last executing test programs: 2m7.983580449s ago: executing program 4 (id=281): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x771e, 0x3c, 0x0, 0xfdde) 2m7.934271992s ago: executing program 4 (id=282): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x8ac2) creat(&(0x7f0000000100)='./file0\x00', 0x3c) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xa0, 0x24, 0x100, 0x70b92d, 0x3, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1e, [0x7, 0xd, 0x8, 0xf, 0xb, 0x8, 0xa, 0x7, 0xf, 0x4, 0x3, 0x4, 0x7, 0xd, 0xb, 0x9], 0x1, [0xff94, 0x81, 0x0, 0x4, 0xff, 0x525, 0x4, 0x770, 0x6, 0x9, 0x8, 0x9, 0x2, 0x5, 0x5c, 0x6], [0x5, 0x1005, 0xdaf, 0x4, 0x9, 0x3, 0xc6b, 0x7, 0x8, 0x6, 0x0, 0x9, 0x3, 0xfffd, 0xa04f, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xa0}}, 0x44080) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0) 2m7.891806664s ago: executing program 4 (id=283): syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 2m7.816742748s ago: executing program 4 (id=287): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000000) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x152) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") socket$kcm(0x10, 0x400000002, 0x0) io_setup(0x10000, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) 2m7.407777942s ago: executing program 4 (id=297): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2m6.946913289s ago: executing program 4 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2m6.941862559s ago: executing program 32 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1m51.490120808s ago: executing program 1 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x2, [@fwd={0xf}, @union={0x10, 0x6, 0x0, 0x5, 0x0, 0x0, [{0x2, 0x0, 0x5}, {0x8, 0x2, 0x2}, {0x6, 0x0, 0x2}, {0x3, 0x2, 0xdbc}, {0xc, 0x1, 0x3338}, {0x4, 0x1, 0x33eb}]}, @func={0xc, 0x0, 0x0, 0xc, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @enum64={0x8, 0x3, 0x0, 0x13, 0x0, 0x8, [{0xd, 0xd12e, 0x9}, {0x8, 0x7, 0x9}, {0xd, 0x6, 0x300}]}]}}, 0x0, 0xce, 0x0, 0x0, 0x7ff, 0x10000}, 0x28) unshare(0x2c020400) socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) 1m51.445773401s ago: executing program 1 (id=541): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0x400800) openat(0xffffffffffffff9c, 0x0, 0x101842, 0x1) socket$inet6(0xa, 0x3, 0x100) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80001, 0x0) syz_emit_ethernet(0x93, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60ab00"], 0x0) 1m51.388662014s ago: executing program 1 (id=542): perf_event_open(&(0x7f0000000040)={0x9, 0x80, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbdb, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x3, 0x151}, &(0x7f0000000dc0)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x4c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x1000}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4108}, {0x4c, 0x18, {0x3fff, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x50e5, 0x17}, 0x0) 1m50.971338908s ago: executing program 1 (id=553): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m50.917331951s ago: executing program 1 (id=555): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) 1m50.42572443s ago: executing program 1 (id=563): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x85494000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m50.42551567s ago: executing program 33 (id=563): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x85494000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8014) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3.713764924s ago: executing program 2 (id=2048): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r2, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8], 0x3c}}, 0x0) 3.713058204s ago: executing program 2 (id=2049): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xc}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) shutdown(r1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.826132765s ago: executing program 2 (id=2063): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000003c0)={[{@nodioread_nolock}, {@mblk_io_submit}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@inode_readahead_blks}, {@dioread_lock}, {@noblock_validity}, {@discard}]}, 0x4, 0xbc1, &(0x7f0000001c80)="$eJzs3M1rXOUaAPDnnHy2yb2TXi6X27tpLpdLC/c6TSsptgi2UnHjQtCt0JBOSsj0gyRSk2Yx0X9A1LXgRlCL0oVdd6Pg1o3WrcWFUCQ2CiIaOfORxGQmH+2kJyS/H7w57zvvmXmeZ05nznlhTgPYtwazP2nE4Yi4kEQU6o+nEdFd7fVGVGr7LS7Mjf68MDeaxNLSSz8kkUTEg4W50cZrJfVtX33QGxFfPpvE395YH3dqZnZipFwuTdbHx6cvXzs+NTP7xPjlkUulS6UrJ049NXxy+NTQ6eG21frLt2dv//Tv57+r/Prhbzd/fPv9JM5Gf31udR3tMhiDy+/Jap0RMdLuYDnpqNezus6kc5MnpTucFAAALaWrruH+EYXoiJWLt0J89lWuyQEAAABtsdQRsQQAAADscYn1PwAAAOxxjd8BPFiYG220fH+R8HjdPxcRA7X6F+utNtMZleq2N7oi4uCDJFbf1prUnvbIBiPi3jenP8la7NB9yBupzEfEP5sd/6Ra/0D1Lu719acRMdSG+INrxrut/v93t67/bBvi510/APvTnXO1E9n681+6fP0TTc5/nU3OXQ8j7/Nf4/pvcd3130r9HS2u/17cYowbH7x7vdVcVv/Tt5/7uNGy+Nn2kYrahvvzEf/qbFZ/slx/0qL+C1uMUfj9eqnV3Bbr79l2YVu09F7E0Whef0Oy8f9PdHxsvFwaqv1tGmP+i+GPWsXfDcf/YIv6Nzv+17YY45Xz52+1mtu8/vT77uTlaq+7/shrI9PTkyciupMX1j9+sn5DewuNfRqvkdV/7D8bf/6b1Z+FqNTfh2wtMF/fZuPX18R85uaNTzeqP1v75Xn8Lz7k8X9zizH++/lbx1rNrV7/Zi2Lfy+prYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiP5I0uJyP02LxYi+iPh7HEzLV6em/zd29dUrF7O5iIHoSsfGy6WhiCjUxkk2PlHtr4xPrhk/GRGHIuKdwoHquDh6tXwx7+IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY1hcR/ZGkxYhII2KxkKbFYt5ZAQAAAG03kHcCAAAAwI6z/gcAAIC9z/ofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHXboyJ27SURUzhyotkx3fa4r18yAnZbmnQCQm468EwBy05l3AkButrnGd7kAe1CyyXxvy5metucCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO519PCdu0lEVM4cqLZMd32uq+kzjjzG7ICdlOadAJCbjo0mO9eMfVnAnrL2Iw7sH83X+MB+kmwy37uyT+XPMz07lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu09/tSVpMSLSaj9Ni8WIv0TEQHQlY+Pl0lBE/DUivi509WTjnryTBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoO2mZmYnRsrl0qSOTns7ffV/Yrsln93fSXZHGrVOzl9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkYmpmdmKkXC5NTuWdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJC3qZnZiZFyuTS5hc6t7ey8qpN3jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5OePAAAA//++vgq1") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0xd81, &(0x7f0000002740)=ANY=[], 0x0) 2.755204319s ago: executing program 2 (id=2065): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2.74203554s ago: executing program 2 (id=2068): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioperm(0x0, 0xab4d, 0x8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) getpid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.490915825s ago: executing program 0 (id=2071): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0x20000) preadv(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000001c0)=""/89, 0x59}], 0x2, 0x6, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) epoll_create1(0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ac0)=@newtaction={0x14, 0x30, 0x25, 0x10}, 0x14}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000040)) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) write(r4, &(0x7f0000000180)='`', 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000140)={0x6, 0x3, 0x6, 0x7fff, 0x1a, "ee1dd756f560f25a63b2f119c3439425ea59d8"}) 2.417782869s ago: executing program 0 (id=2073): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.364067642s ago: executing program 2 (id=2075): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x800007}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@nodioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xad, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x900, 0x10000, 0x0, 0x5, 0x8, 0x20001, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x26022, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000980)="f8", 0xfffffec4}], 0x1, 0xa, 0x0, 0x0) 2.150470675s ago: executing program 6 (id=2077): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@delchain={0x34, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 2.06524273s ago: executing program 6 (id=2080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x4005) 1.607871836s ago: executing program 0 (id=2084): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="540000001000090627bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86deae88000000002c00128009000100766c616e000000001c00028006000100020000000600050081000000060005008100000008000500", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket(0x10, 0x803, 0x8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) 1.513733511s ago: executing program 5 (id=2085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20102, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xf, 0x7, 0x2, 0x3, 0x4, 0x6, 0x7, 0x1, 0x8, 0x7, 0x81, 0x5, 0x2, 0x5, 0x4, 0xe5b, 0x4, 0x0, 0x80000001, 0x7, 0xd3, 0x17d61c40, 0x4a87, 0x7, 0x1, 0x100, 0xb19, 0x200, 0x3, 0x4, 0x1, 0x1c, 0x9, 0x5, 0x2, 0x7, 0x4, 0x4, 0x1, 0x0, 0x0, 0x8, 0x10001, 0x3, 0x8, 0xeb, 0x5, 0x6, 0x2, 0x0, 0x400, 0x5, 0x10001, 0x6, 0x2, 0x6d7, 0x7, 0x9, 0xa, 0x1, 0x2, 0xf, 0x200, 0x7ff, 0xf, 0xc, 0xffff0000, 0x401, 0x6, 0x7, 0x8, 0x2, 0x3, 0x6, 0x9, 0x3, 0xfffffffd, 0x6, 0x0, 0xffff, 0x3, 0x50d, 0x0, 0x7f, 0x10, 0x3, 0x0, 0x2, 0xfffffff9, 0x9, 0x1d75, 0x1d, 0x7, 0x5, 0xc, 0x7fff, 0x2, 0xe4d, 0x2, 0x7, 0x0, 0x5, 0x8, 0xf, 0x1, 0x7ff, 0x8, 0x0, 0xd, 0x8, 0x0, 0x83, 0x4, 0x6, 0x4e, 0x10001, 0x6, 0x7ff, 0x40, 0x9, 0x1b846d6, 0x6, 0x541, 0x11, 0x9179, 0x934, 0x1, 0xffffffff, 0xdab6, 0x1e93, 0xde, 0x800, 0x6, 0x8, 0xa, 0x3, 0x2, 0x3, 0x7fffffff, 0x2, 0x1ff, 0x8, 0x4, 0xfffffff7, 0x2, 0x5, 0x40, 0x5, 0xc374, 0x2, 0x24d9dc6c, 0x646, 0xfffffc01, 0x1b675eb9, 0x8000, 0x7e99, 0x101, 0x5, 0xfffffffe, 0xc53d, 0x8, 0x9, 0xffff, 0x7, 0xbe, 0x1, 0x3, 0x0, 0x2, 0xffffff33, 0x0, 0x1, 0xb, 0x100, 0x4, 0x545, 0x5, 0x1, 0x3, 0x3, 0xfa, 0x8001, 0x10000, 0x1, 0x19e, 0x3, 0x0, 0x4, 0x0, 0x7, 0x6, 0x4, 0x0, 0xcf, 0x9, 0x7f, 0x1, 0x1, 0x9, 0xcac, 0x0, 0xfffffff8, 0xc, 0x8, 0xff, 0x400, 0x3, 0xf, 0x8, 0x8, 0x3, 0x51, 0x800, 0x0, 0x3, 0x2, 0x1, 0xffff, 0x7, 0x98, 0xff, 0x5, 0xffffffff, 0xa, 0x0, 0x9, 0x400, 0x7, 0x2, 0xffffffff, 0x6a0, 0x7, 0x73d, 0x0, 0x0, 0xfffffbff, 0x7, 0x8, 0x7, 0x7, 0x1, 0x5, 0xabf4, 0x7fffffff, 0x4, 0x2, 0x10, 0x2, 0x5, 0xffffe000, 0x8001, 0x6, 0x6, 0x0, 0x200]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x8000, 0x8, 0x3, 0xe37}, {0x10, 0x2, 0x4, 0xc, 0x3ff, 0x8001}, 0xb, 0x5, 0x1af0}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.421589937s ago: executing program 3 (id=2086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x4c000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioperm(0x0, 0xab4d, 0x8) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) getpid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1.225441058s ago: executing program 5 (id=2087): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3184, &(0x7f0000000080)={0x0, 0x5e18, 0x400, 0x1, 0x111}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004740)=""/4096, 0x1000}], 0x0, 0x1000004f}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x7, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xf9}]}}]}, 0x44}}, 0x0) 1.19716804s ago: executing program 0 (id=2088): r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) write$cgroup_devices(r0, 0x0, 0xa) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r4, 0x0, 0x118) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x80000000, 0x0) 1.117829335s ago: executing program 6 (id=2089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.116433045s ago: executing program 0 (id=2090): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x30000000) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 1.049916938s ago: executing program 5 (id=2091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000000)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) getrusage(0x1, &(0x7f00000011c0)) gettid() sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, 0x0, 0xa0}, 0x4004881) ioctl$sock_SIOCSPGRP(r0, 0x8902, 0x0) gettimeofday(0x0, 0xffffffffffffffff) 655.368712ms ago: executing program 6 (id=2092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, @sadb_address={0x3, 0x6, 0x2b, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}}]}, 0x50}}, 0x0) r4 = dup3(r2, r1, 0x0) read$watch_queue(r4, &(0x7f0000000240)=""/173, 0xad) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000180)={0x80000001, 0x2, 0x81e6b76d, 0x10002, 0x9, "aa32b73986bbee6b9231334cbfa0b748261a13"}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4cc04}, 0x4040140) 655.001751ms ago: executing program 3 (id=2093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x7b}}]}, {0x4}, {0x43, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xdd86}], 0x2}, 0x4005) 654.724702ms ago: executing program 5 (id=2094): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0xa, r1}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x1000000, r5}, 0x10) 595.437965ms ago: executing program 5 (id=2095): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x9, @dev, @remote}}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a000907000000000000000000000005001a"], 0x38}, 0x1, 0x7}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a000000000000fe800000000000000000690d7d520d25cab2d69003e61f0000000000aa00004e220000000000000000000000000000000095254982e2e26f3ccd83f966237a0f649a7e795a9bab3c1f2bc1cb20747115cc806bcaadfa4eaa0897b719ac74b3b65e885446a40a9773ced20718123c0e8759fa9f814cda8d0e95d529adf66cd0b8f713b0d06bf364f335a613dc61ab1eb0fea8d8fc25f4105f94dacbf54c770d58c10a335c657ab7dcb967094a97155062adcf3a58a9"], 0x0) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000000c0)=ANY=[]) 528.539599ms ago: executing program 3 (id=2096): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) io_setup(0x2, &(0x7f0000000000)=0x0) r5 = eventfd(0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) 527.883379ms ago: executing program 5 (id=2097): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$netlink(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 347.924059ms ago: executing program 6 (id=2098): socket(0x27, 0x4, 0x3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sigaltstack(&(0x7f0000000340)={0x0, 0x1, 0xfffffffffffffe63}, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec6106000440000400000500070006"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$kcm(0x29, 