last executing test programs: 58.285248367s ago: executing program 4 (id=2592): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005480)=@delchain={0x228, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x1dc, 0x2, [@TCA_BASIC_EMATCHES={0x70, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_META={0x54, 0x3ffc, 0x0, 0x0, {{0xf, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x89c6, 0xb2}, {0x9, 0x0, 0x1}}}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='0', @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR=')']}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_BASIC_ACT={0x168, 0x3, [@m_sample={0x88, 0x17, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x51, 0x6, "64a8416e1a2ad4f08a507ade2030959fbaf47dae3d8c5509c5f67bbd00abca8965993d237d8db6ee7a95acb45665d419103d3630ef3c99f3729bf251659b35ee457bb1f0377974ae753b08d9ac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0xdc, 0x5, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0xc0000000, 0xffffffffffffffff, 0x2, 0xe}, 0x7}}]}, {0x8d, 0x6, "6f3e464680b8dcb925d3c8416db18e2e0eecd7ba0f6003aaa71a565f40fa822f6bd63a4ca0ba27c7d18cbbdfbdb568fa69b75a5bdb35bbe794d9fbd87c7c443d003af1f22d796733e174a55728b309ff94c380276aa4c273687acbac759cf82dcb64f9e61b78c605fb9edbb86dd5ae3f174ba8489176ed907a788dd2e877be404d047e0ef287164365"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 58.230536527s ago: executing program 4 (id=2595): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) 58.058387174s ago: executing program 4 (id=2602): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40408c0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) 58.028787398s ago: executing program 4 (id=2605): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") socketpair(0x1, 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 57.958875135s ago: executing program 4 (id=2608): setuid(0xee01) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x68000080) 57.693701525s ago: executing program 4 (id=2623): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 57.642717465s ago: executing program 32 (id=2623): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 3.05349758s ago: executing program 0 (id=3689): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sync() sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x1040) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x2e) migrate_pages(0x0, 0xfc, &(0x7f0000000200)=0x7ffffffffffffffd, &(0x7f0000000240)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x10) 2.731174079s ago: executing program 0 (id=3693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f7443, 0x8031, 0xffffffffffffffff, 0x20000) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xcc, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x5}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x68040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f08000140000000002800"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 2.124455233s ago: executing program 3 (id=3700): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x4a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fallocate(r3, 0x30, 0x0, 0x8000c62) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f00000001c0)=@req={0x101, 0x4, 0x6, 0xff}, 0x10) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000480)=0x4, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f000057d000/0x3000)=nil, &(0x7f0000922000/0x2000)=nil, &(0x7f00004d4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00003a3000/0xe000)=nil, &(0x7f0000479000/0x11000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f000050f000/0x3000)=nil, &(0x7f0000969000/0x2000)=nil, &(0x7f00007b0000/0x1000)=nil, &(0x7f000011e000/0x4000)=nil, 0x0, 0x0, r5}, 0x68) bind$inet6(r4, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 2.046578899s ago: executing program 0 (id=3702): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f0000000080)={[{@bh}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@block_validity}]}, 0x1, 0x465, &(0x7f0000000700)="$eJzs28tvVNUfAPDvvW2B8vi1P8QHD7WKxsZHSwsqCzcaTVxoYuIGl7UtBBmooTURQhSMwaUhcW9cmvgXuNKNUVcmbnVvSIhhI7Aac2fuZR6dKW2Z9iLz+SSXnnPvuZzznXPPzLn3zATQt8ayf5KInRHxR0SM1LOtBcbqf25cvzB78/qF2SSq1Xf/Tmrl/rl+YbYoWpy3I8+MpxHp50ns71Dv4rnzp2YqlfmzeX5y6fSHk4vnzr9w8vTMifkT82emjx49cnjq5ZemX1x+8q21x/n/rK37Plk4sPfN9668PXvsyvu/fDdQxN8WR4+MrXTw6Wq1x9WVa1dTOhkssSGsSTYGsu4aqo3/kRiIRueNxBufrXDq0KY0ENgw1VyXwxerwH0sibJbAJSj+KDP7n+LbfNmH+W79mr9BiiL+0a+1Y8MRpqXGWq7v+2lsYg4dvHW19kWG/McAgCgxQ/Z/Of5TvO/NB5qKve/fG1oNF9L2R0RD0TEnoh4MKJW9uGIeGSN9bcvkiyf/6RX1xXYKmXzv1fyta3W+V8x+4vRgTy3qxb/UHL8ZGX+UP6ajMfQ1iw/tUIdP77++5fdjjXP/7Itq7+YC+btuDq4tfWcuZmlmbuJudm1SxH7BjvFn9xeCUgiYm9E7FtnHSef/fZAt2N3jn8FPVhnqn4T8Uy9/y9GW/yFZOX1ycltUZk/NFlcFcv9+tvld7rVf1fx90DW/9s7Xv+34x9NmtdrF9dex+U/v+h6TzOxruu/sWNL/vfjmaWls1MRW5K36o1u3j/dOLfIF+Wz+McPdh7/u6PxSuyPiOwifjQiHouIx/O+eyIinoyIg21xNd9f//zaUx90i/9e6P+5tv4fbS3S1v+NxJZo3nMzj7i1TJYYOPXT963/YyO5uve/I7XUeL5nNe9/y1vROXFXLx4AAAD8R6QRsTOSdOJ2ejidmKh/h39PbE8rC4tLzx1f+OjMXP03AqMxlBZPukaanodO5bf1o5fq+ekinx8/nD83/mpguJafmF2ozJUdPPS5HcvGf1ob/5m/BspuHbDh/F4L+lfT+E/KbAew+Xz+Q/8y/qF/dRj/w2W0A9h8nT7/Py2hHcDmaxv/lv2gj7j/h/5l/EP/ah7/vgAAfWNxOO78I/lOiW2xnrMk7ptEpPdEM3qTSNY5Clab2Fl2gGtPlP3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BgAA//8b0PWp") chdir(&(0x7f0000000140)='./file0\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000800) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x102c600, 0x0, 0x9e, 0x0, &(0x7f00000007c0)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x400017e) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x8d) getdents64(r0, &(0x7f0000000140)=""/32, 0x20) 1.963675763s ago: executing program 0 (id=3706): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x400, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014850) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) unshare(0x6a040000) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x6, 0x1) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() 1.556605996s ago: executing program 5 (id=3709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="02100803030000002abd7000fedbdf2501001800"], 0x18}}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0}, 0x68) sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@debug}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f00000005c0)="$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") umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fb, &(0x7f0000002440)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r6 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000ec0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)=@dellinkprop={0x28c, 0x6d, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5008}, [@IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="a3da8852571b"}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x20}, @IFLA_MTU={0x8, 0x4, 0xfffffffa}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x720}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_VFINFO_LIST={0x224, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x87d, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x200, 0x7f}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x40}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf, 0x8c3, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffff, 0xfffffffffffffffd}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000, 0xffffffffffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fffffff}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x1, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x181, 0x7}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0xf}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3cfafd87, 0x472}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7f, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xf}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffff9, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x64e}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xd}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x49, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x92}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x4}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x2e5, 0x108c, 0x88a8}}, {0x14, 0x1, {0x6, 0x36c, 0x2, 0x8100}}, {0x14, 0x1, {0xfffffff8, 0xaef, 0x9, 0x88a8}}, {0x14, 0x1, {0x2, 0x8c4, 0xd2d, 0x8100}}, {0x14, 0x1, {0x0, 0xb73, 0x5, 0x8100}}, {0x14, 0x1, {0x9, 0xe97, 0x1, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xb692, 0x6f5}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd}}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000}, 0x5811) 1.373367881s ago: executing program 1 (id=3710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xa, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0xe}}}, 0x24}}, 0x0) 1.287842004s ago: executing program 5 (id=3711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4000000) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0x2, {0x1, 0x1, 0x2}, {0x2, 0xf0, 0x1}, 0xfd, 0xfe}, {0x2, 0x2, {0x0, 0xf0}, {0x2, 0x0, 0x2}, 0x0, 0xff}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.236830455s ago: executing program 1 (id=3712): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x100000000000000) splice(r5, 0x0, r8, 0x0, 0x100035ab, 0x4) listen(r0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r9, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x80000) 1.236391145s ago: executing program 3 (id=3713): bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=@base={0x9, 0x81, 0x3, 0xffffffff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x200008d4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 1.219156911s ago: executing program 0 (id=3714): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) gettid() r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x10000008ebc, 0x100000000000000) splice(r5, 0x0, r8, 0x0, 0x100035ab, 0x4) listen(r0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r9, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r0, 0x0, 0x0, 0x80000) 1.082924936s ago: executing program 3 (id=3715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x1, 0x0, 0x40000fff, 0xffffffda}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xabe33e5d, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0xff37) 1.082642646s ago: executing program 2 (id=3716): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0xd8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) symlink(&(0x7f0000000040)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet6(r0, &(0x7f0000000100)="f0", 0x1, 0x40001, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 1.082497336s ago: executing program 3 (id=3717): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x4}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.082260266s ago: executing program 5 (id=3718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) syz_emit_ethernet(0x111a, &(0x7f0000001b40)=ANY=[], 0x0) 1.063706642s ago: executing program 3 (id=3719): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x400, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014850) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) unshare(0x6a040000) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x6, 0x1) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) munlockall() 1.058469901s ago: executing program 5 (id=3720): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 956.798621ms ago: executing program 5 (id=3721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="02100803030000002abd7000fedbdf2501001800"], 0x18}}, 0x8000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) r4 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0}, 0x68) sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@debug}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f00000005c0)="$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") umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fb, &(0x7f0000002440)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r6 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000ec0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)=@dellinkprop={0x28c, 0x6d, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5008}, [@IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="a3da8852571b"}, @IFLA_NET_NS_FD={0x8, 0x1c, r6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x20}, @IFLA_MTU={0x8, 0x4, 0xfffffffa}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x720}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_VFINFO_LIST={0x224, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x87d, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x200, 0x7f}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x40}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf, 0x8c3, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffff, 0xfffffffffffffffd}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000, 0xffffffffffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fffffff}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x1, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x181, 0x7}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0xf}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3cfafd87, 0x472}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7f, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xf}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffff9, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x64e}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xd}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x49, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x92}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x4}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x2e5, 0x108c, 0x88a8}}, {0x14, 0x1, {0x6, 0x36c, 0x2, 0x8100}}, {0x14, 0x1, {0xfffffff8, 0xaef, 0x9, 0x88a8}}, {0x14, 0x1, {0x2, 0x8c4, 0xd2d, 0x8100}}, {0x14, 0x1, {0x0, 0xb73, 0x5, 0x8100}}, {0x14, 0x1, {0x9, 0xe97, 0x1, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xb692, 0x6f5}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd}}]}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4000}, 0x5811) 854.331612ms ago: executing program 5 (id=3722): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x200000000000000, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x800, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 615.736457ms ago: executing program 3 (id=3723): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x2000008, 0x8013, r0, 0xf6690000) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/172, 0xfffffffffffffeb6, 0x0, 0x0}, &(0x7f0000000040)=0x40) 334.796974ms ago: executing program 1 (id=3724): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x1000000, 0x3, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa, 0x0, 0xffffffffffdffffc}], ['\x00']}) 322.372351ms ago: executing program 0 (id=3725): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 249.271917ms ago: executing program 2 (id=3726): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000900)=""/140, 0x8c}, {&(0x7f0000000000)=""/107, 0x6b}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000033c0)=""/4089, 0xff9}, {&(0x7f00000002c0)=""/121, 0x79}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f00000023c0)=""/4087, 0xff7}, {0x0}], 0x9) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 231.177724ms ago: executing program 1 (id=3727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x150, &(0x7f0000001700)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x11a, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x3f, 0x0, 0x0, [{0x18}, {0x21, 0x7, "fcd1876deaf8e9264e6fa3ce2dff9281c9fe68a3000000006f0000044e43e740e077e1d16212fb00"/55}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e34dd105db8be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 168.818252ms ago: executing program 1 (id=3728): sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x41) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 168.590552ms ago: executing program 2 (id=3729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x2a}, &(0x7f0000000380)=0x40) 103.046109ms ago: executing program 2 (id=3730): socket$inet6_sctp(0xa, 0x5, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1d0b27bd7000fedbdf25010000000c", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x48850) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) 88.384397ms ago: executing program 2 (id=3731): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000640)={[{@utf8no}, {@shortname_win95}, {}, {@utf8}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_winnt}, {@uni_xlate}, {@utf8}]}, 0x3, 0x34f, &(0x7f0000000100)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 469.03µs ago: executing program 1 (id=3732): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x100510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x2, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 0s ago: executing program 2 (id=3733): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x4f63}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r3, &(0x7f0000000040), &(0x7f0000000040)=""/25, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 129 sclass=netlink_audit_socket pid=9787 comm=syz.2.1597 [ 440.237077][ T9778] xfrm0 speed is unknown, defaulting to 1000 [ 440.262336][ T9784] ip6_vti0 speed is unknown, defaulting to 1000 [ 440.287613][ T9778] lo speed is unknown, defaulting to 1000 [ 440.304300][ T9778] lo speed is unknown, defaulting to 1000 [ 440.304632][ T28] audit: type=1400 audit(1772764361.821:1838): avc: denied { mount } for pid=9800 comm="syz.0.1600" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 440.360949][ T28] audit: type=1400 audit(1772764361.851:1839): avc: denied { shutdown } for pid=9800 comm="syz.0.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.367599][ T9784] xfrm0 speed is unknown, defaulting to 1000 [ 440.903163][ T9784] lo speed is unknown, defaulting to 1000 [ 440.928138][ T9784] lo speed is unknown, defaulting to 1000 [ 441.517910][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1607'. [ 441.853188][ T9827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1606'. [ 442.550439][ T9824] ip6_vti0 speed is unknown, defaulting to 1000 [ 442.585217][ T9824] xfrm0 speed is unknown, defaulting to 1000 [ 442.618586][ T9824] lo speed is unknown, defaulting to 1000 [ 442.624650][ T9824] lo speed is unknown, defaulting to 1000 [ 442.945899][ T9834] 9p: Bad value for 'rfdno' [ 442.980408][ T9834] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 443.417315][ T9847] nfs: Unexpected value for 'acl' [ 443.423832][ T9847] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 443.570595][ T9844] ip6_vti0 speed is unknown, defaulting to 1000 [ 443.643647][ T9844] xfrm0 speed is unknown, defaulting to 1000 [ 443.693041][ T9844] lo speed is unknown, defaulting to 1000 [ 443.702635][ T9844] lo speed is unknown, defaulting to 1000 [ 444.242087][ T9867] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.956794][ T9867] xfrm0 speed is unknown, defaulting to 1000 [ 446.229767][ T28] audit: type=1326 audit(1772764367.661:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.253503][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 446.283137][ T9891] batman_adv: batadv0: Adding interface: dummy0 [ 446.291373][ T9891] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.316697][ T28] audit: type=1326 audit(1772764367.661:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.340141][ T28] audit: type=1326 audit(1772764367.661:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.371717][ T9891] batman_adv: batadv0: Interface activated: dummy0 [ 446.378521][ T28] audit: type=1326 audit(1772764367.661:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.406479][ T9867] lo speed is unknown, defaulting to 1000 [ 446.411198][ T9893] pimreg: entered allmulticast mode [ 446.417532][ T28] audit: type=1326 audit(1772764367.661:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.441687][ T28] audit: type=1326 audit(1772764367.671:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.465274][ T28] audit: type=1326 audit(1772764367.671:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.490345][ T28] audit: type=1326 audit(1772764367.671:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.513774][ T28] audit: type=1326 audit(1772764367.671:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.538270][ T9888] batadv0: mtu less than device minimum [ 446.540634][ T28] audit: type=1326 audit(1772764367.681:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.2.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 446.556313][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.583042][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.599253][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.620511][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.640612][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.658383][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.676323][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.689261][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.703463][ T9888] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 446.760393][ T9867] lo speed is unknown, defaulting to 1000 [ 446.772282][ T9897] pimreg: left allmulticast mode [ 446.908022][ T9904] bond11: entered allmulticast mode [ 446.913511][ T9904] 8021q: adding VLAN 0 to HW filter on device bond11 [ 447.240498][ T9919] netlink: 'syz.1.1628': attribute type 1 has an invalid length. [ 448.077405][ T9904] bond0: (slave macvlan2): Opening slave failed [ 449.185593][ T9901] ip6_vti0 speed is unknown, defaulting to 1000 [ 449.261967][ T9901] xfrm0 speed is unknown, defaulting to 1000 [ 449.299693][ T9901] lo speed is unknown, defaulting to 1000 [ 449.306103][ T9901] lo speed is unknown, defaulting to 1000 [ 449.371344][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1634'. [ 449.635601][ T9940] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1633'. [ 449.831227][ T9941] siw: device registration error -23 [ 450.011395][ T9937] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=9937 comm=syz.1.1634 [ 450.239189][ T9953] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=9953 comm=syz.1.1634 [ 450.464809][ T9948] all (unregistering): Released all slaves [ 450.977797][ T9952] ip6_vti0 speed is unknown, defaulting to 1000 [ 451.001918][ T9962] pimreg: entered allmulticast mode [ 451.009531][ T9962] pimreg: left allmulticast mode [ 451.169419][ T9952] xfrm0 speed is unknown, defaulting to 1000 [ 451.672117][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 451.839668][ T9972] ip6_vti0 speed is unknown, defaulting to 1000 [ 452.620453][ T9972] xfrm0 speed is unknown, defaulting to 1000 [ 452.654276][ T9972] lo speed is unknown, defaulting to 1000 [ 452.660312][ T9972] lo speed is unknown, defaulting to 1000 [ 452.717567][ T9952] lo speed is unknown, defaulting to 1000 [ 452.767378][ T9952] lo speed is unknown, defaulting to 1000 [ 453.105753][ T9981] ip6_vti0 speed is unknown, defaulting to 1000 [ 453.131300][ T9997] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1651'. [ 453.219533][ T9981] xfrm0 speed is unknown, defaulting to 1000 [ 453.275164][ T9981] lo speed is unknown, defaulting to 1000 [ 453.281799][ T9981] lo speed is unknown, defaulting to 1000 [ 454.393029][T10012] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 458.003257][T10054] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.322210][T10054] xfrm0 speed is unknown, defaulting to 1000 [ 458.325052][T10041] ip6_vti0 speed is unknown, defaulting to 1000 [ 458.342883][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 458.356114][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 458.463708][T10041] xfrm0 speed is unknown, defaulting to 1000 [ 458.492634][T10041] lo speed is unknown, defaulting to 1000 [ 458.500888][T10041] lo speed is unknown, defaulting to 1000 [ 458.500866][T10054] lo speed is unknown, defaulting to 1000 [ 458.666788][T10054] lo speed is unknown, defaulting to 1000 [ 459.178941][T10071] netlink: 16628 bytes leftover after parsing attributes in process `syz.2.1666'. [ 459.218038][T10071] xt_TPROXY: Can be used only with -p tcp or -p udp [ 460.587197][T10090] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.007622][T10090] xfrm0 speed is unknown, defaulting to 1000 [ 461.141075][T10090] lo speed is unknown, defaulting to 1000 [ 461.158250][T10092] ip6_vti0 speed is unknown, defaulting to 1000 [ 461.164849][T10090] lo speed is unknown, defaulting to 1000 [ 461.319439][T10092] xfrm0 speed is unknown, defaulting to 1000 [ 461.429570][T10092] lo speed is unknown, defaulting to 1000 [ 461.448808][T10092] lo speed is unknown, defaulting to 1000 [ 462.041787][T10125] ip6_vti0 speed is unknown, defaulting to 1000 [ 462.100412][T10125] xfrm0 speed is unknown, defaulting to 1000 [ 462.161914][T10125] lo speed is unknown, defaulting to 1000 [ 462.168435][T10125] lo speed is unknown, defaulting to 1000 [ 462.338739][T10126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1679'. [ 462.603963][T10128] ip6_vti0 speed is unknown, defaulting to 1000 [ 463.203761][T10128] xfrm0 speed is unknown, defaulting to 1000 [ 463.428947][T10128] lo speed is unknown, defaulting to 1000 [ 463.450614][T10128] lo speed is unknown, defaulting to 1000 [ 464.668011][T10135] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.047326][T10135] xfrm0 speed is unknown, defaulting to 1000 [ 465.054505][T10142] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.294698][T10135] lo speed is unknown, defaulting to 1000 [ 465.332721][T10135] lo speed is unknown, defaulting to 1000 [ 465.399814][T10142] xfrm0 speed is unknown, defaulting to 1000 [ 465.496788][T10142] lo speed is unknown, defaulting to 1000 [ 465.510447][T10165] ip6_vti0 speed is unknown, defaulting to 1000 [ 465.532643][T10142] lo speed is unknown, defaulting to 1000 [ 465.690586][T10165] xfrm0 speed is unknown, defaulting to 1000 [ 465.934024][T10165] lo speed is unknown, defaulting to 1000 [ 465.954946][T10165] lo speed is unknown, defaulting to 1000 [ 469.589092][T10197] ip6_vti0 speed is unknown, defaulting to 1000 [ 471.421438][T10197] xfrm0 speed is unknown, defaulting to 1000 [ 471.688089][T10197] lo speed is unknown, defaulting to 1000 [ 471.696461][T10197] lo speed is unknown, defaulting to 1000 [ 475.162205][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 475.214336][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 475.265967][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 475.304766][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 475.422924][T10268] ip6_vti0 speed is unknown, defaulting to 1000 [ 475.649131][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 475.811929][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 476.437269][T10268] xfrm0 speed is unknown, defaulting to 1000 [ 477.097537][T10268] lo speed is unknown, defaulting to 1000 [ 477.252600][T10268] lo speed is unknown, defaulting to 1000 [ 479.272036][T10290] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.543658][T10290] xfrm0 speed is unknown, defaulting to 1000 [ 479.544222][T10300] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.706446][T10290] lo speed is unknown, defaulting to 1000 [ 479.706483][T10300] xfrm0 speed is unknown, defaulting to 1000 [ 479.724757][T10290] lo speed is unknown, defaulting to 1000 [ 479.741001][T10326] ip6_vti0 speed is unknown, defaulting to 1000 [ 479.798543][T10300] lo speed is unknown, defaulting to 1000 [ 479.827115][T10300] lo speed is unknown, defaulting to 1000 [ 479.994874][T10326] xfrm0 speed is unknown, defaulting to 1000 [ 480.074321][T10326] lo speed is unknown, defaulting to 1000 [ 480.080783][T10326] lo speed is unknown, defaulting to 1000 [ 481.308503][T10359] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.531537][T10359] xfrm0 speed is unknown, defaulting to 1000 [ 481.538067][T10363] ip6_vti0 speed is unknown, defaulting to 1000 [ 481.686236][T10359] lo speed is unknown, defaulting to 1000 [ 481.696685][T10363] xfrm0 speed is unknown, defaulting to 1000 [ 481.707190][T10359] lo speed is unknown, defaulting to 1000 [ 481.829417][T10363] lo speed is unknown, defaulting to 1000 [ 481.847729][T10363] lo speed is unknown, defaulting to 1000 [ 482.834944][T10408] ip6_vti0 speed is unknown, defaulting to 1000 [ 482.973690][T10408] xfrm0 speed is unknown, defaulting to 1000 [ 483.021878][T10408] lo speed is unknown, defaulting to 1000 [ 483.028172][T10408] lo speed is unknown, defaulting to 1000 [ 483.640590][T10437] ip6_vti0 speed is unknown, defaulting to 1000 [ 483.701534][T10437] xfrm0 speed is unknown, defaulting to 1000 [ 483.744830][T10437] lo speed is unknown, defaulting to 1000 [ 483.750998][T10437] lo speed is unknown, defaulting to 1000 [ 487.623378][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 487.635574][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 487.649013][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 489.333301][T10527] ip6_vti0 speed is unknown, defaulting to 1000 [ 489.616617][T10527] xfrm0 speed is unknown, defaulting to 1000 [ 489.674039][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'. [ 489.692436][T10527] lo speed is unknown, defaulting to 1000 [ 489.698565][T10527] lo speed is unknown, defaulting to 1000 [ 489.863296][T10583] netlink: 'syz.2.1826': attribute type 1 has an invalid length. [ 489.885396][T10583] 8021q: adding VLAN 0 to HW filter on device bond12 [ 490.163503][T10595] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 490.176986][T10595] 8021q: adding VLAN 0 to HW filter on device bond13 [ 490.396965][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 490.406770][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 490.435310][T10613] netlink: 'syz.4.1838': attribute type 1 has an invalid length. [ 490.450116][T10613] 8021q: adding VLAN 0 to HW filter on device bond14 [ 490.481127][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 490.490382][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 490.573722][T10620] 9p: Bad value for 'rfdno' [ 490.599184][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 490.605159][T10626] netlink: 'syz.0.1841': attribute type 1 has an invalid length. [ 490.608696][T10609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1837'. [ 490.645493][T10626] 8021q: adding VLAN 0 to HW filter on device bond10 [ 490.820246][T10654] netlink: 'syz.2.1854': attribute type 1 has an invalid length. [ 490.856771][T10654] 8021q: adding VLAN 0 to HW filter on device bond14 [ 490.899629][T10666] Cannot find add_set index 0 as target [ 490.971717][T10667] cgroup: No subsys list or none specified [ 491.454256][T10687] netlink: 'syz.2.1868': attribute type 1 has an invalid length. [ 491.473891][T10681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=10681 comm=syz.0.1864 [ 491.478031][T10687] 8021q: adding VLAN 0 to HW filter on device bond15 [ 491.498405][T10681] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=10681 comm=syz.0.1864 [ 492.123384][T10718] netlink: 'syz.1.1881': attribute type 1 has an invalid length. [ 492.140610][T10718] 8021q: adding VLAN 0 to HW filter on device bond12 [ 492.497480][T10752] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 492.511633][T10752] 8021q: adding VLAN 0 to HW filter on device bond11 [ 492.541579][T10755] xt_TPROXY: Can be used only with -p tcp or -p udp [ 492.564631][T10759] netlink: 'syz.2.1898': attribute type 1 has an invalid length. [ 492.577575][T10759] 8021q: adding VLAN 0 to HW filter on device bond16 [ 492.587402][T10762] net_ratelimit: 15 callbacks suppressed [ 492.587417][T10762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.197588][T10784] __nla_validate_parse: 4 callbacks suppressed [ 493.197606][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'. [ 493.203018][T10785] netlink: 'syz.1.1907': attribute type 1 has an invalid length. [ 493.221363][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1906'. [ 493.227826][T10785] 8021q: adding VLAN 0 to HW filter on device bond13 [ 493.396928][T10795] 8021q: adding VLAN 0 to HW filter on device bond12 [ 494.709025][T10815] 8021q: adding VLAN 0 to HW filter on device bond15 [ 494.768064][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 494.777786][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'. [ 494.897556][T10824] 8021q: adding VLAN 0 to HW filter on device bond13 [ 495.269646][T10854] validate_nla: 3 callbacks suppressed [ 495.269661][T10854] netlink: 'syz.1.1936': attribute type 1 has an invalid length. [ 495.317924][T10854] 8021q: adding VLAN 0 to HW filter on device bond14 [ 495.446848][T10846] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.561994][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 495.562010][ T28] audit: type=1400 audit(1772764417.071:1866): avc: denied { write } for pid=10867 comm="syz.1.