last executing test programs: 3.117984447s ago: executing program 0 (id=1775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@grpquota}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x1dc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0) prctl$PR_SET_NAME(0xf, 0x0) pipe2(0x0, 0x800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2.999355794s ago: executing program 4 (id=1778): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300080a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000d11d6e5d095326faf50607bdff59100ac45761547a681f009cee4a5acb3da400001fb70067e600c88ebbf9315033bf79ac2dff05de15003901000007000000ea00000000000000001281ff05dfccebf6ba0008400204000000e90554062a80e605007f71374aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xc0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req={0x8, 0x2, 0x7, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000000580)=[{{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}}], 0x1, 0x45) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x161602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000400)=0xf) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0), &(0x7f0000000100)={'U-', 0x4}, 0x16, 0x3) socket(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 2.921024938s ago: executing program 0 (id=1779): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200002000000085000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x1007, &(0x7f0000000440)=""/4103, 0x40f00}, 0x94) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) mount(0x0, 0x0, 0x0, 0x2012024, 0x0) memfd_create(0x0, 0x7) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) close(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180), 0x8004, 0x0) 2.758135238s ago: executing program 0 (id=1780): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$procfs(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/consoles\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.757046248s ago: executing program 4 (id=1781): socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.732817459s ago: executing program 1 (id=1782): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0xa500401}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x200201, 0x110) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000cab000)=0x5f) setresuid(0xee01, r3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r4, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) pidfd_getfd(r2, r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.732402269s ago: executing program 3 (id=1783): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x34) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x6, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 2.128180695s ago: executing program 1 (id=1784): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed3, 0x5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) memfd_create(0x0, 0x6) r0 = gettid() syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x7000) shmctl$IPC_RMID(0x0, 0x0) 1.903724688s ago: executing program 1 (id=1785): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x80000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000600)=[{}], 0x1, 0x1ff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000000c0)=0x1) 1.881029209s ago: executing program 3 (id=1786): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = epoll_create1(0x0) unshare(0x4020400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) open_by_handle_at(r2, &(0x7f0000002580)=ANY=[@ANYBLOB='\f\x00'], 0x0) r3 = syz_io_uring_setup(0x524e, &(0x7f0000001580)={0x0, 0xc2b, 0x2000, 0x1, 0x329}, &(0x7f0000000400), &(0x7f0000001600)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f0000001640)={r2}, 0x1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) epoll_pwait2(r0, &(0x7f0000001680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, &(0x7f0000001700), &(0x7f0000001740)={[0xa]}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x80053, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x112040, 0xffffffff, 0xfffffffa, 0x6, 0xd9f, 0x2, 0x5, 0x0, 0x402, 0x0, 0x8000000000000001}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) 1.812999983s ago: executing program 4 (id=1787): socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 1.70212816s ago: executing program 1 (id=1788): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_stall_count', 0x0, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x3ff, 0x80, 0xffffffff, 0x4, "8100e1c8070000000000000000eaffffff00"}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.70146059s ago: executing program 3 (id=1798): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB], 0x54}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x3184, &(0x7f0000000080)={0x0, 0x5e18, 0x400, 0x1, 0x111}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000004740)=""/4096, 0x1000}], 0x0, 0x1000004f}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x7, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xf9}]}}]}, 0x44}}, 0x0) 1.35214899s ago: executing program 3 (id=1790): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xff, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r0, 0x21, 0x4, 0x6d6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000400)=ANY=[], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.344221851s ago: executing program 2 (id=1791): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x90, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7}, 0x94) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ptrace(0x10, r1) symlinkat(0x0, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@loopback, @rand_addr=0x64010100, 