0x5, 0x0) write$selinux_access(r0, 0x0, 0x49) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 335.10319ms ago: executing program 3 (id=2099): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r1 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x4dd8, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140)) r2 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0xe000200f}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 288.305813ms ago: executing program 0 (id=2100): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) ftruncate(r3, 0x2007ffb) sendfile(r4, r3, 0x0, 0x1000000200fff) 287.593803ms ago: executing program 6 (id=2101): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x1, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x32}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0xb, 0x0, &(0x7f0000000000)) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000380)={0xb0, 0xf, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x0, 0xe000, [0x6]}}, @generic={0x53, 0x35, "9b63337eed2ddf344e597a6dbe74cf127d41f9fd6c7909b633864836c60fba2d50849e7fe725bcf11b6fac398f2b37cbb2c1107721"}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x4, [0x0, 0x7ff]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x81}]}, 0x88) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) 149.098461ms ago: executing program 3 (id=2102): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x3, 0x541b7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100002, 0x0, 0x0, 0x7, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 3 (id=2103): pipe2$9p(0x0, 0x800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa00000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "ae30"}]}], {0x14}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) kernel console output (not intermixed with test programs): =root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.669848][ T29] audit: type=1400 audit(1769555301.704:905): avc: denied { name_bind } for pid=5633 comm="syz.2.722" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 82.691106][ T29] audit: type=1400 audit(1769555301.704:906): avc: denied { name_connect } for pid=5633 comm="syz.2.722" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 83.022571][ T5656] loop6: detected capacity change from 0 to 256 [ 83.031682][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.730'. [ 83.106404][ T5662] tipc: Started in network mode [ 83.111424][ T5662] tipc: Node identity 624d4d08671c, cluster identity 4711 [ 83.118729][ T5662] tipc: Enabled bearer , priority 0 [ 83.181027][ T5649] loop5: detected capacity change from 0 to 512 [ 83.195295][ T5662] syzkaller0: entered promiscuous mode [ 83.200977][ T5662] syzkaller0: entered allmulticast mode [ 83.217711][ T5662] tipc: Resetting bearer [ 83.223903][ T5649] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 83.242203][ T5649] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 83.250290][ T5649] EXT4-fs (loop5): failed to initialize system zone (-117) [ 83.258169][ T5649] EXT4-fs (loop5): mount failed [ 83.367444][ T5668] tipc: Resetting bearer [ 83.389655][ T5668] tipc: Disabling bearer [ 83.540294][ T5693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.744'. [ 84.834377][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 84.834397][ T29] audit: type=1400 audit(1769555303.864:910): avc: denied { read } for pid=5774 comm="syz.0.777" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 84.916680][ T29] audit: type=1400 audit(1769555303.864:911): avc: denied { open } for pid=5774 comm="syz.0.777" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 85.067595][ T5785] bond1: (slave ip6gretap1): making interface the new active one [ 85.076221][ T5785] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 85.365308][ T29] audit: type=1400 audit(1769555304.394:912): avc: denied { module_load } for pid=5791 comm="syz.3.784" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 85.443547][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.450783][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.462870][ T5794] bridge0: entered allmulticast mode [ 85.492956][ T5794] bridge_slave_1: left allmulticast mode [ 85.498834][ T5794] bridge_slave_1: left promiscuous mode [ 85.504726][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.545833][ T5794] bridge_slave_0: left allmulticast mode [ 85.551594][ T5794] bridge_slave_0: left promiscuous mode [ 85.557404][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.640138][ T29] audit: type=1400 audit(1769555304.674:913): avc: denied { write } for pid=5804 comm="syz.6.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 85.791820][ T5821] loop0: detected capacity change from 0 to 1024 [ 85.798459][ T29] audit: type=1400 audit(1769555304.824:914): avc: denied { lock } for pid=5815 comm="syz.5.792" path="socket:[15805]" dev="sockfs" ino=15805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.823419][ T5821] EXT4-fs: Ignoring removed orlov option [ 86.002132][ T5821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.160613][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.196722][ T5838] __nla_validate_parse: 3 callbacks suppressed [ 86.196741][ T5838] netlink: 52 bytes leftover after parsing attributes in process `syz.2.800'. [ 86.212851][ T5838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5838 comm=syz.2.800 [ 86.226348][ T5838] netlink: 76 bytes leftover after parsing attributes in process `syz.2.800'. [ 86.236343][ T5838] netlink: 52 bytes leftover after parsing attributes in process `syz.2.800'. [ 86.334668][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.802'. [ 86.351446][ T29] audit: type=1400 audit(1769555305.384:915): avc: denied { ioctl } for pid=5845 comm="syz.3.803" path="socket:[15168]" dev="sockfs" ino=15168 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.523825][ T5854] netlink: 'syz.3.805': attribute type 6 has an invalid length. [ 86.853978][ T29] audit: type=1400 audit(1769555305.884:916): avc: denied { watch watch_reads } for pid=5864 comm="syz.2.809" path="/" dev="ramfs" ino=15329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 86.936790][ T29] audit: type=1400 audit(1769555305.914:917): avc: denied { execute_no_trans } for pid=5864 comm="syz.2.809" path="/file0" dev="ramfs" ino=15330 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 86.959491][ T29] audit: type=1400 audit(1769555305.944:918): avc: denied { getopt } for pid=5868 comm="syz.2.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.279158][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz.5.816'. [ 87.299749][ T5897] netlink: 28 bytes leftover after parsing attributes in process `syz.6.817'. [ 87.343323][ T5899] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5899 comm=syz.5.816 [ 87.552052][ T29] audit: type=1400 audit(1769555306.574:919): avc: denied { create } for pid=5905 comm="syz.5.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.765054][ T5925] syz_tun: entered allmulticast mode [ 87.777599][ T5925] syz_tun: left allmulticast mode [ 87.844247][ T5928] syzkaller0: entered promiscuous mode [ 87.850164][ T5928] syzkaller0: entered allmulticast mode [ 87.862265][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 87.961052][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 88.017633][ T5948] loop5: detected capacity change from 0 to 128 [ 88.027140][ T5948] vfat: Unknown parameter 'shortn±ô½¥ame' [ 88.097917][ T5956] netlink: 24 bytes leftover after parsing attributes in process `syz.5.835'. [ 88.117291][ T5956] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5956 comm=syz.5.835 [ 88.179898][ T1716] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.187535][ T5958] Bluetooth: hci0: Frame reassembly failed (-84) [ 88.407097][ T5965] loop0: detected capacity change from 0 to 164 [ 88.431875][ T5965] isofs_fill_super: root inode is not a directory. Corrupted media? [ 89.040641][ T5994] syzkaller0: entered promiscuous mode [ 89.046229][ T5994] syzkaller0: entered allmulticast mode [ 89.298876][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.848'. [ 89.322220][ T6004] loop0: detected capacity change from 0 to 512 [ 89.389121][ T6004] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.402726][ T6014] batman_adv: batadv0: Adding interface: macvtap1 [ 89.409757][ T6014] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.439852][ T6014] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 89.465247][ T6004] EXT4-fs (loop0): orphan cleanup on readonly fs [ 89.500661][ T6004] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.846: Allocating blocks 41-42 which overlap fs metadata [ 89.532969][ T6004] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.846: Allocating blocks 41-42 which overlap fs metadata [ 89.550082][ T6004] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.846: Failed to acquire dquot type 1 [ 89.570008][ T6004] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 89.621689][ T6004] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.846: corrupted inode contents [ 89.665784][ T6004] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.846: mark_inode_dirty error [ 89.706615][ T6004] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.846: corrupted inode contents [ 89.758004][ T6004] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.846: mark_inode_dirty error [ 89.795193][ T6004] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.846: corrupted inode contents [ 89.831336][ T6004] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 89.865714][ T6004] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.846: corrupted inode contents [ 89.880656][ T6004] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.846: mark_inode_dirty error [ 89.903965][ T6004] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 89.936947][ T6004] EXT4-fs (loop0): 1 truncate cleaned up [ 89.981313][ T6004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.116147][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.216647][ T5311] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 90.258674][ T6036] syzkaller0: entered promiscuous mode [ 90.264214][ T6036] syzkaller0: entered allmulticast mode [ 91.596371][ T6075] netlink: 'syz.3.872': attribute type 1 has an invalid length. [ 91.658984][ T6075] bond2: entered promiscuous mode [ 91.695356][ T6075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.727585][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 91.727613][ T29] audit: type=1400 audit(1769555310.764:929): avc: denied { accept } for pid=6083 comm="syz.6.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.780415][ T6084] loop6: detected capacity change from 0 to 256 [ 91.795316][ T6082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.887562][ T6082] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 91.898310][ T6082] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 91.931069][ T6082] bond2: (slave wireguard0): making interface the new active one [ 91.938905][ T6082] wireguard0: entered promiscuous mode [ 91.968287][ T6073] __nla_validate_parse: 2 callbacks suppressed [ 91.968302][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 91.986098][ T6082] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 92.007908][ T6086] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 92.086424][ T6086] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 92.129039][ T6073] hsr_slave_1 (unregistering): left promiscuous mode [ 92.203038][ T6101] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.877'. [ 92.212243][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.877'. [ 92.225898][ T29] audit: type=1400 audit(1769555311.254:930): avc: denied { bind } for pid=6098 comm="syz.2.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 92.264274][ T6103] uprobe: syz.3.879:6103 failed to unregister, leaking uprobe [ 92.269496][ T29] audit: type=1326 audit(1769555311.294:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.295418][ T29] audit: type=1326 audit(1769555311.294:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.318724][ T29] audit: type=1326 audit(1769555311.294:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.342105][ T29] audit: type=1326 audit(1769555311.294:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.365535][ T29] audit: type=1326 audit(1769555311.294:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.388855][ T29] audit: type=1326 audit(1769555311.294:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.453840][ T6110] bridge0: entered allmulticast mode [ 92.455476][ T6108] netlink: 'syz.0.883': attribute type 1 has an invalid length. [ 92.467899][ T29] audit: type=1326 audit(1769555311.344:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.491242][ T29] audit: type=1326 audit(1769555311.344:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6100 comm="syz.5.