last executing test programs: 6m32.634254262s ago: executing program 0 (id=1): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3ef8, 0x9, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x8}, 0x18) 6m32.58440902s ago: executing program 0 (id=9): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[], 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast2}, 0x10) 6m32.533715798s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 6m32.465196441s ago: executing program 0 (id=12): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000000, 0x0) 6m31.239121394s ago: executing program 0 (id=38): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 6m31.225761751s ago: executing program 32 (id=38): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 5m13.647080471s ago: executing program 5 (id=1414): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m13.331681265s ago: executing program 5 (id=1415): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x519, &(0x7f0000000f80)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x8a, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xa3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@block_validity}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000001040)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 5m13.175540007s ago: executing program 5 (id=1417): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x880) 5m12.385117756s ago: executing program 5 (id=1426): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f0000000140)='./file0/../file0\x00', 0xa) 5m12.333260483s ago: executing program 5 (id=1427): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 5m11.547054382s ago: executing program 5 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc71, 0x2}) fallocate(r2, 0x3, 0x8dc, 0xfffffffb) 5m11.546795032s ago: executing program 33 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc71, 0x2}) fallocate(r2, 0x3, 0x8dc, 0xfffffffb) 5m0.204823854s ago: executing program 6 (id=1551): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7ff}, @FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8}]}, 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x20000888) 4m59.583325593s ago: executing program 6 (id=1556): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x0) 4m59.479394008s ago: executing program 6 (id=1559): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r3 = syz_io_uring_setup(0xcd0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) 4m59.383640734s ago: executing program 6 (id=1562): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x54d, &(0x7f0000000580)="$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") 4m59.318480529s ago: executing program 6 (id=1563): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids'], 0xb) 4m58.942034267s ago: executing program 6 (id=1570): syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 4m58.904314389s ago: executing program 34 (id=1570): syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49db, 0x0, 0xfff9, 0xbfff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0x0, 0xb2, 0x10, "1b09000040000000000000e678000000001000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 4m12.979991474s ago: executing program 1 (id=2351): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sync() syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x4, &(0x7f0000001180)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {}, {@fat=@fmask={'fmask', 0x3d, 0x10}}, {@nodots}, {@fat=@discard}, {@dots}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 4m12.816335023s ago: executing program 1 (id=2353): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xaf5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x8080) 4m12.559518836s ago: executing program 1 (id=2358): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}}, 0x10) 4m12.227697304s ago: executing program 1 (id=2362): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x4000, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m11.779702951s ago: executing program 1 (id=2365): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001380)={r3, 0x4}, &(0x7f00000013c0)=0x8) 4m11.239091861s ago: executing program 1 (id=2369): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 4m11.228267558s ago: executing program 35 (id=2369): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 3.128141021s ago: executing program 8 (id=5701): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.741756359s ago: executing program 3 (id=5708): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_pwait(r3, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 1.858216885s ago: executing program 8 (id=5713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46060900000000002400128009000100626f6e6400000400140002800800040088"], 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) 1.646960026s ago: executing program 3 (id=5717): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) 1.645721866s ago: executing program 2 (id=5718): r0 = syz_open_procfs(0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xa, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7, 0x100}, 0x200, 0x37, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000c40)={{r0, &(0x7f00000000c0)='\x00', 0x2000, &(0x7f0000000100)={@_ha_fsid={[0x3, 0x2]}, {0x2, 0x3ff, 0x9, 0x9}}, 0x6, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)=0x8001}, 0x2, &(0x7f0000000540)=[{0x2, 0x2daa400, &(0x7f0000000200)='\'\x00', &(0x7f0000000300), 0x0, 0x18}, {0x2, 0x7, &(0x7f0000000240)='--+[%[]&\\:\'(*\x00', &(0x7f00000006c0)="365e4cc6023654c18b0c0f0bf33e5055061e79e185d9b4c2e95068774065dd9834987bbe6dac65d3cbc5c7f77a5c13e8b65562f2092dd526d848756c205bffcafa49bf23aebb80d781a2d45ad05efe39127866ac5f6fa0fc72232e93f608b1415971baa669c3775d490f791d75b63ab80783c0c764509b4ca2674878d2a545862656470a1d9d27f41f6ccecc64a7ad5fa67f837945f714f843c3440efe8422977f8b991b5bfc1162585b1709e9ceef9dcdd415714c7ebb22a146e6a6d36601b03b664428e64fbf2420c4652fe2ffd66d3ee6bb0ec9802ba8ef086e537149", 0xde, 0x2}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) 1.620660941s ago: executing program 8 (id=5719): gettid() r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x306, @random="0a4e3e3d9220"}, 0x58, {0x2, 0x0, @multicast2}, 'veth0_to_bridge\x00'}) r1 = socket(0x10, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x801, 0x100) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 1.498903928s ago: executing program 3 (id=5722): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x800, 0x0, 0x800000, 0x6, 0xd4, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xf7f8000000000001, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) socket$unix(0x1, 0x5, 0x0) 1.364982244s ago: executing program 8 (id=5723): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 795.145988ms ago: executing program 3 (id=5725): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "28852cbbbeba35380ee5190047169f9d", "2eb387e0", "11edf8da8e55bb27"}, 0x28) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r1) 793.746538ms ago: executing program 2 (id=5726): syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000800000000180c200000086dd6012000800183a00000000000000000000000000000000010000000000000000000000000000dd78000936c0fe8000000000000000000000000000bb00000000b8"], 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800892f4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 735.002607ms ago: executing program 2 (id=5727): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) msgrcv(0x0, 0x0, 0x41, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004051}, 0x4) 734.629147ms ago: executing program 2 (id=5728): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc, 0x4}, 0x0, 0x0, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) arch_prctl$ARCH_SET_GS(0x1001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10r&st\xe3c*sgrVid:Dd', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000300)='./file0\x00') 703.996181ms ago: executing program 4 (id=5730): socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x4000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 623.084876ms ago: executing program 2 (id=5731): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 622.700095ms ago: executing program 4 (id=5732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0xe}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x24048840}, 0x40004) recvmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000002c0)=""/188, 0xbc}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1, 0x10022, 0x0) 607.896273ms ago: executing program 7 (id=5733): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 539.01614ms ago: executing program 4 (id=5734): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) 535.09453ms ago: executing program 2 (id=5735): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) socket$netlink(0x10, 0x3, 0xf) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) 533.897379ms ago: executing program 7 (id=5745): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 506.027144ms ago: executing program 7 (id=5736): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x800004, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xf06f, 0x3180, 0x1, 0x283}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x50, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x63, 0x0, 0x0) 505.643814ms ago: executing program 8 (id=5737): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) unshare(0x62040200) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 431.40432ms ago: executing program 4 (id=5738): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @empty, 0x1}}, 0x400, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000780)={r2, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2c}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 430.65027ms ago: executing program 4 (id=5739): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfefffffd, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 373.14954ms ago: executing program 4 (id=5740): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mount$9p_unix(0x0, 0x0, 0x0, 0x12d7498, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 258.201928ms ago: executing program 8 (id=5741): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 246.278006ms ago: executing program 7 (id=5742): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = syz_io_uring_setup(0x2e8e, &(0x7f0000000400)={0x0, 0xa805, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0x2, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x20009090) 245.779706ms ago: executing program 3 (id=5743): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getpid() r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) 66.210233ms ago: executing program 3 (id=5744): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x2000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 64.345122ms ago: executing program 7 (id=5746): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000500)=ANY=[], 0xfd, 0x250, &(0x7f00000005c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) 0s ago: executing program 7 (id=5747): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4046855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): omiscuous mode [ 249.843372][T14460] syzkaller0: entered allmulticast mode [ 249.942290][ T28] audit: type=1400 audit(505.681:1062): avc: denied { read write } for pid=14441 comm="syz.8.3563" name="loop8p1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.031180][ T28] audit: type=1400 audit(505.681:1063): avc: denied { open } for pid=14441 comm="syz.8.3563" path="/dev/loop8p1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 250.459324][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'. [ 250.524655][T14438] syz.4.3561 (14438) used greatest stack depth: 8008 bytes left [ 250.526436][T14483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3578'. [ 250.545154][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3579'. [ 250.566599][T14485] bond3: entered promiscuous mode [ 250.581766][T14485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.667022][T14485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.695220][T14485] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 250.720740][T14493] loop8: detected capacity change from 0 to 256 [ 250.746731][T14485] bond3: (slave sit1): Error -95 calling set_mac_address [ 250.825734][T14495] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3583'. [ 250.987571][T14500] syz.8.3582: attempt to access beyond end of device [ 250.987571][T14500] loop8: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 251.030515][T14500] syz.8.3582: attempt to access beyond end of device [ 251.030515][T14500] loop8: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 251.066312][ T28] audit: type=1326 audit(507.031:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 251.094198][T14500] syz.8.3582: attempt to access beyond end of device [ 251.094198][T14500] loop8: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 251.108699][ T28] audit: type=1326 audit(507.041:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 251.161745][T14500] syz.8.3582: attempt to access beyond end of device [ 251.161745][T14500] loop8: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 251.166446][ T28] audit: type=1326 audit(507.041:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 251.231616][T14500] syz.8.3582: attempt to access beyond end of device [ 251.231616][T14500] loop8: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 251.233128][ T28] audit: type=1326 audit(507.041:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 251.301643][T14500] syz.8.3582: attempt to access beyond end of device [ 251.301643][T14500] loop8: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 251.307332][ T28] audit: type=1326 audit(507.041:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14508 comm="syz.2.