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 495.786728][T10846] xfrm0 speed is unknown, defaulting to 1000 [ 495.840115][T10887] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1949'. [ 495.859073][T10889] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 495.866241][T10846] lo speed is unknown, defaulting to 1000 [ 495.880311][T10846] lo speed is unknown, defaulting to 1000 [ 495.889298][T10892] ip6_vti0 speed is unknown, defaulting to 1000 [ 495.908535][T10889] 8021q: adding VLAN 0 to HW filter on device bond12 [ 496.073885][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 496.083528][T10919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1963'. [ 496.107177][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 496.118903][T10928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1968'. [ 496.125935][T10929] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 496.146667][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'. [ 496.172344][T10929] 8021q: adding VLAN 0 to HW filter on device bond14 [ 496.649226][T10940] ip6_vti0 speed is unknown, defaulting to 1000 [ 497.301528][ T28] audit: type=1400 audit(1772764418.811:1867): avc: denied { write } for pid=10994 comm="syz.1.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 497.588447][T10940] xfrm0 speed is unknown, defaulting to 1000 [ 497.830281][T10940] lo speed is unknown, defaulting to 1000 [ 497.849724][T10940] lo speed is unknown, defaulting to 1000 [ 498.331247][T11028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 498.437677][T11030] netlink: 'syz.2.2007': attribute type 1 has an invalid length. [ 498.570183][T11036] netlink: 'syz.4.2009': attribute type 1 has an invalid length. [ 498.691374][ T28] audit: type=1400 audit(1772764420.201:1868): avc: denied { getopt } for pid=11040 comm="syz.3.2010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 498.739244][T11030] 8021q: adding VLAN 0 to HW filter on device bond17 [ 498.762744][T11036] 8021q: adding VLAN 0 to HW filter on device bond16 [ 498.829761][T11060] __nla_validate_parse: 15 callbacks suppressed [ 498.829777][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 498.868543][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2018'. [ 498.982987][T11078] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 498.996440][T11078] 8021q: adding VLAN 0 to HW filter on device bond15 [ 499.128593][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 499.151342][T11113] netlink: 'syz.2.2040': attribute type 21 has an invalid length. [ 499.336770][T11148] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2057'. [ 499.471075][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2074'. [ 499.481078][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 499.532732][ T28] audit: type=1400 audit(1772764421.051:1869): avc: denied { getopt } for pid=11195 comm="syz.1.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 500.464642][T11265] Cannot find add_set index 0 as target [ 500.609039][T11276] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2116'. [ 500.968058][T11300] ip6_vti0 speed is unknown, defaulting to 1000 [ 501.011304][T11300] xfrm0 speed is unknown, defaulting to 1000 [ 501.053328][T11300] lo speed is unknown, defaulting to 1000 [ 501.059449][T11300] lo speed is unknown, defaulting to 1000 [ 501.141141][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 501.169070][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 501.400328][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 501.506646][ T28] audit: type=1400 audit(1772764423.021:1870): avc: denied { setopt } for pid=11324 comm="syz.1.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 501.618997][T11337] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 501.662508][T11337] 8021q: adding VLAN 0 to HW filter on device bond16 [ 501.917010][T11374] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.012813][T11374] xfrm0 speed is unknown, defaulting to 1000 [ 502.060472][T11374] lo speed is unknown, defaulting to 1000 [ 502.066714][T11374] lo speed is unknown, defaulting to 1000 [ 502.087051][T11371] ip6_vti0 speed is unknown, defaulting to 1000 [ 502.310200][T11371] xfrm0 speed is unknown, defaulting to 1000 [ 502.347339][T11371] lo speed is unknown, defaulting to 1000 [ 502.353976][T11371] lo speed is unknown, defaulting to 1000 [ 502.400183][T11399] cgroup: No subsys list or none specified [ 502.985220][T11436] bond15: entered allmulticast mode [ 502.990619][T11436] 8021q: adding VLAN 0 to HW filter on device bond15 [ 504.635756][T11515] IPv6: NLM_F_REPLACE set, but no existing node found! [ 504.765896][T11490] batman_adv: batadv0: Interface deactivated: dummy0 [ 504.769236][T11525] __nla_validate_parse: 1 callbacks suppressed [ 504.769255][T11525] netlink: 4116 bytes leftover after parsing attributes in process `syz.4.2226'. [ 505.259679][ T3398] ip6_vti0 speed is unknown, defaulting to 1000 [ 505.266105][T11521] netlink: 'syz.1.2224': attribute type 3 has an invalid length. [ 505.273998][ T3398] syz2: Port: 1 Link DOWN [ 505.282423][T11521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.302556][ T5988] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.321646][ T3398] ip6_vti0 speed is unknown, defaulting to 1000 [ 505.325163][ T5988] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.353530][ T5988] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.364816][ T5988] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.423619][T11556] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 505.476795][T11556] 8021q: adding VLAN 0 to HW filter on device bond16 [ 505.598123][T11583] netlink: 'syz.3.2253': attribute type 6 has an invalid length. [ 505.648298][T11581] ip6_vti0 speed is unknown, defaulting to 1000 [ 505.666748][T11595] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2259'. [ 505.690640][T11595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.760088][T11581] xfrm0 speed is unknown, defaulting to 1000 [ 505.856505][T11581] lo speed is unknown, defaulting to 1000 [ 505.866186][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 505.872859][T11581] lo speed is unknown, defaulting to 1000 [ 505.884616][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'. [ 506.136071][T11644] bridge0: entered allmulticast mode [ 506.143581][T11644] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 507.050095][T11674] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2294'. [ 507.493847][T11700] netlink: 'syz.2.2305': attribute type 13 has an invalid length. [ 507.584816][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 507.911769][ T28] audit: type=1400 audit(1772764429.421:1871): avc: denied { mount } for pid=11730 comm="syz.0.2320" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 507.961427][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2321'. [ 508.028198][ T28] audit: type=1326 audit(1772764429.541:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.088978][ T28] audit: type=1326 audit(1772764429.541:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.149507][ T28] audit: type=1326 audit(1772764429.541:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.173802][ T28] audit: type=1326 audit(1772764429.541:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.199623][ T28] audit: type=1326 audit(1772764429.541:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.247091][ T28] audit: type=1326 audit(1772764429.571:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.270996][ T28] audit: type=1326 audit(1772764429.571:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.303029][ T28] audit: type=1326 audit(1772764429.571:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11739 comm="syz.3.2323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 508.326738][ T28] audit: type=1326 audit(1772764429.601:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.4.2328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 508.365795][T11770] ip6_vti0 speed is unknown, defaulting to 1000 [ 508.442419][T11770] xfrm0 speed is unknown, defaulting to 1000 [ 508.903631][T11770] lo speed is unknown, defaulting to 1000 [ 508.948633][T11770] lo speed is unknown, defaulting to 1000 [ 509.422109][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2342'. [ 509.476727][T11796] hsr0: entered promiscuous mode [ 510.078414][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 510.100213][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 510.115715][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2363'. [ 510.495916][ T23] lo speed is unknown, defaulting to 1000 [ 510.518861][ T23] syU×: Port: 1 Link DOWN [ 510.550243][ T3398] lo speed is unknown, defaulting to 1000 [ 510.949149][T11894] xt_hashlimit: size too large, truncated to 1048576 [ 511.497931][T11944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2409'. [ 511.579877][T11948] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 512.410715][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 512.430776][T11973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 513.436521][T12026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2439'. [ 513.808503][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 513.808518][ T28] audit: type=1326 audit(1772764435.321:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 513.840261][ T28] audit: type=1326 audit(1772764435.321:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 513.864410][ T28] audit: type=1326 audit(1772764435.321:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 513.901055][ T28] audit: type=1326 audit(1772764435.321:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 513.933524][ T28] audit: type=1326 audit(1772764435.351:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 513.957155][ T28] audit: type=1326 audit(1772764435.351:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 513.982195][ T28] audit: type=1326 audit(1772764435.351:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 514.006826][ T28] audit: type=1326 audit(1772764435.361:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 514.031086][ T28] audit: type=1326 audit(1772764435.361:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 514.054973][ T28] audit: type=1326 audit(1772764435.381:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.2.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 514.152618][ T3975] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.161353][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2448'. [ 514.171703][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2449'. [ 514.181109][ T3975] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.216398][ T3975] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.261494][ T3975] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.574040][T12063] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.685293][T12063] xfrm0 speed is unknown, defaulting to 1000 [ 514.793062][T12063] lo speed is unknown, defaulting to 1000 [ 514.799347][T12063] lo speed is unknown, defaulting to 1000 [ 514.859256][T12073] ip6_vti0 speed is unknown, defaulting to 1000 [ 514.941395][T12073] xfrm0 speed is unknown, defaulting to 1000 [ 514.995170][T12073] lo speed is unknown, defaulting to 1000 [ 515.001849][T12073] lo speed is unknown, defaulting to 1000 [ 515.537455][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 515.551911][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2480'. [ 515.740999][T12143] netlink: 'syz.2.2495': attribute type 1 has an invalid length. [ 515.764369][T12145] ip6_vti0 speed is unknown, defaulting to 1000 [ 515.812448][T12145] xfrm0 speed is unknown, defaulting to 1000 [ 515.863274][T12145] lo speed is unknown, defaulting to 1000 [ 515.869541][T12145] lo speed is unknown, defaulting to 1000 [ 515.976372][T12162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2491'. [ 516.734026][T12184] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 516.754961][T12185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 516.946600][T12196] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2505'. [ 517.425685][T12187] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.605036][T12187] xfrm0 speed is unknown, defaulting to 1000 [ 517.640024][T12199] ip6_vti0 speed is unknown, defaulting to 1000 [ 517.823253][T12187] lo speed is unknown, defaulting to 1000 [ 517.838523][T12199] xfrm0 speed is unknown, defaulting to 1000 [ 517.862748][T12187] lo speed is unknown, defaulting to 1000 [ 517.905832][T12199] lo speed is unknown, defaulting to 1000 [ 517.934773][T12199] lo speed is unknown, defaulting to 1000 [ 518.035704][T12211] ip6_vti0 speed is unknown, defaulting to 1000 [ 518.153484][T12211] xfrm0 speed is unknown, defaulting to 1000 [ 518.179937][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2514'. [ 518.221247][T12211] lo speed is unknown, defaulting to 1000 [ 518.237364][T12211] lo speed is unknown, defaulting to 1000 [ 518.901609][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 518.901624][ T28] audit: type=1326 audit(1772764440.411:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 518.931463][ T28] audit: type=1326 audit(1772764440.411:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 518.943981][T12301] macsec1: entered allmulticast mode [ 518.955816][ T28] audit: type=1326 audit(1772764440.421:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 518.961368][T12301] syz_tun: entered allmulticast mode [ 518.984239][ T28] audit: type=1326 audit(1772764440.421:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 519.013444][ T28] audit: type=1326 audit(1772764440.421:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 519.014688][T12301] syz_tun: left allmulticast mode [ 519.037267][ T28] audit: type=1326 audit(1772764440.421:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 519.065597][ T28] audit: type=1326 audit(1772764440.421:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12297 comm="syz.4.2544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c4cfc799 code=0x7ffc0000 [ 519.631432][T12337] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.722805][T12343] isofs_fill_super: bread failed, dev=loop1, iso_blknum=32, block=64 [ 519.746303][T12349] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2565'. [ 519.783322][T12337] xfrm0 speed is unknown, defaulting to 1000 [ 519.783350][T12333] ip6_vti0 speed is unknown, defaulting to 1000 [ 519.895203][T12337] lo speed is unknown, defaulting to 1000 [ 519.901874][T12337] lo speed is unknown, defaulting to 1000 [ 519.974923][T12333] xfrm0 speed is unknown, defaulting to 1000 [ 519.983684][T12336] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.057705][T12333] lo speed is unknown, defaulting to 1000 [ 520.065789][T12336] xfrm0 speed is unknown, defaulting to 1000 [ 520.082759][T12333] lo speed is unknown, defaulting to 1000 [ 520.118988][T12336] lo speed is unknown, defaulting to 1000 [ 520.141763][T12336] lo speed is unknown, defaulting to 1000 [ 520.314968][T12387] 9p: Bad value for 'wfdno' [ 520.388572][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2583'. [ 520.491915][T12401] ip6_vti0 speed is unknown, defaulting to 1000 [ 520.528121][T12401] xfrm0 speed is unknown, defaulting to 1000 [ 520.562458][T12401] lo speed is unknown, defaulting to 1000 [ 520.568758][T12401] lo speed is unknown, defaulting to 1000 [ 521.032612][ T28] audit: type=1400 audit(1772764442.541:1911): avc: denied { ioctl } for pid=12444 comm="syz.3.2606" path="socket:[42622]" dev="sockfs" ino=42622 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 521.247875][ T28] audit: type=1326 audit(1772764442.761:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.1.