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 92.573178][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.883'. [ 92.596899][ T6114] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 92.607160][ T6114] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 92.618613][ T6114] bond2: (slave vxcan3): making interface the new active one [ 92.627258][ T6114] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 92.647882][ T6119] bond2 (unregistering): (slave vxcan3): Releasing backup interface [ 92.685682][ T6119] bond2 (unregistering): Released all slaves [ 92.785221][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 93.159167][ T6139] loop0: detected capacity change from 0 to 8192 [ 93.399133][ T6130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 93.447846][ T6130] hsr_slave_1 (unregistering): left promiscuous mode [ 93.964454][ T6153] loop3: detected capacity change from 0 to 2048 [ 94.037236][ T6153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.217339][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.468534][ T6170] ref_ctr increment failed for inode: 0x356 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888109f8d100 [ 94.628981][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.908'. [ 95.084534][ T6164] loop6: detected capacity change from 0 to 32768 [ 95.242315][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.917'. [ 95.811301][ T6202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6202 comm=syz.2.917 [ 96.128467][ T6217] sctp: [Deprecated]: syz.5.920 (pid 6217) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.128467][ T6217] Use struct sctp_sack_info instead [ 96.467603][ T6226] loop6: detected capacity change from 0 to 2048 [ 96.499248][ T6226] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.560453][ T6226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.576887][ T6226] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.666967][ T3556] IPVS: starting estimator thread 0... [ 96.709510][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.846662][ T6235] IPVS: using max 2016 ests per chain, 100800 per kthread [ 96.857646][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 96.857664][ T29] audit: type=1400 audit(1769555315.894:1123): avc: denied { ioctl } for pid=6232 comm="syz.2.928" path="socket:[17133]" dev="sockfs" ino=17133 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 97.013081][ T29] audit: type=1400 audit(1769555315.984:1124): avc: denied { unmount } for pid=6241 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 97.342885][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 97.392857][ T6257] team1: entered promiscuous mode [ 97.398023][ T6257] team1: entered allmulticast mode [ 97.449541][ T6261] loop6: detected capacity change from 0 to 128 [ 97.770805][ T29] audit: type=1400 audit(1769555316.804:1125): avc: denied { setopt } for pid=6262 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 97.874106][ T29] audit: type=1400 audit(1769555316.904:1126): avc: denied { ioctl } for pid=6266 comm="syz.2.942" path="socket:[17488]" dev="sockfs" ino=17488 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.122577][ T6276] loop0: detected capacity change from 0 to 512 [ 98.207688][ T6276] EXT4-fs: Ignoring removed i_version option [ 98.393752][ T6276] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.446929][ T6276] ext4 filesystem being mounted at /192/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.509047][ T29] audit: type=1400 audit(1769555317.544:1127): avc: denied { map } for pid=6275 comm="syz.0.947" path="/192/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 98.661644][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.714741][ T6286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.951'. [ 98.801999][ T6286] netlink: 'syz.5.951': attribute type 5 has an invalid length. [ 98.809854][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.5.951'. [ 99.010348][ T6292] lo: Caught tx_queue_len zero misconfig [ 99.473498][ T6315] loop6: detected capacity change from 0 to 1024 [ 99.521058][ T6315] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 99.669649][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.680688][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.886072][ T6300] loop5: detected capacity change from 0 to 512 [ 99.910416][ T6300] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 99.921277][ T6300] EXT4-fs (loop5): orphan cleanup on readonly fs [ 99.935397][ T6300] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 99.945334][ T6300] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 99.955927][ T6300] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.955: Failed to acquire dquot type 1 [ 99.971658][ T6300] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.955: bg 0: block 40: padding at end of block bitmap is not set [ 99.989138][ T6300] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 100.003091][ T6300] EXT4-fs (loop5): 1 truncate cleaned up [ 100.020148][ T6300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.116912][ T4259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.353055][ T6356] netlink: 'syz.6.976': attribute type 1 has an invalid length. [ 100.367300][ T6356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.385240][ T6356] bond1: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 100.395526][ T6356] bond1: entered allmulticast mode [ 100.401873][ T6361] netlink: 80 bytes leftover after parsing attributes in process `syz.3.978'. [ 100.410870][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.978'. [ 100.427269][ T6356] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 100.458990][ T29] audit: type=1400 audit(2000000000.140:1128): avc: denied { write } for pid=6363 comm="syz.6.979" name="mcfilter6" dev="proc" ino=4026533172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 101.014141][ T29] audit: type=1400 audit(2000000000.690:1129): avc: denied { connect } for pid=6372 comm="syz.6.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.045813][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.054688][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.065132][ T29] audit: type=1400 audit(2000000000.740:1130): avc: denied { listen } for pid=6372 comm="syz.6.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.580510][ T6406] loop3: detected capacity change from 0 to 512 [ 101.602409][ T6406] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 101.877692][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.888680][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.935324][ T31] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.956796][ T29] audit: type=1400 audit(2000000001.630:1131): avc: denied { read } for pid=6424 comm="syz.6.1000" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.980571][ T31] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.991376][ T31] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.000413][ T31] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.292369][ T6440] loop0: detected capacity change from 0 to 1024 [ 102.299458][ T6440] ext4: Unknown parameter 'nouser_xattr' [ 102.329688][ T29] audit: type=1400 audit(2000000002.010:1132): avc: denied { mounton } for pid=6442 comm="syz.6.1008" path="/97/file1" dev="tmpfs" ino=516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 102.437012][ T6445] ip6t_rpfilter: unknown options [ 102.611828][ T29] audit: type=1400 audit(2000000002.290:1133): avc: denied { setattr } for pid=6455 comm="syz.2.1014" name="/" dev="configfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.709130][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1019'. [ 102.723272][ T6468] vlan3: entered allmulticast mode [ 102.730025][ T6468] dummy0: entered allmulticast mode [ 102.738222][ T6468] batman_adv: batadv0: Adding interface: vlan3 [ 102.744448][ T6468] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.769781][ T6468] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 102.831654][ T6471] loop5: detected capacity change from 0 to 1024 [ 102.842820][ T6471] ext4: Unknown parameter 'nouser_xattr' [ 103.156995][ T29] audit: type=1400 audit(2000000002.840:1134): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.196658][ T29] audit: type=1326 audit(2000000002.840:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 103.220536][ T29] audit: type=1326 audit(2000000002.840:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 103.244494][ T29] audit: type=1326 audit(2000000002.840:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 103.268157][ T29] audit: type=1326 audit(2000000002.840:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 103.292083][ T29] audit: type=1326 audit(2000000002.840:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 103.316296][ T29] audit: type=1326 audit(2000000002.840:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.5.1025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 103.540284][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'. [ 103.591473][ T1716] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.600360][ T1716] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.609830][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'. [ 103.626684][ T1716] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.635646][ T1716] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.675122][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'. [ 103.686197][ T6502] netlink: 'syz.0.1031': attribute type 10 has an invalid length. [ 103.725343][ T6502] veth0_vlan: entered allmulticast mode [ 103.761895][ T6502] veth0_vlan: left promiscuous mode [ 103.792591][ T6502] veth0_vlan: entered promiscuous mode [ 103.827689][ T6502] team0: Device veth0_vlan failed to register rx_handler [ 103.885800][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'. [ 104.656471][ T6543] raw_sendmsg: syz.0.1043 forgot to set AF_INET. Fix it! [ 104.686489][ T6545] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 104.991014][ T6552] bond0: Caught tx_queue_len zero misconfig [ 105.050779][ T6554] syz_tun: entered allmulticast mode [ 105.079584][ T6557] team_slave_1: Caught tx_queue_len zero misconfig [ 105.280270][ T6565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1051'. [ 105.340671][ T6565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6565 comm=syz.2.1051 [ 105.824444][ T6551] syz_tun: left allmulticast mode [ 105.905756][ T6579] loop3: detected capacity change from 0 to 128 [ 106.100924][ T6589] pim6reg9: entered allmulticast mode [ 106.241888][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1062'. [ 106.340153][ T6600] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6600 comm=syz.2.1062 [ 106.838144][ T6640] lo speed is unknown, defaulting to 1000 [ 106.847879][ T6640] lo speed is unknown, defaulting to 1000 [ 106.853875][ T6640] lo speed is unknown, defaulting to 1000 [ 106.862487][ T6640] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.879012][ T6640] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 106.981736][ T6640] lo speed is unknown, defaulting to 1000 [ 107.052584][ T6640] lo speed is unknown, defaulting to 1000 [ 107.058871][ T6640] lo speed is unknown, defaulting to 1000 [ 107.065242][ T6640] lo speed is unknown, defaulting to 1000 [ 107.071588][ T6640] lo speed is unknown, defaulting to 1000 [ 107.085624][ T6640] lo speed is unknown, defaulting to 1000 [ 107.345573][ T6662] macvlan2: entered promiscuous mode [ 107.351055][ T6662] dummy0: entered promiscuous mode [ 107.356346][ T6662] macvlan2: entered allmulticast mode [ 107.428230][ T6666] ªªªªªª: renamed from vlan0 [ 108.017181][ T6691] netlink: 'syz.6.1096': attribute type 30 has an invalid length. [ 108.125262][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1098'. [ 108.138691][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 108.138712][ T29] audit: type=1400 audit(2000000007.820:1232): avc: denied { write } for pid=6694 comm="syz.3.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 108.221740][ T6702] tipc: New replicast peer: 255.255.255.255 [ 108.227988][ T6702] tipc: Enabled bearer , priority 10 [ 108.375255][ T29] audit: type=1400 audit(2000000008.050:1233): avc: denied { bind } for pid=6714 comm="syz.2.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.505850][ T29] audit: type=1326 audit(2000000008.180:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 108.529551][ T29] audit: type=1326 audit(2000000008.180:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 108.614535][ T29] audit: type=1326 audit(2000000008.180:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 108.638132][ T29] audit: type=1326 audit(2000000008.180:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 108.661762][ T29] audit: type=1326 audit(2000000008.180:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6724 comm="syz.5.1110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 108.685251][ T29] audit: type=1326 audit(2000000008.210:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 108.708934][ T29] audit: type=1326 audit(2000000008.210:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 108.732432][ T29] audit: type=1326 audit(2000000008.210:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6731 comm="syz.2.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 109.256961][ T3408] tipc: Node number set to 89214216 [ 109.994964][ T6798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1135'. [ 110.023128][ T6798] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6798 comm=syz.2.1135 [ 110.157299][ T6806] netlink: 'syz.2.1139': attribute type 1 has an invalid length. [ 110.172254][ T6806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.192115][ T6806] veth13: entered promiscuous mode [ 110.200725][ T6806] bond3: (slave veth13): Enslaving as an active interface with a down link [ 110.215858][ T6806] bond3: entered allmulticast mode [ 110.542767][ T6815] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.588141][ T6815] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.668989][ T6815] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.728150][ T6815] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.789469][ T52] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.813013][ T52] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.841913][ T52] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.865352][ T52] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.118858][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1150'. [ 111.169499][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1150'. [ 111.608737][ T6842] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1151'. [ 111.771897][ T6853] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 111.836810][ T6853] bond2: (slave gretap1): making interface the new active one [ 111.855064][ T6853] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 111.889851][ T6853] vlan0: entered allmulticast mode [ 111.895036][ T6853] bond2: entered allmulticast mode [ 111.900325][ T6853] gretap1: entered allmulticast mode [ 111.920448][ T6853] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 112.131905][ T6874] mmap: syz.5.1158 (6874) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.111984][ T6909] tipc: New replicast peer: 255.255.255.255 [ 113.118278][ T6909] tipc: Enabled bearer , priority 10 [ 113.150186][ T6911] netlink: 'syz.5.1174': attribute type 16 has an invalid length. [ 113.158297][ T6911] netlink: 'syz.5.1174': attribute type 17 has an invalid length. [ 113.218268][ T6911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.238956][ T6911] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.255806][ T6911] batman_adv: batadv0: Interface activated: vlan3 [ 113.287886][ T6916] tipc: Failed to remove unknown binding: 66,0,0/0:1876055366/1876055367 [ 113.298815][ T6911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.323250][ T6916] tipc: Failed to remove unknown binding: 66,0,0/0:1876055366/1876055367 [ 113.816451][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 113.816471][ T29] audit: type=1400 audit(2000000013.490:1274): avc: denied { ioctl } for pid=6930 comm="syz.6.1182" path="socket:[20134]" dev="sockfs" ino=20134 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.824657][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1182'. [ 113.857352][ T6931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.886896][ T6931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.947431][ T29] audit: type=1400 audit(2000000013.630:1275): avc: denied { read } for pid=6935 comm="syz.2.1184" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 114.074788][ T6947] netlink: 'syz.6.1189': attribute type 142 has an invalid length. [ 114.082992][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1189'. [ 114.104271][ T6946] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1188'. [ 114.116790][ T1036] tipc: Node number set to 1404758093 [ 114.162628][ T6947] loop6: detected capacity change from 0 to 8192 [ 114.361723][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1193'. [ 114.398655][ T29] audit: type=1326 audit(2000000014.080:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 114.401516][ T6966] ipip0: entered promiscuous mode [ 114.457999][ T29] audit: type=1326 audit(2000000014.110:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 114.481622][ T29] audit: type=1326 audit(2000000014.110:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 114.505177][ T29] audit: type=1326 audit(2000000014.110:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 114.528925][ T29] audit: type=1326 audit(2000000014.110:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 114.552786][ T29] audit: type=1326 audit(2000000014.110:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 114.576240][ T29] audit: type=1326 audit(2000000014.110:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 114.599858][ T29] audit: type=1326 audit(2000000014.110:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6964 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 115.207381][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1211'. [ 115.223838][ T7010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.257969][ T7010] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 115.285755][ T7010] macvlan2: entered promiscuous mode [ 115.291336][ T7010] macvlan2: entered allmulticast mode [ 115.297701][ T7010] bond2: entered promiscuous mode [ 115.303189][ T7010] syz_tun: entered promiscuous mode [ 115.309035][ T7010] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.318252][ T7010] bond2: left promiscuous mode [ 115.323124][ T7010] syz_tun: left promiscuous mode [ 115.406346][ T7022] netlink: 'syz.6.1214': attribute type 1 has an invalid length. [ 115.425817][ T7022] Unknown options in mask 20 [ 115.712615][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 115.794472][ T7045] netlink: 'syz.3.1223': attribute type 13 has an invalid length. [ 115.808344][ T7039] netlink: 822 bytes leftover after parsing attributes in process `syz.2.1220'. [ 115.815917][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1221'. [ 115.869577][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.877043][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.934221][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.944893][ T7045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.990592][ T7059] loop6: detected capacity change from 0 to 512 [ 116.008857][ T7059] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 116.024099][ T7059] EXT4-fs (loop6): mount failed [ 116.034054][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 116.043231][ T7052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 116.052426][ T7058] lo: entered allmulticast mode [ 116.070056][ T31] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.079374][ T7051] lo: left allmulticast mode [ 116.109911][ T31] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.124339][ T31] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.146343][ T31] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.237734][ T7072] netlink: 'syz.5.1233': attribute type 13 has an invalid length. [ 116.447644][ T7076] tunl0: Caught tx_queue_len zero misconfig [ 116.533669][ T7080] loop6: detected capacity change from 0 to 512 [ 116.542721][ T7080] EXT4-fs: Ignoring removed nobh option [ 116.584753][ T7082] netlink: 'syz.3.1237': attribute type 33 has an invalid length. [ 116.619123][ T7080] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 116.667255][ T7080] EXT4-fs (loop6): 1 truncate cleaned up [ 116.701921][ T7080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.014545][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.323087][ T7108] loop6: detected capacity change from 0 to 128 [ 117.351545][ T7108] msdos: Bad value for 'fmask' [ 118.408087][ T7146] lo: Caught tx_queue_len zero misconfig [ 118.491174][ T7149] lo speed is unknown, defaulting to 1000 [ 118.660532][ T7166] lo speed is unknown, defaulting to 1000 [ 118.684658][ T7164] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.795180][ T7164] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.859747][ T7178] netlink: 'syz.3.1275': attribute type 83 has an invalid length. [ 118.910719][ T7164] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.071397][ T7164] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.128378][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.154602][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.190047][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.204261][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.221423][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.235017][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.247915][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.260638][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.292505][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.305145][ T7191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7191 comm=syz.6.1280 [ 119.399570][ T7198] ipip0: entered promiscuous mode [ 119.405427][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.432580][ T7205] tmpfs: Unsupported parameter 'huge' [ 119.460873][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.467917][ T7206] __nla_validate_parse: 6 callbacks suppressed [ 119.467986][ T7206] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1285'. [ 119.478444][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.484960][ T7206] netlink: 'syz.5.1285': attribute type 7 has an invalid length. [ 119.500695][ T7206] netlink: 'syz.5.1285': attribute type 8 has an invalid length. [ 119.502345][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.508483][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1285'. [ 119.874745][ T29] kauditd_printk_skb: 910 callbacks suppressed [ 119.874765][ T29] audit: type=1400 audit(2000000275.546:2194): avc: denied { mount } for pid=7216 comm="syz.5.1290" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 119.965893][ T7221] uprobe: syz.3.1293:7221 failed to unregister, leaking uprobe [ 119.973220][ T7220] lo speed is unknown, defaulting to 1000 [ 120.014528][ T29] audit: type=1400 audit(2000000275.686:2195): avc: denied { ioctl } for pid=7223 comm="syz.6.1294" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 121.007744][ T7249] loop6: detected capacity change from 0 to 164 [ 121.045275][ T7214] syz.0.1289 (7214) used greatest stack depth: 7040 bytes left [ 121.054816][ T7249] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.097135][ T29] audit: type=1400 audit(2000000276.776:2196): avc: denied { mount } for pid=7248 comm="syz.6.1302" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 121.123563][ T7249] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 121.133881][ T7249] Symlink component flag not implemented [ 121.139691][ T7249] Symlink component flag not implemented [ 121.150261][ T7249] Symlink component flag not implemented (7) [ 121.156298][ T7249] Symlink component flag not implemented (116) [ 121.262145][ T7258] xt_hashlimit: size too large, truncated to 1048576 [ 121.276818][ T29] audit: type=1400 audit(2000000276.946:2197): avc: denied { unmount } for pid=5088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 121.382257][ T7261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.442703][ T29] audit: type=1400 audit(2000000277.116:2198): avc: denied { open } for pid=7264 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.462102][ T29] audit: type=1400 audit(2000000277.116:2199): avc: denied { kernel } for pid=7264 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.508338][ T29] audit: type=1400 audit(2000000277.186:2200): avc: denied { tracepoint } for pid=7264 comm="syz.2.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.554334][ T29] audit: type=1400 audit(2000000277.226:2201): avc: denied { write } for pid=7268 comm="syz.0.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.616007][ T7273] netlink: 'syz.2.1311': attribute type 13 has an invalid length. [ 121.735859][ T29] audit: type=1400 audit(2000000277.406:2202): avc: denied { bind } for pid=7282 comm="syz.5.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 121.756491][ T7288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1315'. [ 121.899017][ T7291] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 121.999410][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1319'. [ 122.088064][ T7299] lo speed is unknown, defaulting to 1000 [ 122.369017][ T7323] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.328576][ T29] audit: type=1400 audit(2000000279.006:2203): avc: denied { remount } for pid=7340 comm="syz.0.1334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 123.387460][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 123.497028][ T7341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.523787][ T7341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.558166][ T7345] lo speed is unknown, defaulting to 1000 [ 123.587856][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1340'. [ 123.607920][ T7357] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 123.673514][ T7364] bond1: option mode: unable to set because the bond device has slaves [ 123.689408][ T7364] vlan2: entered allmulticast mode [ 123.694630][ T7364] bond1: entered allmulticast mode [ 123.699865][ T7364] ip6gretap1: entered allmulticast mode [ 123.707651][ T7364] bond1: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of ip6gretap1 [ 123.886923][ T7376] netlink: 'syz.0.1348': attribute type 4 has an invalid length. [ 123.909494][ T7376] netlink: 'syz.0.1348': attribute type 4 has an invalid length. [ 124.030454][ T7388] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.1352'. [ 124.039724][ T7388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1352'. [ 124.091572][ T7390] lo speed is unknown, defaulting to 1000 [ 124.503472][ T7406] lo speed is unknown, defaulting to 1000 [ 124.926052][ T7419] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1363'. [ 125.068769][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1367'. [ 125.087993][ T7427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.088566][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 125.088610][ T29] audit: type=1400 audit(2000000280.766:2346): avc: denied { ioctl } for pid=7423 comm="syz.6.1366" path="socket:[22323]" dev="sockfs" ino=22323 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 125.127108][ T7427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.135690][ T7427] batman_adv: batadv0: Interface deactivated: vlan3 [ 125.142394][ T7427] batman_adv: batadv0: Removing interface: vlan3 [ 125.441195][ T7446] syzkaller0: entered promiscuous mode [ 125.446787][ T7446] syzkaller0: entered allmulticast mode [ 125.454882][ T7446] tipc: Enabled bearer , priority 0 [ 125.462446][ T7445] tipc: Resetting bearer [ 125.509753][ T7445] tipc: Disabling bearer [ 125.856830][ T7466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1379'. [ 126.463176][ T7482] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 126.590868][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1386'. [ 126.772898][ T7503] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.828836][ T7503] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.848279][ T7509] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 126.870810][ T7509] team0: Mode changed to "activebackup" [ 126.878833][ T7503] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.935760][ T7513] uprobe: syz.5.1396:7513 failed to unregister, leaking uprobe [ 126.948731][ T7503] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.035486][ T1716] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.057827][ T1716] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.073227][ T1716] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.085633][ T1716] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.286222][ T7546] netlink: 'syz.0.1409': attribute type 13 has an invalid length. [ 127.396184][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.403685][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.522353][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.531138][ T7560] syzkaller0: entered promiscuous mode [ 127.536732][ T7560] syzkaller0: entered allmulticast mode [ 127.545135][ T1716] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.553640][ T1716] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.565497][ T1716] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.645993][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1415'. [ 127.658157][ T7566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1414'. [ 127.671195][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1415'. [ 127.728820][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1418'. [ 127.873348][ T7581] netlink: 