ 164.889955][ T8295] syz_tun: entered allmulticast mode [ 165.585432][ T8331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.612737][ T8331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.616495][ T8375] geneve2: entered promiscuous mode [ 166.643585][ T7842] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 54526 - 0 [ 166.691452][ T7842] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 54526 - 0 [ 166.707091][ T7842] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 54526 - 0 [ 166.716919][ T28] audit: type=1400 audit(1771197875.370:598): avc: denied { watch } for pid=8379 comm="syz.1.1558" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 166.759102][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 166.816923][ T8387] bond6: entered promiscuous mode [ 166.825585][ T8387] bond6: entered allmulticast mode [ 166.844773][ T8387] 8021q: adding VLAN 0 to HW filter on device bond6 [ 166.888492][ T8387] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.897039][ T8387] bond7: entered promiscuous mode [ 166.902403][ T8387] bond7: entered allmulticast mode [ 166.908925][ T8387] bond6: (slave bond7): Enslaving as an active interface with an up link [ 168.397383][ T8375] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 168.524017][ T8375] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 168.685170][ T8375] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 169.100026][ T7859] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 54526 - 0 [ 169.149704][ T7836] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 54526 - 0 [ 169.185215][ T7836] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 54526 - 0 [ 169.270292][ T7836] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 54526 - 0 [ 169.472204][ T8461] netlink: 'syz.1.1575': attribute type 83 has an invalid length. [ 169.696137][ T8469] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.756288][ T8469] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.828217][ T8469] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.878662][ T8469] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.944415][ T7838] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.024438][ T7859] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.034920][ T7859] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.070419][ T7859] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.961018][ T28] audit: type=1326 audit(1771197879.620:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.5.1590" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x0 [ 172.306034][ T28] audit: type=1326 audit(1771197880.910:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7fc00000 [ 172.432952][ T28] audit: type=1326 audit(1771197880.910:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f07ee23bf79 code=0x7fc00000 [ 172.560382][ T28] audit: type=1326 audit(1771197880.910:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7fc00000 [ 172.684039][ T28] audit: type=1326 audit(1771197880.910:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7fc00000 [ 172.789483][ T28] audit: type=1326 audit(1771197880.910:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7fc00000 [ 172.814381][ T28] audit: type=1326 audit(1771197880.910:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7fc00000 [ 172.837769][ T28] audit: type=1400 audit(1771197880.970:606): avc: denied { cpu } for pid=8532 comm="syz.0.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 172.856916][ T28] audit: type=1400 audit(1771197881.200:607): avc: denied { accept } for pid=8538 comm="syz.5.1604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.458860][ T28] audit: type=1400 audit(1771197882.120:608): avc: denied { write } for pid=8567 comm="syz.7.1616" path="socket:[23243]" dev="sockfs" ino=23243 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 175.547596][ T8597] loop1: detected capacity change from 0 to 128 [ 176.417008][ T8637] netlink: 'syz.5.1638': attribute type 10 has an invalid length. [ 176.449487][ T8637] dummy0: left allmulticast mode [ 176.499430][ T8637] dummy0: left promiscuous mode [ 176.504694][ T8637] bridge0: port 3(dummy0) entered disabled state [ 176.513400][ T8637] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 176.522854][ T8637] team0: Failed to send options change via netlink (err -105) [ 176.530514][ T8637] team0: Port device dummy0 added [ 178.104032][ T8673] loop1: detected capacity change from 0 to 512 [ 178.133098][ T8673] msdos: Bad value for 'check' [ 178.490145][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1656'. [ 178.503263][ T8689] loop1: detected capacity change from 0 to 512 [ 178.511911][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1656'. [ 178.523104][ T8689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.554068][ T8689] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.608900][ T8689] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #2: comm syz.1.1659: corrupted inode contents [ 178.644742][ T8689] EXT4-fs (loop1): Remounting filesystem read-only [ 178.710255][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.724549][ T7842] __quota_error: 1 callbacks suppressed [ 178.724566][ T7842] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 178.888338][ T8707] tipc: Failed to remove unknown binding: 66,1,1/0:2276682556/2276682558 [ 178.904163][ T8707] tipc: Failed to remove unknown binding: 66,1,1/0:2276682556/2276682558 [ 179.497175][ T28] audit: type=1326 audit(1771198123.154:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.5.1675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x0 [ 180.144086][ T8748] tipc: Failed to remove unknown binding: 66,1,1/0:3498239934/3498239936 [ 180.206418][ T8748] tipc: Failed to remove unknown binding: 66,1,1/0:3498239934/3498239936 [ 180.628695][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1683'. [ 181.079168][ T28] audit: type=1400 audit(1771198124.734:611): avc: denied { getopt } for pid=8769 comm="syz.0.1687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.131682][ T28] audit: type=1326 audit(1771198124.784:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 181.159038][ T28] audit: type=1326 audit(1771198124.814:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 181.209339][ T28] audit: type=1326 audit(1771198124.814:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 181.233568][ T28] audit: type=1326 audit(1771198124.814:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 181.264213][ T28] audit: type=1326 audit(1771198124.814:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 181.289799][ T28] audit: type=1326 audit(1771198124.814:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 181.314839][ T8784] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1695'. [ 181.315463][ T28] audit: type=1326 audit(1771198124.814:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8773 comm="syz.0.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 181.440632][ T8784] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8784 comm=syz.6.1695 [ 181.522025][ T8781] syz.7.1694 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 181.604729][ T8781] CPU: 0 UID: 0 PID: 8781 Comm: syz.7.1694 Tainted: G W syzkaller #0 PREEMPT(full) [ 181.604778][ T8781] Tainted: [W]=WARN [ 181.604787][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.604873][ T8781] Call Trace: [ 181.604881][ T8781] [ 181.604888][ T8781] __dump_stack+0x1d/0x30 [ 181.604921][ T8781] dump_stack_lvl+0x95/0xd0 [ 181.604954][ T8781] dump_stack+0x15/0x1b [ 181.604975][ T8781] dump_header+0x80/0x240 [ 181.604997][ T8781] oom_kill_process+0x295/0x350 [ 181.605036][ T8781] out_of_memory+0x97d/0xb80 [ 181.605129][ T8781] try_charge_memcg+0x62e/0xa10 [ 181.605174][ T8781] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 181.605214][ T8781] __swap_cache_prepare_and_add+0x386/0x530 [ 181.605257][ T8781] swap_cache_alloc_folio+0xa2/0x120 [ 181.605318][ T8781] swap_cluster_readahead+0x26e/0x3d0 [ 181.605373][ T8781] swapin_readahead+0xde/0x840 [ 181.605406][ T8781] ? _raw_spin_unlock+0x9/0x30 [ 181.605433][ T8781] ? swap_put_entries_cluster+0x385/0x3a0 [ 181.605474][ T8781] ? swap_put_entries_cluster+0x161/0x3a0 [ 181.605510][ T8781] ? __rcu_read_unlock+0x4e/0x70 [ 181.605583][ T8781] ? swap_cache_get_folio+0x26f/0x280 [ 181.605655][ T8781] do_swap_page+0x309/0x2210 [ 181.605682][ T8781] ? css_rstat_updated+0xbb/0x280 [ 181.605773][ T8781] ? __rcu_read_lock+0x36/0x50 [ 181.605798][ T8781] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 181.605867][ T8781] handle_mm_fault+0xb40/0x3020 [ 181.605905][ T8781] ? vma_start_read+0x1c7/0x2c0 [ 181.605938][ T8781] do_user_addr_fault+0x62f/0x1050 [ 181.606078][ T8781] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 181.606113][ T8781] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 181.606214][ T8781] ? trace_page_fault_user+0x1f/0xe0 [ 181.606263][ T8781] exc_page_fault+0x62/0xa0 [ 181.606297][ T8781] asm_exc_page_fault+0x26/0x30 [ 181.606323][ T8781] RIP: 0033:0x7f01c3b999d0 [ 181.606344][ T8781] Code: c4 4c 0f 42 e0 83 3d fa e3 3a 00 00 0f 8e d9 fd ff ff e8 f3 87 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d