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x0 [ 521.405881][ T28] audit: type=1400 audit(1772764442.921:1913): avc: denied { mount } for pid=12487 comm="syz.3.2627" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 521.496266][T12490] ip6_vti0 speed is unknown, defaulting to 1000 [ 521.529203][T12490] xfrm0 speed is unknown, defaulting to 1000 [ 521.557277][T12490] lo speed is unknown, defaulting to 1000 [ 521.563404][T12490] lo speed is unknown, defaulting to 1000 [ 521.605602][ T5988] bridge_slave_0: left allmulticast mode [ 521.612446][ T5988] bridge_slave_0: left promiscuous mode [ 521.618153][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.639988][T11042] smc: removing ib device syz1 [ 521.645187][ T5988] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 521.747742][ T5988] bond13 (unregistering): (slave bridge2): Releasing backup interface [ 521.756760][ T5988] bridge2 (unregistering): left promiscuous mode [ 521.843939][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.853560][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.862915][ T5988] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 521.871374][ T5988] bond0 (unregistering): Released all slaves [ 521.878859][ T5988] bond1 (unregistering): Released all slaves [ 521.886882][ T5988] bond2 (unregistering): Released all slaves [ 521.895391][ T5988] bond3 (unregistering): Released all slaves [ 521.903630][ T5988] bond4 (unregistering): Released all slaves [ 521.911677][ T5988] bond5 (unregistering): Released all slaves [ 521.919916][ T5988] bond6 (unregistering): Released all slaves [ 521.928411][ T5988] bond7 (unregistering): Released all slaves [ 521.936864][ T5988] bond8 (unregistering): Released all slaves [ 521.945169][ T5988] bond9 (unregistering): Released all slaves [ 521.953453][ T5988] bond10 (unregistering): Released all slaves [ 521.961537][ T5988] bond11 (unregistering): Released all slaves [ 521.970425][ T5988] bond12 (unregistering): Released all slaves [ 521.979093][ T5988] bond13 (unregistering): Released all slaves [ 521.987894][ T5988] bond14 (unregistering): Released all slaves [ 521.996950][ T5988] bond15 (unregistering): Released all slaves [ 522.005999][ T5988] bond16 (unregistering): Released all slaves [ 522.132264][T12490] chnl_net:caif_netlink_parms(): no params data found [ 522.156252][ T5988] hsr_slave_0: left promiscuous mode [ 522.177818][ T5988] hsr_slave_1: left promiscuous mode [ 522.181901][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 522.188330][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.222548][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.230673][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 522.321184][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 522.342533][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 522.439166][T12562] netlink: 'syz.3.2645': attribute type 13 has an invalid length. [ 522.449949][T12547] ip6_vti0 speed is unknown, defaulting to 1000 [ 522.535902][T12547] lo speed is unknown, defaulting to 1000 [ 522.542258][T12547] lo speed is unknown, defaulting to 1000 [ 522.558984][T12490] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.579778][T12490] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.587254][T12490] bridge_slave_0: entered allmulticast mode [ 522.596317][T12490] bridge_slave_0: entered promiscuous mode [ 522.610397][T12490] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.621397][T12490] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.630748][T12490] bridge_slave_1: entered allmulticast mode [ 522.643833][T12490] bridge_slave_1: entered promiscuous mode [ 522.682039][T12490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.696943][T12490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.712556][ T5988] IPVS: stop unused estimator thread 0... [ 522.755942][T12490] team0: Port device team_slave_0 added [ 522.765806][T12490] team0: Port device team_slave_1 added [ 522.790097][T12490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.797256][T12490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.823688][T12490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.845416][T12490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.860529][T12490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.886899][T12490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.913547][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'. [ 522.923212][T12594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'. [ 522.966587][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 522.977471][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'. [ 523.023472][T12490] hsr_slave_0: entered promiscuous mode [ 523.037680][T12490] hsr_slave_1: entered promiscuous mode [ 523.043726][T12490] debugfs: 'hsr0' already exists in 'hsr' [ 523.049554][T12490] Cannot create hsr debugfs directory [ 523.202539][T12490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 523.225981][T12490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 523.249208][T12490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 523.275511][T12490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 523.308103][T12490] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.315409][T12490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.322728][T12490] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.330041][T12490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.345751][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 523.362736][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2664'. [ 523.383334][T12490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.390227][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 523.404607][T12598] ip6_vti0 speed is unknown, defaulting to 1000 [ 523.428099][ T3975] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.448958][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.466427][T12490] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.477978][ T3975] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.485104][ T3975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.494450][ T3975] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.501595][ T3975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.516205][T12598] lo speed is unknown, defaulting to 1000 [ 523.530622][T12490] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.550093][T12598] lo speed is unknown, defaulting to 1000 [ 523.635212][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2669'. [ 523.660877][T12490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.921412][T12490] veth0_vlan: entered promiscuous mode [ 523.955638][T12490] veth1_vlan: entered promiscuous mode [ 523.999966][T12490] veth0_macvtap: entered promiscuous mode [ 524.018772][T12490] veth1_macvtap: entered promiscuous mode [ 524.023536][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 524.023621][ T28] audit: type=1400 audit(1772764445.531:1929): avc: denied { watch } for pid=12717 comm="syz.1.2682" path="/528/file0" dev="tmpfs" ino=2745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 524.042176][T12490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.070735][T12717] Process accounting resumed [ 524.075806][T12490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.085272][T12720] netlink: 'syz.0.2683': attribute type 6 has an invalid length. [ 524.100968][ T3975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.111100][ T3975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.120277][T12720] netlink: 'syz.0.2683': attribute type 6 has an invalid length. [ 524.128528][ T3975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.145828][ T3975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.177034][ T28] audit: type=1400 audit(1772764445.691:1930): avc: denied { mounton } for pid=12490 comm="syz-executor" path="/root/syzkaller.GVo56N/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 524.205349][T12728] tipc: Started in network mode [ 524.210347][T12728] tipc: Node identity ac14140f, cluster identity 4711 [ 524.218159][ T28] audit: type=1400 audit(1772764445.691:1931): avc: denied { mount } for pid=12490 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 524.230121][T12728] tipc: New replicast peer: 255.255.255.255 [ 524.258823][T12728] tipc: Enabled bearer , priority 10 [ 524.268242][ T28] audit: type=1400 audit(1772764445.691:1932): avc: denied { mounton } for pid=12490 comm="syz-executor" path="/root/syzkaller.GVo56N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 524.313561][ T28] audit: type=1400 audit(1772764445.691:1933): avc: denied { mounton } for pid=12490 comm="syz-executor" path="/root/syzkaller.GVo56N/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 524.370583][ T28] audit: type=1400 audit(1772764445.741:1934): avc: denied { mounton } for pid=12490 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 524.500807][ T28] audit: type=1400 audit(1772764446.001:1935): avc: denied { create } for pid=12760 comm="syz.5.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 524.546239][ T28] audit: type=1400 audit(1772764446.011:1936): avc: denied { bind } for pid=12760 comm="syz.5.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 524.596573][ T28] audit: type=1400 audit(1772764446.011:1937): avc: denied { write } for pid=12760 comm="syz.5.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 524.764160][T12796] netlink: 'syz.0.2714': attribute type 10 has an invalid length. [ 525.372594][ T3405] tipc: Node number set to 2886997007 [ 525.498411][T12820] batman_adv: batadv0: Adding interface: vlan1 [ 525.522283][T12820] batman_adv: batadv0: The MTU of interface vlan1 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 525.555106][T12820] batman_adv: batadv0: Not using interface vlan1 (retrying later): interface not active [ 525.595876][T12824] loop5: detected capacity change from 0 to 2048 [ 525.615027][T12824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.645289][T12824] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.676639][ T28] audit: type=1400 audit(1772764447.191:1938): avc: denied { add_name } for pid=12823 comm="syz.5.2724" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 525.700633][T12829] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 525.732506][T12829] EXT4-fs (loop5): Remounting filesystem read-only [ 525.753744][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.813120][T12846] loop5: detected capacity change from 0 to 512 [ 525.819842][T12846] EXT4-fs: Ignoring removed mblk_io_submit option [ 525.842580][T12846] EXT4-fs (loop5): orphan cleanup on readonly fs [ 525.849142][T12846] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 525.858184][T12846] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2732: attempt to clear invalid blocks 2 len 1 [ 525.871217][T12846] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 525.871352][T12846] EXT4-fs (loop5): Remounting filesystem read-only [ 525.880579][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 525.880594][ C1] EXT4-fs (loop5): initial error at time 1772764447: ext4_clear_blocks:876: inode 13 [ 525.880638][ C1] EXT4-fs (loop5): last error at time 1772764447: ext4_clear_blocks:876: inode 13 [ 525.914777][T12846] EXT4-fs (loop5): 1 truncate cleaned up [ 525.920849][T12846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 525.945640][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.055757][T12867] sock: sock_timestamping_bind_phc: sock not bind to device [ 526.130842][T12871] loop5: detected capacity change from 0 to 1024 [ 526.137789][T12871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.145491][T12871] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 526.155327][T12871] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 526.166044][T12871] System zones: 0-1, 3-36 [ 526.175233][T12871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.245096][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.277650][T12881] netlink: 'syz.5.2745': attribute type 10 has an invalid length. [ 526.295302][T12881] team0: Port device netdevsim1 added [ 526.457737][T12899] loop5: detected capacity change from 0 to 8192 [ 526.513030][T12510] loop5: p1 < > p2 p4 < p5 > [ 526.518001][T12510] loop5: partition table partially beyond EOD, truncated [ 526.525337][T12510] loop5: p1 start 134217728 is beyond EOD, truncated [ 526.533065][T12510] loop5: p2 size 591360 extends beyond EOD, truncated [ 526.541347][T12510] loop5: p5 size 591360 extends beyond EOD, truncated [ 526.551286][T12899] loop5: p1 < > p2 p4 < p5 > [ 526.557929][T12899] loop5: partition table partially beyond EOD, truncated [ 526.565690][T12899] loop5: p1 start 134217728 is beyond EOD, truncated [ 526.572481][T12899] loop5: p2 size 591360 extends beyond EOD, truncated [ 526.586646][T12899] loop5: p5 size 591360 extends beyond EOD, truncated [ 526.726474][T12915] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.816157][T12915] lo speed is unknown, defaulting to 1000 [ 526.818875][T12899] ip6_vti0 speed is unknown, defaulting to 1000 [ 526.827321][T12915] lo speed is unknown, defaulting to 1000 [ 