0xffffffffffffffff, "1667c48e3a7c3006a7a363924097ffb78f990abcf43ad63aedd8dac061eaad1b", 0x7, 0x9, 0x1, 0x100}, 0x3c) ptrace$setregs(0xd, r1, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r1, 0x0, 0x0) 780.149584ms ago: executing program 0 (id=1792): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) listen(r0, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 766.859884ms ago: executing program 4 (id=1793): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x2, 0x7fff0000}]}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sg(0x0, 0x10000, 0x40000) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f00000009c0), 0x0, 0x60000042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180000000800000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) 724.639227ms ago: executing program 2 (id=1794): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="fc3e2ebb6bf5695e", 0x8}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r4, 0x1, 0x1070bd2a, 0x25dfdbfb, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_OFFSET={0x0, 0x3, 0x8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0xffffff77, 0x1, 0x7}]}, 0x34}}, 0x20) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r4, 0x325, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) 721.780368ms ago: executing program 1 (id=1795): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x0) 627.598183ms ago: executing program 2 (id=1796): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x34) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x6, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 624.029973ms ago: executing program 0 (id=1797): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x8, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x40000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x277) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000080)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@bh}, {@grpquota}, {@mblk_io_submit}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000000000080000008111ffff00000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x33e, &(0x7f00000001c0)={@link_local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "a90b0a", 0x308, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@srh={0x8, 0xe, 0x4, 0x7, 0x5, 0x78, 0x752, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00', @local, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @routing={0x62, 0x14, 0x0, 0x4, 0x0, [@rand_addr=' \x01\x00', @mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x3d}, @mcast1, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @local]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x72, 0x2, [0x5ed2, 0x3], "8d0a977d41b13b173b43a3990c219b4235c40811aeb00ef1b1416f79e47998fe42664f353e68d2a455b7c56d749c9fc5f3f089580dcc1c57f588ee1d2038d7a6b983555099db645ff6c1ae7be6ca87331a72975889e06bc8af1696e4bca88bf487c126706e057dc2c4fd1d6593bef10c799e"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x101], "9ed33b0d9b7ec8125a2512cb80edfc467b89451b91898e621f4cac7c53aa260cc3c82831889ce6ea9ef0ad964dfcb434cd0a63a884e4658fb577c221aa55562926f01b1e34a4a9044cbd2df36c0abbe47def520e25bb0865da695c493ecdad3e3140b366ccfc777e5384fbca05186765ab7278bcfa"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x101, 0xa0, 0xe], "b5277b03d5be6076649c1ce867f7136bed4eb36bc00b61f12862a0d467a107ad739d63a5ec7589ae8f91c9717a8e09280b"}, {0x8, 0x88be, 0x4, {{0x5, 0x1, 0x2, 0x0, 0x0, 0x2, 0x5, 0x6}, 0x1, {0xa}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x50}, 0x2, {0x7, 0x3, 0x1, 0x1d, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "d6bb42cd3c49899e9d4039c6b7a4605d9ae334368dc84642c367b0662b122967fabf0a6058a9c6a36b98d8a64f2f1580576b0e63e395e4d1079ef7103ce79c8a8d732632e55fda8f9273dd182589299162a53c1445505f3b7c19cc0a5fe80350883c232cafd954f4a59936bf8e47029625c3302488f9576587b4019732a270aa"}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 557.982047ms ago: executing program 4 (id=1799): socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 534.647538ms ago: executing program 4 (id=1800): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 509.235549ms ago: executing program 1 (id=1801): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 496.95101ms ago: executing program 2 (id=1802): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x20004006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r0, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x4, 0x100004, 0x0, 0x2, 0x6, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000280)=ANY=[], 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x20000000) 451.675723ms ago: executing program 3 (id=1803): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 395.963446ms ago: executing program 2 (id=1804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x29}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6cab2ea8}, 0x94) socket(0xa, 0x1, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 267.913794ms ago: executing program 2 (id=1805): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$procfs(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/consoles\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 27.188228ms ago: executing program 3 (id=1806): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x28}, 0x1}}, 0x80, 0x0}, 0x0) 0s ago: executing program 0 (id=1807): r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_stall_count', 0x0, 0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x3ff, 0x80, 0xffffffff, 