be bc ed 00 e8 03 00 00 48 8d 1d bf c5 3a 00 e8 ca 30 13 00 [ 181.606374][ T8781] RSP: 002b:00007ffe9671a8e0 EFLAGS: 00010216 [ 181.606390][ T8781] RAX: 000000000002c4ee RBX: 00007f01c3f47da0 RCX: 000000000002c308 [ 181.606430][ T8781] RDX: 00000000000001e6 RSI: 00007ffe9671a8c0 RDI: 0000000000000001 [ 181.606442][ T8781] RBP: 00007f01c3f47da0 R08: 000000001cfd05d4 R09: 7fffffffffffffff [ 181.606456][ T8781] R10: 3fffffffffffffff R11: 0000000000000246 R12: 000000000002c723 [ 181.606495][ T8781] R13: 00007f01c3f45fac R14: 000000000002c488 R15: 00007ffe9671a9e0 [ 181.606519][ T8781] [ 181.608066][ T8781] memory: usage 278748kB, limit 307200kB, failcnt 4798 [ 181.913109][ T8802] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 181.939028][ T8802] bond6 (unregistering): Released all slaves [ 181.955140][ T8781] memory+swap: usage 173808kB, limit 9007199254740988kB, failcnt 0 [ 181.979982][ T8781] kmem: usage 142364kB, limit 9007199254740988kB, failcnt 0 [ 182.051516][ T8781] Memory cgroup stats for /syz7: [ 182.051813][ T8781] cache 0 [ 182.074513][ T8781] rss 4096 [ 182.077710][ T8781] shmem 0 [ 182.084723][ T8781] mapped_file 0 [ 182.088443][ T8781] dirty 0 [ 182.101881][ T8781] writeback 4096 [ 182.144992][ T8781] workingset_refault_anon 538 [ 182.149813][ T8781] workingset_refault_file 0 [ 182.156367][ T8781] swap 229376 [ 182.159725][ T8781] swapcached 30789632 [ 182.286192][ T8781] pgpgin 121071 [ 182.289908][ T8781] pgpgout 121064 [ 182.293478][ T8781] pgfault 124913 [ 182.297125][ T8781] pgmajfault 96 [ 182.300657][ T8781] inactive_anon 28672 [ 182.304699][ T8781] active_anon 0 [ 182.308248][ T8781] inactive_file 0 [ 182.311960][ T8781] active_file 0 [ 182.315517][ T8781] unevictable 0 [ 182.319050][ T8781] hierarchical_memory_limit 314572800 [ 182.324658][ T8781] hierarchical_memsw_limit 9223372036854771712 [ 182.330832][ T8781] total_cache 0 [ 182.334320][ T8781] total_rss 4096 [ 182.388144][ T8781] total_shmem 0 [ 182.391621][ T8781] total_mapped_file 0 [ 182.430805][ T8781] total_dirty 0 [ 182.462535][ T8781] total_writeback 4096 [ 182.476892][ T8781] total_workingset_refault_anon 538 [ 182.502481][ T8781] total_workingset_refault_file 0 [ 182.534352][ T8781] total_swap 229376 [ 182.549235][ T8781] total_swapcached 30789632 [ 182.574067][ T8781] total_pgpgin 121071 [ 182.591787][ T8781] total_pgpgout 121064 [ 182.608919][ T8781] total_pgfault 124913 [ 182.624806][ T8781] total_pgmajfault 96 [ 182.642182][ T8781] total_inactive_anon 28672 [ 182.661201][ T8781] total_active_anon 0 [ 182.677104][ T8781] total_inactive_file 0 [ 182.697292][ T8781] total_active_file 0 [ 182.715389][ T8781] total_unevictable 0 [ 182.732609][ T8781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1694,pid=8781,uid=0 [ 182.793323][ T8781] Memory cgroup out of memory: Killed process 8781 (syz.7.1694) total-vm:94024kB, anon-rss:1224kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 183.023623][ T8782] syz.7.1694 (8782) used greatest stack depth: 6136 bytes left [ 183.199618][ T8837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=8837 comm=syz.6.1713 [ 183.269238][ T6973] IPVS: starting estimator thread 0... [ 183.374442][ T8840] IPVS: using max 2064 ests per chain, 103200 per kthread [ 183.577916][ T7838] IPVS: stop unused estimator thread 0... [ 185.093063][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 185.093079][ T28] audit: type=1400 audit(1771198128.734:675): avc: denied { view } for pid=8885 comm="syz.0.1733" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 185.403399][ T28] audit: type=1400 audit(1771198129.054:676): avc: denied { ioctl } for pid=8900 comm="syz.1.1736" path="/dev/input/event2" dev="devtmpfs" ino=244 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 185.657892][ T28] audit: type=1400 audit(1771198129.284:677): avc: denied { lock } for pid=8908 comm="syz.1.1739" path="socket:[30897]" dev="sockfs" ino=30897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 185.729460][ T28] audit: type=1400 audit(1771198129.354:678): avc: denied { setopt } for pid=8914 comm="syz.1.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 185.785063][ T8917] tipc: Failed to remove unknown binding: 66,1,1/0:4105048981/4105048983 [ 185.804072][ T8917] tipc: Failed to remove unknown binding: 66,1,1/0:4105048981/4105048983 [ 186.029151][ T28] audit: type=1400 audit(1771198129.684:679): avc: denied { ioctl } for pid=8920 comm="syz.6.1744" path="socket:[31087]" dev="sockfs" ino=31087 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.088579][ T28] audit: type=1400 audit(1771198129.734:680): avc: denied { bind } for pid=8920 comm="syz.6.1744" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 186.304904][ T8933] netlink: 'syz.6.1748': attribute type 13 has an invalid length. [ 186.664494][ T8941] netlink: 508 bytes leftover after parsing attributes in process `syz.1.1750'. [ 186.844491][ T8939] netlink: 'syz.1.1750': attribute type 29 has an invalid length. [ 186.874703][ T8940] netlink: 'syz.1.1750': attribute type 29 has an invalid length. [ 186.936624][ T8938] delete_channel: no stack [ 186.980778][ T8945] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1752'. [ 187.001623][ T8947] loop1: detected capacity change from 0 to 128 [ 187.041639][ T8945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8945 comm=syz.6.1752 [ 187.075787][ T8945] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1752'. [ 187.097557][ T28] audit: type=1400 audit(1771198130.754:681): avc: denied { watch watch_reads } for pid=8951 comm="syz.1.1754" path="/" dev="ramfs" ino=29106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 187.141758][ T8945] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1752'. [ 187.325309][ T8967] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 187.347093][ T28] audit: type=1400 audit(1771198131.004:682): avc: denied { read } for pid=8956 comm="syz.7.1757" name="@" dev="tmpfs" ino=1679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.826580][ T8972] netlink: 'syz.5.1762': attribute type 4 has an invalid length. [ 187.857594][ T8972] netlink: 'syz.5.1762': attribute type 4 has an invalid length. [ 187.999345][ T8977] smc: net device hsr0 applied user defined pnetid SYZ2 [ 188.017200][ T8977] smc: net device hsr0 erased user defined pnetid SYZ2 [ 188.085627][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1766'. [ 188.116323][ T8981] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8981 comm=syz.7.1766 [ 189.524862][ T28] audit: type=1400 audit(1771198133.184:683): avc: denied { getopt } for pid=9012 comm="syz.6.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 189.633631][ T9020] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1778'. [ 189.643236][ T9020] netlink: 3074 bytes leftover after parsing attributes in process `syz.1.1778'. [ 189.656585][ T28] audit: type=1400 audit(1771198133.314:684): avc: denied { read } for pid=9015 comm="syz.6.1777" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 189.783070][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1780'. [ 189.852053][ T9025] netlink: 'syz.7.1780': attribute type 5 has an invalid length. [ 189.866276][ T9029] loop1: detected capacity change from 0 to 512 [ 189.900174][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1780'. [ 189.921929][ T9029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.935186][ T9029] ext4 filesystem being mounted at /316/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.095015][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.127302][ T9038] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=9038 comm=syz.1.1783 [ 190.140095][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 190.140113][ T28] audit: type=1400 audit(1771198133.784:687): avc: denied { bind } for pid=9037 comm="syz.1.1783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.171714][ T9038] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1783'. [ 190.718660][ T9060] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 190.718660][ T9060] The task syz.1.1790 (9060) triggered the difference, watch for misbehavior. [ 191.208837][ T9] IPVS: starting estimator thread 0... [ 191.324653][ T9067] IPVS: using max 2208 ests per chain, 110400 per kthread [ 191.405474][ T9078] netlink: 'syz.6.1798': attribute type 10 has an invalid length. [ 191.436009][ T9078] team0: Port device dummy0 added [ 191.792593][ T28] audit: type=1400 audit(1771198135.444:688): avc: denied { map } for pid=9086 comm="syz.5.1802" path="pipe:[31367]" dev="pipefs" ino=31367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 192.737613][ T9097] netlink: 'syz.1.1814': attribute type 1 has an invalid length. [ 192.770009][ T9097] 8021q: adding VLAN 0 to HW filter on device bond10 [ 192.793597][ T9101] tipc: Failed to remove unknown binding: 66,1,1/0:2773632429/2773632431 [ 192.804283][ T9097] bond10: entered allmulticast mode [ 192.810046][ T9101] tipc: Failed to remove unknown binding: 66,1,1/0:2773632429/2773632431 [ 192.848162][ T9097] macvlan2: entered promiscuous mode [ 192.853533][ T9097] macvlan2: entered allmulticast mode [ 192.869650][ T9097] bond10: entered promiscuous mode [ 192.890351][ T9097] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.900310][ T9097] bond10: left promiscuous mode [ 192.919474][ T9114] xt_TPROXY: Can be used only with -p tcp or -p udp [ 193.038026][ T9121] loop1: detected capacity change from 0 to 512 [ 193.096074][ T9121] EXT4-fs warning (device loop1): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 193.133035][ T9121] EXT4-fs (loop1): mount failed [ 193.467112][ T9131] tipc: Failed to remove unknown binding: 66,0,0/0:303759531/303759533 [ 193.476555][ T9131] tipc: Failed to remove unknown binding: 66,0,0/0:303759531/303759532 [ 193.508363][ T9131] tipc: Failed to remove unknown binding: 66,0,0/0:303759531/303759533 [ 193.524567][ T9131] tipc: Failed to remove unknown binding: 66,0,0/0:303759531/303759532 [ 193.568903][ T28] audit: type=1400 audit(1771198137.224:689): avc: denied { read } for pid=9132 comm="syz.0.1817" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 193.572890][ T9133] netlink: 'syz.0.1817': attribute type 8 has an invalid length. [ 193.600804][ T9133] __nla_validate_parse: 1 callbacks suppressed [ 193.600871][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 193.620953][ T9133] bond0: entered promiscuous mode [ 193.629968][ T28] audit: type=1400 audit(1771198137.224:690): avc: denied { open } for pid=9132 comm="syz.0.1817" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 193.646825][ T9133] gretap0: entered promiscuous mode [ 193.682138][ T9133] veth1_to_bond: entered promiscuous mode [ 193.694507][ T28] audit: type=1400 audit(1771198137.224:691): avc: denied { ioctl } for pid=9132 comm="syz.0.1817" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 193.727073][ T9133] hsr1: entered promiscuous mode [ 193.823319][ T28] audit: type=1326 audit(1771198137.464:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.5.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 193.857029][ T28] audit: type=1326 audit(1771198137.464:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.5.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 193.881002][ T28] audit: type=1326 audit(1771198137.464:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.5.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 193.905901][ T28] audit: type=1326 audit(1771198137.464:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.5.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 193.929931][ T28] audit: type=1326 audit(1771198137.464:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9136 comm="syz.5.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 194.038769][ T9155] xfrm0: entered promiscuous mode [ 194.093809][ T9160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1829'. [ 194.909657][ T9171] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1832'. [ 195.071756][ T9191] SELinux: failed to load policy [ 195.353935][ T9207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1843'. [ 195.486778][ T6973] Process accounting resumed [ 195.612504][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 195.612523][ T28] audit: type=1326 audit(1771198139.264:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.643265][ T28] audit: type=1326 audit(1771198139.264:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.667114][ T28] audit: type=1326 audit(1771198139.264:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.692183][ T28] audit: type=1326 audit(1771198139.264:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.716260][ T28] audit: type=1326 audit(1771198139.294:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.743598][ T28] audit: type=1326 audit(1771198139.294:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.767639][ T28] audit: type=1326 audit(1771198139.294:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.796344][ T28] audit: type=1326 audit(1771198139.294:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.820708][ T28] audit: type=1326 audit(1771198139.294:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 195.844591][ T28] audit: type=1326 audit(1771198139.294:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9217 comm="syz.1.1847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 196.632333][ T9260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9260 comm=syz.5.1864 [ 196.645661][ T9260] dummy0: entered promiscuous mode [ 196.651249][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1864'. [ 196.663184][ T9260] team0: Port device dummy0 removed [ 196.669103][ T9260] dummy0 (unregistering): left promiscuous mode [ 196.683626][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1865'. [ 198.796219][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1881'. [ 198.805726][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1881'. [ 199.143576][ T9321] syz.7.1888 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 200.375926][ T9348] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1896'. [ 200.553094][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1899'. [ 200.745044][ T9366] netlink: 'syz.7.1902': attribute type 1 has an invalid length. [ 200.776999][ T9366] bond4: entered promiscuous mode [ 200.790301][ T9366] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.691137][ T9420] loop1: detected capacity change from 0 to 8192 [ 203.154657][ T9441] mmap: syz.5.1926 (9441) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 203.293560][ T9447] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9447 comm=syz.0.1929 [ 203.518681][ T9460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1935'. [ 203.560679][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1937'. [ 203.847839][ T9485] serio: Serial port ttyS3 [ 204.017085][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 204.017114][ T28] audit: type=1400 audit(1771198403.608:752): avc: denied { write } for pid=9484 comm="syz.1.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 204.354105][ T9495] loop1: detected capacity change from 0 to 512 [ 204.360914][ T9495] EXT4-fs: Ignoring removed bh option [ 204.370704][ T9495] EXT4-fs: Ignoring removed oldalloc option [ 204.382123][ T9495] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.399251][ T9495] EXT4-fs (loop1): 1 truncate cleaned up [ 204.407054][ T9495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.490360][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.203222][ T9514] syzkaller0: entered promiscuous mode [ 205.726842][ T9514] syzkaller0: entered allmulticast mode [ 205.805854][ T28] audit: type=1400 audit(1771198405.468:753): avc: denied { connect } for pid=9519 comm="syz.0.1967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 206.123623][ T9531] lo: entered allmulticast mode [ 206.596656][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.680383][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.710860][ T28] audit: type=1400 audit(1771198406.358:754): avc: denied { mounton } for pid=9549 comm="syz.6.1969" path="/file0" dev="ramfs" ino=32090 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 206.884498][ T28] audit: type=1326 audit(1771198406.538:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9552 comm="syz.7.1971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x0 [ 207.297967][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1972'. [ 207.731161][ T9574] netlink: 'syz.6.1977': attribute type 1 has an invalid length. [ 207.797671][ T9578] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 207.828468][ T9578] bond7: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 207.859301][ T9578] bond7: (slave vxcan3): making interface the new active one [ 207.868585][ T9578] bond7: (slave vxcan3): Enslaving as an active interface with an up link [ 208.198461][ T9608] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1990'. [ 208.257169][ T9608] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9608 comm=syz.5.1990 [ 209.561317][ T28] audit: type=1400 audit(1771198409.218:756): avc: denied { write } for pid=9622 comm="syz.6.1994" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 210.747984][ T28] audit: type=1326 audit(1771198410.408:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.773295][ T28] audit: type=1326 audit(1771198410.408:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.797342][ T28] audit: type=1326 audit(1771198410.408:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.830827][ T28] audit: type=1326 audit(1771198410.408:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.865973][ T28] audit: type=1326 audit(1771198410.408:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.891276][ T28] audit: type=1326 audit(1771198410.408:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.916537][ T28] audit: type=1326 audit(1771198410.408:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.940268][ T28] audit: type=1326 audit(1771198410.408:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f07ee23bf79 code=0x7ffc0000 [ 210.993902][ T28] audit: type=1326 audit(1771198410.408:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.0.