526.890346][T12899] lo speed is unknown, defaulting to 1000 [ 526.898405][T12899] lo speed is unknown, defaulting to 1000 [ 526.962767][T12921] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.070983][T12921] lo speed is unknown, defaulting to 1000 [ 527.097579][T12921] lo speed is unknown, defaulting to 1000 [ 527.415377][T12959] __nla_validate_parse: 15 callbacks suppressed [ 527.415393][T12959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2777'. [ 527.450744][T12949] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.467722][T12960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2777'. [ 527.566569][T12949] lo speed is unknown, defaulting to 1000 [ 527.599821][T12949] lo speed is unknown, defaulting to 1000 [ 527.641637][T12953] ip6_vti0 speed is unknown, defaulting to 1000 [ 527.729710][T12953] lo speed is unknown, defaulting to 1000 [ 527.746195][T12953] lo speed is unknown, defaulting to 1000 [ 527.872043][T12975] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2781'. [ 527.893100][T12975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2781'. [ 528.918739][T13017] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2799'. [ 528.985833][T13021] loop5: detected capacity change from 0 to 8192 [ 528.997669][T13021] syz.5.2800: attempt to access beyond end of device [ 528.997669][T13021] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 529.012015][T13021] Buffer I/O error on dev loop5, logical block 57847, async page read [ 529.022565][T13021] syz.5.2800: attempt to access beyond end of device [ 529.022565][T13021] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 529.037116][T13021] Buffer I/O error on dev loop5, logical block 57847, async page read [ 529.046525][T13021] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 529.054603][T13021] FAT-fs (loop5): Filesystem has been set read-only [ 529.061523][T13021] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 529.094385][T13026] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 529.181955][T13030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2802'. [ 529.200765][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 529.200779][ T28] audit: type=1400 audit(1772764450.711:1942): avc: denied { write } for pid=13031 comm="syz.5.2805" name="mcfilter6" dev="proc" ino=4026533589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 529.270091][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 529.283801][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2807'. [ 529.299159][T13046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2811'. [ 529.308473][T13046] netlink: 'syz.0.2811': attribute type 1 has an invalid length. [ 529.316471][T13046] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2811'. [ 529.497065][T13062] ip6_vti0 speed is unknown, defaulting to 1000 [ 529.673854][T13062] lo speed is unknown, defaulting to 1000 [ 529.680453][T13062] lo speed is unknown, defaulting to 1000 [ 529.869393][T13065] loop5: detected capacity change from 0 to 8192 [ 530.015731][T13065] loop5: p1 < > p2 p4 < p5 > [ 530.027738][T13065] loop5: partition table partially beyond EOD, truncated [ 530.041156][T13065] loop5: p1 start 134217728 is beyond EOD, truncated [ 530.048150][T13065] loop5: p2 size 591360 extends beyond EOD, truncated [ 530.056532][T13065] loop5: p5 size 591360 extends beyond EOD, truncated [ 530.170183][T13065] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.308314][T13102] bridge0: entered allmulticast mode [ 530.323670][T13065] lo speed is unknown, defaulting to 1000 [ 530.348160][T13065] lo speed is unknown, defaulting to 1000 [ 530.499432][T13120] 9p: Bad value for 'wfdno' [ 530.669682][T12511] udevd[12511]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 530.670058][T12510] udevd[12510]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 530.692398][T12082] udevd[12082]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 531.734890][T13147] netlink: 'syz.3.2847': attribute type 9 has an invalid length. [ 531.773560][T13147] macvlan2: entered promiscuous mode [ 531.778873][T13147] macvlan2: entered allmulticast mode [ 531.987805][ T28] audit: type=1326 audit(1772764453.501:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.2.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 532.031563][ T28] audit: type=1326 audit(1772764453.501:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.2.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 532.056452][ T28] audit: type=1326 audit(1772764453.531:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.2.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 532.088270][ T28] audit: type=1326 audit(1772764453.531:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.2.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 532.112996][ T28] audit: type=1326 audit(1772764453.531:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.2.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 532.139433][ T28] audit: type=1326 audit(1772764453.531:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.2.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 532.163914][ T28] audit: type=1326 audit(1772764453.531:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13163 comm="syz.2.2854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x7ffc0000 [ 532.692438][T13183] __nla_validate_parse: 8 callbacks suppressed [ 532.692454][T13183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2860'. [ 532.819755][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2866'. [ 532.849983][T13199] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2868'. [ 532.867494][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2866'. [ 532.881705][T13198] loop5: detected capacity change from 0 to 1024 [ 532.904613][T13198] EXT4-fs: Ignoring removed nomblk_io_submit option [ 532.922424][T13198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 532.962302][T13198] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 532.992313][T13198] System zones: 0-1, 3-36 [ 533.028346][T13198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.208724][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.265718][ T28] audit: type=1400 audit(1772764454.781:1950): avc: denied { create } for pid=13235 comm="syz.5.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 533.312255][ T28] audit: type=1400 audit(1772764454.811:1951): avc: denied { setopt } for pid=13235 comm="syz.5.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 533.549604][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 533.615112][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 533.674527][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 533.710718][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 533.720079][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 533.738052][T13258] loop5: detected capacity change from 0 to 1024 [ 533.744994][T13258] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.753071][T13258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.768252][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2890'. [ 533.780553][T13258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 533.790878][T13258] System zones: 0-1, 3-36 [ 533.807553][T13258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.884271][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.172729][T13326] netlink: 'syz.5.2920': attribute type 6 has an invalid length. [ 534.591355][ T28] audit: type=1400 audit(1772764456.101:1952): avc: denied { append } for pid=13385 comm="syz.5.2948" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 534.616037][ T28] audit: type=1400 audit(1772764456.101:1953): avc: denied { open } for pid=13385 comm="syz.5.2948" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 534.646956][ T28] audit: type=1400 audit(1772764456.101:1954): avc: denied { ioctl } for pid=13385 comm="syz.5.2948" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 534.676427][T13388] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.690190][ T28] audit: type=1400 audit(1772764456.201:1955): avc: denied { read write } for pid=13391 comm="syz.5.2950" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 534.720762][ T28] audit: type=1400 audit(1772764456.201:1956): avc: denied { open } for pid=13391 comm="syz.5.2950" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 534.748972][T13388] lo speed is unknown, defaulting to 1000 [ 534.755598][T13388] lo speed is unknown, defaulting to 1000 [ 534.800194][ T3500] kernel write not supported for file /timer_list (pid: 3500 comm: kworker/0:5) [ 534.836794][T13399] loop5: detected capacity change from 0 to 1024 [ 534.926166][T13399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 534.968267][ T28] audit: type=1400 audit(1772764456.481:1957): avc: denied { ioctl } for pid=13398 comm="syz.5.2953" path="/56/file1/file1" dev="loop5" ino=15 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 535.008893][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.180809][ T28] audit: type=1400 audit(1772764456.691:1958): avc: denied { read } for pid=13452 comm="syz.5.2964" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 535.216114][ T28] audit: type=1400 audit(1772764456.691:1959): avc: denied { open } for pid=13452 comm="syz.5.2964" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 535.241171][ T28] audit: type=1326 audit(1772764456.691:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13452 comm="syz.5.2964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd85466c799 code=0x0 [ 535.894296][T13551] ip6_vti0 speed is unknown, defaulting to 1000 [ 535.930928][T13551] lo speed is unknown, defaulting to 1000 [ 535.937026][T13551] lo speed is unknown, defaulting to 1000 [ 536.146114][T13573] macvlan0: left promiscuous mode [ 536.151305][T13573] macvlan0: left allmulticast mode [ 536.159912][T13573] netlink: 'syz.0.3000': attribute type 2 has an invalid length. [ 536.361367][T13587] loop5: detected capacity change from 0 to 8192 [ 536.393372][T13591] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.405273][T12510] loop5: p1 < > p2 p4 < p5 > [ 536.412568][T12510] loop5: partition table partially beyond EOD, truncated [ 536.425232][T12510] loop5: p1 start 134217728 is beyond EOD, truncated [ 536.433118][T12510] loop5: p2 size 591360 extends beyond EOD, truncated [ 536.477209][T13591] lo speed is unknown, defaulting to 1000 [ 536.484563][T13591] lo speed is unknown, defaulting to 1000 [ 536.509973][T12510] loop5: p5 size 591360 extends beyond EOD, truncated [ 536.521142][T13587] loop5: p1 < > p2 p4 < p5 > [ 536.526316][T13587] loop5: partition table partially beyond EOD, truncated [ 536.533711][T13587] loop5: p1 start 134217728 is beyond EOD, truncated [ 536.540766][T13587] loop5: p2 size 591360 extends beyond EOD, truncated [ 536.548748][T13587] loop5: p5 size 591360 extends beyond EOD, truncated [ 536.840883][T13587] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.929412][T13587] lo speed is unknown, defaulting to 1000 [ 536.936351][T13587] lo speed is unknown, defaulting to 1000 [ 537.319999][T13629] loop5: detected capacity change from 0 to 8192 [ 537.362387][T12510] loop5: p1 < > p2 p4 < p5 > [ 537.369445][T12510] loop5: partition table partially beyond EOD, truncated [ 537.385679][T12510] loop5: p1 start 134217728 is beyond EOD, truncated [ 537.408770][T12510] loop5: p2 size 591360 extends beyond EOD, truncated [ 537.427942][T12510] loop5: p5 size 591360 extends beyond EOD, truncated [ 537.449892][T13629] loop5: p1 < > p2 p4 < p5 > [ 537.472486][T13629] loop5: partition table partially beyond EOD, truncated [ 537.481440][T13629] loop5: p1 start 134217728 is beyond EOD, truncated [ 537.522302][T13629] loop5: p2 size 591360 extends beyond EOD, truncated [ 537.549534][T13629] loop5: p5 size 591360 extends beyond EOD, truncated [ 537.658082][T13629] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.739357][T13629] lo speed is unknown, defaulting to 1000 [ 537.745667][T13629] lo speed is unknown, defaulting to 1000 [ 537.802152][T13647] ip6_vti0 speed is unknown, defaulting to 1000 [ 537.878691][T13647] lo speed is unknown, defaulting to 1000 [ 537.892787][T13647] lo speed is unknown, defaulting to 1000 [ 538.210104][T13666] loop5: detected capacity change from 0 to 1024 [ 538.262091][T13676] loop5: detected capacity change from 0 to 1024 [ 538.275337][T13676] EXT4-fs: inline encryption not supported [ 538.282484][T13676] EXT4-fs: Ignoring removed i_version option [ 538.300656][T13676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.315011][ T28] audit: type=1400 audit(1772764459.831:1961): avc: denied { watch } for pid=13675 comm="syz.5.3037" path="/68/file1" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 538.347941][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.374326][T13684] __nla_validate_parse: 29 callbacks suppressed [ 538.374342][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3039'. [ 538.509428][T13698] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 538.635253][T13704] ip6_vti0 speed is unknown, defaulting to 1000 [ 538.665690][T13704] lo speed is unknown, defaulting to 1000 [ 538.671742][T13704] lo speed is unknown, defaulting to 1000 [ 539.149356][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3057'. [ 539.538249][T13755] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.607278][T13763] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3070'. [ 539.661777][T13755] lo speed is unknown, defaulting to 1000 [ 539.668826][T13755] lo speed is unknown, defaulting to 1000 [ 539.893945][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 539.894001][ T28] audit: type=1400 audit(1772764461.411:1964): avc: denied { attach_queue } for pid=13784 comm="syz.5.3076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 539.979223][T13787] bridge0: port 3(ipvlan2) entered blocking state [ 539.985865][T13787] bridge0: port 3(ipvlan2) entered disabled state [ 539.992462][T13787] ipvlan2: entered allmulticast mode [ 539.997826][T13787] bond0: entered allmulticast mode [ 540.003036][T13787] bond_slave_0: entered allmulticast mode [ 540.008817][T13787] bond_slave_1: entered allmulticast mode [ 540.015134][T13787] ipvlan2: left allmulticast mode [ 540.020224][T13787] bond0: left allmulticast mode [ 540.025120][T13787] bond_slave_0: left allmulticast mode [ 540.030715][T13787] bond_slave_1: left allmulticast mode [ 540.097072][T13789] loop5: detected capacity change from 0 to 128 [ 540.124906][T13789] syz.5.3078: attempt to access beyond end of device [ 540.124906][T13789] loop5: rw=2049, sector=225, nr_sectors = 128 limit=128 [ 540.150796][ T5993] kworker/u8:12: attempt to access beyond end of device [ 540.150796][ T5993] loop5: rw=8388609, sector=171, nr_sectors = 1 limit=128 [ 540.165328][ T5993] Buffer I/O error on dev loop5, logical block 171, lost async page write [ 540.624172][T13803] netlink: 'syz.3.3083': attribute type 1 has an invalid length. [ 540.636363][T13803] netlink: 'syz.3.3083': attribute type 2 has an invalid length. [ 541.027351][T13813] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.066742][T13816] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.075734][T13813] lo speed is unknown, defaulting to 1000 [ 541.090380][T13813] lo speed is unknown, defaulting to 1000 [ 541.097349][T13820] loop5: detected capacity change from 0 to 512 [ 541.122178][T13820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.136170][T13820] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 541.160443][ T28] audit: type=1400 audit(1772764462.671:1965): avc: denied { read append open } for pid=13819 comm="syz.5.3090" path="/83/file0/cpu.