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 251.359845][T14524] lo speed is unknown, defaulting to 1000 [ 251.367236][T14524] lo speed is unknown, defaulting to 1000 [ 251.368060][T14500] syz.8.3582: attempt to access beyond end of device [ 251.368060][T14500] loop8: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 251.373396][T14524] lo speed is unknown, defaulting to 1000 [ 251.406410][T14500] syz.8.3582: attempt to access beyond end of device [ 251.406410][T14500] loop8: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 251.456083][T14500] syz.8.3582: attempt to access beyond end of device [ 251.456083][T14500] loop8: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 251.458600][T14524] infiniband syU×: set active [ 251.474376][ T8830] lo speed is unknown, defaulting to 1000 [ 251.480328][T14524] infiniband syU×: added lo [ 251.495353][T14524] RDS/IB: syU×: added [ 251.497643][T14500] syz.8.3582: attempt to access beyond end of device [ 251.497643][T14500] loop8: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 251.499440][T14524] smc: adding ib device syU× with port count 1 [ 251.524844][T14524] smc: ib device syU× port 1 has no pnetid [ 251.548134][ T8830] lo speed is unknown, defaulting to 1000 [ 251.554486][T14524] lo speed is unknown, defaulting to 1000 [ 251.698901][T14524] lo speed is unknown, defaulting to 1000 [ 251.822479][T14524] lo speed is unknown, defaulting to 1000 [ 251.848120][T14532] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3595'. [ 251.958543][T14524] lo speed is unknown, defaulting to 1000 [ 252.088876][T14524] lo speed is unknown, defaulting to 1000 [ 252.186639][T14524] lo speed is unknown, defaulting to 1000 [ 252.255532][T14556] loop7: detected capacity change from 0 to 128 [ 252.534308][T14572] lo speed is unknown, defaulting to 1000 [ 252.641030][T14579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.650131][T14579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.903551][T14583] lo speed is unknown, defaulting to 1000 [ 253.170325][T14592] __nla_validate_parse: 1 callbacks suppressed [ 253.170342][T14592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3618'. [ 253.333503][T14604] loop8: detected capacity change from 0 to 1024 [ 253.367588][T14604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.858929][ T28] kauditd_printk_skb: 2924 callbacks suppressed [ 253.858948][ T28] audit: type=1326 audit(509.831:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14622 comm="syz.3.3627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x0 [ 254.102881][T14628] team0: Device gtp0 is of different type [ 254.159110][T10500] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 254.174606][T10500] CPU: 0 UID: 0 PID: 10500 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 254.174645][T10500] Tainted: [W]=WARN [ 254.174666][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 254.174680][T10500] Call Trace: [ 254.174688][T10500] [ 254.174697][T10500] __dump_stack+0x1d/0x30 [ 254.174727][T10500] dump_stack_lvl+0x95/0xd0 [ 254.174752][T10500] dump_stack+0x15/0x1b [ 254.174795][T10500] dump_header+0x80/0x240 [ 254.174820][T10500] oom_kill_process+0x295/0x350 [ 254.174845][T10500] out_of_memory+0x97d/0xb80 [ 254.174869][T10500] try_charge_memcg+0x62e/0xa10 [ 254.174966][T10500] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 254.175000][T10500] __swap_cache_prepare_and_add+0x386/0x530 [ 254.175036][T10500] swap_cache_alloc_folio+0xa2/0x120 [ 254.175082][T10500] swap_cluster_readahead+0x26e/0x3d0 [ 254.175117][T10500] swapin_readahead+0xde/0x840 [ 254.175198][T10500] ? __rcu_read_unlock+0x4e/0x70 [ 254.175298][T10500] ? __perf_event_task_sched_in+0xa65/0xad0 [ 254.175323][T10500] ? __list_add_valid_or_report+0x38/0xe0 [ 254.175355][T10500] ? __rcu_read_unlock+0x4e/0x70 [ 254.175433][T10500] ? swap_cache_get_folio+0x26f/0x280 [ 254.175494][T10500] do_swap_page+0x309/0x2210 [ 254.175634][T10500] ? __schedule+0x93c/0xd40 [ 254.175659][T10500] ? __rcu_read_lock+0x36/0x50 [ 254.175681][T10500] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 254.175789][T10500] handle_mm_fault+0xb40/0x3020 [ 254.175829][T10500] ? vma_start_read+0x1c7/0x2c0 [ 254.175859][T10500] do_user_addr_fault+0x62f/0x1050 [ 254.175962][T10500] ? trace_page_fault_user+0x1f/0xe0 [ 254.176022][T10500] exc_page_fault+0x62/0xa0 [ 254.176084][T10500] asm_exc_page_fault+0x26/0x30 [ 254.176106][T10500] RIP: 0033:0x7facb17e7917 [ 254.176133][T10500] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 254.176181][T10500] RSP: 002b:00007ffc595b9160 EFLAGS: 00010202 [ 254.176201][T10500] RAX: 0000000000000000 RBX: 0000555585726500 RCX: 00007facb17e7917 [ 254.176237][T10500] RDX: 00007ffc595b91a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.176277][T10500] RBP: 00007ffc595b920c R08: 0000000000000000 R09: 0000000000000000 [ 254.176292][T10500] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 254.176306][T10500] R13: 00000000000927c0 R14: 000000000003ddff R15: 00007ffc595b9260 [ 254.176327][T10500] [ 254.176335][T10500] memory: usage 307200kB, limit 307200kB, failcnt 108 [ 254.429125][T10500] memory+swap: usage 307888kB, limit 9007199254740988kB, failcnt 0 [ 254.437792][T10500] kmem: usage 307152kB, limit 9007199254740988kB, failcnt 0 [ 254.445356][T10500] Memory cgroup stats for /syz8: [ 254.445672][T10500] cache 16384 [ 254.454742][T10500] rss 28672 [ 254.457868][T10500] shmem 0 [ 254.461116][T10500] mapped_file 0 [ 254.465355][T10500] dirty 0 [ 254.468310][T10500] writeback 28672 [ 254.493193][T10500] workingset_refault_anon 21 [ 254.497929][T10500] workingset_refault_file 0 [ 254.502598][T10500] swap 704512 [ 254.512457][T10500] swapcached 733184 [ 254.516423][T10500] pgpgin 32150 [ 254.519816][T10500] pgpgout 32138 [ 254.523687][T10500] pgfault 60636 [ 254.527288][T10500] pgmajfault 11 [ 254.530778][T10500] inactive_anon 28672 [ 254.535275][T10500] active_anon 0 [ 254.538782][T10500] inactive_file 8192 [ 254.542962][T10500] active_file 12288 [ 254.546882][T10500] unevictable 0 [ 254.550412][T10500] hierarchical_memory_limit 314572800 [ 254.556178][T10500] hierarchical_memsw_limit 9223372036854771712 [ 254.562703][T10500] total_cache 16384 [ 254.566558][T10500] total_rss 28672 [ 254.570238][T10500] total_shmem 0 [ 254.574121][T10500] total_mapped_file 0 [ 254.578134][T10500] total_dirty 0 [ 254.581907][T10500] total_writeback 28672 [ 254.586164][T10500] total_workingset_refault_anon 21 [ 254.591309][T10500] total_workingset_refault_file 0 [ 254.597564][T10500] total_swap 704512 [ 254.601535][T10500] total_swapcached 733184 [ 254.605914][T10500] total_pgpgin 32150 [ 254.609966][T10500] total_pgpgout 32138 [ 254.628748][T10500] total_pgfault 60637 [ 254.633102][T10500] total_pgmajfault 11 [ 254.637153][T10500] total_inactive_anon 28672 [ 254.642092][T10500] total_active_anon 0 [ 254.646292][T10500] total_inactive_file 8192 [ 254.650775][T10500] total_active_file 12288 [ 254.655486][T10500] total_unevictable 0 [ 254.659585][T10500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3621,pid=14603,uid=0 [ 254.674685][T10500] Memory cgroup out of memory: Killed process 14603 (syz.8.3621) total-vm:96208kB, anon-rss:1252kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 254.794633][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.818573][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3646'. [ 254.869050][T14648] netlink: 'syz.8.3635': attribute type 16 has an invalid length. [ 254.898792][T14648] netlink: 'syz.8.3635': attribute type 17 has an invalid length. [ 254.934557][T14645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.962019][T14649] macsec2: entered promiscuous mode [ 254.967258][T14649] bond4: entered promiscuous mode [ 254.979307][T14649] bond4: left promiscuous mode [ 255.047581][T14648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.078605][T14648] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.093755][T14648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.167491][T14651] bond1: left promiscuous mode [ 256.227752][T14684] loop8: detected capacity change from 0 to 128 [ 256.243979][T14684] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 256.305626][T10500] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 256.382630][T14694] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3655'. [ 256.460202][T14703] tipc: Started in network mode [ 256.468936][ T28] audit: type=1400 audit(512.441:3994): avc: denied { watch watch_reads } for pid=14704 comm="syz.3.3661" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 256.469487][T14703] tipc: Node identity ac141441, cluster identity 4711 [ 256.504432][T14703] tipc: Enabled bearer , priority 10 [ 256.547425][ T28] audit: type=1400 audit(512.521:3995): avc: denied { setattr } for pid=14713 comm="syz.4.3665" name="/" dev="configfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 256.684876][T14719] ref_ctr_offset mismatch. inode: 0xf7c offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 256.804655][T14729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3671'. [ 256.927348][T14737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=14737 comm=syz.4.3685 [ 257.104162][T14725] loop7: detected capacity change from 0 to 512 [ 257.141612][T14725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.174945][T14725] EXT4-fs (loop7): orphan cleanup on readonly fs [ 257.192747][T14725] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 257.231708][T14725] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 257.240813][T14725] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.3670: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 257.271242][T14725] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 257.273610][T14725] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3670: couldn't read orphan inode 13 (err -117) [ 257.283354][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 257.283386][ C0] EXT4-fs (loop7): last error at time 513: ext4_ext_check_inode:521: inode 13 [ 257.327335][T14725] loop7: lost filesystem error report for type 5 error -117 [ 257.347720][T14725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.399091][T14725] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 257.436422][T14725] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 257.551657][ T8019] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.621491][ T8832] tipc: Node number set to 2886997057 [ 257.784905][T14773] bond8: option packets_per_slave: invalid value (65537) [ 257.821498][T14773] bond8: option packets_per_slave: allowed values 0 - 65535 [ 257.862340][T14773] bond8 (unregistering): Released all slaves [ 259.094337][T14793] loop8: detected capacity change from 0 to 512 [ 259.148506][T14793] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 259.160816][T14810] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 259.171711][ T28] audit: type=1400 audit(515.131:3996): avc: denied { relabelfrom } for pid=14807 comm="syz.7.3704" name="SCTPv6" dev="sockfs" ino=60194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 259.200791][T14793] EXT4-fs (loop8): orphan cleanup on readonly fs [ 259.220813][T14793] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 259.226991][ T28] audit: type=1400 audit(515.191:3997): avc: denied { relabelto } for pid=14807 comm="syz.7.3704" name="SCTPv6" dev="sockfs" ino=60194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 259.247741][T14793] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 259.298893][T14793] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.3697: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 259.327108][T14793] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 259.329728][T14793] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3697: couldn't read orphan inode 13 (err -117) [ 259.340238][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 259.340332][ C1] EXT4-fs (loop8): last error at time 515: ext4_ext_check_inode:521: inode 13 [ 259.377986][T14793] loop8: lost filesystem error report for type 5 error -117 [ 259.392916][T14793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.437173][T14815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3706'. [ 259.462742][T14815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3706'. [ 259.710092][T14793] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 259.761890][T14793] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 259.816679][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.854697][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3711'. [ 260.010532][T14844] syzkaller0: entered promiscuous mode [ 260.016729][T14844] syzkaller0: entered allmulticast mode [ 260.024382][T14844] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 260.058659][T14849] netlink: 'syz.2.3720': attribute type 16 has an invalid length. [ 260.066786][T14849] netlink: 'syz.2.3720': attribute type 17 has an invalid length. [ 260.131042][T14849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.185927][T14849] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.210529][T14849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.699905][ T28] audit: type=1400 audit(516.671:3998): avc: denied { unmount } for pid=14874 comm="syz.3.3730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 260.781063][T14879] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 260.794630][ T28] audit: type=1326 audit(516.771:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14882 comm="syz.4.3734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x0 [ 260.864753][T14894] netlink: 'syz.8.3737': attribute type 39 has an invalid length. [ 261.649090][T14903] netlink: 'syz.4.3740': attribute type 16 has an invalid length. [ 261.680455][T14903] netlink: 'syz.4.3740': attribute type 17 has an invalid length. [ 261.758261][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3746'. [ 261.783776][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.793387][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.804644][T14903] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 261.822029][ T8830] lo speed is unknown, defaulting to 1000 [ 