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f07ee23bce2 code=0x7ffc0000 [ 211.335672][ T9672] loop1: detected capacity change from 0 to 128 [ 211.365150][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.365150][ T9672] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 211.448964][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.448964][ T9672] loop1: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 211.463273][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.463273][ T9672] loop1: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 211.477288][ T9672] Buffer I/O error on dev loop1, logical block 69, async page read [ 211.485373][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.485373][ T9672] loop1: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 211.499434][ T9672] Buffer I/O error on dev loop1, logical block 70, async page read [ 211.507465][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.507465][ T9672] loop1: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 211.554971][ T9672] Buffer I/O error on dev loop1, logical block 71, async page read [ 211.571271][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.571271][ T9672] loop1: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 211.608446][ T9672] Buffer I/O error on dev loop1, logical block 72, async page read [ 211.632571][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.632571][ T9672] loop1: rw=8388608, sector=138, nr_sectors = 2 limit=128 [ 211.672496][ T9672] Buffer I/O error on dev loop1, logical block 69, async page read [ 211.696073][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.696073][ T9672] loop1: rw=8388608, sector=140, nr_sectors = 2 limit=128 [ 211.721420][ T9672] Buffer I/O error on dev loop1, logical block 70, async page read [ 211.729778][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.729778][ T9672] loop1: rw=8388608, sector=142, nr_sectors = 2 limit=128 [ 211.745425][ T9672] Buffer I/O error on dev loop1, logical block 71, async page read [ 211.753410][ T9672] syz.1.2009: attempt to access beyond end of device [ 211.753410][ T9672] loop1: rw=8388608, sector=144, nr_sectors = 2 limit=128 [ 211.767995][ T9672] Buffer I/O error on dev loop1, logical block 72, async page read [ 211.786453][ T9672] Buffer I/O error on dev loop1, logical block 69, async page read [ 211.799219][ T9672] Buffer I/O error on dev loop1, logical block 70, async page read [ 211.913369][ T9689] netlink: 'syz.1.2026': attribute type 11 has an invalid length. [ 211.959012][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2017'. [ 212.007588][ T9696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9696 comm=syz.0.2017 [ 212.118804][ T9706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2023'. [ 212.179211][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.188459][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.248107][ T9713] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9713 comm=syz.0.2023 [ 212.599487][ T9718] netlink: 277 bytes leftover after parsing attributes in process `syz.6.2025'. [ 212.762556][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2028'. [ 213.545009][ T9750] netlink: 'syz.0.2036': attribute type 83 has an invalid length. [ 216.021063][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2053'. [ 216.100964][ T9796] x_tables: duplicate underflow at hook 2 [ 216.778975][ T9789] syz.6.2051 (9789) used greatest stack depth: 5624 bytes left [ 218.078233][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 218.078252][ T28] audit: type=1400 audit(1771198417.718:778): avc: denied { connect } for pid=9839 comm="syz.5.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 218.349810][ T9847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2074'. [ 218.444400][ T9847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9847 comm=syz.0.2074 [ 218.620764][ T28] audit: type=1326 audit(1771198418.278:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 218.689559][ T28] audit: type=1326 audit(1771198418.308:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 218.756399][ T28] audit: type=1326 audit(1771198418.308:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 218.823441][ T28] audit: type=1326 audit(1771198418.308:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 218.919091][ T28] audit: type=1326 audit(1771198418.308:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 219.004593][ T28] audit: type=1326 audit(1771198418.308:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 219.234623][ T28] audit: type=1326 audit(1771198418.308:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 219.296626][ T28] audit: type=1326 audit(1771198418.308:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 219.351642][ T28] audit: type=1326 audit(1771198418.308:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9852 comm="syz.7.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 220.222275][ T9919] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 220.577801][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2100'. [ 220.629523][ T9927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9927 comm=syz.5.2100 [ 220.707930][ T9931] netlink: 'syz.5.2101': attribute type 1 has an invalid length. [ 220.741953][ T9931] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.778553][ T9931] bond5: entered allmulticast mode [ 220.888686][ T9931] bond5: (slave ip6gretap1): making interface the new active one [ 220.913572][ T9931] ip6gretap1: entered allmulticast mode [ 220.920905][ T9931] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 221.337187][ T9949] macvtap1: entered promiscuous mode [ 221.389266][ T9949] bridge0: entered promiscuous mode [ 221.447912][ T9949] macvtap1: entered allmulticast mode [ 221.499670][ T9949] bridge0: entered allmulticast mode [ 221.589474][ T9949] bridge0: port 3(macvtap1) entered blocking state [ 221.641478][ T9949] bridge0: port 3(macvtap1) entered disabled state [ 221.679381][ T9949] bridge0: left allmulticast mode [ 221.690465][ T9949] bridge0: left promiscuous mode [ 221.906587][ T9960] tipc: Failed to remove unknown binding: 66,1,1/0:3998647795/3998647797 [ 221.934736][ T9960] tipc: Failed to remove unknown binding: 66,1,1/0:3998647795/3998647797 [ 222.005835][ T9964] netlink: 'syz.7.2112': attribute type 16 has an invalid length. [ 222.013848][ T9964] netlink: 'syz.7.2112': attribute type 17 has an invalid length. [ 222.098373][ T9964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.408025][T10014] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 223.478030][T10014] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 223.526067][T10022] netlink: 'syz.1.2133': attribute type 4 has an invalid length. [ 224.303138][T10014] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 224.533314][T10014] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 224.600766][ T7859] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 54526 - 0 [ 224.614002][ T7859] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 54526 - 0 [ 224.632489][ T7859] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 54526 - 0 [ 224.648277][ T7859] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 54526 - 0 [ 226.040374][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 226.040392][ T28] audit: type=1400 audit(1771198425.698:853): avc: denied { read } for pid=10116 comm="syz.5.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 228.865898][ T28] audit: type=1401 audit(1771198684.490:854): op=setxattr invalid_context=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 [ 230.255306][ T28] audit: type=1400 audit(1771198685.900:855): avc: denied { create } for pid=10197 comm="syz.7.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.871780][T10207] netlink: 'syz.1.2180': attribute type 30 has an invalid length. [ 231.995461][ T28] audit: type=1326 audit(1771198687.650:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.147462][ T28] audit: type=1326 audit(1771198687.650:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.283028][ T28] audit: type=1326 audit(1771198687.650:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.420547][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2190'. [ 232.440725][ T28] audit: type=1326 audit(1771198687.650:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.565386][ T28] audit: type=1326 audit(1771198687.650:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.633327][T10237] bridge0: entered promiscuous mode [ 232.674422][T10244] netlink: 'syz.0.2193': attribute type 4 has an invalid length. [ 232.681658][T10237] macvtap1: entered promiscuous mode [ 232.698234][ T28] audit: type=1326 audit(1771198687.650:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.725619][T10245] netlink: 'syz.0.2193': attribute type 4 has an invalid length. [ 232.759198][T10237] macvtap1: entered allmulticast mode [ 232.766025][T10237] bridge0: entered allmulticast mode [ 232.795032][ T28] audit: type=1326 audit(1771198687.650:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.821851][T10237] bridge0: port 1(macvtap1) entered blocking state [ 232.831506][T10237] bridge0: port 1(macvtap1) entered disabled state [ 232.843847][ T28] audit: type=1326 audit(1771198687.650:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.878644][T10237] bridge0: left allmulticast mode [ 232.886607][T10237] bridge0: left promiscuous mode [ 232.892661][ T28] audit: type=1326 audit(1771198687.660:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 232.935863][ T28] audit: type=1326 audit(1771198687.660:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10220 comm="syz.5.2184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x7ffc0000 [ 233.002600][T10238] hsr_slave_0: left promiscuous mode [ 233.063966][T10238] hsr_slave_1: left promiscuous mode [ 233.169015][T10254] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2196'. [ 233.296163][T10265] bond6: (slave veth13): Enslaving as an active interface with a down link [ 233.324081][T10261] macsec0: entered allmulticast mode [ 233.341033][T10261] veth1_macvtap: entered allmulticast mode [ 233.374054][T10261] macsec0: entered promiscuous mode [ 233.415779][T10265] bond6: (slave veth15): Enslaving as an active interface with a down link [ 234.695915][T10309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 234.716974][T10309] hsr_slave_0: left promiscuous mode [ 234.723430][T10309] hsr_slave_1: left promiscuous mode [ 235.282038][T10320] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.296924][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2230'. [ 235.341261][T10320] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.367796][T10321] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10321 comm=syz.6.2230 [ 235.396140][T10320] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.455833][T10320] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.526392][ T7864] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.544884][ T7838] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.556416][ T7838] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.564976][ T7838] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.342522][T10341] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2224'. [ 237.374499][T10346] bond1: left promiscuous mode [ 237.390425][T10346] bond1: left allmulticast mode [ 237.403889][T10346] bond4: left promiscuous mode [ 237.424337][T10346] bond4: left allmulticast mode [ 239.321714][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 239.337281][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2245'. [ 239.538696][T10400] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 239.615863][T10400] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 239.696504][T10400] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 239.756489][T10400] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 239.881092][ T7838] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 54526 - 0 [ 239.911075][ T7852] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 54526 - 0 [ 239.934391][ T7852] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 54526 - 0 [ 239.955306][ T7838] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 54526 - 0 [ 239.983643][T10403] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 240.045971][T10403] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 240.105995][T10403] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 240.156752][T10403] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 240.929724][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 241.097327][T10419] loop1: detected capacity change from 0 to 512 [ 241.135497][T10419] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2255: corrupted inode contents [ 241.164789][T10419] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.165008][T10419] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 241.182784][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 241.182807][ C1] EXT4-fs (loop1): initial error at time 1771198696: ext4_do_update_inode:5569: inode 15 [ 241.182884][ C1] EXT4-fs (loop1): last error at time 1771198696: ext4_do_update_inode:5569: inode 15 [ 241.223370][T10419] loop1: lost filesystem error report for type 5 error -117 [ 241.223598][T10419] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.2255: corrupted inode contents [ 241.253083][T10419] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.253346][T10419] EXT4-fs error (device loop1): ext4_evict_inode:303: inode #15: comm syz.1.2255: mark_inode_dirty error [ 241.274335][T10419] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.274576][T10419] EXT4-fs (loop1): 1 orphan inode deleted [ 241.290361][T10419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.384814][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.522241][T10439] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2259'. [ 241.591584][T10443] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 241.774689][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2264'. [ 241.797391][ T28] kauditd_printk_skb: 235 callbacks suppressed [ 241.797474][ T28] audit: type=1400 audit(1771198697.460:1101): avc: denied { append } for pid=10448 comm="syz.0.2264" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 241.906479][ T28] audit: type=1400 audit(1771198697.570:1102): avc: denied { read } for pid=10452 comm="syz.0.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.306198][ T1971] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 54526 - 0 [ 242.331014][T10403] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54526 - 0 [ 242.492311][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 243.077218][ T28] audit: type=1400 audit(1771198698.740:1103): avc: denied { ioctl } for pid=10489 comm="syz.6.2279" path="socket:[34807]" dev="sockfs" ino=34807 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 243.850765][T10502] netlink: 'syz.5.2285': attribute type 3 has an invalid length. [ 244.847877][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2293'. [ 246.341321][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2309'. [ 246.350444][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2309'. [ 246.564625][ T28] audit: type=1400 audit(1771198702.220:1104): avc: denied { read } for pid=10579 comm="syz.0.2313" path="socket:[35965]" dev="sockfs" ino=35965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 246.605741][T10585] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2314'. [ 246.639966][ T6977] IPVS: starting estimator thread 0... [ 246.734432][T10589] IPVS: using max 1872 ests per chain, 93600 per kthread [ 246.779253][T10595] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.809836][T10595] vlan2: entered allmulticast mode [ 246.847988][T10595] bond6: entered allmulticast mode [ 246.947238][ T28] audit: type=1400 audit(1771198702.600:1105): avc: denied { mount } for pid=10596 comm="syz.5.2319" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 247.737032][T10612] netlink: 'syz.5.2326': attribute type 1 has an invalid length. [ 247.760694][T10612] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.771709][T10616] netlink: 'syz.6.2325': attribute type 33 has an invalid length. [ 247.792540][T10612] bond7: (slave bridge3): making interface the new active one [ 247.801191][T10612] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 247.817813][T10616] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2325'. [ 247.827773][T10616] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2325'. [ 247.854661][T10616] team0: Port device dummy0 removed [ 248.054717][T10623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.160132][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2341'. [ 250.544616][T10667] loop1: detected capacity change from 0 to 512 [ 250.564827][T10667] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2344: inode has both inline data and extents flags [ 250.636038][T10667] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 250.636246][T10667] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2344: couldn't read orphan inode 15 (err -117) [ 250.645482][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 250.645511][ C0] EXT4-fs (loop1): initial error at time 1771198706: ext4_orphan_get:1391: inode 15 [ 250.645546][ C0] EXT4-fs (loop1): last error at time 1771198706: ext4_orphan_get:1391: inode 15 [ 250.694662][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2345'. [ 250.758424][T10667] loop1: lost filesystem error report for type 5 error -117 [ 250.833298][T10667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.861722][T10674] syz_tun (unregistering): left allmulticast mode [ 251.012195][T10667] bridge0: entered promiscuous mode [ 251.022811][T10667] macvtap1: entered promiscuous mode [ 251.071674][T10667] macvtap1: entered allmulticast mode [ 251.192239][T10667] bridge0: entered allmulticast mode [ 251.193334][T10682] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2347'. [ 251.234776][T10667] bridge0: port 1(macvtap1) entered blocking state [ 251.254682][T10667] bridge0: port 1(macvtap1) entered disabled state [ 251.299195][T10667] bridge0: left allmulticast mode [ 251.321318][T10667] bridge0: left promiscuous mode [ 251.370112][T10686] tipc: Enabling of bearer rejected, failed to enable media [ 251.455151][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.494677][T10699] GPL: port 1(erspan0) entered