0x4, "8100e1c8070000000000000000eaffffff00"}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 6] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.565838][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.665953][ T4960] syz_tun: entered allmulticast mode [ 76.678981][ T4960] syz_tun: left allmulticast mode [ 76.884652][ T4976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 76.974297][ T4980] loop4: detected capacity change from 0 to 512 [ 76.997097][ T4980] EXT4-fs: Ignoring removed nobh option [ 77.021701][ T4980] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 77.061738][ T4980] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.093226][ T4980] EXT4-fs (loop4): 1 truncate cleaned up [ 77.106942][ T4980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.147701][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.336513][ T4993] loop2: detected capacity change from 0 to 1024 [ 77.352255][ T4993] EXT4-fs: Ignoring removed bh option [ 77.370983][ T4993] EXT4-fs: Ignoring removed i_version option [ 77.411860][ T4993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.457344][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.557078][ T5009] netlink: 277 bytes leftover after parsing attributes in process `syz.2.551'. [ 77.802718][ T5018] tipc: Started in network mode [ 77.807856][ T5018] tipc: Node identity 9a273fc46f7a, cluster identity 4711 [ 77.815073][ T5018] tipc: Enabled bearer , priority 0 [ 77.936089][ T5013] tipc: Resetting bearer [ 77.974533][ T5013] tipc: Disabling bearer [ 78.210401][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.217675][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.299955][ T5035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.357422][ T5035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.460297][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 78.460327][ T29] audit: type=1400 audit(2000000023.680:777): avc: denied { lock } for pid=5052 comm="syz.1.568" path="socket:[10990]" dev="sockfs" ino=10990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.507049][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.538324][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.565182][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.581455][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.708245][ T5067] netlink: 'syz.4.575': attribute type 4 has an invalid length. [ 78.753658][ T5060] lo speed is unknown, defaulting to 1000 [ 78.880638][ T29] audit: type=1326 audit(2000000024.100:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 78.934408][ T29] audit: type=1326 audit(2000000024.100:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 78.957782][ T29] audit: type=1326 audit(2000000024.130:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 78.981117][ T29] audit: type=1326 audit(2000000024.130:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 79.004474][ T29] audit: type=1326 audit(2000000024.130:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 79.027820][ T29] audit: type=1326 audit(2000000024.130:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 79.051227][ T29] audit: type=1326 audit(2000000024.140:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 79.074520][ T29] audit: type=1326 audit(2000000024.140:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 79.097920][ T29] audit: type=1326 audit(2000000024.140:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.4.577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 79.143517][ T5060] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma? [ 79.297202][ T5080] loop4: detected capacity change from 0 to 764 [ 79.337142][ T5080] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.549615][ T5078] mmap: syz.2.578 (5078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.576959][ T5092] netlink: 'syz.4.582': attribute type 11 has an invalid length. [ 79.951532][ T5104] lo speed is unknown, defaulting to 1000 [ 80.757631][ T5138] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4250888246/4250888247 [ 80.768004][ T5138] tipc: Failed to remove unknown binding: 66,0,0/2886997007:4250888246/4250888247 [ 80.896489][ T5144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.604'. [ 80.905468][ T5145] sctp: [Deprecated]: syz.0.603 (pid 5145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.905468][ T5145] Use struct sctp_sack_info instead [ 80.943160][ T5144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5144 comm=syz.1.604 [ 80.978227][ T5149] : renamed from vlan0 (while UP) [ 80.984251][ T5148] loop4: detected capacity change from 0 to 164 [ 81.006020][ T5148] iso9660: Unknown parameter 'no' [ 81.338527][ T5160] loop4: detected capacity change from 0 to 2048 [ 81.373475][ T5165] loop2: detected capacity change from 0 to 256 [ 81.398267][ T5165] FAT-fs (loop2): Directory bread(block 64) failed [ 81.405136][ T5165] FAT-fs (loop2): Directory bread(block 65) failed [ 81.411789][ T5165] FAT-fs (loop2): Directory bread(block 66) failed [ 81.418904][ T5165] FAT-fs (loop2): Directory bread(block 67) failed [ 81.426746][ T5165] FAT-fs (loop2): Directory bread(block 68) failed [ 81.433686][ T5165] FAT-fs (loop2): Directory bread(block 69) failed [ 81.441044][ T5165] FAT-fs (loop2): Directory bread(block 70) failed [ 81.447828][ T5165] FAT-fs (loop2): Directory bread(block 71) failed [ 81.454480][ T5165] FAT-fs (loop2): Directory bread(block 72) failed [ 81.462261][ T5165] FAT-fs (loop2): Directory bread(block 73) failed [ 81.493058][ T5169] loop4: detected capacity change from 0 to 1024 [ 81.500532][ T5169] EXT4-fs: Ignoring removed orlov option [ 81.520362][ T5169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.589559][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.708011][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.620'. [ 81.732294][ T5184] vlan2: entered allmulticast mode [ 81.738728][ T5184] dummy0: entered allmulticast mode [ 81.768848][ T5180] lo speed is unknown, defaulting to 1000 [ 81.853579][ T5179] loop2: detected capacity change from 0 to 512 [ 81.869452][ T5179] EXT4-fs: Ignoring removed nobh option [ 81.885530][ T5179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.939542][ T5179] EXT4-fs (loop2): 1 truncate cleaned up [ 81.952057][ T5179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.015719][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.440529][ T5180] netlink: 764 bytes leftover after parsing attributes in process `syz.4.618'. [ 82.692031][ T5224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.633'. [ 82.827630][ T5231] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5231 comm=syz.2.633 [ 83.437084][ T5252] syzkaller0: entered promiscuous mode [ 83.442909][ T5252] syzkaller0: entered allmulticast mode [ 83.607988][ T5262] lo speed is unknown, defaulting to 1000 [ 83.887983][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 83.888003][ T29] audit: type=1400 audit(2000000029.110:925): avc: denied { bind } for pid=5280 comm="syz.0.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.957872][ T29] audit: type=1400 audit(2000000029.180:926): avc: denied { connect } for pid=5270 comm="syz.4.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.027162][ T29] audit: type=1400 audit(2000000029.250:927): avc: denied { write } for pid=5290 comm="syz.3.657" path="socket:[12620]" dev="sockfs" ino=12620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 84.221253][ T29] audit: type=1326 audit(2000000029.440:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5294 comm="syz.1.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x0 [ 84.652918][ T5304] netlink: 'syz.4.662': attribute type 1 has an invalid length. [ 84.766568][ T5304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.793701][ T5306] veth3: entered promiscuous mode [ 84.810595][ T5306] bond2: (slave veth3): Enslaving as an active interface with a down link [ 84.826309][ T5304] bond2: entered allmulticast mode [ 85.203903][ T5325] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 85.303094][ T5327] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 85.313464][ T5327] bond1: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 85.329819][ T5327] bond1: (slave vxcan1): making interface the new active one [ 85.337876][ T5327] bond1: (slave vxcan1): Enslaving as an active interface with an up link [ 85.348007][ T5323] loop0: detected capacity change from 0 to 8192 [ 85.401946][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.669'. [ 85.445559][ T5325] bond1 (unregistering): (slave vxcan1): Releasing backup interface [ 85.491679][ T5325] bond1 (unregistering): Released all slaves [ 85.765839][ T5335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 85.998814][ T5345] netlink: 'syz.3.676': attribute type 4 has an invalid length. [ 86.012940][ T5345] netlink: 'syz.3.676': attribute type 4 has an invalid length. [ 86.139427][ T4786] IPVS: starting estimator thread 0... [ 86.173852][ T5359] loop4: detected capacity change from 0 to 2048 [ 86.199837][ T5359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.214452][ T29] audit: type=1400 audit(2000000031.440:929): avc: denied { remove_name } for pid=5355 comm="syz.4.682" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.237011][ T5357] IPVS: using max 2208 ests per chain, 110400 per kthread [ 86.245403][ T29] audit: type=1400 audit(2000000031.440:930): avc: denied { unlink } for pid=5355 comm="syz.4.682" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.246790][ T5366] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.683'. [ 86.267684][ T29] audit: type=1400 audit(2000000031.440:931): avc: denied { read write } for pid=5353 comm="syz.0.681" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.278401][ T5366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.683'. [ 86.301467][ T29] audit: type=1400 audit(2000000031.440:932): avc: denied { open } for pid=5353 comm="syz.0.681" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.348002][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.700706][ T5372] ref_ctr increment failed for inode: 0x2bf offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881042f4a40 [ 86.804455][ T5376] netlink: 'syz.2.686': attribute type 16 has an invalid length. [ 86.812307][ T5376] netlink: 'syz.2.686': attribute type 17 has an invalid length. [ 86.846837][ T5376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.857955][ T5376] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.869813][ T5376] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.123258][ T5385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 87.142061][ T5388] syz_tun: entered allmulticast mode [ 87.155263][ T5387] syz_tun: left allmulticast mode [ 87.205556][ T5391] loop0: detected capacity change from 0 to 128 [ 87.223246][ T5391] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 87.279521][ T5393] netlink: 'syz.3.693': attribute type 2 has an invalid length. [ 87.287361][ T5393] netlink: 199776 bytes leftover after parsing attributes in process `syz.3.693'. [ 87.318503][ T29] audit: type=1400 audit(2000000032.540:933): avc: denied { map } for pid=5394 