261.822834][T14921] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3746'. [ 261.883161][ T28] audit: type=1326 audit(517.861:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14928 comm="syz.3.3751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x0 [ 261.917727][T14916] bond1: left promiscuous mode [ 261.922807][T14916] bridge1: left promiscuous mode [ 261.928972][T14916] geneve2: left promiscuous mode [ 261.934007][T14916] geneve2: left allmulticast mode [ 261.944532][T14916] vlan3: left promiscuous mode [ 261.949659][T14916] ip6gre2: left promiscuous mode [ 261.954930][T14916] ip6gre2: left allmulticast mode [ 261.964685][T12905] lo speed is unknown, defaulting to 1000 [ 261.970582][T12905] syU×: Port: 1 Link DOWN [ 261.977435][ T8829] lo speed is unknown, defaulting to 1000 [ 262.581416][T14967] netlink: 'syz.7.3765': attribute type 1 has an invalid length. [ 262.589575][T14965] loop8: detected capacity change from 0 to 1024 [ 262.598658][T14965] EXT4-fs: Ignoring removed orlov option [ 262.609877][T14965] EXT4-fs: Ignoring removed bh option [ 262.620631][T14967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.631050][T14965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.655404][T14967] bond5: (slave veth9): Enslaving as an active interface with a down link [ 262.670394][T14965] EXT4-fs (loop8): shut down requested (1) [ 262.677164][T14965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 262.678208][T14967] bond5: (slave dummy0): making interface the new active one [ 262.692354][T14965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 262.700161][T14967] dummy0: entered promiscuous mode [ 262.703268][T14965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=13 [ 262.707574][T14967] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 262.717259][T14965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 262.734492][T14965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 262.743563][T14965] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=13 [ 262.761638][ T28] audit: type=1400 audit(518.731:4001): avc: denied { remove_name } for pid=14964 comm="syz.8.3764" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.796599][ T28] audit: type=1400 audit(518.731:4002): avc: denied { unlink } for pid=14964 comm="syz.8.3764" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 262.827172][T14967] bond5 (unregistering): (slave veth9): Releasing active interface [ 262.857252][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.877239][T14967] bond5 (unregistering): (slave dummy0): Releasing active interface [ 262.893820][T14967] bond5 (unregistering): Released all slaves [ 262.993024][T14979] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.001358][T14989] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3773'. [ 263.060680][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3775'. [ 263.156807][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3777'. [ 263.206539][T14999] 8021q: adding VLAN 0 to HW filter on device team1 [ 263.441056][T14991] syz.2.3774 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 263.455858][T14991] CPU: 1 UID: 0 PID: 14991 Comm: syz.2.3774 Tainted: G W syzkaller #0 PREEMPT(full) [ 263.455894][T14991] Tainted: [W]=WARN [ 263.455903][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 263.455990][T14991] Call Trace: [ 263.455997][T14991] [ 263.456005][T14991] __dump_stack+0x1d/0x30 [ 263.456031][T14991] dump_stack_lvl+0x95/0xd0 [ 263.456066][T14991] dump_stack+0x15/0x1b [ 263.456109][T14991] dump_header+0x80/0x240 [ 263.456137][T14991] oom_kill_process+0x295/0x350 [ 263.456159][T14991] out_of_memory+0x97d/0xb80 [ 263.456181][T14991] try_charge_memcg+0x62e/0xa10 [ 263.456281][T14991] obj_cgroup_charge_pages+0x23/0xc0 [ 263.456316][T14991] __memcg_kmem_charge_page+0x9e/0x170 [ 263.456351][T14991] __alloc_frozen_pages_noprof+0x18a/0x360 [ 263.456427][T14991] alloc_pages_mpol+0xb3/0x260 [ 263.456462][T14991] alloc_pages_noprof+0x8f/0x130 [ 263.456585][T14991] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 263.456652][T14991] __kvmalloc_node_noprof+0x3d4/0x650 [ 263.456676][T14991] ? futex_hash_allocate+0x190/0x9d0 [ 263.456778][T14991] ? futex_hash_allocate+0x190/0x9d0 [ 263.456901][T14991] futex_hash_allocate+0x190/0x9d0 [ 263.456930][T14991] ? cap_task_prctl+0x13f/0x6e0 [ 263.456956][T14991] futex_hash_prctl+0xd8/0xf0 [ 263.456981][T14991] __se_sys_prctl+0xa3d/0x13f0 [ 263.457077][T14991] __x64_sys_prctl+0x67/0x80 [ 263.457161][T14991] x64_sys_call+0x2533/0x3020 [ 263.457185][T14991] do_syscall_64+0x12c/0x370 [ 263.457291][T14991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.457311][T14991] RIP: 0033:0x7fe1c433c799 [ 263.457327][T14991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.457385][T14991] RSP: 002b:00007fe1c2d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 263.457411][T14991] RAX: ffffffffffffffda RBX: 00007fe1c45b5fa0 RCX: 00007fe1c433c799 [ 263.457424][T14991] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 263.457437][T14991] RBP: 00007fe1c43d2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 263.457466][T14991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.457478][T14991] R13: 00007fe1c45b6038 R14: 00007fe1c45b5fa0 R15: 00007ffcd5f81af8 [ 263.457557][T14991] [ 263.457621][T14991] memory: usage 307200kB, limit 307200kB, failcnt 79 [ 263.699006][T14991] memory+swap: usage 101632kB, limit 9007199254740988kB, failcnt 0 [ 263.706969][T14991] kmem: usage 100224kB, limit 9007199254740988kB, failcnt 0 [ 263.714298][T14991] Memory cgroup stats for /syz2: [ 263.714615][T14991] cache 233472 [ 263.724493][T14991] rss 208896 [ 263.727737][T14991] shmem 131072 [ 263.727876][T15014] loop7: detected capacity change from 0 to 256 [ 263.731120][T14991] mapped_file 102400 [ 263.731131][T14991] dirty 102400 [ 263.731140][T14991] writeback 0 [ 263.750174][T14991] workingset_refault_anon 4278 [ 263.755274][T14991] workingset_refault_file 2 [ 263.783617][T14991] swap 0 [ 263.786601][T14991] swapcached 3387392 [ 263.790642][T14991] pgpgin 361273 [ 263.796708][T14991] pgpgout 360941 [ 263.800384][T14991] pgfault 262659 [ 263.807653][T15014] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 263.849307][T14991] pgmajfault 619 [ 263.856151][T14991] inactive_anon 335872 [ 263.860308][T14991] active_anon 4096 [ 263.873918][T14991] inactive_file 0 [ 263.881798][T14991] active_file 106496 [ 263.885776][T14991] unevictable 0 [ 263.889350][T14991] hierarchical_memory_limit 314572800 [ 263.909899][T14991] hierarchical_memsw_limit 9223372036854771712 [ 263.921855][T14991] total_cache 233472 [ 263.950825][T14991] total_rss 208896 [ 263.963920][T14991] total_shmem 131072 [ 263.973086][T14991] total_mapped_file 102400 [ 263.980431][T14991] total_dirty 102400 [ 263.999247][T14991] total_writeback 0 [ 264.006119][T14991] total_workingset_refault_anon 4278 [ 264.013792][T14991] total_workingset_refault_file 2 [ 264.018932][T14991] total_swap 0 [ 264.025424][T14991] total_swapcached 3387392 [ 264.029979][T14991] total_pgpgin 361274 [ 264.038195][T14991] total_pgpgout 360942 [ 264.045750][T14991] total_pgfault 262660 [ 264.060303][T14991] total_pgmajfault 619 [ 264.069501][T14991] total_inactive_anon 335872 [ 264.075930][T14991] total_active_anon 4096 [ 264.080221][T14991] total_inactive_file 0 [ 264.135171][T14991] total_active_file 106496 [ 264.139676][T14991] total_unevictable 0 [ 264.147561][T14991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3774,pid=14990,uid=0 [ 264.166065][T14991] Memory cgroup out of memory: Killed process 14991 (syz.2.3774) total-vm:96208kB, anon-rss:1420kB, file-rss:22244kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:0 [ 264.260113][ T28] audit: type=1400 audit(520.231:4003): avc: denied { getopt } for pid=15036 comm="syz.8.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 264.347308][T15042] lo speed is unknown, defaulting to 1000 [ 264.347929][T15044] sctp: [Deprecated]: syz.7.3795 (pid 15044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.347929][T15044] Use struct sctp_sack_info instead [ 264.580910][T15056] loop7: detected capacity change from 0 to 128 [ 265.377860][T15080] netlink: 400 bytes leftover after parsing attributes in process `syz.3.3808'. [ 266.070412][T15070] syz.4.3804 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 266.094433][T15070] CPU: 1 UID: 0 PID: 15070 Comm: syz.4.3804 Tainted: G W syzkaller #0 PREEMPT(full) [ 266.094471][T15070] Tainted: [W]=WARN [ 266.094480][T15070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.094562][T15070] Call Trace: [ 266.094569][T15070] [ 266.094578][T15070] __dump_stack+0x1d/0x30 [ 266.094608][T15070] dump_stack_lvl+0x95/0xd0 [ 266.094634][T15070] dump_stack+0x15/0x1b [ 266.094659][T15070] dump_header+0x80/0x240 [ 266.094801][T15070] oom_kill_process+0x295/0x350 [ 266.094828][T15070] out_of_memory+0x97d/0xb80 [ 266.094861][T15070] try_charge_memcg+0x62e/0xa10 [ 266.094958][T15070] obj_cgroup_charge_pages+0x23/0xc0 [ 266.094988][T15070] __memcg_kmem_charge_page+0x9e/0x170 [ 266.095019][T15070] __alloc_frozen_pages_noprof+0x18a/0x360 [ 266.095052][T15070] alloc_pages_mpol+0xb3/0x260 [ 266.095105][T15070] alloc_pages_noprof+0x8f/0x130 [ 266.095185][T15070] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 266.095225][T15070] __kvmalloc_node_noprof+0x3d4/0x650 [ 266.095254][T15070] ? futex_hash_allocate+0x190/0x9d0 [ 266.095366][T15070] ? futex_hash_allocate+0x190/0x9d0 [ 266.095524][T15070] futex_hash_allocate+0x190/0x9d0 [ 266.095614][T15070] ? cap_task_prctl+0x13f/0x6e0 [ 266.095640][T15070] futex_hash_prctl+0xd8/0xf0 [ 266.095678][T15070] __se_sys_prctl+0xa3d/0x13f0 [ 266.095828][T15070] __x64_sys_prctl+0x67/0x80 [ 266.095852][T15070] x64_sys_call+0x2533/0x3020 [ 266.095898][T15070] do_syscall_64+0x12c/0x370 [ 266.095922][T15070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.095947][T15070] RIP: 0033:0x7f6b9616c799 [ 266.095965][T15070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.096051][T15070] RSP: 002b:00007f6b94bbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 266.096075][T15070] RAX: ffffffffffffffda RBX: 00007f6b963e5fa0 RCX: 00007f6b9616c799 [ 266.096154][T15070] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 266.096168][T15070] RBP: 00007f6b96202bd9 R08: 0000000000000000 R09: 0000000000000000 [ 266.096183][T15070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.096198][T15070] R13: 00007f6b963e6038 R14: 00007f6b963e5fa0 R15: 00007ffd8f3ed368 [ 266.096219][T15070] [ 266.096255][T15070] memory: usage 307200kB, limit 307200kB, failcnt 369 [ 266.345908][T15070] memory+swap: usage 375812kB, limit 9007199254740988kB, failcnt 0 [ 266.354178][T15070] kmem: usage 305872kB, limit 9007199254740988kB, failcnt 0 [ 266.361680][T15070] Memory cgroup stats for /syz4: [ 266.362042][T15070] cache 1052672 [ 266.372322][T15070] rss 196608 [ 266.375540][T15070] shmem 0 [ 266.378489][T15070] mapped_file 139264 [ 266.391589][T15070] dirty 81920 [ 266.394947][T15070] writeback 0 [ 266.399348][T15070] workingset_refault_anon 1872 [ 266.411829][T15070] workingset_refault_file 576 [ 266.417677][T15070] swap 70258688 [ 266.432148][T15070] swapcached 81809408 [ 266.436174][T15070] pgpgin 296743 [ 266.439638][T15070] pgpgout 296419 [ 266.451599][T15070] pgfault 267349 [ 266.463421][T15070] pgmajfault 327 [ 266.471489][T15070] inactive_anon 4096 [ 266.484632][T15070] active_anon 270336 [ 266.488571][T15070] inactive_file 0 [ 266.502976][T15070] active_file 1052672 [ 266.506992][T15070] unevictable 0 [ 266.510459][T15070] hierarchical_memory_limit 314572800 [ 266.531572][T15070] hierarchical_memsw_limit 9223372036854771712 [ 266.541470][T15070] total_cache 1052672 [ 266.547882][T15070] total_rss 196608 [ 266.557976][T15070] total_shmem 0 [ 266.567969][T15070] total_mapped_file 139264 [ 266.572633][T15070] total_dirty 81920 [ 266.576889][T15070] total_writeback 0 [ 266.609166][T15070] total_workingset_refault_anon 1872 [ 266.631560][T15070] total_workingset_refault_file 576 [ 266.636796][T15070] total_swap 70258688 [ 266.640806][T15070] total_swapcached 81809408 [ 266.660495][T15070] total_pgpgin 296743 [ 266.681638][T15070] total_pgpgout 296419 [ 266.685898][T15070] total_pgfault 267349 [ 266.702098][T15070] total_pgmajfault 327 [ 266.706364][T15070] total_inactive_anon 4096 [ 266.710792][T15070] total_active_anon 270336 [ 266.740791][T15070] total_inactive_file 0 [ 266.752217][ T28] audit: type=1400 audit(522.731:4004): avc: denied { listen } for pid=15108 comm="syz.3.3820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 266.757742][T15070] total_active_file 1052672 [ 266.791611][T15070] total_unevictable 0 [ 266.797830][T15070] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1999,pid=9473,uid=0 [ 266.831498][T15070] Memory cgroup out of memory: Killed process 9473 (syz.4.1999) total-vm:96076kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 266.875188][T15114] loop8: detected capacity change from 0 to 512 [ 266.964754][T15114] EXT4-fs (loop8): 1 truncate cleaned up [ 267.052613][T15114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.067418][T15127] netlink: 'syz.7.3828': attribute type 1 has an invalid length. [ 267.191273][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 267.201846][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3831'. [ 267.211758][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.308363][T15139] netlink: 'syz.3.3834': attribute type 1 has an invalid length. [ 267.359185][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3834'. [ 267.368879][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 267.426330][T15139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.475018][T15147] macsec1: entered promiscuous mode [ 267.480374][T15147] bond2: entered promiscuous mode [ 267.486727][T15147] macsec1: entered allmulticast mode [ 267.492350][T15147] bond2: entered allmulticast mode [ 267.636997][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3841'. [ 267.712669][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3841'. [ 267.763978][ T1996] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.773157][ T1996] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.781396][ T1996] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.790112][T15163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3841'. [ 267.799239][ T1996] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 267.817887][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3841'. [ 267.850520][T15169] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3844'. [ 268.141007][T15195] lo speed is unknown, defaulting to 1000 [ 268.178082][T15199] all: renamed from bridge_slave_1 [ 268.400076][T15208] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 268.475817][ T28] audit: type=1400 audit(524.451:4005): avc: denied { setopt } for pid=15211 comm="syz.7.