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 541.189378][T13816] lo speed is unknown, defaulting to 1000 [ 541.190194][ T28] audit: type=1400 audit(1772764462.691:1966): avc: denied { ioctl } for pid=13819 comm="syz.5.3090" path="/83/file0/cpu.stat" dev="loop5" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 541.205185][T13816] lo speed is unknown, defaulting to 1000 [ 541.281818][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 541.315686][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 541.327506][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 541.340405][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.345054][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 541.378939][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 541.483315][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 541.503171][T13843] 9p: Bad value for 'wfdno' [ 541.521840][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 541.895121][T13852] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.174643][T13852] lo speed is unknown, defaulting to 1000 [ 542.180759][T13852] lo speed is unknown, defaulting to 1000 [ 542.309540][T13873] ip6_vti0 speed is unknown, defaulting to 1000 [ 542.376025][T13873] lo speed is unknown, defaulting to 1000 [ 542.385026][T13884] loop5: detected capacity change from 0 to 128 [ 542.392795][T13873] lo speed is unknown, defaulting to 1000 [ 543.700709][T13955] loop5: detected capacity change from 0 to 8192 [ 543.743070][T13955] loop5: p1 < > p2 p4 < p5 > [ 543.753246][T13955] loop5: partition table partially beyond EOD, truncated [ 543.761747][T13955] loop5: p1 start 134217728 is beyond EOD, truncated [ 543.769250][T13955] loop5: p2 size 591360 extends beyond EOD, truncated [ 543.781202][T13955] loop5: p5 size 591360 extends beyond EOD, truncated [ 543.960548][T13955] ip6_vti0 speed is unknown, defaulting to 1000 [ 544.019431][T13955] lo speed is unknown, defaulting to 1000 [ 544.025985][T13955] lo speed is unknown, defaulting to 1000 [ 544.321896][T13977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13977 comm=syz.2.3145 [ 544.505235][T13986] loop5: detected capacity change from 0 to 512 [ 544.527940][T13986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.552467][T13986] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.392657][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.494372][T14089] netlink: 'syz.3.3187': attribute type 6 has an invalid length. [ 546.508856][T14089] netlink: 'syz.3.3187': attribute type 7 has an invalid length. [ 546.511176][T14086] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.522980][T14089] netlink: 'syz.3.3187': attribute type 8 has an invalid length. [ 546.563801][T14086] lo speed is unknown, defaulting to 1000 [ 546.574875][T14086] lo speed is unknown, defaulting to 1000 [ 546.731940][T14101] ip6_vti0 speed is unknown, defaulting to 1000 [ 546.767614][T14101] lo speed is unknown, defaulting to 1000 [ 546.773926][T14101] lo speed is unknown, defaulting to 1000 [ 547.350435][T14127] ip6_vti0 speed is unknown, defaulting to 1000 [ 547.381024][T14127] lo speed is unknown, defaulting to 1000 [ 547.387033][T14127] lo speed is unknown, defaulting to 1000 [ 547.665669][T14131] ip6_vti0 speed is unknown, defaulting to 1000 [ 547.695554][T14131] lo speed is unknown, defaulting to 1000 [ 547.701762][T14131] lo speed is unknown, defaulting to 1000 [ 547.772692][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 547.783264][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 547.792355][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 547.811241][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 547.820566][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 547.861986][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 547.882624][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3203'. [ 547.933559][T14153] netlink: 'syz.3.3207': attribute type 6 has an invalid length. [ 547.941629][T14153] netlink: 'syz.3.3207': attribute type 6 has an invalid length. [ 547.973849][ T28] audit: type=1326 audit(1772764469.491:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14159 comm="syz.0.3211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d2f8ec799 code=0x0 [ 548.472099][T14170] loop5: detected capacity change from 0 to 8192 [ 548.522573][T12510] loop5: p1 < > p2 p4 < p5 > [ 548.527368][T12510] loop5: partition table partially beyond EOD, truncated [ 548.534862][T12510] loop5: p1 start 134217728 is beyond EOD, truncated [ 548.541621][T12510] loop5: p2 size 591360 extends beyond EOD, truncated [ 548.549883][T12510] loop5: p5 size 591360 extends beyond EOD, truncated [ 548.559721][T14170] loop5: p1 < > p2 p4 < p5 > [ 548.564595][T14170] loop5: partition table partially beyond EOD, truncated [ 548.571973][T14170] loop5: p1 start 134217728 is beyond EOD, truncated [ 548.578936][T14170] loop5: p2 size 591360 extends beyond EOD, truncated [ 548.587188][T14170] loop5: p5 size 591360 extends beyond EOD, truncated [ 548.780139][T14170] ip6_vti0 speed is unknown, defaulting to 1000 [ 548.870667][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 548.871686][T14170] lo speed is unknown, defaulting to 1000 [ 548.880440][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 548.886837][T14170] lo speed is unknown, defaulting to 1000 [ 548.895038][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 550.266152][ T28] audit: type=1400 audit(1772764471.781:1968): avc: denied { read } for pid=14282 comm="syz.5.3253" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 550.293733][ T28] audit: type=1400 audit(1772764471.781:1969): avc: denied { open } for pid=14282 comm="syz.5.3253" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 550.317985][ T28] audit: type=1400 audit(1772764471.811:1970): avc: denied { ioctl } for pid=14282 comm="syz.5.3253" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 550.416290][T14277] ip6_vti0 speed is unknown, defaulting to 1000 [ 550.471677][T14277] lo speed is unknown, defaulting to 1000 [ 550.479391][T14277] lo speed is unknown, defaulting to 1000 [ 550.527181][T14295] loop5: detected capacity change from 0 to 1024 [ 550.537351][T14295] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.545572][T14295] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 550.561586][T14295] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 550.569967][T14295] System zones: 0-1, 3-36 [ 550.576178][T14295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.651384][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.854413][T14315] netlink: 'syz.0.3263': attribute type 10 has an invalid length. [ 550.972230][ T28] audit: type=1326 audit(1772764472.471:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14323 comm="syz.3.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 551.042247][ T28] audit: type=1326 audit(1772764472.471:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14323 comm="syz.3.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 551.097076][ T28] audit: type=1326 audit(1772764472.471:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14323 comm="syz.3.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 551.230668][ T28] audit: type=1326 audit(1772764472.471:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14323 comm="syz.3.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 551.305414][ T28] audit: type=1326 audit(1772764472.481:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14323 comm="syz.3.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 551.336826][T14328] ip6_vti0 speed is unknown, defaulting to 1000 [ 551.423182][ T28] audit: type=1326 audit(1772764472.481:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14323 comm="syz.3.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 551.504486][T14326] ip6_vti0 speed is unknown, defaulting to 1000 [ 551.552471][T14328] lo speed is unknown, defaulting to 1000 [ 551.560845][T14326] lo speed is unknown, defaulting to 1000 [ 551.567566][T14326] lo speed is unknown, defaulting to 1000 [ 551.718159][T14328] lo speed is unknown, defaulting to 1000 [ 552.070008][T14357] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.182522][T14357] lo speed is unknown, defaulting to 1000 [ 552.201056][T14357] lo speed is unknown, defaulting to 1000 [ 552.480596][T14387] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.567005][T14405] loop5: detected capacity change from 0 to 1024 [ 552.569030][T14387] lo speed is unknown, defaulting to 1000 [ 552.583190][T14405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.595014][T14405] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 552.604450][T14387] lo speed is unknown, defaulting to 1000 [ 552.633824][T14405] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 552.657043][T14405] System zones: 0-1, 3-36 [ 552.675894][T14405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.736955][T14394] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.820395][T14394] lo speed is unknown, defaulting to 1000 [ 552.826714][T14394] lo speed is unknown, defaulting to 1000 [ 552.859021][T14401] ip6_vti0 speed is unknown, defaulting to 1000 [ 552.930192][T14401] lo speed is unknown, defaulting to 1000 [ 552.936301][T14401] lo speed is unknown, defaulting to 1000 [ 553.006184][T14419] __nla_validate_parse: 42 callbacks suppressed [ 553.006200][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.023548][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.035489][T14417] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.042804][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.051940][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.102731][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.114672][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.186726][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.192223][T14417] lo speed is unknown, defaulting to 1000 [ 553.213795][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 553.236277][T14417] lo speed is unknown, defaulting to 1000 [ 553.460402][T14422] ip6_vti0 speed is unknown, defaulting to 1000 [ 553.509344][T14449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3305'. [ 553.567916][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3307'. [ 553.570984][T14422] lo speed is unknown, defaulting to 1000 [ 553.582986][T14422] lo speed is unknown, defaulting to 1000 [ 554.039643][T14478] ip6_vti0 speed is unknown, defaulting to 1000 [ 554.069176][T14478] lo speed is unknown, defaulting to 1000 [ 554.075372][T14478] lo speed is unknown, defaulting to 1000 [ 554.225772][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3319'. [ 554.737558][T14518] ip6_vti0 speed is unknown, defaulting to 1000 [ 554.780385][T14518] lo speed is unknown, defaulting to 1000 [ 554.790998][T14518] lo speed is unknown, defaulting to 1000 [ 555.027670][T14527] ip6_vti0 speed is unknown, defaulting to 1000 [ 555.124716][T14527] lo speed is unknown, defaulting to 1000 [ 555.131038][T14527] lo speed is unknown, defaulting to 1000 [ 555.362780][T14544] loop5: detected capacity change from 0 to 1024 [ 555.757503][T14566] loop5: detected capacity change from 0 to 1024 [ 556.070164][T14555] syz.3.3342 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 556.084273][T14555] CPU: 1 UID: 0 PID: 14555 Comm: syz.3.3342 Tainted: G W syzkaller #0 PREEMPT(full) [ 556.084338][T14555] Tainted: [W]=WARN [ 556.084346][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.084358][T14555] Call Trace: [ 556.084365][T14555] [ 556.084373][T14555] __dump_stack+0x1d/0x30 [ 556.084466][T14555] dump_stack_lvl+0x95/0xd0 [ 556.084486][T14555] dump_stack+0x15/0x1b [ 556.084505][T14555] dump_header+0x80/0x240 [ 556.084597][T14555] oom_kill_process+0x295/0x350 [ 556.084620][T14555] out_of_memory+0x97d/0xb80 [ 556.084642][T14555] try_charge_memcg+0x62e/0xa10 [ 556.084681][T14555] obj_cgroup_charge_pages+0x23/0xc0 [ 556.084763][T14555] __memcg_kmem_charge_page+0x9e/0x170 [ 556.084852][T14555] __alloc_frozen_pages_noprof+0x18a/0x360 [ 556.084886][T14555] alloc_pages_mpol+0xb3/0x260 [ 556.084912][T14555] alloc_pages_noprof+0x8f/0x130 [ 556.084970][T14555] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 556.085060][T14555] __kvmalloc_node_noprof+0x3d4/0x650 [ 556.085120][T14555] ? futex_hash_allocate+0x190/0x9d0 [ 556.085152][T14555] ? futex_hash_allocate+0x190/0x9d0 [ 556.085178][T14555] futex_hash_allocate+0x190/0x9d0 [ 556.085203][T14555] ? cap_task_prctl+0x13f/0x6e0 [ 556.085225][T14555] futex_hash_prctl+0xd8/0xf0 [ 556.085261][T14555] __se_sys_prctl+0xa3d/0x13f0 [ 556.085292][T14555] __x64_sys_prctl+0x67/0x80 [ 556.085394][T14555] x64_sys_call+0x2533/0x3020 [ 556.085423][T14555] do_syscall_64+0x12c/0x370 [ 556.085447][T14555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.085470][T14555] RIP: 0033:0x7f985c05c799 [ 556.085568][T14555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.085584][T14555] RSP: 002b:00007f985aab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 556.085602][T14555] RAX: ffffffffffffffda RBX: 00007f985c2d5fa0 RCX: 00007f985c05c799 [ 556.085680][T14555] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 556.085692][T14555] RBP: 00007f985c0f2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 556.085704][T14555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.085786][T14555] R13: 00007f985c2d6038 R14: 00007f985c2d5fa0 R15: 00007fffbe034ea8 [ 556.085807][T14555] [ 556.085844][T14555] memory: usage 307200kB, limit 307200kB, failcnt 277 [ 556.320858][T14555] memory+swap: usage 310016kB, limit 9007199254740988kB, failcnt 0 [ 556.328864][T14555] kmem: usage 230360kB, limit 9007199254740988kB, failcnt 0 [ 556.336314][T14555] Memory cgroup stats for /syz3: [ 556.336718][T14555] cache 78389248 [ 556.360610][T14580] loop5: detected capacity change from 0 to 1024 [ 556.377189][T14555] rss 196608 [ 556.380431][T14555] shmem 78389248 [ 556.383994][T14555] mapped_file 11747328 [ 556.392230][T14555] dirty 0 [ 556.395165][T14555] writeback 0 [ 556.422241][T14555] workingset_refault_anon 140 [ 556.426936][T14555] workingset_refault_file 128 [ 556.435250][T14555] swap 2883584 [ 556.438705][T14555] swapcached 25817088 [ 556.455466][T14555] pgpgin 648136 [ 556.459261][T14555] pgpgout 628926 [ 556.463362][T14555] pgfault 679252 [ 556.467436][T14555] pgmajfault 33 [ 556.471151][T14555] inactive_anon 98304 [ 556.475352][T14555] active_anon 78585856 [ 556.479518][T14555] inactive_file 0 [ 556.483591][T14555] active_file 0 [ 556.487215][T14555] unevictable 0 [ 556.490741][T14555] hierarchical_memory_limit 314572800 [ 556.501831][T14555] hierarchical_memsw_limit 9223372036854771712 [ 556.509438][T14555] total_cache 78389248 [ 556.513797][T14555] total_rss 196608 [ 556.517521][T14555] total_shmem 78389248 [ 556.521619][T14555] total_mapped_file 11747328 [ 556.526400][T14555] total_dirty 0 [ 556.529954][T14555] total_writeback 0 [ 556.539604][T14598] loop5: detected capacity change from 0 to 512 [ 556.546160][T14555] total_workingset_refault_anon 140 [ 556.551753][T14555] total_workingset_refault_file 128 [ 556.561951][T14555] total_swap 2883584 [ 556.579573][T14555] total_swapcached 25817088 [ 556.585894][T14555] total_pgpgin 648136 [ 