blocking state [ 251.500900][T10699] GPL: port 1(erspan0) entered disabled state [ 251.520052][T10699] erspan0: entered allmulticast mode [ 251.526443][T10699] erspan0: entered promiscuous mode [ 251.748178][T10693] netlink: 'syz.7.2351': attribute type 3 has an invalid length. [ 253.745221][T10730] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 253.858660][T10730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.937281][T10732] bond7: (slave bridge2): making interface the new active one [ 253.978102][T10732] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 254.462177][T10762] loop1: detected capacity change from 0 to 1024 [ 254.558212][T10762] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.700203][T10762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.956036][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.063391][ T6977] IPVS: starting estimator thread 0... [ 255.149829][T10784] loop1: detected capacity change from 0 to 128 [ 255.271835][T10775] IPVS: using max 1920 ests per chain, 96000 per kthread [ 255.464898][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2383'. [ 255.713803][T10796] netlink: 'syz.1.2384': attribute type 1 has an invalid length. [ 255.767037][T10796] 8021q: adding VLAN 0 to HW filter on device bond11 [ 255.831748][T10796] bond11: (slave bridge6): making interface the new active one [ 255.868171][T10796] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 255.965026][T10805] syzkaller0: entered promiscuous mode [ 256.044404][T10805] syzkaller0: entered allmulticast mode [ 257.164743][T10819] netlink: 'syz.0.2392': attribute type 1 has an invalid length. [ 257.289616][T10819] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.309285][T10819] bond8: (slave bond9): making interface the new active one [ 257.337387][T10819] bond8: (slave bond9): Enslaving as an active interface with an up link [ 257.391740][T10824] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 257.424555][T10824] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 257.960439][T10847] netlink: 'syz.6.2399': attribute type 1 has an invalid length. [ 258.450717][T10847] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.503311][T10852] bond8: (slave bridge5): making interface the new active one [ 258.526034][T10852] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 259.026965][T10858] netlink: 207496 bytes leftover after parsing attributes in process `syz.6.2401'. [ 259.094545][ T28] audit: type=1400 audit(1771198714.750:1106): avc: denied { lock } for pid=10862 comm="syz.5.2404" path="socket:[37201]" dev="sockfs" ino=37201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 260.270467][T10886] macvtap1: entered promiscuous mode [ 260.276681][T10886] bridge0: entered promiscuous mode [ 260.294563][T10886] macvtap1: entered allmulticast mode [ 260.303557][T10886] bridge0: entered allmulticast mode [ 260.328459][T10886] bridge0: port 1(macvtap1) entered blocking state [ 260.339545][T10886] bridge0: port 1(macvtap1) entered disabled state [ 260.371982][ T28] audit: type=1326 audit(1771198716.030:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.400621][T10895] sg_write: data in/out 921/246 bytes for SCSI command 0x0-- guessing data in; [ 260.400621][T10895] program syz.1.2413 not setting count and/or reply_len properly [ 260.429693][T10886] bridge0: left allmulticast mode [ 260.435675][T10886] bridge0: left promiscuous mode [ 260.473537][T10895] loop1: detected capacity change from 0 to 512 [ 260.478526][ T28] audit: type=1326 audit(1771198716.060:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f002150c84e code=0x7ffc0000 [ 260.508566][ T28] audit: type=1326 audit(1771198716.060:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.532305][ T28] audit: type=1326 audit(1771198716.060:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.572337][ T28] audit: type=1326 audit(1771198716.060:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.614847][ T28] audit: type=1326 audit(1771198716.060:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.643679][ T28] audit: type=1326 audit(1771198716.060:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.687424][ T28] audit: type=1326 audit(1771198716.120:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.712102][T10895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.724847][T10895] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.735868][ T28] audit: type=1326 audit(1771198716.120:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10891 comm="syz.1.2413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 260.808964][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.997394][T10910] macvtap1: entered promiscuous mode [ 261.015239][T10910] bridge0: entered promiscuous mode [ 261.029481][T10910] macvtap1: entered allmulticast mode [ 261.040454][T10910] bridge0: entered allmulticast mode [ 261.054644][T10910] bridge0: port 1(macvtap1) entered blocking state [ 261.062031][T10910] bridge0: port 1(macvtap1) entered disabled state [ 261.323196][T10910] bridge0: left allmulticast mode [ 261.334883][T10910] bridge0: left promiscuous mode [ 264.397378][T10978] loop1: detected capacity change from 0 to 8192 [ 265.532392][T10988] /dev/sg0: Can't lookup blockdev [ 265.704628][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 265.704647][ T28] audit: type=1400 audit(1771198721.370:1160): avc: denied { ioctl } for pid=10993 comm="syz.0.2447" path="socket:[38245]" dev="sockfs" ino=38245 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.761525][ T28] audit: type=1400 audit(1771198721.400:1161): avc: denied { bind } for pid=10993 comm="syz.0.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.781493][ T28] audit: type=1400 audit(1771198721.410:1162): avc: denied { write } for pid=10993 comm="syz.0.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.058082][T11004] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2450'. [ 267.348827][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2460'. [ 267.821376][T11068] tipc: Started in network mode [ 267.841552][T11068] tipc: Node identity 4, cluster identity 4711 [ 267.857668][T11068] tipc: Node number set to 4 [ 268.297734][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2476'. [ 269.755626][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2483'. [ 269.969324][T11129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'. [ 271.146769][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2496'. [ 271.178014][T11150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'. [ 271.837408][ T28] audit: type=1400 audit(1771198727.500:1163): avc: denied { setopt } for pid=11163 comm="syz.6.2501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.997552][ T28] audit: type=1400 audit(1771198727.660:1164): avc: denied { connect } for pid=11168 comm="syz.5.2503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.228295][T11178] netlink: 'syz.5.2508': attribute type 1 has an invalid length. [ 272.236461][T11178] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2508'. [ 273.727699][ T28] audit: type=1400 audit(1771198729.380:1165): avc: denied { nlmsg_write } for pid=11193 comm="syz.0.2512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 273.768417][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'. [ 273.784431][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2513'. [ 273.804551][ T28] audit: type=1400 audit(1771198729.390:1166): avc: denied { audit_write } for pid=11193 comm="syz.0.2512" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 273.855221][T11198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2514'. [ 274.391639][T11209] netlink: 'syz.7.2517': attribute type 4 has an invalid length. [ 274.455482][T11204] loop1: detected capacity change from 0 to 512 [ 274.480446][T11204] EXT4-fs: Ignoring removed i_version option [ 274.532898][T11204] EXT4-fs (loop1): 1 truncate cleaned up [ 274.574803][T11204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.141933][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2518'. [ 275.151600][T11215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2518'. [ 275.176671][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.296645][T11306] tunl0: Caught tx_queue_len zero misconfig [ 277.200733][ T28] audit: type=1400 audit(1771198732.860:1167): avc: denied { mounton } for pid=11325 comm="syz.0.2536" path="/proc/1390/task" dev="proc" ino=39224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 277.595171][T11336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2538'. [ 277.742761][T11331] wg1: entered promiscuous mode [ 277.747797][T11331] wg1: entered allmulticast mode [ 277.763371][ T7865] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 54526 - 0 [ 277.797514][ T7865] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 54526 - 0 [ 277.814751][ T7865] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 54526 - 0 [ 277.848209][ T7865] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 54526 - 0 [ 278.077168][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2546'. [ 278.125332][T11352] block device autoloading is deprecated and will be removed. [ 