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 269.352334][ T28] audit: type=1326 audit(525.301:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.405798][ T28] audit: type=1326 audit(525.301:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.451626][ T28] audit: type=1326 audit(525.301:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.474823][ T28] audit: type=1326 audit(525.301:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.499800][ T28] audit: type=1326 audit(525.301:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.523387][ T28] audit: type=1326 audit(525.301:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.558907][ T28] audit: type=1326 audit(525.301:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.604758][ T28] audit: type=1326 audit(525.301:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.643217][ T28] audit: type=1326 audit(525.301:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.685018][T15263] ip6gre1: entered promiscuous mode [ 269.685561][ T28] audit: type=1326 audit(525.301:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15252 comm="syz.4.3877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 269.690357][T15263] ip6gre1: entered allmulticast mode [ 269.933205][T15282] lo speed is unknown, defaulting to 1000 [ 270.668590][T15325] uprobe: syz.4.3905:15325 failed to unregister, leaking uprobe [ 270.687062][T15324] uprobe: syz.4.3905:15324 failed to unregister, leaking uprobe [ 270.717860][T15329] rdma_rxe: rxe_newlink: failed to add lo [ 270.798047][T15334] __nla_validate_parse: 8 callbacks suppressed [ 270.798064][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3909'. [ 270.852918][T15334] bridge_slave_1: left allmulticast mode [ 270.876411][T15334] bridge_slave_1: left promiscuous mode [ 270.882403][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.892250][T15334] bridge_slave_0: left allmulticast mode [ 270.897929][T15334] bridge_slave_0: left promiscuous mode [ 270.919744][T15334] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.343603][T15352] bond2: entered promiscuous mode [ 271.368211][T15352] macvlan2: entered promiscuous mode [ 271.398272][T15352] macvlan2: entered allmulticast mode [ 271.420463][T15352] bond2: (slave macvlan2): Opening slave failed [ 271.508299][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 271.550449][T15364] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3918'. [ 271.553520][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'. [ 271.592741][T15364] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3918'. [ 272.229455][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3932'. [ 272.291497][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3932'. [ 272.402327][T15399] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 272.960299][T15402] macvtap1: entered promiscuous mode [ 272.991134][T15417] netlink: 'syz.4.3942': attribute type 33 has an invalid length. [ 272.991157][T15417] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3942'. [ 273.031511][T15418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=15418 comm=syz.8.3941 [ 273.050700][T15419] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3942'. [ 273.060593][T15402] team0: entered promiscuous mode [ 273.085761][T15402] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 273.108215][T15402] team0: Device macvtap1 is already an upper device of the team interface [ 273.145931][T15402] team0: left promiscuous mode [ 273.387744][T15423] netlink: 'syz.3.3945': attribute type 1 has an invalid length. [ 273.402166][T15423] netlink: 'syz.3.3945': attribute type 4 has an invalid length. [ 273.408273][T15427] lo speed is unknown, defaulting to 1000 [ 273.410498][T15423] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3945'. [ 273.968533][T15427] syzkaller0: entered promiscuous mode [ 273.975068][T15427] syzkaller0: entered allmulticast mode [ 274.924945][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 274.924962][ T28] audit: type=1326 audit(530.901:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.001716][ T28] audit: type=1326 audit(530.901:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.056439][ T28] audit: type=1326 audit(530.901:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.099146][ T28] audit: type=1326 audit(530.901:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.123186][ T28] audit: type=1326 audit(530.951:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.147172][ T28] audit: type=1326 audit(530.951:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.171963][ T28] audit: type=1326 audit(530.951:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.196280][ T28] audit: type=1326 audit(530.951:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.226548][T15528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 275.234456][ T28] audit: type=1326 audit(530.951:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.259417][T15528] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 275.260187][ T28] audit: type=1326 audit(530.951:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15516 comm="syz.3.3981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 275.342215][ T2078] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 275.364558][T15537] netlink: 'syz.2.3986': attribute type 5 has an invalid length. [ 275.471850][ T4115] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 275.876302][T15562] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 275.910503][T15562] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 275.943122][T15558] __nla_validate_parse: 4 callbacks suppressed [ 275.943141][T15558] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.4004'. [ 276.027481][T15570] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3998'. [ 276.307223][T15585] lo speed is unknown, defaulting to 1000 [ 276.438579][T15594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4009'. [ 276.567372][T15600] netlink: 'syz.2.4011': attribute type 4 has an invalid length. [ 276.617934][T15601] netlink: 'syz.2.4011': attribute type 4 has an invalid length. [ 276.743260][T15609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.953454][T15653] syzkaller1: entered promiscuous mode [ 277.959323][T15653] syzkaller1: entered allmulticast mode [ 278.382113][T15668] bond1: left promiscuous mode [ 278.394500][T15668] bond1: left allmulticast mode [ 278.427897][T15668] hsr1: left promiscuous mode [ 278.437999][T15668] hsr1: left allmulticast mode [ 278.465935][T15668] macvlan0: left allmulticast mode [ 278.471095][T15668] veth0_to_hsr: left allmulticast mode [ 278.566461][T15668] bond2: left allmulticast mode [ 278.571597][T15668] bond2: left promiscuous mode [ 278.597509][T15668] macsec1: left promiscuous mode [ 278.622180][T15668] macsec1: left allmulticast mode [ 278.787171][T15691] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4047'. [ 278.900986][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4047'. [ 280.530098][T15755] 9p: Bad value for 'rfdno' [ 280.637574][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4072'. [ 280.659641][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4072'. [ 281.026485][T15761] loop8: detected capacity change from 0 to 512 [ 281.218396][T15761] EXT4-fs (loop8): 1 truncate cleaned up [ 281.263225][T15761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.368341][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.583044][T15792] netlink: 'syz.8.4085': attribute type 13 has an invalid length. [ 282.030679][T15806] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4091'. [ 283.146882][ T8829] kernel write not supported for file bpf-prog (pid: 8829 comm: kworker/1:6) [ 283.840567][T15864] lo speed is unknown, defaulting to 1000 [ 284.084464][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 284.084484][ T28] audit: type=1326 audit(539.991:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15871 comm="syz.3.4116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x0 [ 284.229245][ T28] audit: type=1400 audit(540.201:4082): avc: denied { bind } for pid=15874 comm="syz.2.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.350903][T15881] netlink: 'syz.7.4119': attribute type 1 has an invalid length. [ 284.488178][ T28] audit: type=1400 audit(540.341:4083): avc: denied { getopt } for pid=15878 comm="syz.7.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.056288][T15864] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4112'. [ 285.470126][T15904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4127'. [ 285.549570][T15908] futex_wake_op: syz.4.4129 tries to shift op by 32; fix this program [ 285.605754][ T8832] kernel write not supported for file bpf-prog (pid: 8832 comm: kworker/0:9) [ 286.295213][T15936] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4140'. [ 286.309542][T15936] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4140'. [ 286.916617][T15943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=15943 comm=syz.2.4144 [ 286.932072][ T28] audit: type=1326 audit(542.911:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="syz.8.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb182c799 code=0x7ffc0000 [ 286.956313][ T28] audit: type=1326 audit(542.911:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="syz.8.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb182c799 code=0x7ffc0000 [ 286.983502][ T28] audit: type=1326 audit(542.941:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="syz.8.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7facb182c799 code=0x7ffc0000 [ 287.030566][ T28] audit: type=1326 audit(542.941:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="syz.8.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb182c799 code=0x7ffc0000 [ 287.073643][ T28] audit: type=1326 audit(542.941:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="syz.8.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb182c799 code=0x7ffc0000 [ 287.104509][ T28] audit: type=1326 audit(542.941:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="syz.8.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7facb182c799 code=0x7ffc0000 [ 287.128595][ T28] audit: type=1326 audit(542.941:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15940 comm="syz.8.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facb182c799 code=0x7ffc0000 [ 289.436934][T16039] lo speed is unknown, defaulting to 1000 [ 289.495812][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4182'. [ 289.516452][T16042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4182'. [ 290.123083][T16039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4181'. [ 290.230644][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 290.230662][ T28] audit: type=1326 audit(546.201:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.261026][T16065] netlink: 'syz.4.4192': attribute type 3 has an invalid length. [ 290.285832][T16065] netlink: 'syz.4.4192': attribute type 3 has an invalid length. [ 290.325527][ T28] audit: type=1326 audit(546.201:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.372786][T16065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=16065 comm=syz.4.4192 [ 290.406740][ T28] audit: type=1326 audit(546.201:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.459323][ T28] audit: type=1326 audit(546.201:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.495990][ T28] audit: type=1326 audit(546.201:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.542156][ T28] audit: type=1326 audit(546.201:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.586546][ T28] audit: type=1326 audit(546.201:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.636513][ T28] audit: type=1326 audit(546.201:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.692462][ T28] audit: type=1326 audit(546.201:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 290.731480][ T28] audit: type=1326 audit(546.201:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16066 comm="syz.2.