556.605212][T14598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.620231][T14555] total_pgpgout 628926 [ 556.624388][T14555] total_pgfault 679252 [ 556.628580][T14555] total_pgmajfault 33 [ 556.632611][T14555] total_inactive_anon 98304 [ 556.637271][T14555] total_active_anon 78585856 [ 556.641925][T14555] total_inactive_file 0 [ 556.646256][T14555] total_active_file 0 [ 556.650281][T14555] total_unevictable 0 [ 556.653356][T14598] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.654587][T14555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3342,pid=14554,uid=0 [ 556.676055][T14607] netlink: 'syz.0.3361': attribute type 1 has an invalid length. [ 556.687527][T14555] Memory cgroup out of memory: Killed process 14554 (syz.3.3342) total-vm:96208kB, anon-rss:1408kB, file-rss:22212kB, shmem-rss:11472kB, UID:0 pgtables:144kB oom_score_adj:0 [ 556.712716][T14608] ip6_vti0 speed is unknown, defaulting to 1000 [ 556.827685][T14607] bond13: entered promiscuous mode [ 556.832932][T14607] bond13: entered allmulticast mode [ 556.850078][T14607] 8021q: adding VLAN 0 to HW filter on device bond13 [ 556.893919][T14613] erspan1: entered allmulticast mode [ 556.916964][T14613] bond13: (slave erspan1): making interface the new active one [ 556.928768][T14613] erspan1: entered promiscuous mode [ 556.935690][T14613] bond13: (slave erspan1): Enslaving as an active interface with an up link [ 557.008743][T14608] lo speed is unknown, defaulting to 1000 [ 557.015456][T14608] lo speed is unknown, defaulting to 1000 [ 557.423214][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.752753][T14654] ip6_vti0 speed is unknown, defaulting to 1000 [ 557.810243][T14654] lo speed is unknown, defaulting to 1000 [ 557.816519][T14654] lo speed is unknown, defaulting to 1000 [ 558.043406][T14669] loop5: detected capacity change from 0 to 512 [ 558.075079][T14669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.109922][T14669] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.502865][T14653] syz.0.3376 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 558.519218][T14653] CPU: 0 UID: 0 PID: 14653 Comm: syz.0.3376 Tainted: G W syzkaller #0 PREEMPT(full) [ 558.519328][T14653] Tainted: [W]=WARN [ 558.519336][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 558.519351][T14653] Call Trace: [ 558.519358][T14653] [ 558.519367][T14653] __dump_stack+0x1d/0x30 [ 558.519394][T14653] dump_stack_lvl+0x95/0xd0 [ 558.519453][T14653] dump_stack+0x15/0x1b [ 558.519476][T14653] dump_header+0x80/0x240 [ 558.519497][T14653] oom_kill_process+0x295/0x350 [ 558.519519][T14653] out_of_memory+0x97d/0xb80 [ 558.519544][T14653] try_charge_memcg+0x62e/0xa10 [ 558.519655][T14653] obj_cgroup_charge_pages+0x23/0xc0 [ 558.519686][T14653] __memcg_kmem_charge_page+0x9e/0x170 [ 558.519808][T14653] __alloc_frozen_pages_noprof+0x18a/0x360 [ 558.519841][T14653] alloc_pages_mpol+0xb3/0x260 [ 558.519873][T14653] alloc_pages_noprof+0x8f/0x130 [ 558.519972][T14653] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 558.520012][T14653] __kvmalloc_node_noprof+0x3d4/0x650 [ 558.520119][T14653] ? futex_hash_allocate+0x190/0x9d0 [ 558.520148][T14653] ? futex_hash_allocate+0x190/0x9d0 [ 558.520227][T14653] futex_hash_allocate+0x190/0x9d0 [ 558.520253][T14653] ? cap_task_prctl+0x13f/0x6e0 [ 558.520282][T14653] futex_hash_prctl+0xd8/0xf0 [ 558.520318][T14653] __se_sys_prctl+0xa3d/0x13f0 [ 558.520350][T14653] __x64_sys_prctl+0x67/0x80 [ 558.520378][T14653] x64_sys_call+0x2533/0x3020 [ 558.520453][T14653] do_syscall_64+0x12c/0x370 [ 558.520476][T14653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.520499][T14653] RIP: 0033:0x7f5d2f8ec799 [ 558.520517][T14653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.520545][T14653] RSP: 002b:00007f5d2e347028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 558.520566][T14653] RAX: ffffffffffffffda RBX: 00007f5d2fb65fa0 RCX: 00007f5d2f8ec799 [ 558.520579][T14653] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 558.520591][T14653] RBP: 00007f5d2f982bd9 R08: 0000000000000000 R09: 0000000000000000 [ 558.520603][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.520615][T14653] R13: 00007f5d2fb66038 R14: 00007f5d2fb65fa0 R15: 00007ffefae9a388 [ 558.520649][T14653] [ 558.520800][T14653] memory: usage 307200kB, limit 307200kB, failcnt 177 [ 558.759444][T14653] memory+swap: usage 257344kB, limit 9007199254740988kB, failcnt 0 [ 558.768324][T14653] kmem: usage 176448kB, limit 9007199254740988kB, failcnt 0 [ 558.775995][T14653] Memory cgroup stats for /syz0: [ 558.777051][T14653] cache 34037760 [ 558.793757][T14653] rss 544768 [ 558.797301][T14653] shmem 33509376 [ 558.809744][T14653] mapped_file 11763712 [ 558.819712][T14653] dirty 16384 [ 558.831131][T14653] writeback 0 [ 558.839488][T14653] workingset_refault_anon 3109 [ 558.845580][T14653] workingset_refault_file 2668 [ 558.855391][T14653] swap 47730688 [ 558.865256][T14653] swapcached 65122304 [ 558.872843][T14653] pgpgin 711439 [ 558.918849][T14653] pgpgout 702966 [ 558.962950][T14653] pgfault 727707 [ 558.966532][T14653] pgmajfault 282 [ 558.970070][T14653] inactive_anon 12333056 [ 558.974688][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.983733][T14653] active_anon 21843968 [ 558.987799][T14653] inactive_file 4096 [ 558.991839][T14653] active_file 507904 [ 558.996118][T14653] unevictable 0 [ 558.999647][T14653] hierarchical_memory_limit 314572800 [ 559.005329][T14653] hierarchical_memsw_limit 9223372036854771712 [ 559.011572][T14653] total_cache 34037760 [ 559.015948][T14653] total_rss 544768 [ 559.019825][T14653] total_shmem 33509376 [ 559.025608][T14653] total_mapped_file 11763712 [ 559.030317][T14653] total_dirty 16384 [ 559.034389][T14653] total_writeback 0 [ 559.038193][T14653] total_workingset_refault_anon 3109 [ 559.048450][T14693] loop5: detected capacity change from 0 to 512 [ 559.055696][T14653] total_workingset_refault_file 2668 [ 559.064320][T14653] total_swap 47730688 [ 559.068352][T14653] total_swapcached 65122304 [ 559.074450][T14653] total_pgpgin 711439 [ 559.078463][T14653] total_pgpgout 702966 [ 559.082960][T14653] total_pgfault 727707 [ 559.087078][T14693] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 559.106012][T14653] total_pgmajfault 282 [ 559.110146][T14653] total_inactive_anon 12333056 [ 559.115045][T14653] total_active_anon 21843968 [ 559.122220][T14653] total_inactive_file 4096 [ 559.126707][T14653] total_active_file 507904 [ 559.131150][T14653] total_unevictable 0 [ 559.137678][T14693] EXT4-fs (loop5): 1 truncate cleaned up [ 559.148121][T14693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.164961][T14653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3376,pid=14651,uid=0 [ 559.198600][T14653] Memory cgroup out of memory: Killed process 14653 (syz.0.3376) total-vm:96208kB, anon-rss:1400kB, file-rss:22248kB, shmem-rss:11472kB, UID:0 pgtables:148kB oom_score_adj:0 [ 559.269123][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.452326][T14728] ip6_vti0 speed is unknown, defaulting to 1000 [ 559.481591][T14728] lo speed is unknown, defaulting to 1000 [ 559.487827][T14728] lo speed is unknown, defaulting to 1000 [ 560.180265][T14775] ip6_vti0 speed is unknown, defaulting to 1000 [ 560.330792][T14775] lo speed is unknown, defaulting to 1000 [ 560.343613][T14775] lo speed is unknown, defaulting to 1000 [ 560.540715][T14754] syz.2.3409 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 560.589385][T14754] CPU: 0 UID: 0 PID: 14754 Comm: syz.2.3409 Tainted: G W syzkaller #0 PREEMPT(full) [ 560.589418][T14754] Tainted: [W]=WARN [ 560.589424][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 560.589482][T14754] Call Trace: [ 560.589488][T14754] [ 560.589496][T14754] __dump_stack+0x1d/0x30 [ 560.589525][T14754] dump_stack_lvl+0x95/0xd0 [ 560.589551][T14754] dump_stack+0x15/0x1b [ 560.589649][T14754] dump_header+0x80/0x240 [ 560.589674][T14754] oom_kill_process+0x295/0x350 [ 560.589700][T14754] out_of_memory+0x97d/0xb80 [ 560.589726][T14754] try_charge_memcg+0x62e/0xa10 [ 560.589879][T14754] obj_cgroup_charge_pages+0x23/0xc0 [ 560.589918][T14754] __memcg_kmem_charge_page+0x9e/0x170 [ 560.589949][T14754] __alloc_frozen_pages_noprof+0x18a/0x360 [ 560.589984][T14754] alloc_pages_mpol+0xb3/0x260 [ 560.590067][T14754] alloc_pages_noprof+0x8f/0x130 [ 560.590097][T14754] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 560.590202][T14754] __kvmalloc_node_noprof+0x3d4/0x650 [ 560.590231][T14754] ? futex_hash_allocate+0x190/0x9d0 [ 560.590260][T14754] ? futex_hash_allocate+0x190/0x9d0 [ 560.590339][T14754] futex_hash_allocate+0x190/0x9d0 [ 560.590414][T14754] ? cap_task_prctl+0x13f/0x6e0 [ 560.590440][T14754] futex_hash_prctl+0xd8/0xf0 [ 560.590584][T14754] __se_sys_prctl+0xa3d/0x13f0 [ 560.590615][T14754] __x64_sys_prctl+0x67/0x80 [ 560.590643][T14754] x64_sys_call+0x2533/0x3020 [ 560.590711][T14754] do_syscall_64+0x12c/0x370 [ 560.590734][T14754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.590826][T14754] RIP: 0033:0x7f0b464fc799 [ 560.590843][T14754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.590861][T14754] RSP: 002b:00007f0b44f4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 560.590883][T14754] RAX: ffffffffffffffda RBX: 00007f0b46775fa0 RCX: 00007f0b464fc799 [ 560.590964][T14754] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 560.590978][T14754] RBP: 00007f0b46592bd9 R08: 0000000000000000 R09: 0000000000000000 [ 560.591006][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.591019][T14754] R13: 00007f0b46776038 R14: 00007f0b46775fa0 R15: 00007ffc409926e8 [ 560.591048][T14754] [ 560.591227][T14754] memory: usage 307200kB, limit 307200kB, failcnt 970 [ 560.616850][T14820] loop5: detected capacity change from 0 to 8192 [ 560.842566][T12510] loop5: p1 < > p2 p4 < p5 > [ 560.846551][T14754] memory+swap: usage 322024kB, limit 9007199254740988kB, failcnt 0 [ 560.847393][T12510] loop5: partition table partially beyond EOD, [ 560.855152][T14754] kmem: usage 230368kB, limit 9007199254740988kB, failcnt 0 [ 560.855175][T14754] Memory cgroup stats for /syz2: [ 560.855430][T14754] cache 77946880 [ 560.867956][T12510] truncated [ 560.876573][T14754] rss 729088 [ 560.887954][T12510] loop5: p1 start 134217728 is beyond EOD, truncated [ 560.891824][T14754] shmem 77946880 [ 560.901625][T14754] mapped_file 11747328 [ 560.905387][T12510] loop5: p2 size 591360 extends beyond EOD, truncated [ 560.910454][T14754] dirty 0 [ 560.918527][T14754] writeback 0 [ 560.928341][T14754] workingset_refault_anon 382 [ 560.932510][T12510] loop5: p5 size 591360 extends beyond EOD, truncated [ 560.937323][T14754] workingset_refault_file 3157 [ 560.949213][T14754] swap 15179776 [ 560.957998][T14820] loop5: p1 < > p2 p4 < p5 > [ 560.961052][T14754] swapcached 18116608 [ 560.968903][T14754] pgpgin 735097 [ 560.974510][T14754] pgpgout 715889 [ 560.980123][T14820] loop5: partition table partially beyond EOD, [ 560.980152][T14754] pgfault 693694 [ 560.980161][T14754] pgmajfault 143 [ 560.980169][T14754] inactive_anon 54751232 [ 560.980177][T14754] active_anon 23924736 [ 560.980188][T14820] truncated [ 560.980377][T14820] loop5: p1 start 134217728 is beyond EOD, [ 560.989574][T14754] inactive_file 0 [ 560.998355][T14820] truncated [ 561.002694][T14754] active_file 0 [ 561.021723][T14820] loop5: p2 size 591360 extends beyond EOD, truncated [ 561.028775][T14754] unevictable 0 [ 561.032291][T14754] hierarchical_memory_limit 314572800 [ 561.037731][T14754] hierarchical_memsw_limit 9223372036854771712 [ 561.047033][T14834] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.053647][T14754] total_cache 77946880 [ 561.058351][T14754] total_rss 729088 [ 561.062260][T14754] total_shmem 77946880 [ 561.062690][T14820] loop5: p5 size 591360 extends beyond EOD, [ 561.066487][T14754] total_mapped_file 11747328 [ 561.076715][T14820] truncated [ 561.077249][T14754] total_dirty 0 [ 561.083807][T14848] netlink: 'syz.0.3436': attribute type 4 has an invalid length. [ 561.092623][T14754] total_writeback 0 [ 561.096572][T14754] total_workingset_refault_anon 382 [ 561.106521][T14754] total_workingset_refault_file 3157 [ 561.115634][T14754] total_swap 15179776 [ 561.121438][T14754] total_swapcached 18116608 [ 561.127017][T14754] total_pgpgin 735097 [ 561.131179][T14754] total_pgpgout 715889 [ 561.136847][T14754] total_pgfault 693694 [ 561.142040][T14754] total_pgmajfault 143 [ 561.180473][T14754] total_inactive_anon 54751232 [ 561.185436][T14754] total_active_anon 23924736 [ 561.190712][T14754] total_inactive_file 0 [ 561.195243][T14754] total_active_file 0 [ 561.199350][T14754] total_unevictable 0 [ 561.203692][T14754] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3409,pid=14752,uid=0 [ 561.226763][T14754] Memory cgroup out of memory: Killed process 14752 (syz.2.3409) total-vm:96208kB, anon-rss:1408kB, file-rss:22252kB, shmem-rss:11472kB, UID:0 pgtables:148kB oom_score_adj:0 [ 561.250824][T14834] lo speed is unknown, defaulting to 1000 [ 561.280433][T14834] lo speed is unknown, defaulting to 1000 [ 561.748500][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 561.748517][ T28] audit: type=1400 audit(1772764483.251:1984): avc: denied { mounton } for pid=14898 comm="syz.5.3445" path="/proc/385/task" dev="proc" ino=50648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 561.832005][T14877] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.943797][T14877] lo speed is unknown, defaulting to 1000 [ 561.961228][T14877] lo speed is unknown, defaulting to 1000 [ 563.274236][T15019] ip6_vti0 speed is unknown, defaulting to 1000 [ 563.302716][ T28] audit: type=1400 audit(1772764484.791:1985): avc: denied { write } for pid=15034 comm="syz.5.3470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 563.405759][T15019] lo speed is unknown, defaulting to 1000 [ 563.428821][T15019] lo speed is unknown, defaulting to 1000 [ 563.623484][T15048] ip6_vti0 speed is unknown, defaulting to 1000 [ 563.691877][T15048] lo speed is unknown, defaulting to 1000 [ 563.698274][T15048] lo speed is unknown, defaulting to 1000 [ 564.471733][ T28] audit: type=1400 audit(1772764485.981:1986): avc: denied { relabelfrom } for pid=15101 comm="syz.5.