278.136590][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2546'. [ 278.630264][T11365] loop1: detected capacity change from 0 to 512 [ 279.246717][T11365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.260690][T11365] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.331537][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.545654][T11393] SET target dimension over the limit! [ 279.597700][ T28] audit: type=1400 audit(1771198735.260:1168): avc: denied { load_policy } for pid=11392 comm="syz.1.2559" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 279.622865][T11393] SELinux: failed to load policy [ 280.163825][T11412] Cannot find del_set index 4 as target [ 280.349638][T11410] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2565'. [ 281.359818][T11441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2575'. [ 281.406518][T11441] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2575'. [ 281.514402][ T28] audit: type=1326 audit(1771198737.170:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.0.2576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f07ee23bf79 code=0x0 [ 281.558849][T11453] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2579'. [ 281.958590][ T28] audit: type=1326 audit(1771198737.620:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.5.2582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f2003bf79 code=0x0 [ 282.355110][ T6973] IPVS: starting estimator thread 0... [ 282.444373][T11475] IPVS: using max 2256 ests per chain, 112800 per kthread [ 282.732883][T11490] netlink: 'syz.6.2589': attribute type 1 has an invalid length. [ 282.753650][T11490] netlink: 668 bytes leftover after parsing attributes in process `syz.6.2589'. [ 283.361810][ T28] audit: type=1326 audit(1771198739.020:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11516 comm="syz.7.2598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01c3ccbf79 code=0x0 [ 283.417896][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2597'. [ 283.504312][ T28] audit: type=1326 audit(1771198739.160:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 283.536706][ T28] audit: type=1326 audit(1771198739.190:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 283.560412][ T28] audit: type=1326 audit(1771198739.190:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 283.584482][ T28] audit: type=1326 audit(1771198739.190:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 283.614497][ T28] audit: type=1326 audit(1771198739.270:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 283.653673][ T28] audit: type=1326 audit(1771198739.280:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.1.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002154bf79 code=0x7ffc0000 [ 284.580526][T11570] loop1: detected capacity change from 0 to 1024 [ 284.605246][T11570] EXT4-fs: Ignoring removed nobh option [ 284.625039][T11570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.659664][T11570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.017296][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2618'. [ 285.420526][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.554724][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2632'. [ 286.625920][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2632'. [ 286.727242][ T28] audit: type=1400 audit(1771198742.390:1178): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 287.975042][ T28] audit: type=1400 audit(1771198743.640:1179): avc: denied { map } for pid=11642 comm="syz.0.2639" path="socket:[46825]" dev="sockfs" ino=46825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 288.060867][T11650] loop0: detected capacity change from 0 to 256 [ 288.068916][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 288.085876][T11650] FAT-fs (loop0): Directory bread(block 64) failed [ 288.094872][T11650] FAT-fs (loop0): Directory bread(block 65) failed [ 288.109911][T11650] FAT-fs (loop0): Directory bread(block 66) failed [ 288.124356][T11650] FAT-fs (loop0): Directory bread(block 67) failed [ 288.127358][T11648] team1: entered promiscuous mode [ 288.140215][T11650] FAT-fs (loop0): Directory bread(block 68) failed [ 288.146570][T11648] team1: entered allmulticast mode [ 288.152038][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 288.156932][T11650] FAT-fs (loop0): Directory bread(block 69) failed [ 288.170337][T11650] FAT-fs (loop0): Directory bread(block 70) failed [ 288.177395][T11650] FAT-fs (loop0): Directory bread(block 71) failed [ 288.184054][T11650] FAT-fs (loop0): Directory bread(block 72) failed [ 288.190867][T11650] FAT-fs (loop0): Directory bread(block 73) failed [ 288.195326][T11648] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 288.211280][T11648] team2: entered promiscuous mode [ 288.220859][T11648] team2: entered allmulticast mode [ 288.323409][ T7865] bio_check_eod: 4 callbacks suppressed [ 288.323428][ T7865] kworker/u8:23: attempt to access beyond end of device [ 288.323428][ T7865] loop0: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 288.842694][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2648'. [ 288.937208][T11668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.961929][T11671] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.985474][T11671] bond5: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 289.015703][T11671] bond5: (slave ip6tnl2): Error -95 calling set_mac_address [ 289.050861][ T28] audit: type=1326 audit(1771198744.710:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.6.2651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde8f96bf79 code=0x0 [ 289.479160][T11687] wg1: entered promiscuous mode [ 289.484123][T11687] wg1: entered allmulticast mode [ 290.136197][T11699] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2655'. [ 293.728291][T11762] loop1: detected capacity change from 0 to 128 [ 293.756503][T11762] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 293.804477][T11765] loop1: detected capacity change from 0 to 256 [ 293.836886][T11765] FAT-fs (loop1): Directory bread(block 64) failed [ 293.853804][T11765] FAT-fs (loop1): Directory bread(block 65) failed [ 293.861612][T11765] FAT-fs (loop1): Directory bread(block 66) failed [ 293.909583][T11765] FAT-fs (loop1): Directory bread(block 67) failed [ 293.926402][T11765] FAT-fs (loop1): Directory bread(block 68) failed [ 293.933164][T11765] FAT-fs (loop1): Directory bread(block 69) failed [ 293.957871][T11765] FAT-fs (loop1): Directory bread(block 70) failed [ 293.976097][T11765] FAT-fs (loop1): Directory bread(block 71) failed [ 293.989424][T11765] FAT-fs (loop1): Directory bread(block 72) failed [ 294.004657][T11765] FAT-fs (loop1): Directory bread(block 73) failed [ 294.306871][ T7862] kworker/u8:21: attempt to access beyond end of device [ 294.306871][ T7862] loop1: rw=1, sector=1800, nr_sectors = 4 limit=256 [ 294.586587][T11780] loop1: detected capacity change from 0 to 256 [ 294.847582][T11782] Invalid ELF header magic: != ELF [ 294.907082][ T28] audit: type=1400 audit(1771198750.500:1181): avc: denied { module_load } for pid=11779 comm="syz.1.2687" path="/479/file0/file1" dev="loop1" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 295.930564][ T28] audit: type=1400 audit(1771198751.590:1182): avc: denied { shutdown } for pid=11816 comm="syz.1.2697" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 296.043970][ T28] audit: type=1400 audit(1771198751.700:1183): avc: denied { remount } for pid=11823 comm="syz.7.2700" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 296.169944][T11833] loop1: detected capacity change from 0 to 512 [ 296.225128][T11833] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2704: bg 0: block 248: padding at end of block bitmap is not set [ 296.248814][T11833] loop1: lost filesystem error report for type 5 error -117 [ 296.249256][T11833] Quota error (device loop1): write_blk: dquota write failed [ 296.256653][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 296.256672][ C0] EXT4-fs (loop1): last error at time 1771198751: ext4_validate_block_bitmap:441 [ 296.280192][T11833] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 296.290551][T11833] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.2704: Failed to acquire dquot type 1 [ 296.302932][T11833] loop1: lost filesystem error report for type 5 error -117 [ 296.334543][T11833] EXT4-fs (loop1): 1 truncate cleaned up [ 296.349129][T11833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.370172][T11833] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.837735][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.906010][T11851] can: request_module (can-proto-0) failed. [ 296.959841][T11851] wireguard0: entered promiscuous mode [ 296.979771][T11851] wireguard0: entered allmulticast mode [ 297.709503][T11867] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2713'. [ 297.799452][T11867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11867 comm=syz.6.2713 [ 298.969000][T11886] loop1: detected capacity change from 0 to 164 [ 298.997550][T11886] iso9660: Unknown parameter '18446744073709551615' [ 299.387958][T11902] netlink: 'syz.7.2727': attribute type 13 has an invalid length. [ 