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 291.209132][T16097] netlink: 'syz.7.4205': attribute type 27 has an invalid length. [ 291.227328][T16097] bond2: left promiscuous mode [ 291.241068][T16097] ip6gre1: left promiscuous mode [ 291.250926][T16097] ip6gre1: left allmulticast mode [ 291.278066][T16101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.286488][T16101] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.335978][T16101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.368818][T16099] lo speed is unknown, defaulting to 1000 [ 291.435338][T16108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4209'. [ 291.460969][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4209'. [ 291.628936][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4214'. [ 291.753473][T16099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4206'. [ 292.389063][T16160] lo speed is unknown, defaulting to 1000 [ 292.576094][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4227'. [ 292.725528][T16182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4238'. [ 292.931381][T16192] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4242'. [ 292.998496][T16195] loop8: detected capacity change from 0 to 512 [ 293.038120][T16195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 293.053283][T16195] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4243: corrupted inode contents [ 293.065973][T16195] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 293.078305][T16195] EXT4-fs (loop8): Remounting filesystem read-only [ 293.087608][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 293.087634][ C1] EXT4-fs (loop8): initial error at time 549: ext4_do_update_inode:5569: inode 15 [ 293.087681][ C1] EXT4-fs (loop8): last error at time 549: ext4_do_update_inode:5569: inode 15 [ 293.119923][T16195] EXT4-fs (loop8): 1 orphan inode deleted [ 293.126801][T16195] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.232439][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.328308][T16199] bond3: entered promiscuous mode [ 293.425227][T16205] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 293.589045][T16211] netlink: 'syz.4.4249': attribute type 2 has an invalid length. [ 294.626682][T16245] lo speed is unknown, defaulting to 1000 [ 295.148563][T16265] batadv_slave_1: entered promiscuous mode [ 295.162065][T16265] pimreg: entered allmulticast mode [ 295.168478][T16265] pimreg: left allmulticast mode [ 295.262049][T16264] batadv_slave_1: left promiscuous mode [ 296.073900][T16293] netlink: 'syz.4.4281': attribute type 13 has an invalid length. [ 296.316299][T16300] __nla_validate_parse: 3 callbacks suppressed [ 296.316318][T16300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4284'. [ 296.452768][T16306] geneve3: entered promiscuous mode [ 296.458895][ T1934] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.484964][ T1996] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.494101][ T1996] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.502611][ T1996] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.632488][T16314] lo speed is unknown, defaulting to 1000 [ 296.697225][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 296.697242][ T28] audit: type=1400 audit(552.671:4159): avc: denied { mount } for pid=16315 comm="syz.3.4290" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 296.997110][T16334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4296'. [ 297.172904][T16342] tipc: Failed to remove unknown binding: 66,0,0/0:3972137770/3972137772 [ 297.182151][T16342] tipc: Failed to remove unknown binding: 66,0,0/0:3972137770/3972137771 [ 297.924181][T16367] geneve2: entered promiscuous mode [ 297.955901][ T1996] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.972616][ T1996] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.984086][ T1996] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.002689][T16366] loop8: detected capacity change from 0 to 128 [ 298.016453][ T1996] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.091868][T16371] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 298.326922][T16382] tipc: Failed to remove unknown binding: 66,0,0/4:2094925844/2094925846 [ 298.336446][T16382] tipc: Failed to remove unknown binding: 66,0,0/4:2094925844/2094925845 [ 298.450650][T16386] lo speed is unknown, defaulting to 1000 [ 298.652289][T16391] lo: Caught tx_queue_len zero misconfig [ 298.660746][T16391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.683359][T16393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4319'. [ 298.692635][T16393] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4319'. [ 298.706225][T16391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.807150][T16395] xt_hashlimit: size too large, truncated to 1048576 [ 298.954665][T16404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4333'. [ 298.970048][T16404] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4333'. [ 299.184378][T16416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4338'. [ 299.203657][T16416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4338'. [ 299.243052][T16419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4328'. [ 300.399968][T16448] infiniband syz1: set down [ 300.405273][T16448] infiniband syz1: added syz_tun [ 300.632233][T16448] RDS/IB: syz1: added [ 300.636323][T16448] smc: adding ib device syz1 with port count 1 [ 300.646073][T16448] smc: ib device syz1 port 1 has no pnetid [ 300.681233][ T28] audit: type=1400 audit(556.651:4160): avc: denied { bind } for pid=16455 comm="syz.8.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 300.861770][ T30] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.872196][ T30] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.902224][ T30] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.927222][ T30] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.075529][T16486] lo speed is unknown, defaulting to 1000 [ 301.086918][ T28] audit: type=1400 audit(557.061:4161): avc: denied { accept } for pid=16484 comm="syz.4.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.748413][T16501] tipc: Failed to remove unknown binding: 66,0,0/0:3693692629/3693692631 [ 301.777487][T16501] tipc: Failed to remove unknown binding: 66,0,0/0:3693692629/3693692630 [ 301.792557][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4361'. [ 301.846234][T16500] ipvlan2: entered promiscuous mode [ 302.069796][ T28] audit: type=1400 audit(558.041:4162): avc: denied { lock } for pid=16522 comm="syz.3.4370" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=71781 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.375804][T16544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'. [ 303.096694][ T28] audit: type=1400 audit(559.021:4163): avc: denied { override_creds } for pid=16563 comm="syz.2.4395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 304.350097][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4397'. [ 304.569002][ T28] audit: type=1326 audit(560.541:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16608 comm="syz.3.4402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x0 [ 305.538304][T16640] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 305.548737][T16640] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4411'. [ 307.949915][T16714] lo speed is unknown, defaulting to 1000 [ 308.121094][T16726] netlink: 'syz.4.4442': attribute type 1 has an invalid length. [ 308.135845][T16726] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.161931][T16726] bond8: (slave veth21): Enslaving as an active interface with a down link [ 308.179755][T16726] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4442'. [ 309.219677][ T553] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.236076][ T553] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.301529][ T553] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.351574][ T553] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.773043][T16804] netlink: 'syz.3.4475': attribute type 4 has an invalid length. [ 311.359404][T16835] netlink: 'syz.3.4487': attribute type 4 has an invalid length. [ 312.091807][T16853] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 312.104756][T16853] bond3: (slave macvlan3): Enslaving as a backup interface with a down link [ 312.374532][T16812] syz.4.4479 (16812) used greatest stack depth: 7224 bytes left [ 314.079041][T16890] netlink: 84 bytes leftover after parsing attributes in process `syz.7.4510'. [ 314.105985][T16896] syzkaller0: entered promiscuous mode [ 314.112194][T16890] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.134777][T16896] syzkaller0: entered allmulticast mode [ 314.731852][T16867] syz.2.4501 (16867) used greatest stack depth: 6456 bytes left [ 315.027947][T16910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4517'. [ 315.051780][T16910] ipvlan2: entered promiscuous mode [ 315.109874][T16920] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 315.140101][T16913] bridge0: port 1(veth0_to_bridge) entered blocking state [ 315.182739][T16913] bridge0: port 1(veth0_to_bridge) entered disabled state [ 315.257333][ T28] audit: type=1326 audit(571.231:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.262914][T16913] veth0_to_bridge: entered allmulticast mode [ 315.293792][ T28] audit: type=1326 audit(571.231:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.293826][ T28] audit: type=1326 audit(571.231:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.293878][ T28] audit: type=1326 audit(571.231:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.293904][ T28] audit: type=1326 audit(571.261:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.293931][ T28] audit: type=1326 audit(571.261:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.294036][ T28] audit: type=1326 audit(571.261:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.508034][ T28] audit: type=1326 audit(571.481:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.550545][T16913] veth0_to_bridge: entered promiscuous mode [ 315.568692][ T28] audit: type=1326 audit(571.481:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 315.597883][ T28] audit: type=1326 audit(571.481:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16927 comm="syz.4.4524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 316.900872][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4538'. [ 316.910286][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4538'. [ 317.762873][T16981] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4544'. [ 319.502879][T17079] lo speed is unknown, defaulting to 1000 [ 319.994380][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4563'. [ 320.263089][ T8830] kernel read not supported for file bpf-prog (pid: 8830 comm: kworker/0:7) [ 321.156338][T17216] loop8: detected capacity change from 0 to 1024 [ 321.231274][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 321.240428][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 321.266011][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 321.278152][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 321.319831][T17216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 321.432991][T17216] EXT4-fs error (device loop8): ext4_map_blocks:818: inode #15: block 3: comm syz.8.4589: lblock 3 mapped to illegal pblock 3 (length 3) [ 321.457637][T17216] EXT4-fs (loop8): Remounting filesystem read-only [ 321.487718][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4590'. [ 322.036387][T17236] vlan3: entered allmulticast mode [ 322.060403][T17236] bond0: entered allmulticast mode [ 322.081471][T17236] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4594'. [ 322.154261][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4596'. [ 322.387378][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 324.022944][T17272] lo speed is unknown, defaulting to 1000 [ 324.749048][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 324.749065][ T28] audit: type=1400 audit(580.721:4214): avc: denied { create } for pid=17291 comm="syz.4.4614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 325.825989][T17326] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4630'. [ 328.099174][ T28] audit: type=1400 audit(584.071:4215): avc: denied { ioctl } for pid=17375 comm="syz.7.4648" path="socket:[77275]" dev="sockfs" ino=77275 ioctlcmd=0x9366 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 328.679003][ T28] audit: type=1326 audit(584.651:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 328.708968][ T28] audit: type=1326 audit(584.651:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 328.732623][ T28] audit: type=1326 audit(584.651:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 328.757768][ T28] audit: type=1326 audit(584.651:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 328.781533][ T28] audit: type=1326 audit(584.651:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 328.805104][ T28] audit: type=1326 audit(584.651:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 328.862087][ T28] audit: type=1326 audit(584.651:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 328.913398][T17391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4653'. [ 328.961440][ T28] audit: type=1326 audit(584.681:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17384 comm="syz.4.4651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 331.369821][T17466] sit0: entered allmulticast mode [ 331.859157][T17484] Invalid ELF header magic: != ELF [ 332.528025][T17505] delete_channel: no stack [ 332.701835][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 332.701855][ T28] audit: type=1400 audit(844.485:4228): avc: denied { setopt } for pid=17505 comm="syz.3.