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 564.504556][ T28] audit: type=1400 audit(1772764485.981:1987): avc: denied { relabelto } for pid=15101 comm="syz.5.3494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 564.588192][T15093] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.713552][T15093] lo speed is unknown, defaulting to 1000 [ 564.719641][T15107] ip6_vti0 speed is unknown, defaulting to 1000 [ 564.724441][T15093] lo speed is unknown, defaulting to 1000 [ 564.804208][T15107] lo speed is unknown, defaulting to 1000 [ 564.811004][T15107] lo speed is unknown, defaulting to 1000 [ 564.833108][T15125] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.3502'. [ 564.842594][T15125] netlink: zone id is out of range [ 564.847974][T15125] netlink: zone id is out of range [ 564.864478][T15125] netlink: del zone limit has 8 unknown bytes [ 565.129814][T15142] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.203130][T15149] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3511'. [ 565.478614][T15160] ip6_vti0 speed is unknown, defaulting to 1000 [ 565.507133][T15160] lo speed is unknown, defaulting to 1000 [ 565.513158][T15160] lo speed is unknown, defaulting to 1000 [ 565.615065][T15168] loop5: detected capacity change from 0 to 1024 [ 565.623262][T15168] EXT4-fs: inline encryption not supported [ 565.642830][T15168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.660633][ T28] audit: type=1400 audit(1772764487.171:1988): avc: denied { append } for pid=15167 comm="syz.5.3518" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 565.697676][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.816007][T15184] netlink: 'syz.2.3523': attribute type 10 has an invalid length. [ 565.824038][T15184] syz_tun: entered promiscuous mode [ 565.830619][T15184] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 565.854705][ T28] audit: type=1326 audit(1772764487.371:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15185 comm="syz.2.3524" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b464fc799 code=0x0 [ 566.127900][T15196] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.160495][T15196] lo speed is unknown, defaulting to 1000 [ 566.166634][T15196] lo speed is unknown, defaulting to 1000 [ 566.446667][T15205] ip6_vti0 speed is unknown, defaulting to 1000 [ 566.475896][T15205] lo speed is unknown, defaulting to 1000 [ 566.482025][T15205] lo speed is unknown, defaulting to 1000 [ 566.840842][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3542'. [ 566.854027][T15235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3542'. [ 566.854027][ T6007] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.854069][ T6007] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.885047][T15233] loop5: detected capacity change from 0 to 8192 [ 566.892663][ T6007] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.901322][ T6007] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.032484][T12510] loop5: p1 < > p2 p4 < p5 > [ 567.037262][T12510] loop5: partition table partially beyond EOD, truncated [ 567.044718][T12510] loop5: p1 start 134217728 is beyond EOD, truncated [ 567.051683][T12510] loop5: p2 size 591360 extends beyond EOD, truncated [ 567.062253][T12510] loop5: p5 size 591360 extends beyond EOD, truncated [ 567.072859][T15233] loop5: p1 < > p2 p4 < p5 > [ 567.077669][T15233] loop5: partition table partially beyond EOD, truncated [ 567.085309][T15233] loop5: p1 start 134217728 is beyond EOD, truncated [ 567.092170][T15233] loop5: p2 size 591360 extends beyond EOD, truncated [ 567.100646][T15233] loop5: p5 size 591360 extends beyond EOD, truncated [ 567.233018][T15246] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.286728][T15246] lo speed is unknown, defaulting to 1000 [ 567.293151][T15246] lo speed is unknown, defaulting to 1000 [ 567.465474][T15263] netlink: 'syz.3.3551': attribute type 6 has an invalid length. [ 567.658888][T15268] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.719532][T15268] lo speed is unknown, defaulting to 1000 [ 567.726661][T15268] lo speed is unknown, defaulting to 1000 [ 567.813747][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 567.823605][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 567.832923][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 567.851335][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 567.860633][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 567.890655][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 568.114212][T15299] tipc: Started in network mode [ 568.119319][T15299] tipc: Node identity ac1414aa, cluster identity 4711 [ 568.126367][T15299] tipc: New replicast peer: 10.1.1.2 [ 568.131802][T15299] tipc: Enabled bearer , priority 10 [ 568.730877][T15317] loop5: detected capacity change from 0 to 1024 [ 569.049809][T15334] netlink: 'syz.2.3575': attribute type 1 has an invalid length. [ 569.155640][T15334] bond18: entered promiscuous mode [ 569.173309][T15334] bond18: entered allmulticast mode [ 569.195352][T15334] 8021q: adding VLAN 0 to HW filter on device bond18 [ 569.251819][T15336] erspan1: entered allmulticast mode [ 569.290568][T15336] bond18: (slave erspan1): making interface the new active one [ 569.306907][T15336] erspan1: entered promiscuous mode [ 569.316525][T15336] bond18: (slave erspan1): Enslaving as an active interface with an up link [ 569.327327][ T3398] tipc: Node number set to 2886997162 [ 570.383930][T15405] ip6_vti0 speed is unknown, defaulting to 1000 [ 570.415272][T15405] lo speed is unknown, defaulting to 1000 [ 570.421667][T15405] lo speed is unknown, defaulting to 1000 [ 570.487128][ T28] audit: type=1326 audit(1772764492.001:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.511843][ T28] audit: type=1326 audit(1772764492.001:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.536059][ T28] audit: type=1326 audit(1772764492.001:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.560173][ T28] audit: type=1326 audit(1772764492.001:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.583952][ T28] audit: type=1326 audit(1772764492.001:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.626720][T15424] __nla_validate_parse: 2 callbacks suppressed [ 570.626738][T15424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3608'. [ 570.627087][ T28] audit: type=1326 audit(1772764492.001:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.636029][T15424] ip6tnl3: entered allmulticast mode [ 570.648669][ T28] audit: type=1326 audit(1772764492.001:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.694855][ T28] audit: type=1326 audit(1772764492.001:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.719313][ T28] audit: type=1326 audit(1772764492.001:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 570.742969][ T28] audit: type=1326 audit(1772764492.001:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15417 comm="syz.3.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985c05c799 code=0x7ffc0000 [ 571.320677][T15447] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.350333][T15447] lo speed is unknown, defaulting to 1000 [ 571.356695][T15447] lo speed is unknown, defaulting to 1000 [ 571.583121][T15462] ip6_vti0 speed is unknown, defaulting to 1000 [ 571.618990][T15462] lo speed is unknown, defaulting to 1000 [ 571.625189][T15462] lo speed is unknown, defaulting to 1000 [ 571.737789][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 571.748623][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'. [ 571.849447][T15487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3631'. [ 572.685091][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3647'. [ 572.694255][T15533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3647'. [ 572.738915][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3648'. [ 572.893573][T15538] ip6_vti0 speed is unknown, defaulting to 1000 [ 572.922057][T15538] lo speed is unknown, defaulting to 1000 [ 572.928156][T15538] lo speed is unknown, defaulting to 1000 [ 572.966965][T15542] loop5: detected capacity change from 0 to 512 [ 572.993848][T15542] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.006815][T15542] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.151726][T15559] netlink: 'syz.0.3656': attribute type 13 has an invalid length. [ 573.646103][T15581] 9p: Bad value for 'rfdno' [ 573.771498][T15584] ip6_vti0 speed is unknown, defaulting to 1000 [ 573.827740][T15584] lo speed is unknown, defaulting to 1000 [ 573.840106][T15584] lo speed is unknown, defaulting to 1000 [ 573.848983][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.375706][T15649] netlink: 'syz.3.3671': attribute type 15 has an invalid length. [ 574.383722][T15649] netlink: 11930 bytes leftover after parsing attributes in process `syz.3.3671'. [ 574.554894][T15632] ip6_vti0 speed is unknown, defaulting to 1000 [ 574.652294][T15632] lo speed is unknown, defaulting to 1000 [ 574.662849][T15632] lo speed is unknown, defaulting to 1000 [ 574.846694][T15715] loop5: detected capacity change from 0 to 512 [ 574.893387][T15715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.917458][T15715] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.155215][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 575.243852][T15741] ip6_vti0 speed is unknown, defaulting to 1000 [ 575.498611][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 575.498626][ T28] audit: type=1326 audit(1772764497.011:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.505091][T15741] lo speed is unknown, defaulting to 1000 [ 575.547587][T15741] lo speed is unknown, defaulting to 1000 [ 575.555360][ T28] audit: type=1326 audit(1772764497.011:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.565130][T15753] xt_hashlimit: size too large, truncated to 1048576 [ 575.597946][ T28] audit: type=1326 audit(1772764497.011:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.661940][ T28] audit: type=1326 audit(1772764497.011:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.695783][ T28] audit: type=1326 audit(1772764497.011:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.751855][ T28] audit: type=1326 audit(1772764497.011:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.777585][ T28] audit: type=1326 audit(1772764497.011:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.787627][T15751] ip6_vti0 speed is unknown, defaulting to 1000 [ 575.801470][ T28] audit: type=1326 audit(1772764497.011:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.831287][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.887743][ T28] audit: type=1326 audit(1772764497.051:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.911863][ T28] audit: type=1326 audit(1772764497.051:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15748 comm="syz.1.3684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc04cc799 code=0x7ffc0000 [ 575.999221][T15763] ip6_vti0 speed is unknown, defaulting to 1000 [ 576.061010][T15751] lo speed is unknown, defaulting to 1000 [ 576.075037][T15763] lo speed is unknown, defaulting to 1000 [ 576.075037][T15751] lo speed is unknown, defaulting to 1000 [ 576.114962][T15768] loop5: detected capacity change from 0 to 8192 [ 576.168421][T15763] lo speed is unknown, defaulting to 1000 [ 576.188760][T15768] loop5: p1 < > p2 p4 < p5 > [ 576.207331][T15768] loop5: partition table partially beyond EOD, truncated [ 576.234262][T15768] loop5: p1 start 134217728 is beyond EOD, truncated [ 576.291453][T15768] loop5: p2 size 591360 extends beyond EOD, truncated [ 576.326981][T15768] loop5: p5 size 591360 extends beyond EOD, truncated [ 576.391521][T15784] netlink: 'syz.3.3695': attribute type 16 has an invalid length. [ 576.419711][T15782] ip6_vti0 speed is unknown, defaulting to 1000 [ 576.438511][T15784] netlink: 'syz.3.3695': attribute type 17 has an invalid length. [ 576.447946][T15787] bridge0: left allmulticast mode [ 576.482405][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3697'. [ 576.504631][T15787] macvlan1: left allmulticast mode [ 576.522085][T15787] bond11: left allmulticast mode [ 576.530302][T15787] bond15: left allmulticast mode [ 576.535799][T15787] macvlan2: left promiscuous mode [ 576.540950][T15787] macvlan2: left allmulticast mode [ 576.589979][T15796] xt_l2tp: unknown flags: 10 [ 576.614209][T15787] ip6tnl3: left allmulticast mode [ 576.660444][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 576.670844][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 576.671145][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.680303][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 576.703264][T15784] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.710475][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 576.720842][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 576.734518][T15784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 576.757490][T15782] lo speed is unknown, defaulting to 1000 [ 576.766111][ T3500] lo speed is unknown, defaulting to 1000 [ 576.773042][T15779] ip6_vti0 speed is unknown, defaulting to 1000 [ 576.779359][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 576.781388][ T3500] syU×: Port: 1 Link ACTIVE [ 576.788286][T15782] lo speed is unknown, defaulting to 1000 [ 576.807797][ T4044] lo speed is unknown, defaulting to 1000 [ 576.854079][T15798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3699'. [ 576.908859][T15779] lo speed is unknown, defaulting to 1000 [ 576.916617][T15779] lo speed is unknown, defaulting to 1000 [ 577.489010][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3709'. [ 577.507729][T15825] loop5: detected capacity change from 0 to 1024 [ 577.514997][T15825] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.572244][T15825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 577.587889][T15825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 577.612427][T15825] System zones: 0-1, 3-36 [ 577.629413][T15825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 577.640110][T15817] ip6_vti0 speed is unknown, defaulting to 1000 [ 577.716843][T15817] lo speed is unknown, defaulting to 1000 [ 577.725992][T15817] lo speed is unknown, defaulting to 1000 [ 577.746611][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.807403][T15837] team0: Device gtp0 is of different type [ 577.834586][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3711'. [ 577.870502][T15815] 9pnet_fd: p9_fd_create_tcp (15815): problem connecting socket to 127.0.0.1 [ 578.047988][T15861] loop5: detected capacity change from 0 to 1024 [ 578.056206][T15861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 578.067205][T15861] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 578.085569][T15861] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 578.093862][T15861] System zones: 0-1, 3-36 [ 578.099678][T15861] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.165931][T15864] ip6_vti0 speed is unknown, defaulting to 1000 [ 578.179818][T12490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.234492][T15864] lo speed is unknown, defaulting to 1000 [ 578.248438][T15864] lo speed is unknown, defaulting to 1000 [ 579.040137][ T2] ================================================================== [ 579.048246][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 579.054750][ T2] [ 579.057056][ T2] read-write to 0xffffffff86c61f68 of 4 bytes by task 15872 on cpu 0: [ 579.065197][ T2] free_pid+0xbc/0x1e0 [ 579.069262][ T2] free_pids+0x9e/0xb0 [ 579.073328][ T2] release_task+0x9a7/0xb60 [ 579.077824][ T2] do_exit+0xda4/0x1600 [ 579.082056][ T2] do_group_exit+0xfe/0x140 [ 579.086549][ T2] get_signal+0xe54/0xf60 [ 579.090869][ T2] arch_do_signal_or_restart+0x96/0x450 [ 579.096410][ T2] exit_to_user_mode_loop+0x6a/0x6f0 [ 579.101682][ T2] do_syscall_64+0x249/0x370 [ 579.106259][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.112170][ T2] [ 579.114480][ T2] read to 0xffffffff86c61f68 of 4 bytes by task 2 on cpu 1: [ 579.121742][ T2] copy_process+0x1895/0x20d0 [ 579.126406][ T2] kernel_clone+0x16b/0x5d0 [ 579.130895][ T2] kernel_thread+0xe5/0x120 [ 579.135387][ T2] kthreadd+0x25b/0x320 [ 579.139534][ T2] ret_from_fork+0x150/0x360 [ 579.144116][ T2] ret_from_fork_asm+0x1a/0x30 [ 579.148871][ T2] [ 579.151190][ T2] value changed: 0x80000146 -> 0x80000145 [ 579.156888][ T2] [ 579.159197][ T2] Reported by Kernel Concurrency Sanitizer on: [ 579.165419][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 579.175820][ T2] Tainted: [W]=WARN [ 579.179606][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 579.189648][ T2] ================================================================== [ 579.218312][T15996] netlink: 'syz.2.3733': attribute type 10 has an invalid length.