'syz.6.1422': attribute type 1 has an invalid length. [ 127.883123][ T29] audit: type=1400 audit(2000000283.566:2347): avc: denied { mount } for pid=7575 comm="syz.2.1420" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 127.927243][ T7581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 127.950352][ T7581] bond3: (slave bond4): making interface the new active one [ 127.970564][ T7581] bond3: (slave bond4): Enslaving as an active interface with an up link [ 127.998292][ T7584] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.010788][ T7584] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 128.331366][ T7598] loop6: detected capacity change from 0 to 1024 [ 128.358781][ T7598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.383712][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1431'. [ 128.425380][ T29] audit: type=1400 audit(2000000284.096:2348): avc: denied { rename } for pid=7597 comm="syz.6.1429" name="file3" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 128.447927][ T29] audit: type=1400 audit(2000000284.096:2349): avc: denied { unlink } for pid=7597 comm="syz.6.1429" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.523820][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.535418][ T7605] selinux_netlink_send: 60 callbacks suppressed [ 128.535440][ T7605] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7605 comm=syz.5.1431 [ 128.556473][ T7605] netlink: 'syz.5.1431': attribute type 1 has an invalid length. [ 128.595258][ T29] audit: type=1400 audit(2000000284.266:2350): avc: denied { ioctl } for pid=7609 comm="syz.2.1434" path="socket:[22629]" dev="sockfs" ino=22629 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 128.620262][ T29] audit: type=1400 audit(2000000284.266:2351): avc: denied { write } for pid=7609 comm="syz.2.1434" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 128.702951][ T29] audit: type=1400 audit(2000000284.366:2352): avc: denied { getopt } for pid=7614 comm="syz.0.1435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 129.094673][ T29] audit: type=1326 audit(2000000284.766:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7643 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 129.118169][ T29] audit: type=1326 audit(2000000284.766:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7643 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 129.141623][ T29] audit: type=1326 audit(2000000284.766:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7643 comm="syz.2.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 129.232595][ T7646] netlink: 'syz.0.1444': attribute type 6 has an invalid length. [ 129.324417][ T7653] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 129.367773][ T7653] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7653 comm=syz.0.1447 [ 129.392850][ T7653] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 129.471667][ T7657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7657 comm=syz.0.1449 [ 129.645359][ T7673] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 129.715679][ T7665] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.762416][ T7670] bond5: entered promiscuous mode [ 129.767572][ T7670] bridge0: entered promiscuous mode [ 129.772982][ T7670] bond5: entered allmulticast mode [ 129.778224][ T7670] bridge0: entered allmulticast mode [ 129.807866][ T7680] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 129.827360][ T7680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.859609][ T7686] gre2: entered promiscuous mode [ 129.864729][ T7686] gre2: entered allmulticast mode [ 129.884384][ T7687] xt_hashlimit: size too large, truncated to 1048576 [ 129.950071][ T7665] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.993964][ T7691] bridge_slave_0: left allmulticast mode [ 129.999849][ T7691] bridge_slave_0: left promiscuous mode [ 130.005584][ T7691] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.015597][ T7691] bridge_slave_1: left allmulticast mode [ 130.021352][ T7691] bridge_slave_1: left promiscuous mode [ 130.027192][ T7691] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.043788][ T7691] bond0: (slave bond_slave_0): Releasing backup interface [ 130.055810][ T7691] bond0: (slave bond_slave_1): Releasing backup interface [ 130.079500][ T7691] team0: Port device team_slave_1 removed [ 130.089281][ T7691] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.172271][ T7665] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.212938][ T7698] netlink: 'syz.2.1462': attribute type 39 has an invalid length. [ 130.225281][ T7694] bond1: entered allmulticast mode [ 130.232778][ T7693] team0: Mode changed to "activebackup" [ 130.367731][ T7665] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.454792][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.468379][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.485232][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.507329][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.583150][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 130.583170][ T29] audit: type=1400 audit(2000000286.256:2383): avc: denied { remount } for pid=7700 comm="syz.0.1463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 130.617674][ T7704] __nla_validate_parse: 2 callbacks suppressed [ 130.617773][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1464'. [ 130.821622][ T7704] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7704 comm=syz.5.1464 [ 130.915659][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1466'. [ 130.985437][ T7723] lo speed is unknown, defaulting to 1000 [ 131.060825][ T7726] lo speed is unknown, defaulting to 1000 [ 131.809591][ T7740] xt_hashlimit: size too large, truncated to 1048576 [ 131.954820][ T7741] –: renamed from vxcan1 [ 132.128263][ T7749] bridge_slave_0: left allmulticast mode [ 132.133994][ T7749] bridge_slave_0: left promiscuous mode [ 132.139825][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.167962][ T7749] bridge_slave_1: left allmulticast mode [ 132.173698][ T7749] bridge_slave_1: left promiscuous mode [ 132.179449][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.220493][ T7749] bond0: (slave bond_slave_0): Releasing backup interface [ 132.249281][ T7749] bond0: (slave bond_slave_1): Releasing backup interface [ 132.268959][ T7749] team0: Port device team_slave_0 removed [ 132.278700][ T7749] team0: Port device team_slave_1 removed [ 132.308097][ T7749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.318582][ T7749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.329763][ T7749] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 132.345905][ T29] audit: type=1400 audit(2000000288.006:2384): avc: denied { write } for pid=7753 comm="syz.0.1479" path="socket:[23688]" dev="sockfs" ino=23688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 132.346167][ T7755] team0: Mode changed to "activebackup" [ 132.700891][ T7781] loop6: detected capacity change from 0 to 512 [ 132.761598][ T7781] ext4: Unknown parameter 'noacl' [ 132.856507][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 132.865536][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 132.899227][ T7786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1488'. [ 132.947678][ T29] audit: type=1400 audit(2000000288.616:2385): avc: denied { lock } for pid=7791 comm="syz.3.1491" path="socket:[23735]" dev="sockfs" ino=23735 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 133.124926][ T29] audit: type=1400 audit(2000000288.786:2386): avc: denied { write } for pid=7797 comm="syz.0.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 133.510645][ T7830] lo speed is unknown, defaulting to 1000 [ 133.596763][ T7830] netlink: 'syz.2.1503': attribute type 2 has an invalid length. [ 133.659298][ T29] audit: type=1326 audit(2000000289.336:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900344aeb9 code=0x7ffc0000 [ 133.682852][ T29] audit: type=1326 audit(2000000289.336:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900344aeb9 code=0x7ffc0000 [ 133.710604][ T7844] loop6: detected capacity change from 0 to 512 [ 133.736924][ T7844] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.747095][ T29] audit: type=1326 audit(2000000289.386:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f900344aeb9 code=0x7ffc0000 [ 133.770559][ T29] audit: type=1326 audit(2000000289.386:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900344aeb9 code=0x7ffc0000 [ 133.794110][ T29] audit: type=1326 audit(2000000289.386:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900344aeb9 code=0x7ffc0000 [ 133.817669][ T29] audit: type=1326 audit(2000000289.386:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7843 comm="syz.6.1508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f900344aeb9 code=0x7ffc0000 [ 133.877197][ T7844] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1508: Allocating blocks 41-42 which overlap fs metadata [ 133.897729][ T7844] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1508: Allocating blocks 41-42 which overlap fs metadata [ 133.929873][ T7844] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1508: Failed to acquire dquot type 1 [ 133.941604][ T7844] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 133.956798][ T7844] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1508: corrupted inode contents [ 133.969465][ T7844] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.1508: mark_inode_dirty error [ 133.982359][ T7844] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1508: corrupted inode contents [ 133.994766][ T7830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1503'. [ 133.997671][ T7844] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.1508: mark_inode_dirty error [ 134.015500][ T7844] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1508: corrupted inode contents [ 134.049878][ T7844] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 134.072876][ T7844] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1508: corrupted inode contents [ 134.092233][ T7844] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.1508: mark_inode_dirty error [ 134.103853][ T7844] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 134.113299][ T7844] EXT4-fs (loop6): 1 truncate cleaned up [ 134.119711][ T7844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.174342][ T7860] FAT-fs (loop5): unable to read boot sector [ 134.181285][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.235826][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 135.456382][ T7904] loop6: detected capacity change from 0 to 128 [ 135.478119][ T7904] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.505701][ T7904] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.590649][ T7911] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1532'. [ 135.644919][ T7912] lo speed is unknown, defaulting to 1000 [ 135.745056][ T7914] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 136.136927][ T5088] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.784783][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 136.784804][ T29] audit: type=1400 audit(2000000548.457:2437): avc: denied { cpu } for pid=7949 comm="syz.3.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.603014][ T29] audit: type=1326 audit(2000000549.277:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 137.658596][ T29] audit: type=1326 audit(2000000549.307:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 137.682155][ T29] audit: type=1326 audit(2000000549.317:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 138.502887][ T29] audit: type=1326 audit(2000000550.177:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.0.1553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c3fdaeb9 code=0x7ffc0000 [ 138.713483][ T7988] can: request_module (can-proto-0) failed. [ 138.827781][ T7988] wireguard1: entered promiscuous mode [ 138.833318][ T7988] wireguard1: entered allmulticast mode [ 140.669578][ T29] audit: type=1400 audit(2000000808.339:2442): avc: denied { execute } for pid=8023 comm="syz.0.1570" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 141.722137][ T8019] syz.2.1569 (8019) used greatest stack depth: 6400 bytes left [ 141.873515][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 142.196884][ T8051] netlink: 'syz.0.1573': attribute type 3 has an invalid length. [ 142.460661][ T8069] random: crng reseeded on system resumption [ 142.467048][ T29] audit: type=1400 audit(2000000810.139:2443): avc: denied { write } for pid=8068 comm="syz.6.1583" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.490262][ T29] audit: type=1400 audit(2000000810.139:2444): avc: denied { open } for pid=8068 comm="syz.6.1583" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 142.514206][ T52] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.526783][ T52] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.545137][ T52] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.566378][ T52] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.594975][ T29] audit: type=1400 audit(2000000810.219:2445): avc: denied { firmware_load } for pid=8068 comm="syz.6.1583" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 142.743555][ T29] audit: type=1400 audit(2000000810.419:2446): avc: denied { mounton } for pid=8078 comm="syz.6.1588" path="/193/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 143.048889][ T29] audit: type=1400 audit(2000000810.719:2447): avc: denied { unmount } for pid=5088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 143.107238][ T29] audit: type=1400 audit(2000000810.749:2448): avc: denied { unmount } for pid=5088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 143.244029][ T8089] lo speed is unknown, defaulting to 1000 [ 143.295109][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1593'. [ 143.380790][ T8094] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 143.389706][ T3461] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.398131][ T3461] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.443112][ T3461] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.471193][ T3461] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 143.490288][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1593'. [ 143.530958][ T8094] bond6 (unregistering): (slave geneve2): Releasing backup interface [ 143.565974][ T8094] bond6 (unregistering): Released all slaves [ 143.600717][ T3461] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 143.611011][ T8103] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 143.624642][ T3461] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 143.633434][ T3461] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 143.661480][ T3461] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 143.682914][ T29] audit: type=1326 audit(2000000811.359:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 143.706526][ T29] audit: type=1326 audit(2000000811.359:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 143.768244][ T8114] netlink: 'syz.5.1601': attribute type 10 has an invalid length. [ 143.778016][ T8114] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 143.796732][ T29] audit: type=1326 audit(2000000811.419:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 143.820499][ T29] audit: type=1326 audit(2000000811.419:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8107 comm="syz.3.