comm="syz.0.694" path="socket:[12724]" dev="sockfs" ino=12724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 87.473319][ T5397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.644573][ T5397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.666342][ T5410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 87.691627][ T5410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5410 comm=syz.1.701 [ 87.750277][ T5416] loop4: detected capacity change from 0 to 512 [ 87.803457][ T5397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.977631][ T5397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.169862][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.247976][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.260629][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.273339][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.346183][ T5424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 88.360186][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 88.419927][ T5424] netlink: 'syz.3.707': attribute type 5 has an invalid length. [ 88.427796][ T5424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 88.448597][ T5431] loop2: detected capacity change from 0 to 128 [ 88.494763][ T5431] bio_check_eod: 21 callbacks suppressed [ 88.501284][ T5431] syz.2.709: attempt to access beyond end of device [ 88.501284][ T5431] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 88.548439][ T5439] syz.2.709: attempt to access beyond end of device [ 88.548439][ T5439] loop2: rw=8388608, sector=154, nr_sectors = 2 limit=128 [ 88.596170][ T5442] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.693322][ T5442] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.728057][ T5447] dummy0: entered promiscuous mode [ 88.733260][ T5447] macvlan3: entered promiscuous mode [ 88.739426][ T5447] macvlan3: entered allmulticast mode [ 88.744879][ T5447] dummy0: entered allmulticast mode [ 88.808172][ T5442] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.897682][ T5442] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.042864][ T29] audit: type=1326 audit(2000000034.260:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.088384][ T29] audit: type=1326 audit(2000000034.290:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.112071][ T29] audit: type=1326 audit(2000000034.290:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.135557][ T29] audit: type=1326 audit(2000000034.290:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.159092][ T29] audit: type=1326 audit(2000000034.290:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.182459][ T29] audit: type=1326 audit(2000000034.290:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.205839][ T29] audit: type=1326 audit(2000000034.290:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.229262][ T29] audit: type=1326 audit(2000000034.290:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.252639][ T29] audit: type=1326 audit(2000000034.290:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.275900][ T29] audit: type=1326 audit(2000000034.290:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.1.715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 89.475837][ T5462] netlink: 68 bytes leftover after parsing attributes in process `syz.1.718'. [ 89.805937][ T5479] netlink: 'syz.2.725': attribute type 1 has an invalid length. [ 89.871531][ T5479] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 89.881934][ T5479] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 89.947059][ T5479] bond3: (slave vxcan3): making interface the new active one [ 89.956271][ T5479] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 90.021509][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 90.040722][ T5479] bond3 (unregistering): (slave vxcan3): Releasing backup interface [ 90.050316][ T5479] bond3 (unregistering): Released all slaves [ 90.154058][ T5486] loop2: detected capacity change from 0 to 2048 [ 90.206441][ T5486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.268740][ T5490] loop4: detected capacity change from 0 to 512 [ 90.275874][ T5490] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 90.643037][ T5500] netlink: 'syz.4.733': attribute type 30 has an invalid length. [ 90.731967][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.816665][ T5506] bond0: Caught tx_queue_len zero misconfig [ 90.963689][ T5522] team1: left promiscuous mode [ 90.968640][ T5522] team1: left allmulticast mode [ 90.973633][ T5522] bond2: left allmulticast mode [ 90.983238][ T5522] veth3: left promiscuous mode [ 91.756856][ T5540] netlink: 80 bytes leftover after parsing attributes in process `syz.3.750'. [ 91.765896][ T5540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.750'. [ 91.995607][ T5553] loop4: detected capacity change from 0 to 512 [ 92.003013][ T5553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.012998][ T5553] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 92.472909][ T57] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.490938][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.508992][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.523274][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.150618][ T5578] loop2: detected capacity change from 0 to 512 [ 93.203921][ T5578] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.226192][ T5578] EXT4-fs (loop2): 1 truncate cleaned up [ 93.232433][ T5578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.256308][ T5582] syz_tun: entered allmulticast mode [ 93.301564][ T5582] pimreg: entered allmulticast mode [ 