299.406854][T11902] gretap0: refused to change device tx_queue_len [ 299.413911][T11902] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 299.559406][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2732'. [ 299.685089][T11927] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11927 comm=syz.5.2732 [ 301.099780][T11953] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2738'. [ 301.588024][T11965] syzkaller0: entered promiscuous mode [ 301.596539][T11965] syzkaller0: entered allmulticast mode [ 302.421726][T11990] lo: entered allmulticast mode [ 302.440184][T11990] lo: entered promiscuous mode [ 302.454504][T11990] lo: left allmulticast mode [ 302.759803][T12006] loop0: detected capacity change from 0 to 512 [ 302.768193][T12006] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent [ 303.883504][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2768'. [ 304.995366][T12052] team0 (unregistering): Port device team_slave_0 removed [ 305.016306][T12052] team0 (unregistering): Port device team_slave_1 removed [ 305.526799][T12070] netlink: 'syz.6.2783': attribute type 1 has an invalid length. [ 305.600896][T12070] 8021q: adding VLAN 0 to HW filter on device bond9 [ 305.624532][T12070] ip6erspan0: entered promiscuous mode [ 305.633993][T12070] bond9: (slave ip6erspan0): making interface the new active one [ 305.645045][T12070] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 305.664610][T12070] macvlan2: entered promiscuous mode [ 305.670376][T12070] bond9: entered promiscuous mode [ 305.676005][T12070] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 305.684563][T12070] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 305.700720][T12070] bond9: left promiscuous mode [ 306.545475][T12085] netlink: 'syz.5.2788': attribute type 39 has an invalid length. [ 306.748794][ T28] audit: type=1400 audit(1771198762.360:1184): avc: denied { bind } for pid=12087 comm="syz.6.2789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.769085][ T28] audit: type=1400 audit(1771198762.360:1185): avc: denied { mount } for pid=12087 comm="syz.6.2789" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 306.957271][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2791'. [ 307.023106][T12093] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 307.066668][T12098] loop0: detected capacity change from 0 to 512 [ 307.074401][ T7842] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.094994][T12098] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 307.131225][ T7847] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.143753][ T7847] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.147003][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2791'. [ 307.163893][ T7847] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 307.250046][T12093] bond8 (unregistering): (slave geneve2): Releasing backup interface [ 307.265599][T12093] bond8 (unregistering): Released all slaves [ 307.436989][ T1971] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.445725][ T1971] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.454201][ T1971] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.495700][ T1971] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 307.819239][T12115] loop0: detected capacity change from 0 to 512 [ 307.854025][T12115] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.2799: Unrecognised inode hash code 255 [ 307.865827][T12115] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2799: Corrupt directory, running e2fsck is recommended [ 307.897548][T12115] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 307.905809][T12115] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.2799: corrupted in-inode xattr: invalid ea_ino [ 307.919649][T12115] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 307.924307][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 307.939995][ C0] EXT4-fs (loop0): initial error at time 1771198763: ext4_iget_extra_inode:5025: inode 15 [ 307.949972][ C0] EXT4-fs (loop0): last error at time 1771198763: ext4_iget_extra_inode:5025: inode 15 [ 307.960741][T12115] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2799: couldn't read orphan inode 15 (err -117) [ 307.972847][T12115] loop0: lost filesystem error report for type 5 error -117 [ 307.973818][T12115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.040529][T12115] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.2799: Unrecognised inode hash code 255 [ 308.059258][T12115] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2799: Corrupt directory, running e2fsck is recommended [ 308.279282][T12115] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.2799: Unrecognised inode hash code 255 [ 308.290984][T12115] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2799: Corrupt directory, running e2fsck is recommended [ 308.304481][T12115] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 4: comm syz.0.2799: bad entry in directory: inode out of bounds - offset=0, inode=262143, rec_len=1024, size=1024 fake=0 [ 308.541103][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.724871][T12132] tipc: Enabled bearer , priority 14 [ 308.741979][T12132] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2813'. [ 308.784579][T12132] 0ªX¹¦À: renamed from caif0 [ 309.020435][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2804'. [ 309.029569][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2804'. [ 309.057282][T12132] tipc: Disabling bearer [ 309.075560][T12132] 0ªX¹¦À: entered allmulticast mode [ 309.100718][T12132] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 309.882768][T12154] loop1: detected capacity change from 0 to 8192 [ 309.994399][T12160] lo: entered allmulticast mode [ 310.019789][T12160] lo: entered promiscuous mode [ 310.053313][T12160] lo: left allmulticast mode [ 310.085485][ T28] audit: type=1326 audit(1771198765.740:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12148 comm="syz.7.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 310.215157][ T28] audit: type=1326 audit(1771198765.750:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12148 comm="syz.7.2809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01c3ccbf79 code=0x7ffc0000 [ 310.685473][ T28] audit: type=1400 audit(1771198766.350:1188): avc: denied { ioctl } for pid=12170 comm="syz.1.2817" path="socket:[48492]" dev="sockfs" ino=48492 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 310.926800][T12178] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 311.139672][T12183] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 311.194622][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.207491][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.240534][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.304593][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.326768][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.380650][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.398367][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.411165][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.423762][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 311.436479][T12176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12176 comm=syz.6.2820 [ 312.290066][ T3003] ================================================================== [ 312.298232][ T3003] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 312.306338][ T3003] [ 312.308696][ T3003] write to 0xffff88811ad57330 of 8 bytes by task 11382 on cpu 0: [ 312.316436][ T3003] dentry_unlink_inode+0x65/0x260 [ 312.321504][ T3003] d_delete+0xc8/0xe0 [ 312.325536][ T3003] d_delete_notify+0x32/0x100 [ 312.330272][ T3003] vfs_unlink+0x289/0x490 [ 312.334649][ T3003] filename_unlinkat+0x1e2/0x410 [ 312.339628][ T3003] __se_sys_unlink+0x2b/0xe0 [ 312.344266][ T3003] __x64_sys_unlink+0x1f/0x30 [ 312.348981][ T3003] x64_sys_call+0x2eb6/0x3020 [ 312.353702][ T3003] do_syscall_64+0x12c/0x370 [ 312.358345][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.364283][ T3003] [ 312.366645][ T3003] read to 0xffff88811ad57330 of 8 bytes by task 3003 on cpu 1: [ 312.374215][ T3003] step_into_slowpath+0x12c/0x4c0 [ 312.379280][ T3003] path_lookupat+0x330/0x500 [ 312.383912][ T3003] filename_lookup+0x190/0x390 [ 312.388708][ T3003] do_readlinkat+0x74/0x2f0 [ 312.393252][ T3003] __x64_sys_readlink+0x47/0x60 [ 312.398156][ T3003] x64_sys_call+0x2b51/0x3020 [ 312.402883][ T3003] do_syscall_64+0x12c/0x370 [ 312.407520][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.413438][ T3003] [ 312.415796][ T3003] value changed: 0xffff88811d884650 -> 0x0000000000000000 [ 312.422930][ T3003] [ 312.425324][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 312.431497][ T3003] CPU: 1 UID: 0 PID: 3003 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 312.442068][ T3003] Tainted: [W]=WARN [ 312.445886][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 312.455969][ T3003] ================================================================== [ 312.651188][ T28] audit: type=1400 audit(1771198768.240:1189): avc: denied { getopt } for pid=12198 comm="syz.6.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1