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 143.861211][ T8110] lo speed is unknown, defaulting to 1000 [ 143.944256][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 144.150626][ T8124] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.192295][ T8122] macvlan2: entered promiscuous mode [ 144.197713][ T8122] macvlan2: entered allmulticast mode [ 144.277238][ T8122] bond3: entered promiscuous mode [ 144.289613][ T8122] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 144.388410][ T8122] bond3: left promiscuous mode [ 144.688823][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 144.899359][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 145.878663][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1625'. [ 145.988368][ T8196] netlink: 'syz.2.1629': attribute type 7 has an invalid length. [ 145.996407][ T8196] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1629'. [ 146.009662][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1629'. [ 146.019537][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1629'. [ 146.028463][ T8200] netlink: 'syz.5.1631': attribute type 2 has an invalid length. [ 146.199957][ T8218] lo speed is unknown, defaulting to 1000 [ 146.364027][ T8224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8224 comm=syz.0.1638 [ 146.448015][ T8223] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 146.517352][ T8223] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.563014][ T8224] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 146.734212][ T8234] netlink: 'syz.2.1642': attribute type 1 has an invalid length. [ 146.754363][ T8234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.767508][ T8234] 8021q: adding VLAN 0 to HW filter on device bond6 [ 146.798203][ T8218] netlink: 'syz.3.1637': attribute type 2 has an invalid length. [ 146.843201][ T8234] bond6: (slave geneve3): making interface the new active one [ 146.859616][ T8234] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 146.868920][ T55] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 146.938072][ T55] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 146.946879][ T55] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 146.955368][ T55] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 147.060872][ T8218] __nla_validate_parse: 2 callbacks suppressed [ 147.060894][ T8218] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1637'. [ 147.132588][ T8246] capability: warning: `syz.0.1644' uses deprecated v2 capabilities in a way that may be insecure [ 147.375537][ T8258] netlink: 'syz.3.1652': attribute type 10 has an invalid length. [ 147.394502][ T8258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.412574][ T8258] team0: Port device bond0 added [ 148.021526][ T8280] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 148.141546][ T8280] 8021q: adding VLAN 0 to HW filter on device bond8 [ 148.179689][ T8280] bond7: (slave bond8): making interface the new active one [ 148.187457][ T8280] bond7: (slave bond8): Enslaving as an active interface with an up link [ 148.207205][ T8280] bond7: (slave gretap1): Enslaving as a backup interface with an up link [ 148.219292][ T8280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1659'. [ 148.229273][ T8280] 8021q: adding VLAN 0 to HW filter on device bond7 [ 148.328527][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 148.328542][ T29] audit: type=1400 audit(2000000816.009:2489): avc: denied { create } for pid=8285 comm="syz.3.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.505652][ T8300] tipc: Failed to remove unknown binding: 66,0,0/0:3331074039/3331074040 [ 148.536631][ T8300] tipc: Failed to remove unknown binding: 66,0,0/0:3331074039/3331074040 [ 148.671876][ T29] audit: type=1400 audit(2000000816.349:2490): avc: denied { setattr } for pid=8304 comm="syz.2.1667" name="secretmem" dev="secretmem" ino=24576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.702022][ T8307] loop6: detected capacity change from 0 to 1024 [ 148.709503][ T29] audit: type=1400 audit(2000000816.379:2491): avc: denied { getattr } for pid=8304 comm="syz.2.1667" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=24576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 148.736826][ T8307] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.743496][ T8307] EXT4-fs: Ignoring removed bh option [ 148.758055][ T8307] EXT4-fs (loop6): unable to read superblock [ 148.823556][ T8313] netlink: 'syz.2.1670': attribute type 1 has an invalid length. [ 148.837904][ T8313] 8021q: adding VLAN 0 to HW filter on device bond9 [ 148.859885][ T8313] ip6erspan0: entered promiscuous mode [ 148.868776][ T8313] bond9: (slave ip6erspan0): making interface the new active one [ 148.878318][ T8313] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link [ 148.902831][ T8313] macvlan3: entered promiscuous mode [ 148.914878][ T8313] bond9: entered promiscuous mode [ 148.925360][ T8313] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 148.954110][ T8313] bond9: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 148.985681][ T8313] bond9: left promiscuous mode [ 149.069100][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1675'. [ 149.318633][ T8335] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 149.379549][ T8343] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.432427][ T8343] infiniband syz0: set down [ 149.437173][ T8343] infiniband syz0: added bond0 [ 149.452403][ T8343] RDS/IB: syz0: added [ 149.457599][ T8343] smc: adding ib device syz0 with port count 1 [ 149.463954][ T8343] smc: ib device syz0 port 1 has no pnetid [ 149.805087][ T29] audit: type=1400 audit(2000000817.479:2492): avc: denied { shutdown } for pid=8356 comm="syz.6.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.827801][ T29] audit: type=1400 audit(2000000817.479:2493): avc: denied { read } for pid=8356 comm="syz.6.1684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.887224][ T8359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1685'. [ 149.919845][ T8365] netlink: 'syz.5.1688': attribute type 1 has an invalid length. [ 149.941052][ T8365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.964766][ T8365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1688'. [ 149.984267][ T8365] bond2: entered allmulticast mode [ 150.139146][ T8365] bond2: (slave ip6gretap1): making interface the new active one [ 150.147002][ T8365] ip6gretap1: entered allmulticast mode [ 150.154631][ T8365] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 151.130649][ T8391] lo speed is unknown, defaulting to 1000 [ 151.346091][ T29] audit: type=1326 audit(2000000819.019:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 151.369693][ T29] audit: type=1326 audit(2000000819.019:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 151.446694][ T29] audit: type=1326 audit(2000000819.029:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 151.470152][ T29] audit: type=1326 audit(2000000819.119:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 151.493725][ T29] audit: type=1326 audit(2000000819.119:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8400 comm="syz.3.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 152.081081][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1709'. [ 152.133950][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1709'. [ 153.120256][ T8457] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ017777777777777777777770xffffffffffffffff0xffffffffffffffff0x0000000000000388ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ' [ 153.353363][ T8469] loop6: detected capacity change from 0 to 128 [ 153.363930][ T8469] msdos: Bad value for 'fmask' [ 153.474427][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 153.474448][ T29] audit: type=1400 audit(2000000821.149:2517): avc: denied { bind } for pid=8475 comm="syz.2.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.547330][ T31] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.564439][ T31] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.606748][ T31] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.615510][ T31] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 153.697263][ T8484] netlink: 'syz.2.1729': attribute type 1 has an invalid length. [ 153.730339][ T8484] 8021q: adding VLAN 0 to HW filter on device bond10 [ 153.749268][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1732'. [ 153.778738][ T8490] bond10: (slave gretap2): making interface the new active one [ 153.796856][ T8490] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 153.806069][ T8494] netlink: 'syz.0.1733': attribute type 13 has an invalid length. [ 153.846925][ T8494] gretap0: refused to change device tx_queue_len [ 153.854607][ T8494] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 153.867509][ T8484] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8484 comm=syz.2.1729 [ 153.885505][ T8492] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 153.900053][ T8494] netlink: 'syz.0.1733': attribute type 4 has an invalid length. [ 153.900663][ T8492] macvlan3: entered promiscuous mode [ 153.913290][ T8492] macvlan3: entered allmulticast mode [ 153.919352][ T8492] bond3: entered promiscuous mode [ 153.924423][ T8492] bridge2: entered promiscuous mode [ 153.930113][ T8492] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 153.944411][ T8492] bond3: left promiscuous mode [ 153.949316][ T8492] bridge2: left promiscuous mode [ 154.114788][ T8509] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1738'. [ 154.125200][ T8515] bridge0: entered allmulticast mode [ 154.130925][ T8497] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.207666][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1743'. [ 154.280970][ T29] audit: type=1326 audit(2000000821.959:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.317557][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1744'. [ 154.335794][ T29] audit: type=1326 audit(2000000821.989:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.359587][ T29] audit: type=1326 audit(2000000821.989:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.383067][ T29] audit: type=1326 audit(2000000821.989:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.406638][ T29] audit: type=1326 audit(2000000821.989:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.430147][ T29] audit: type=1400 audit(2000000821.989:2523): avc: denied { lock } for pid=8525 comm="syz.5.1745" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 154.454545][ T29] audit: type=1326 audit(2000000821.989:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.478163][ T29] audit: type=1326 audit(2000000821.989:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.501776][ T29] audit: type=1326 audit(2000000822.009:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8525 comm="syz.5.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 154.957181][ T8569] loop6: detected capacity change from 0 to 512 [ 154.974197][ T8569] EXT4-fs: Ignoring removed orlov option [ 154.980935][ T8569] EXT4-fs: Ignoring removed i_version option [ 154.988126][ T8569] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.003229][ T8569] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 155.011749][ T8569] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 155.022041][ T8569] EXT4-fs (loop6): orphan cleanup on readonly fs [ 155.030937][ T8569] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 155.046319][ T8569] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 155.058116][ T8569] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1758: bg 0: block 40: padding at end of block bitmap is not set [ 155.075251][ T8569] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 155.087668][ T8569] EXT4-fs (loop6): 1 truncate cleaned up [ 155.133967][ T8569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.252482][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.175831][ T8636] lo speed is unknown, defaulting to 1000 [ 156.294320][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1784'. [ 156.337964][ T8643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8643 comm=syz.5.1784 [ 156.386170][ T8649] sctp: [Deprecated]: syz.5.1787 (pid 8649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.386170][ T8649] Use struct sctp_sack_info instead [ 157.015066][ T8664] netlink: 'syz.3.1792': attribute type 1 has an invalid length. [ 157.034908][ T8664] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 157.050823][ T8664] veth11: entered promiscuous mode [ 157.057644][ T8664] bond3: (slave veth11): Enslaving as a backup interface with a down link [ 158.134662][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 158.233170][ T8702] dummy0: entered promiscuous mode [ 158.284888][ T8702] dummy0: left promiscuous mode [ 158.430766][ T8718] lo speed is unknown, defaulting to 1000 [ 158.525639][ T8726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1812'. [ 158.658964][ T8729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8729 comm=syz.2.1813 [ 158.757884][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 158.757906][ T29] audit: type=1400 audit(2000000826.439:3021): avc: denied { accept } for pid=8731 comm="syz.5.1815" path="socket:[27408]" dev="sockfs" ino=27408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 158.816632][ T29] audit: type=1400 audit(2000000826.469:3022): avc: denied { nlmsg_read } for pid=8731 comm="syz.5.