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 332.879070][T17515] lo speed is unknown, defaulting to 1000 [ 333.470806][T17544] lo speed is unknown, defaulting to 1000 [ 334.088180][T17564] netlink: 'syz.7.4720': attribute type 21 has an invalid length. [ 334.097213][T17564] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4720'. [ 335.705974][T17622] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4742'. [ 335.976678][T17630] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4745'. [ 336.091159][T17632] lo speed is unknown, defaulting to 1000 [ 336.364681][T17611] lo speed is unknown, defaulting to 1000 [ 337.985120][ T28] audit: type=1326 audit(849.955:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.032154][ T28] audit: type=1326 audit(849.955:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.076025][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4759'. [ 338.077065][ T28] audit: type=1326 audit(849.955:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.088484][T17678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4761'. [ 338.117522][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4759'. [ 338.138800][ T28] audit: type=1326 audit(849.955:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.183117][ T28] audit: type=1326 audit(849.955:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.262105][ T28] audit: type=1326 audit(849.965:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.323255][ T28] audit: type=1326 audit(849.965:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.378987][ T28] audit: type=1326 audit(849.965:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.439047][ T28] audit: type=1326 audit(849.995:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 338.520774][ T28] audit: type=1326 audit(849.995:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17674 comm="syz.3.4760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f257f0ec799 code=0x7ffc0000 [ 340.371380][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4781'. [ 340.613859][T17743] bond3: entered allmulticast mode [ 340.633006][T17743] bridge7: entered promiscuous mode [ 340.657957][T17743] bridge7: entered allmulticast mode [ 340.692114][T17743] bond3: (slave bridge7): Enslaving as an active interface with an up link [ 340.784387][T17748] netlink: 'syz.8.4785': attribute type 1 has an invalid length. [ 340.879029][T17748] gretap1: entered allmulticast mode [ 340.895098][T17748] bond4: (slave gretap1): making interface the new active one [ 340.917379][T17748] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 341.944174][T17776] loop8: detected capacity change from 0 to 2048 [ 342.012871][T17776] loop8: p1 < > p4 [ 342.038891][T17776] loop8: p4 size 8388608 extends beyond EOD, truncated [ 342.051827][T17773] EXT4-fs (loop8p1): unable to read superblock [ 342.134761][T17746] udevd[17746]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 342.134984][T17784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4796'. [ 342.155042][T17779] udevd[17779]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 343.312994][ T8829] IPVS: starting estimator thread 0... [ 343.412387][T17813] IPVS: using max 2496 ests per chain, 124800 per kthread [ 343.970747][T17825] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4809'. [ 344.001188][T17825] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.080973][T17830] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4812'. [ 344.098485][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4813'. [ 344.231373][T17832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4813'. [ 344.324173][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4815'. [ 344.333389][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4815'. [ 344.619469][T17860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4822'. [ 344.683750][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 344.683765][ T28] audit: type=1326 audit(856.665:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17863 comm="syz.3.4824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f257f0ec799 code=0x0 [ 344.959623][T17869] lo speed is unknown, defaulting to 1000 [ 345.158027][T17880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4831'. [ 345.605508][ T28] audit: type=1400 audit(857.585:4258): avc: denied { read } for pid=17904 comm="syz.2.4842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 346.179849][T17916] lo speed is unknown, defaulting to 1000 [ 347.426845][T17948] __nla_validate_parse: 4 callbacks suppressed [ 347.426865][T17948] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4858'. [ 347.514551][T17948] ip6gre1: entered promiscuous mode [ 347.519789][T17948] ip6gre1: entered allmulticast mode [ 347.612317][T17948] netlink: 'syz.2.4858': attribute type 6 has an invalid length. [ 347.620663][T17948] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4858'. [ 347.713088][T17954] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4859'. [ 349.649492][T18017] lo speed is unknown, defaulting to 1000 [ 349.918871][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4887'. [ 349.983922][T18040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4890'. [ 350.124518][T18042] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 350.139564][T18042] team0 (unregistering): Port device team_slave_0 removed [ 350.150527][T18042] team0 (unregistering): Failed to send options change via netlink (err -105) [ 350.180358][T18042] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 350.214478][T18042] team0 (unregistering): Port device team_slave_1 removed [ 351.331211][ T28] audit: type=1326 audit(863.305:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18071 comm="syz.8.4899" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facb182c799 code=0x0 [ 353.154885][T18142] netlink: 'syz.8.4925': attribute type 1 has an invalid length. [ 353.196510][T18142] bond5: entered promiscuous mode [ 353.202331][T18142] bond5: entered allmulticast mode [ 353.207868][T18142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.246484][T18142] bridge5: entered promiscuous mode [ 353.251986][T18142] bridge5: entered allmulticast mode [ 353.257889][T18142] bond5: (slave bridge5): Enslaving as a backup interface with an up link [ 353.317973][ T1996] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 353.346122][T18155] sit0: entered allmulticast mode [ 353.365762][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4928'. [ 353.451470][ T1996] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 353.454439][T18164] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4933'. [ 353.473672][T18164] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 354.712223][T18192] Invalid ELF header magic: != ELF [ 356.631573][ T28] audit: type=1400 audit(1124.579:4260): avc: denied { bind } for pid=18246 comm="syz.8.4965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 357.059963][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4973'. [ 357.071452][ T28] audit: type=1400 audit(1125.039:4261): avc: denied { read } for pid=18263 comm="syz.3.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 358.649722][T18308] tipc: Started in network mode [ 358.661527][T18308] tipc: Node identity ac1414aa, cluster identity 4711 [ 358.675716][T18308] tipc: Enabled bearer , priority 10 [ 358.824430][T18308] tipc: Enabled bearer , priority 0 [ 358.865098][T18310] loop8: detected capacity change from 0 to 512 [ 358.902247][T18310] EXT4-fs: Ignoring removed bh option [ 358.907682][T18310] EXT4-fs: Ignoring removed bh option [ 358.922512][T18310] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 358.937096][T18310] EXT4-fs (loop8): 1 truncate cleaned up [ 358.943403][T18310] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.968326][T18310] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4989: invalid indirect mapped block 4294901760 (level 0) [ 358.992724][T18310] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.4989: invalid indirect mapped block 4294967295 (level 1) [ 359.058447][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.114963][ T28] audit: type=1400 audit(1127.099:4262): avc: denied { create } for pid=18330 comm="syz.4.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.165630][ T28] audit: type=1400 audit(1127.119:4263): avc: denied { connect } for pid=18330 comm="syz.4.4996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.205802][ T28] audit: type=1400 audit(1127.139:4264): avc: denied { read } for pid=18330 comm="syz.4.4996" path="socket:[81030]" dev="sockfs" ino=81030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.233601][ T28] audit: type=1400 audit(1127.139:4265): avc: denied { write } for pid=18330 comm="syz.4.4996" path="socket:[81030]" dev="sockfs" ino=81030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 359.256749][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4997'. [ 359.291669][T18337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4997'. [ 359.359562][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4999'. [ 359.375609][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4999'. [ 359.851410][T12896] tipc: Node number set to 2886997162 [ 360.117731][T18369] ------------[ cut here ]------------ [ 360.123271][T18369] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 360.143621][T18369] WARNING: kernel/bpf/verifier.c:2799 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.7.5006/18369 [ 360.154665][T18369] Modules linked in: [ 360.158573][T18369] CPU: 1 UID: 0 PID: 18369 Comm: syz.7.5006 Tainted: G W syzkaller #0 PREEMPT(full) [ 360.169600][T18369] Tainted: [W]=WARN [ 360.173970][T18369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.184056][T18369] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 360.190427][T18369] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 360.210719][T18369] RSP: 0018:ffffc90003353368 EFLAGS: 00010246 [ 360.216837][T18369] RAX: ffff888104365e78 RBX: 00000000ffffffff RCX: 0000000000000000 [ 360.224842][T18369] RDX: ffffffff86817b99 RSI: ffffffff8682c10b RDI: ffffffff871d4070 [ 360.233416][T18369] RBP: ffff88810bafe040 R08: 0000007800000000 R09: 0000000000000000 [ 360.241422][T18369] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88810bafe000 [ 360.249492][T18369] R13: 0000000000000000 R14: ffff88810bafe04c R15: ffff88810bafe038 [ 360.257692][T18369] FS: 00007fc5b99b56c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 360.267252][T18369] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.273975][T18369] CR2: 00007fc5b99b4ff8 CR3: 000000010e780000 CR4: 00000000003506f0 [ 360.282042][T18369] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.290226][T18369] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 360.298947][T18369] Call Trace: [ 360.302292][T18369] [ 360.305245][T18369] reg_set_min_max+0x1f2/0x260 [ 360.310029][T18369] check_cond_jmp_op+0x13b0/0x1ab0 [ 360.315286][T18369] do_check+0x4a9b/0x9860 [ 360.319777][T18369] do_check_common+0xd0b/0x1630 [ 360.325397][T18369] bpf_check+0x2f78/0xcc30 [ 360.329897][T18369] ? __perf_event_task_sched_in+0xa65/0xad0 [ 360.335841][T18369] ? css_rstat_updated+0xbb/0x280 [ 360.340888][T18369] ? __perf_event_task_sched_in+0xa65/0xad0 [ 360.346880][T18369] ? css_rstat_updated+0xbb/0x280 [ 360.352558][T18369] ? __perf_event_task_sched_out+0x192/0x710 [ 360.358606][T18369] ? _raw_spin_unlock+0x9/0x30 [ 360.363476][T18369] ? finish_task_switch+0x7d/0x280 [ 360.368610][T18369] ? __schedule+0x93c/0xd40 [ 360.373154][T18369] ? __rcu_read_unlock+0x4e/0x70 [ 360.378104][T18369] ? avc_has_perm_noaudit+0xab/0x130 [ 360.384093][T18369] ? avc_has_perm+0x101/0x190 [ 360.388794][T18369] ? selinux_bpf_prog_load+0x197/0x1c0 [ 360.394283][T18369] ? security_bpf_prog_load+0x9e/0x140 [ 360.400312][T18369] bpf_prog_load+0xf76/0x1140 [ 360.405086][T18369] ? security_bpf+0x2b/0x90 [ 360.409690][T18369] __sys_bpf+0x505/0x7e0 [ 360.414550][T18369] __x64_sys_bpf+0x41/0x50 [ 360.419038][T18369] x64_sys_call+0x10cb/0x3020 [ 360.423912][T18369] do_syscall_64+0x12c/0x370 [ 360.428582][T18369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.434666][T18369] RIP: 0033:0x7fc5baf9c799 [ 360.439100][T18369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.459471][T18369] RSP: 002b:00007fc5b99b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.468037][T18369] RAX: ffffffffffffffda RBX: 00007fc5bb216180 RCX: 00007fc5baf9c799 [ 360.476072][T18369] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 360.484683][T18369] RBP: 00007fc5bb032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 360.492969][T18369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.501075][T18369] R13: 00007fc5bb216218 R14: 00007fc5bb216180 R15: 00007ffcb6755ac8 [ 360.509121][T18369] [ 360.512854][T18369] ---[ end trace 0000000000000000 ]--- [ 360.647612][T18376] batadv_slave_0: Caught tx_queue_len zero misconfig [ 360.790738][T18396] netlink: 'syz.2.5028': attribute type 13 has an invalid length. [ 360.811273][ T28] audit: type=1400 audit(1128.789:4266): avc: denied { connect } for pid=18391 comm="syz.7.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 360.835510][ T28] audit: type=1400 audit(1128.789:4267): avc: denied { setopt } for pid=18391 comm="syz.7.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 360.863866][T18400] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5020'. [ 360.904127][T18400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18400 comm=syz.7.5020 [ 361.170215][T18415] loop8: detected capacity change from 0 to 1024 [ 361.178513][T18415] EXT4-fs: Ignoring removed orlov option [ 361.185313][T18415] EXT4-fs: Ignoring removed nobh option [ 361.224122][T18415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.394098][T18429] lo speed is unknown, defaulting to 1000 [ 361.457902][ T28] audit: type=1326 audit(1129.439:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18428 comm="syz.2.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 361.507079][ T28] audit: type=1326 audit(1129.479:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18428 comm="syz.2.5030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 361.599093][T18430] lo speed is unknown, defaulting to 1000 [ 361.741207][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.870820][T18441] loop8: detected capacity change from 0 to 1024 [ 361.897401][T18441] EXT4-fs: Ignoring removed orlov option [ 361.903824][T18441] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 361.938751][T18441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.188301][T18462] lo speed is unknown, defaulting to 1000 [ 362.252143][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 362.252163][ T28] audit: type=1400 audit(1130.229:4281): avc: denied { create } for pid=18465 comm="syz.3.5042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 362.293001][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.308817][ T28] audit: type=1400 audit(1130.289:4282): avc: denied { create } for pid=18461 comm="syz.7.5040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 362.361864][T18468] lo speed is unknown, defaulting to 1000 [ 362.643217][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5046'. [ 363.361179][T18493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5052'. [ 363.392534][T18495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.412108][T18493] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18493 comm=syz.2.5052 [ 364.652531][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5069'. [ 366.579443][T18585] lo speed is unknown, defaulting to 1000 [ 366.912735][T18598] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5092'. [ 366.974942][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5095'. [ 367.035531][T18604] 8021q: adding VLAN 0 to HW filter on device bond6 [ 367.078012][T18610] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5096'. [ 367.097920][T18610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18610 comm=syz.4.5096 [ 367.100612][T18598] x_tables: duplicate underflow at hook 2 [ 367.148487][T18615] ipvlan2: entered promiscuous mode [ 367.156860][T18615] ipvlan2: entered allmulticast mode [ 367.162394][T18615] bond6: entered allmulticast mode [ 367.189613][T18621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5099'. [ 367.219938][T18621] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18621 comm=syz.2.5099 [ 367.280820][T18627] netlink: 'syz.4.5102': attribute type 2 has an invalid length. [ 367.289322][ T28] audit: type=1400 audit(1135.259:4283): avc: denied { listen } for pid=18626 comm="syz.4.5102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 367.310598][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5102'. [ 367.384853][T18633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5105'. [ 368.197559][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5107'. [ 368.442794][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5111'. [ 368.651053][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5114'. [ 368.749204][T18672] netlink: 'syz.3.5116': attribute type 4 has an invalid length. [ 368.778780][T18674] lo speed is unknown, defaulting to 1000 [ 369.107063][T18685] loop8: detected capacity change from 0 to 512 [ 369.206009][T18685] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5120: invalid indirect mapped block 256 (level 2) [ 369.220217][T18685] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 369.231418][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 369.247006][ C1] EXT4-fs (loop8): initial error at time 1137: ext4_free_branches:1023: inode 11 [ 369.256169][ C1] EXT4-fs (loop8): last error at time 1137: ext4_free_branches:1023: inode 11 [ 369.286410][T18685] EXT4-fs (loop8): 2 truncates cleaned up [ 369.292727][T18685] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.343252][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.798278][T18701] __nla_validate_parse: 1 callbacks suppressed [ 369.798318][T18701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5125'. [ 369.910892][T18707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5128'. [ 372.410658][T18764] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5149'. [ 372.419788][T18764] unsupported nlmsg_type 40 [ 373.415819][T18800] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 373.532196][T18792] lo speed is unknown, defaulting to 1000 [ 373.722155][ T28] audit: type=1326 audit(1141.549:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 373.790842][ T28] audit: type=1326 audit(1141.669:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 373.842581][T18831] lo speed is unknown, defaulting to 1000 [ 373.877164][ T28] audit: type=1326 audit(1141.709:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 374.102075][ T28] audit: type=1326 audit(1141.709:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 374.163531][ T28] audit: type=1326 audit(1141.709:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 374.236705][ T28] audit: type=1326 audit(1141.769:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 374.260551][ T28] audit: type=1326 audit(1141.769:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc5baf9c502 code=0x7ffc0000 [ 374.284707][ T28] audit: type=1326 audit(1141.769:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc5baf9c597 code=0x7ffc0000 [ 374.308220][ T28] audit: type=1326 audit(1141.769:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc5baf59491 code=0x7ffc0000 [ 374.341920][ T28] audit: type=1326 audit(1141.769:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18818 comm="syz.7.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc5baf9d589 code=0x7ffc0000 [ 374.696668][T18860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18860 comm=syz.2.5182 [ 374.722524][T18862] lo speed is unknown, defaulting to 1000 [ 374.732262][T18860] netlink: 'syz.2.5182': attribute type 1 has an invalid length. [ 374.754054][T18860] bond4: (slave gretap1): making interface the new active one [ 374.772120][T18860] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 374.795937][T18860] vlan3: entered allmulticast mode [ 374.811490][T18860] bond4: entered allmulticast mode [ 374.821082][T18860] gretap1: entered allmulticast mode [ 374.827559][T18860] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 375.460137][T18875] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5187'. [ 375.568272][T18883] bridge0: port 2(gretap0) entered blocking state [ 375.592069][T18883] bridge0: port 2(gretap0) entered disabled state [ 375.598745][T18883] gretap0: entered allmulticast mode [ 375.652504][T18888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=18888 comm=syz.3.5192 [ 375.691480][T18888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=18888 comm=syz.3.5192 [ 375.739750][T18888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5192'. [ 375.794018][T18883] gretap0: entered promiscuous mode [ 376.053826][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5196'. [ 376.069678][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5196'. [ 376.513759][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5209'. [ 377.996187][T18944] vlan3: entered allmulticast mode [ 378.001554][T18944] bond0: entered allmulticast mode [ 378.011019][T18944] bond_slave_0: entered allmulticast mode [ 378.022209][T18944] bond_slave_1: entered allmulticast mode [ 378.040949][T18944] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5214'. [ 378.078490][T18944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.090135][T18944] bond_slave_0: left allmulticast mode [ 378.101124][T18944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.111110][T18944] bond_slave_1: left allmulticast mode [ 378.117055][T18944] bond0 (unregistering): Released all slaves [ 378.411569][T18941] lo speed is unknown, defaulting to 1000 [ 378.457156][T18954] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 378.483137][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5217'. [ 378.568397][T18965] loop8: detected capacity change from 0 to 1024 [ 378.575221][T18965] EXT4-fs: Ignoring removed orlov option [ 378.599978][T18965] EXT4-fs: Ignoring removed nobh option [ 378.642462][T18965] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.763724][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.898043][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 378.898062][ T28] audit: type=1400 audit(1146.879:4338): avc: denied { create } for pid=18973 comm="syz.3.5224" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 378.949899][ T28] audit: type=1400 audit(1146.929:4339): avc: denied { unlink } for pid=3320 comm="syz-executor" name="file0" dev="tmpfs" ino=5676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 379.891201][T19009] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5234'. [ 379.903947][T19009] ip6gre1: entered promiscuous mode [ 379.909174][T19009] ip6gre1: entered allmulticast mode [ 379.919460][T19009] netlink: 'syz.8.5234': attribute type 6 has an invalid length. [ 379.927915][T19009] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5234'. [ 380.093845][T19022] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 380.093845][T19022] The task syz.2.5237 (19022) triggered the difference, watch for misbehavior. [ 380.464609][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5242'. [ 380.482672][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5242'. [ 381.729014][ T28] audit: type=1400 audit(1149.709:4340): avc: denied { getopt } for pid=19068 comm="syz.7.5255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 381.764736][T19069] lo speed is unknown, defaulting to 1000 [ 382.064186][T19077] netlink: 'syz.7.5258': attribute type 1 has an invalid length. [ 382.072107][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5258'. [ 382.207778][T19081] lo: Caught tx_queue_len zero misconfig [ 383.254681][ T28] audit: type=1400 audit(1151.239:4341): avc: denied { shutdown } for pid=19117 comm="syz.4.5273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.799158][ T2078] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.826362][ T2078] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.855896][ T2078] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.890523][ T2078] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.083460][T19165] lo speed is unknown, defaulting to 1000 [ 384.515960][ T28] audit: type=1326 audit(1152.499:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 384.721986][ T28] audit: type=1326 audit(1152.529:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 384.780161][ T28] audit: type=1326 audit(1152.539:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 384.857553][ T28] audit: type=1326 audit(1152.539:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 384.889367][T19206] lo speed is unknown, defaulting to 1000 [ 384.922910][ T28] audit: type=1326 audit(1152.539:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 384.947956][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5309'. [ 384.976451][ T28] audit: type=1326 audit(1152.539:4347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 385.010085][ T28] audit: type=1326 audit(1152.539:4348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 385.109505][ T28] audit: type=1326 audit(1152.539:4349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 385.191978][ T28] audit: type=1326 audit(1152.539:4350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 385.240064][ T28] audit: type=1326 audit(1152.539:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19194 comm="syz.2.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c433c799 code=0x7ffc0000 [ 386.297176][T19237] lo: Caught tx_queue_len zero misconfig [ 386.397388][T19244] ªªªªªª: renamed from wg2 [ 386.515211][T19249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5323'. [ 386.560534][T19249] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19249 comm=syz.3.5323 [ 387.076394][T19246] loop8: detected capacity change from 0 to 512 [ 387.119146][T19246] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 387.474845][T19246] EXT4-fs (loop8): 1 truncate cleaned up [ 387.586050][T19246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.800064][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.842664][T19280] loop8: detected capacity change from 0 to 1024 [ 387.849686][T19280] EXT4-fs: Ignoring removed oldalloc option [ 387.856475][T19280] EXT4-fs: Ignoring removed bh option [ 387.922577][T19280] EXT4-fs (loop8): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 387.955146][T19280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.977570][T19294] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5339'. [ 387.995434][T19294] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19294 comm=syz.7.5339 [ 388.028666][T19297] tipc: Failed to remove unknown binding: 66,1,1/2886997162:564962947/564962949 [ 388.038742][T19297] tipc: Failed to remove unknown binding: 66,1,1/2886997162:564962947/564962949 [ 388.059257][T10500] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.083173][T19300] netlink: 'syz.7.5342': attribute type 16 has an invalid length. [ 388.094947][T19300] netlink: 'syz.7.5342': attribute type 17 has an invalid length. [ 388.131119][T19300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.142701][T19300] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.155140][T19300] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.196658][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5341'. [ 388.614812][T19329] syzkaller0: entered promiscuous mode [ 388.647560][T19329] syzkaller0: entered allmulticast mode [ 388.863128][T19344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5358'. [ 389.313377][T19365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5365'. [ 389.329601][T19365] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19365 comm=syz.3.5365 [ 389.656774][T19373] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 389.665718][T19373] syzkaller0: entered promiscuous mode [ 389.671311][T19373] syzkaller0: entered allmulticast mode [ 390.331559][T19394] netlink: 'syz.4.5376': attribute type 83 has an invalid length. [ 392.491302][T19432] lo speed is unknown, defaulting to 1000 [ 392.519975][T19434] cgroup: Setting release_agent not allowed [ 392.701707][T19436] lo speed is unknown, defaulting to 1000 [ 393.040561][T19448] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5394'. [ 393.981776][T19474] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5403'. [ 394.000127][T19474] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5403'. [ 394.609693][ T4115] smc: removing ib device syz1 [ 394.960342][T19500] lo speed is unknown, defaulting to 1000 [ 395.373134][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 395.373151][ T28] audit: type=1326 audit(1163.359:4361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.528160][ T28] audit: type=1326 audit(1163.359:4362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.611156][T19518] netlink: 'syz.2.5421': attribute type 1 has an invalid length. [ 395.624054][ T28] audit: type=1326 audit(1163.359:4363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.668055][T19518] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 395.709242][T19518] bond5: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 395.721487][ T28] audit: type=1326 audit(1163.359:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.757823][T19518] bond5: (slave vxcan3): making interface the new active one [ 395.775919][T19518] bond5: (slave vxcan3): Enslaving as an active interface with an up link [ 395.792083][ T28] audit: type=1326 