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.673559][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'. [ 159.717355][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1825'. [ 159.773204][ T8763] vlan2: entered promiscuous mode [ 159.778400][ T8763] bridge1: entered promiscuous mode [ 159.783742][ T8763] vlan2: entered allmulticast mode [ 159.789160][ T8763] bridge1: entered allmulticast mode [ 160.246924][ T29] audit: type=1400 audit(2000000827.919:3023): avc: denied { setopt } for pid=8782 comm="syz.0.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 160.735318][ T29] audit: type=1400 audit(2000000828.409:3024): avc: denied { read write } for pid=8792 comm="syz.5.1832" name="file0" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.758450][ T29] audit: type=1400 audit(2000000828.409:3025): avc: denied { open } for pid=8792 comm="syz.5.1832" path="/289/file0" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 160.789554][ T8788] loop6: detected capacity change from 0 to 512 [ 160.832825][ T8788] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.875509][ T8788] EXT4-fs (loop6): orphan cleanup on readonly fs [ 160.889432][ T8788] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1822: Allocating blocks 41-42 which overlap fs metadata [ 160.889614][ T8788] Quota error (device loop6): write_blk: dquota write failed [ 160.889664][ T8788] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 160.889703][ T8788] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1822: Allocating blocks 41-42 which overlap fs metadata [ 160.889862][ T8788] Quota error (device loop6): write_blk: dquota write failed [ 160.889890][ T8788] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 160.889918][ T8788] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1822: Failed to acquire dquot type 1 [ 160.890181][ T8788] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 160.890491][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1822: corrupted inode contents [ 160.890675][ T8788] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.1822: mark_inode_dirty error [ 160.890864][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1822: corrupted inode contents [ 160.891049][ T8788] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.1822: mark_inode_dirty error [ 160.891344][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1822: corrupted inode contents [ 160.891576][ T8788] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 160.891703][ T8788] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1822: corrupted inode contents [ 160.891904][ T8788] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.1822: mark_inode_dirty error [ 160.892084][ T8788] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 160.892279][ T8788] EXT4-fs (loop6): 1 truncate cleaned up [ 160.901196][ T8788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.031702][ T29] audit: type=1400 audit(2000000828.709:3026): avc: denied { unlink } for pid=4259 comm="syz-executor" name="file0" dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 161.341881][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.411804][ T8813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 161.420880][ T8813] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1841'. [ 161.429965][ T8813] netlink: 'syz.3.1841': attribute type 3 has an invalid length. [ 161.437745][ T8813] netlink: 'syz.3.1841': attribute type 2 has an invalid length. [ 161.445483][ T8813] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1841'. [ 161.457650][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 161.736424][ T8822] lo speed is unknown, defaulting to 1000 [ 161.851605][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1839'. [ 161.898661][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 162.568352][ T8857] ALSA: seq fatal error: cannot create timer (-22) [ 162.680037][ T8871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.736926][ T8876] lo: entered allmulticast mode [ 162.763794][ T8875] lo: left allmulticast mode [ 163.109507][ T8892] lo speed is unknown, defaulting to 1000 [ 163.139988][ T8896] netlink: 'syz.5.1873': attribute type 1 has an invalid length. [ 163.179142][ T8896] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.229495][ T8899] bond4: (slave gretap1): making interface the new active one [ 163.242265][ T8899] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 163.342247][ T8896] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8896 comm=syz.5.1873 [ 163.807702][ T8909] __nla_validate_parse: 3 callbacks suppressed [ 163.807724][ T8909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1876'. [ 163.823029][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1876'. [ 163.832164][ T8909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1876'. [ 163.852237][ T8910] sctp: [Deprecated]: syz.0.1874 (pid 8910) Use of int in maxseg socket option. [ 163.852237][ T8910] Use struct sctp_assoc_value instead [ 163.946036][ T8909] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1876'. [ 164.541337][ T8926] : renamed from bond_slave_0 (while UP) [ 164.703971][ T8933] lo speed is unknown, defaulting to 1000 [ 164.792197][ T8942] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.799450][ T8942] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.618129][ T8960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1890'. [ 165.638417][ T8960] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8960 comm=syz.2.1890 [ 165.863508][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 165.863527][ T29] audit: type=1326 audit(2000000833.539:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 165.893281][ T29] audit: type=1326 audit(2000000833.539:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 165.916809][ T29] audit: type=1326 audit(2000000833.539:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 165.940309][ T29] audit: type=1326 audit(2000000833.539:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 165.963672][ T29] audit: type=1326 audit(2000000833.539:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 165.987199][ T29] audit: type=1326 audit(2000000833.539:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 166.011175][ T29] audit: type=1326 audit(2000000833.539:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 166.034827][ T29] audit: type=1326 audit(2000000833.539:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 166.058266][ T29] audit: type=1326 audit(2000000833.539:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 166.081863][ T29] audit: type=1326 audit(2000000833.539:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8970 comm="syz.2.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4aeafaaeb9 code=0x7ffc0000 [ 167.000832][ T5197] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 167.009328][ T5197] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 167.021659][ T8999] loop6: detected capacity change from 0 to 2048 [ 167.038525][ T8999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.096178][ T9006] xt_hashlimit: size too large, truncated to 1048576 [ 167.184834][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.239637][ T9013] loop6: detected capacity change from 0 to 1024 [ 167.246857][ T9013] EXT4-fs: Ignoring removed mblk_io_submit option [ 167.257096][ T9013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 167.285428][ T9013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.301264][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1908'. [ 167.363877][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.491211][ T9032] tipc: Started in network mode [ 167.496251][ T9032] tipc: Node identity ac14140f, cluster identity 4711 [ 167.504012][ T9032] tipc: New replicast peer: 255.255.255.255 [ 167.510243][ T9032] tipc: Enabled bearer , priority 10 [ 167.572926][ T9031] lo speed is unknown, defaulting to 1000 [ 168.636413][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1924'. [ 168.810289][ T5197] tipc: Node number set to 2886997007 [ 169.502920][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1933'. [ 169.516890][ T9092] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1933'. [ 169.598591][ T9097] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1935'. [ 169.738825][ T9105] tipc: Enabling of bearer rejected, failed to enable media [ 169.835139][ T9114] xt_hashlimit: size too large, truncated to 1048576 [ 170.379397][ T9123] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.430167][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1947'. [ 170.439319][ T9130] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1947'. [ 170.464470][ T9128] lo speed is unknown, defaulting to 1000 [ 170.480171][ T9123] loop6: detected capacity change from 0 to 128 [ 170.540383][ T9123] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 170.654065][ T9123] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 170.672116][ T9123] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.1945: checksumming directory block 0 [ 170.739512][ T5088] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.768363][ T9150] smc: net device hsr0 applied user defined pnetid SYZ2 [ 170.926766][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 170.926786][ T29] audit: type=1400 audit(2000000838.609:3189): avc: denied { getopt } for pid=9139 comm="syz.3.1949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 171.094853][ T9177] netlink: 'syz.0.1960': attribute type 1 has an invalid length. [ 171.153488][ T9177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.219263][ T9177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.226823][ T9177] bond6: (slave vxcan4): The slave device specified does not support setting the MAC address [ 171.238850][ T9177] bond6: (slave vxcan4): Error -95 calling set_mac_address [ 171.280771][ T9184] veth11: entered promiscuous mode [ 171.289008][ T9184] bond6: (slave veth11): Enslaving as an active interface with a down link [ 171.306359][ T9184] macvlan3: entered promiscuous mode [ 171.311800][ T9184] macvlan3: entered allmulticast mode [ 171.328827][ T9184] bond6: entered promiscuous mode [ 171.334504][ T9184] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 171.367776][ T9184] bond6: left promiscuous mode [ 171.524462][ T9192] netlink: 'syz.0.1963': attribute type 13 has an invalid length. [ 171.996805][ T9204] loop6: detected capacity change from 0 to 512 [ 172.003504][ T9204] EXT4-fs: inline encryption not supported [ 172.023834][ T9204] ext4: Bad value for 'debug_want_extra_isize' [ 172.057838][ T9204] loop6: detected capacity change from 0 to 2048 [ 172.121880][ T9204] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.390373][ T9223] netlink: 'syz.3.1974': attribute type 27 has an invalid length. [ 172.449970][ T9223] bond2: left promiscuous mode [ 172.454897][ T9223] wireguard0: left promiscuous mode [ 172.488624][ T9223] veth11: left promiscuous mode [ 172.518755][ T9223] vlan2: left promiscuous mode [ 172.523613][ T9223] bridge1: left promiscuous mode [ 172.528771][ T9223] vlan2: left allmulticast mode [ 172.533714][ T9223] bridge1: left allmulticast mode [ 172.580781][ T9221] lo speed is unknown, defaulting to 1000 [ 172.895504][ T29] audit: type=1326 audit(2000000840.569:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 172.942215][ T29] audit: type=1326 audit(2000000840.599:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 172.965745][ T29] audit: type=1326 audit(2000000840.599:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 172.989172][ T29] audit: type=1326 audit(2000000840.599:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 173.012645][ T29] audit: type=1326 audit(2000000840.599:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 173.036159][ T29] audit: type=1326 audit(2000000840.599:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 173.059804][ T29] audit: type=1326 audit(2000000840.599:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 173.083305][ T29] audit: type=1326 audit(2000000840.599:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 173.106942][ T29] audit: type=1326 audit(2000000840.599:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9240 comm="syz.3.