audit(1163.359:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.828363][ T28] audit: type=1326 audit(1163.399:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.852973][ T28] audit: type=1326 audit(1163.399:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.888627][ T28] audit: type=1326 audit(1163.399:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.938399][T19533] netlink: 'syz.2.5426': attribute type 1 has an invalid length. [ 395.947697][ T28] audit: type=1326 audit(1163.399:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 395.952012][T19534] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5423'. [ 395.970934][ T28] audit: type=1326 audit(1163.399:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.4.5419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b9616c799 code=0x7ffc0000 [ 396.003854][T19527] lo speed is unknown, defaulting to 1000 [ 396.199685][T19547] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5429'. [ 396.233675][T19546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.297826][T19546] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.329585][T19546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.376040][T19554] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19554 comm=syz.8.5429 [ 396.443467][T19562] netlink: 'syz.8.5434': attribute type 21 has an invalid length. [ 396.451442][T19562] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5434'. [ 397.715901][T19609] xfrm0: entered promiscuous mode [ 398.352454][T19635] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 399.115824][T19652] lo speed is unknown, defaulting to 1000 [ 399.242385][T19663] loop8: detected capacity change from 0 to 128 [ 399.838572][T19652] A link change request failed with some changes committed already. Interface vlan3 may have been left with an inconsistent configuration, please check. [ 400.143040][T19663] bio_check_eod: 20 callbacks suppressed [ 400.143122][T19663] syz.8.5469: attempt to access beyond end of device [ 400.143122][T19663] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 400.167855][T19663] syz.8.5469: attempt to access beyond end of device [ 400.167855][T19663] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 400.256887][T19663] syz.8.5469: attempt to access beyond end of device [ 400.256887][T19663] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 400.270705][T19663] syz.8.5469: attempt to access beyond end of device [ 400.270705][T19663] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 400.306212][T19663] syz.8.5469: attempt to access beyond end of device [ 400.306212][T19663] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 400.361153][T19663] syz.8.5469: attempt to access beyond end of device [ 400.361153][T19663] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 400.463907][T19663] syz.8.5469: attempt to access beyond end of device [ 400.463907][T19663] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 400.522405][T19663] syz.8.5469: attempt to access beyond end of device [ 400.522405][T19663] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 400.550321][T19663] syz.8.5469: attempt to access beyond end of device [ 400.550321][T19663] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 400.593071][T19663] syz.8.5469: attempt to access beyond end of device [ 400.593071][T19663] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 400.757194][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 400.757212][ T28] audit: type=1400 audit(1168.739:4387): avc: denied { accept } for pid=19701 comm="syz.4.5481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 400.980857][T19710] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5482'. [ 402.227025][T19761] lo speed is unknown, defaulting to 1000 [ 402.443879][T19773] netlink: 'syz.3.5506': attribute type 4 has an invalid length. [ 402.451967][T19773] netlink: 'syz.3.5506': attribute type 4 has an invalid length. [ 402.537919][T19778] netlink: 'syz.7.5505': attribute type 27 has an invalid length. [ 402.892319][T19778] geneve2: left promiscuous mode [ 404.720089][T19845] lo speed is unknown, defaulting to 1000 [ 404.922699][T19853] lo speed is unknown, defaulting to 1000 [ 405.210109][T19874] lo speed is unknown, defaulting to 1000 [ 406.250973][T19915] batadv_slave_0: Caught tx_queue_len zero misconfig [ 406.346409][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5558'. [ 407.130908][ T28] audit: type=1400 audit(1175.089:4388): avc: denied { watch } for pid=19942 comm="syz.7.5568" path="/781/file0" dev="tmpfs" ino=4066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 407.279625][ T28] audit: type=1326 audit(1175.259:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19947 comm="syz.7.5570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x0 [ 408.310352][ T28] audit: type=1326 audit(1176.289:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19973 comm="syz.3.5580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f257f0ec799 code=0x0 [ 408.521021][T19987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5583'. [ 408.531751][ T28] audit: type=1400 audit(1176.519:4391): avc: denied { ioctl } for pid=19988 comm="syz.2.5584" path="socket:[88990]" dev="sockfs" ino=88990 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 408.559844][T19987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19987 comm=syz.4.5583 [ 408.573383][ T28] audit: type=1400 audit(1176.539:4392): avc: denied { setopt } for pid=19988 comm="syz.2.5584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 408.620500][T19991] lo speed is unknown, defaulting to 1000 [ 408.684702][T19994] lo speed is unknown, defaulting to 1000 [ 408.942462][T19998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5587'. [ 408.981318][T19998] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19998 comm=syz.4.5587 [ 409.031702][T20001] lo speed is unknown, defaulting to 1000 [ 409.224051][ T28] audit: type=1326 audit(1177.209:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.7.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 409.298420][ T28] audit: type=1326 audit(1177.209:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.7.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 409.352660][ T28] audit: type=1326 audit(1177.239:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.7.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 409.406872][ T28] audit: type=1326 audit(1177.239:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.7.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 409.464981][ T28] audit: type=1326 audit(1177.239:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20000 comm="syz.7.5588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc5baf9c799 code=0x7ffc0000 [ 409.564556][T20025] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5596'. [ 409.663943][T20033] netlink: 'syz.4.5600': attribute type 1 has an invalid length. [ 409.685789][T20033] gretap1: entered allmulticast mode [ 409.693075][T20033] bond9: (slave gretap1): making interface the new active one [ 409.700991][T20033] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 409.875701][T20042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.892506][T20042] ip6tnl0: Caught tx_queue_len zero misconfig [ 410.262559][T20066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5610'. [ 411.626088][T20107] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5626'. [ 411.650246][T20107] x_tables: duplicate underflow at hook 2 [ 411.762583][T20113] netlink: 'syz.7.5628': attribute type 2 has an invalid length. [ 411.787355][T20116] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5629'. [ 411.792406][T20113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5628'. [ 411.813693][T20118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5630'. [ 411.829880][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5631'. [ 411.835564][T20116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20116 comm=syz.8.5629 [ 411.860408][T20118] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.912116][T20129] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5634'. [ 411.953799][T20118] ipvlan2: entered promiscuous mode [ 411.959320][T20118] ipvlan2: entered allmulticast mode [ 411.965010][T20118] bond4: entered allmulticast mode [ 412.100705][T20129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5634'. [ 412.316641][T20159] loop8: detected capacity change from 0 to 128 [ 412.339516][T20159] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.490038][T10500] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.664534][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 412.664574][ T28] audit: type=1400 audit(1180.649:4405): avc: denied { shutdown } for pid=20172 comm="syz.8.5650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.837893][T20175] loop8: detected capacity change from 0 to 512 [ 412.870214][T20175] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 412.929116][T20175] EXT4-fs (loop8): group descriptors corrupted! [ 413.388614][T20190] netlink: 'syz.4.5658': attribute type 4 has an invalid length. [ 413.398008][T20190] netlink: 'syz.4.5658': attribute type 4 has an invalid length. [ 413.409736][ T8830] lo speed is unknown, defaulting to 1000 [ 413.417071][ T8830] syU×: Port: 1 Link ACTIVE [ 413.422441][ T8830] lo speed is unknown, defaulting to 1000 [ 413.563477][T20195] lo speed is unknown, defaulting to 1000 [ 415.121980][T20205] kexec: Could not allocate control_code_buffer [ 415.317931][T20234] lo speed is unknown, defaulting to 1000 [ 416.457900][T20269] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5685'. [ 416.592719][T20278] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5687'. [ 416.632602][T20278] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5687'. [ 416.648402][T20278] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5687'. [ 417.629162][T20297] vlan0: entered allmulticast mode [ 417.634539][T20297] bond0: entered allmulticast mode [ 417.639677][T20297] bond_slave_0: entered allmulticast mode [ 417.645684][T20297] bond_slave_1: entered allmulticast mode [ 417.657058][T20297] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5692'. [ 417.948468][T20297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.989229][T20297] bond_slave_0: left allmulticast mode [ 417.997989][T20297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.071027][T20297] bond_slave_1: left allmulticast mode [ 418.077215][T20297] bond0 (unregistering): Released all slaves [ 418.127086][T20309] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0 [ 418.671101][T20315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=20315 comm=syz.8.5699 [ 418.704111][T20315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=20315 comm=syz.8.5699 [ 418.717949][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5699'. [ 418.887849][T20328] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5701'. [ 418.898503][T20328] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5701'. [ 418.908327][T20328] netlink: 'syz.8.5701': attribute type 6 has an invalid length. [ 419.713816][T20318] lo speed is unknown, defaulting to 1000 [ 420.066637][T20354] netlink: 'syz.8.5713': attribute type 1 has an invalid length. [ 420.097032][T20354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.121500][ T28] audit: type=1400 audit(1188.109:4406): avc: denied { write } for pid=20356 comm="syz.7.5715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 420.127370][T20362] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5713'. [ 420.197837][T20362] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 420.224168][T20362] bond0: entered allmulticast mode [ 420.269525][T20354] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 421.224841][T20402] netlink: 'syz.4.5730': attribute type 11 has an invalid length. [ 421.247909][ T28] audit: type=1400 audit(1189.229:4407): avc: denied { write } for pid=20396 comm="syz.2.5728" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 421.443049][T20420] lo speed is unknown, defaulting to 1000 [ 421.500760][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5739'. [ 422.372171][T20447] ================================================================== [ 422.380342][T20447] BUG: KCSAN: data-race in touch_atime / touch_atime [ 422.387066][T20447] [ 422.389408][T20447] write to 0xffff888139393540 of 4 bytes by task 20432 on cpu 0: [ 422.397137][T20447] touch_atime+0x1d7/0x330 [ 422.401583][T20447] shmem_file_read_iter+0x477/0x540 [ 422.406901][T20447] copy_splice_read+0x471/0x6c0 [ 422.411767][T20447] splice_direct_to_actor+0x28f/0x670 [ 422.417159][T20447] do_splice_direct+0x119/0x1a0 [ 422.422035][T20447] do_sendfile+0x382/0x650 [ 422.426487][T20447] __x64_sys_sendfile64+0x105/0x150 [ 422.431706][T20447] x64_sys_call+0x2dc4/0x3020 [ 422.436417][T20447] do_syscall_64+0x12c/0x370 [ 422.441026][T20447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.446944][T20447] [ 422.449277][T20447] read to 0xffff888139393540 of 4 bytes by task 20447 on cpu 1: [ 422.456916][T20447] touch_atime+0x16c/0x330 [ 422.461347][T20447] shmem_file_read_iter+0x477/0x540 [ 422.466562][T20447] copy_splice_read+0x471/0x6c0 [ 422.471418][T20447] splice_direct_to_actor+0x28f/0x670 [ 422.476793][T20447] do_splice_direct+0x119/0x1a0 [ 422.481653][T20447] do_sendfile+0x382/0x650 [ 422.486088][T20447] __x64_sys_sendfile64+0x105/0x150 [ 422.491291][T20447] x64_sys_call+0x2dc4/0x3020 [ 422.495975][T20447] do_syscall_64+0x12c/0x370 [ 422.500563][T20447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.506459][T20447] [ 422.508777][T20447] value changed: 0x14d3ce1f -> 0x156c649f [ 422.514489][T20447] [ 422.516811][T20447] Reported by Kernel Concurrency Sanitizer on: [ 422.522965][T20447] CPU: 1 UID: 0 PID: 20447 Comm: syz.4.5740 Tainted: G W syzkaller #0 PREEMPT(full) [ 422.533998][T20447] Tainted: [W]=WARN [ 422.537796][T20447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.547849][T20447] ==================================================================