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1813aeb9 code=0x7ffc0000 [ 173.271460][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1984'. [ 173.280542][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1984'. [ 173.289494][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1984'. [ 173.701376][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1991'. [ 174.066775][ T9284] netlink: 'syz.6.1995': attribute type 4 has an invalid length. [ 174.092279][ T9284] netlink: 'syz.6.1995': attribute type 4 has an invalid length. [ 174.231114][ T9289] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 174.782008][ T9278] syz.3.1994 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 174.795991][ T9278] CPU: 1 UID: 0 PID: 9278 Comm: syz.3.1994 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.796079][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.796102][ T9278] Call Trace: [ 174.796116][ T9278] [ 174.796127][ T9278] __dump_stack+0x1d/0x30 [ 174.796213][ T9278] dump_stack_lvl+0x95/0xd0 [ 174.796236][ T9278] dump_stack+0x15/0x1b [ 174.796257][ T9278] dump_header+0x80/0x240 [ 174.796280][ T9278] oom_kill_process+0x295/0x350 [ 174.796365][ T9278] out_of_memory+0x97d/0xb80 [ 174.796402][ T9278] try_charge_memcg+0x62e/0xa10 [ 174.796432][ T9278] obj_cgroup_charge_pages+0x23/0xc0 [ 174.796554][ T9278] __memcg_kmem_charge_page+0x9e/0x170 [ 174.796592][ T9278] __alloc_frozen_pages_noprof+0x18a/0x350 [ 174.796743][ T9278] alloc_pages_mpol+0xb3/0x260 [ 174.796790][ T9278] alloc_pages_noprof+0x8f/0x130 [ 174.796835][ T9278] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 174.796894][ T9278] __kvmalloc_node_noprof+0x471/0x680 [ 174.797014][ T9278] ? ip_set_alloc+0x24/0x30 [ 174.797046][ T9278] ? ip_set_alloc+0x24/0x30 [ 174.797089][ T9278] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 174.797179][ T9278] ip_set_alloc+0x24/0x30 [ 174.797213][ T9278] hash_netiface_create+0x282/0x740 [ 174.797272][ T9278] ? __pfx_hash_netiface_create+0x10/0x10 [ 174.797425][ T9278] ip_set_create+0x3cf/0x970 [ 174.797504][ T9278] ? __nla_parse+0x40/0x60 [ 174.797600][ T9278] nfnetlink_rcv_msg+0x509/0x5d0 [ 174.797733][ T9278] netlink_rcv_skb+0x123/0x220 [ 174.797768][ T9278] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 174.797836][ T9278] nfnetlink_rcv+0x167/0x1720 [ 174.797875][ T9278] ? obj_cgroup_charge_account+0x122/0x1a0 [ 174.797920][ T9278] ? __rcu_read_unlock+0x4e/0x70 [ 174.797992][ T9278] ? trace_event_reg+0xe0/0x190 [ 174.798021][ T9278] ? perf_trace_add+0x176/0x1a0 [ 174.798072][ T9278] ? event_sched_in+0xebd/0xf90 [ 174.798124][ T9278] ? kmem_cache_alloc_lru_noprof+0x2bb/0x490 [ 174.798159][ T9278] ? __d_alloc+0x37/0x340 [ 174.798206][ T9278] ? _raw_spin_lock_bh+0x56/0xb0 [ 174.798280][ T9278] ? should_fail_ex+0x30/0x280 [ 174.798351][ T9278] ? selinux_nlmsg_lookup+0x99/0x890 [ 174.798382][ T9278] ? __rcu_read_unlock+0x33/0x70 [ 174.798450][ T9278] ? __netlink_lookup+0x276/0x2b0 [ 174.798578][ T9278] netlink_unicast+0x5c0/0x690 [ 174.798649][ T9278] netlink_sendmsg+0x5c8/0x6f0 [ 174.798679][ T9278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.798699][ T9278] ____sys_sendmsg+0x5af/0x600 [ 174.798723][ T9278] ___sys_sendmsg+0x195/0x1e0 [ 174.798770][ T9278] __x64_sys_sendmsg+0xd4/0x160 [ 174.798871][ T9278] x64_sys_call+0x17ba/0x3000 [ 174.798924][ T9278] do_syscall_64+0xc0/0x2a0 [ 174.798968][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.799072][ T9278] RIP: 0033:0x7f4c1813aeb9 [ 174.799096][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.799122][ T9278] RSP: 002b:00007f4c16b97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.799178][ T9278] RAX: ffffffffffffffda RBX: 00007f4c183b5fa0 RCX: 00007f4c1813aeb9 [ 174.799196][ T9278] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 174.799215][ T9278] RBP: 00007f4c181a8c1f R08: 0000000000000000 R09: 0000000000000000 [ 174.799312][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.799391][ T9278] R13: 00007f4c183b6038 R14: 00007f4c183b5fa0 R15: 00007ffdc1072ca8 [ 174.799416][ T9278] [ 175.135440][ T9278] memory: usage 307200kB, limit 307200kB, failcnt 313 [ 175.142331][ T9278] memory+swap: usage 307460kB, limit 9007199254740988kB, failcnt 0 [ 175.150374][ T9278] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 175.157713][ T9278] Memory cgroup stats for /syz3: [ 175.191412][ T9278] cache 8192 [ 175.199662][ T9278] rss 8192 [ 175.202776][ T9278] shmem 0 [ 175.205732][ T9278] mapped_file 8192 [ 175.209520][ T9278] dirty 0 [ 175.212471][ T9278] writeback 0 [ 175.215908][ T9278] workingset_refault_anon 809 [ 175.220637][ T9278] workingset_refault_file 254 [ 175.225336][ T9278] swap 270336 [ 175.228673][ T9278] swapcached 8192 [ 175.232399][ T9278] pgpgin 147752 [ 175.235923][ T9278] pgpgout 147747 [ 175.239609][ T9278] pgfault 181520 [ 175.243169][ T9278] pgmajfault 131 [ 175.246872][ T9278] inactive_anon 0 [ 175.250535][ T9278] active_anon 8192 [ 175.254323][ T9278] inactive_file 0 [ 175.258014][ T9278] active_file 12288 [ 175.261840][ T9278] unevictable 0 [ 175.265392][ T9278] hierarchical_memory_limit 314572800 [ 175.270868][ T9278] hierarchical_memsw_limit 9223372036854771712 [ 175.277089][ T9278] total_cache 8192 [ 175.280823][ T9278] total_rss 8192 [ 175.284399][ T9278] total_shmem 0 [ 175.288049][ T9278] total_mapped_file 8192 [ 175.292321][ T9278] total_dirty 0 [ 175.295803][ T9278] total_writeback 0 [ 175.299742][ T9278] total_workingset_refault_anon 809 [ 175.304969][ T9278] total_workingset_refault_file 254 [ 175.310395][ T9278] total_swap 270336 [ 175.314228][ T9278] total_swapcached 8192 [ 175.318508][ T9278] total_pgpgin 147752 [ 175.322505][ T9278] total_pgpgout 147747 [ 175.326633][ T9278] total_pgfault 181520 [ 175.330726][ T9278] total_pgmajfault 131 [ 175.334837][ T9278] total_inactive_anon 0 [ 175.339081][ T9278] total_active_anon 8192 [ 175.343404][ T9278] total_inactive_file 0 [ 175.347716][ T9278] total_active_file 12288 [ 175.352078][ T9278] total_unevictable 0 [ 175.356085][ T9278] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1994,pid=9277,uid=0 [ 175.370887][ T9278] Memory cgroup out of memory: Killed process 9277 (syz.3.1994) total-vm:96180kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 175.581310][ T9316] netlink: 'syz.3.2003': attribute type 3 has an invalid length. [ 175.589256][ T9316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2003'. [ 175.950678][ T9345] netlink: 'syz.3.2014': attribute type 1 has an invalid length. [ 175.966006][ T9345] bond4: entered promiscuous mode [ 175.971127][ T9345] bond4: entered allmulticast mode [ 175.976751][ T9345] 8021q: adding VLAN 0 to HW filter on device bond4 [ 176.004195][ T9345] erspan1: entered allmulticast mode [ 176.025845][ T9345] bond4: (slave erspan1): making interface the new active one [ 176.033444][ T9345] erspan1: entered promiscuous mode [ 176.149782][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 176.213733][ T9345] bond4: (slave erspan1): Enslaving as an active interface with an up link [ 176.360484][ T9351] bond4 (unregistering): (slave erspan1): Releasing active interface [ 176.395065][ T9351] erspan1: left promiscuous mode [ 176.453386][ T9351] bond4 (unregistering): Released all slaves [ 176.480525][ T9357] loop6: detected capacity change from 0 to 1024 [ 176.523733][ T9357] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 176.543386][ T9359] cgroup: noprefix used incorrectly [ 176.714047][ T9357] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #11: comm syz.6.2015: iget: bogus i_mode (1) [ 176.741987][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 176.742004][ T29] audit: type=1326 audit(2000000845.421:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 176.771616][ T29] audit: type=1326 audit(2000000845.421:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 176.795203][ T29] audit: type=1326 audit(2000000845.421:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 176.818909][ T29] audit: type=1326 audit(2000000845.421:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 176.842363][ T29] audit: type=1326 audit(2000000845.421:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 176.866027][ T29] audit: type=1326 audit(2000000845.421:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 176.889497][ T29] audit: type=1326 audit(2000000845.421:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 176.912999][ T29] audit: type=1326 audit(2000000845.421:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 177.028106][ T9357] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2015: couldn't read orphan inode 11 (err -117) [ 177.107645][ T9357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.180478][ T9363] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 177.324951][ T29] audit: type=1326 audit(2000000845.621:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 177.348446][ T29] audit: type=1326 audit(2000000845.621:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9365 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 177.564357][ T9382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9382 comm=syz.2.2025 [ 177.611924][ T9382] netlink: 'syz.2.2025': attribute type 1 has an invalid length. [ 177.656828][ T9382] 8021q: adding VLAN 0 to HW filter on device bond11 [ 177.688096][ T9384] bond11: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 177.776966][ T9354] syz.6.2015 (9354) used greatest stack depth: 6208 bytes left [ 177.813625][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.215896][ T9409] tipc: Started in network mode [ 178.220881][ T9409] tipc: Node identity 4, cluster identity 4711 [ 178.227213][ T9409] tipc: Node number set to 4 [ 178.874739][ T9434] bond1: option mode: unable to set because the bond device has slaves [ 178.883463][ T9435] tipc: New replicast peer: 255.255.255.255 [ 178.885257][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 178.889706][ T9435] tipc: Enabled bearer , priority 10 [ 178.898482][ T9434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2041'. [ 178.915087][ T9434] team0: Port device bond0 removed [ 178.921094][ T9434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.930866][ T9434] bond1: (slave bond0): Enslaving as an active interface with a down link [ 178.993678][ T9437] bond1: (slave bond0): Releasing active interface [ 179.025989][ T9437] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.035503][ T9437] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.193259][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2048'. [ 179.955235][ T9483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2059'. [ 180.171064][ T9499] tipc: Enabling of bearer rejected, already enabled [ 180.434797][ T9503] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 180.679716][ T9531] loop6: detected capacity change from 0 to 256 [ 180.782474][ T9533] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2077'. [ 180.804512][ T9533] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9533 comm=syz.6.2077 [ 181.060174][ T9551] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2083'. [ 181.345046][ T9560] netlink: 'syz.0.2084': attribute type 1 has an invalid length. [ 181.373363][ T9551] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 181.385034][ T9551] 0ªî{X¹¦: entered allmulticast mode [ 181.396763][ T9551] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 181.456299][ T9552] syzkaller0: entered promiscuous mode [ 181.461891][ T9552] syzkaller0: entered allmulticast mode [ 181.509494][ T52] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.524422][ T9560] 8021q: adding VLAN 0 to HW filter on device bond7 [ 181.581069][ T9561] vlan2: entered allmulticast mode [ 181.586266][ T9561] bond7: entered allmulticast mode [ 181.620427][ T9566] bond7: (slave gretap2): making interface the new active one [ 181.628541][ T9566] gretap2: entered allmulticast mode [ 181.655502][ T9566] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 181.675729][ T52] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.725895][ T9576] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2087'. [ 181.737864][ T52] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.746284][ T52] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.917263][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 181.917279][ T29] audit: type=1326 audit(2000000850.601:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 181.947022][ T29] audit: type=1326 audit(2000000850.601:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 181.972252][ T29] audit: type=1326 audit(2000000850.651:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 181.995674][ T29] audit: type=1326 audit(2000000850.651:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 182.019199][ T29] audit: type=1326 audit(2000000850.651:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 182.042713][ T29] audit: type=1326 audit(2000000850.651:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 182.066166][ T29] audit: type=1326 audit(2000000850.651:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 182.089657][ T29] audit: type=1326 audit(2000000850.651:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 182.113756][ T29] audit: type=1326 audit(2000000850.791:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 182.137271][ T29] audit: type=1326 audit(2000000850.791:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9584 comm="syz.5.2091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91ae28aeb9 code=0x7ffc0000 [ 182.488914][ T9609] tipc: Enabling of bearer rejected, already enabled [ 182.786822][ T9617] loop6: detected capacity change from 0 to 1024 [ 182.823890][ T9617] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 182.858242][ T9617] System zones: 0-1, 3-36 [ 182.873120][ T9617] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2101: bad orphan inode 134217728 [ 182.908650][ T9617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.124969][ T9617] ================================================================== [ 183.133126][ T9617] BUG: KCSAN: data-race in filemap_read / filemap_read [ 183.140034][ T9617] [ 183.142388][ T9617] read to 0xffff8881431b08e8 of 8 bytes by task 9626 on cpu 1: [ 183.149963][ T9617] filemap_read+0x6f/0xa10 [ 183.154435][ T9617] generic_file_read_iter+0x79/0x330 [ 183.159771][ T9617] ext4_file_read_iter+0x1cc/0x290 [ 183.164942][ T9617] copy_splice_read+0x471/0x6c0 [ 183.169862][ T9617] splice_direct_to_actor+0x28f/0x670 [ 183.175288][ T9617] do_splice_direct+0x119/0x1a0 [ 183.180204][ T9617] do_sendfile+0x382/0x650 [ 183.184674][ T9617] __x64_sys_sendfile64+0x105/0x150 [ 183.189914][ T9617] x64_sys_call+0x2db1/0x3000 [ 183.194637][ T9617] do_syscall_64+0xc0/0x2a0 [ 183.199205][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.205151][ T9617] [ 183.207499][ T9617] write to 0xffff8881431b08e8 of 8 bytes by task 9617 on cpu 0: [ 183.215160][ T9617] filemap_read+0x98d/0xa10 [ 183.219721][ T9617] generic_file_read_iter+0x79/0x330 [ 183.225053][ T9617] ext4_file_read_iter+0x1cc/0x290 [ 183.230235][ T9617] copy_splice_read+0x471/0x6c0 [ 183.235140][ T9617] splice_direct_to_actor+0x28f/0x670 [ 183.240569][ T9617] do_splice_direct+0x119/0x1a0 [ 183.245466][ T9617] do_sendfile+0x382/0x650 [ 183.249933][ T9617] __x64_sys_sendfile64+0x105/0x150 [ 183.255181][ T9617] x64_sys_call+0x2db1/0x3000 [ 183.259912][ T9617] do_syscall_64+0xc0/0x2a0 [ 183.264475][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.270417][ T9617] [ 183.272768][ T9617] value changed: 0x0000000000000254 -> 0x0000000000000255 [ 183.279899][ T9617] [ 183.282252][ T9617] Reported by Kernel Concurrency Sanitizer on: [ 183.288532][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.6.2101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.298298][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.308408][ T9617] ================================================================== [ 183.600370][ T5088] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.