93.351948][ T5581] syz_tun: left allmulticast mode [ 93.377856][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.572537][ T5595] netlink: 'syz.4.769': attribute type 13 has an invalid length. [ 93.678008][ T5599] batman_adv: batadv0: Adding interface: dummy0 [ 93.684325][ T5599] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.710319][ T5599] batman_adv: batadv0: Interface activated: dummy0 [ 93.720112][ T5599] batadv0: mtu less than device minimum [ 93.726407][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.737550][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.748371][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.759434][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.770411][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.781606][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.792607][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.803484][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.814401][ T5599] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 93.876392][ T5601] lo speed is unknown, defaulting to 1000 [ 93.999256][ T5615] syz_tun: entered allmulticast mode [ 94.047496][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 94.047564][ T29] audit: type=1400 audit(2000000039.270:978): avc: denied { create } for pid=5618 comm="syz.4.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.107621][ T29] audit: type=1400 audit(2000000039.330:979): avc: denied { getopt } for pid=5621 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.135612][ T5625] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 94.135612][ T5625] The task syz.1.776 (5625) triggered the difference, watch for misbehavior. [ 94.145757][ T29] audit: type=1400 audit(2000000039.360:980): avc: denied { ioctl } for pid=5618 comm="syz.4.779" path="socket:[14412]" dev="sockfs" ino=14412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.198519][ T29] audit: type=1400 audit(2000000039.420:981): avc: denied { ioctl } for pid=5622 comm="syz.3.781" path="socket:[14425]" dev="sockfs" ino=14425 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.268743][ T5632] netlink: 'syz.0.784': attribute type 4 has an invalid length. [ 94.282339][ T3585] lo speed is unknown, defaulting to 1000 [ 94.288261][ T3585] syz2: Port: 1 Link DOWN [ 94.334554][ T29] audit: type=1400 audit(2000000039.550:982): avc: denied { setopt } for pid=5636 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.394995][ T29] audit: type=1400 audit(2000000039.610:983): avc: denied { write } for pid=5636 comm="syz.3.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.634504][ T5667] loop2: detected capacity change from 0 to 1024 [ 95.668107][ T5667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.864492][ T29] audit: type=1400 audit(2000000041.080:984): avc: denied { bind } for pid=5668 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 95.969255][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.799'. [ 95.983322][ T5667] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.998884][ T5667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 96.027425][ T5675] netlink: 14 bytes leftover after parsing attributes in process `syz.1.800'. [ 96.028532][ T5667] System zones: 0-1, 3-36 [ 96.066405][ T5675] dummy0 (unregistering): left allmulticast mode [ 96.131111][ T5667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.160732][ T5685] netlink: 'syz.0.803': attribute type 1 has an invalid length. [ 96.202437][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.205717][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.220037][ T29] audit: type=1400 audit(2000000041.400:985): avc: denied { mounton } for pid=5666 comm="syz.2.796" path="/154/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.243708][ T29] audit: type=1400 audit(2000000041.400:986): avc: denied { override_creds } for pid=5666 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 96.272216][ T5688] netlink: 'syz.3.805': attribute type 4 has an invalid length. [ 96.279996][ T5676] lo speed is unknown, defaulting to 1000 [ 96.304663][ T5685] bond0: (slave dummy0): making interface the new active one [ 96.334160][ T5685] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 96.394815][ T5685] bond0: entered allmulticast mode [ 96.400376][ T5685] dummy0: entered allmulticast mode [ 96.473581][ T5703] xt_hashlimit: overflow, try lower: 3/0 [ 97.316410][ T5721] netlink: 36 bytes leftover after parsing attributes in process `syz.2.814'. [ 97.491652][ T5726] uprobe: syz.2.816:5726 failed to unregister, leaking uprobe [ 97.513506][ T5729] netlink: 'syz.4.818': attribute type 6 has an invalid length. [ 97.624961][ T29] audit: type=1400 audit(2000000298.840:987): avc: denied { accept } for pid=5733 comm="syz.2.819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 98.489886][ T4780] IPVS: starting estimator thread 0... [ 98.584963][ T5760] IPVS: using max 1728 ests per chain, 86400 per kthread [ 98.812911][ T5776] xt_hashlimit: size too large, truncated to 1048576 [ 98.950699][ T5781] geneve2: entered promiscuous mode [ 98.956818][ T5781] geneve2: entered allmulticast mode [ 99.508019][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 99.508036][ T29] audit: type=1326 audit(2000000300.730:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5800 comm="syz.3.843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x0 [ 99.588355][ T5807] bridge_slave_0: left allmulticast mode [ 99.594088][ T5807] bridge_slave_0: left promiscuous mode [ 99.599943][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.620161][ T5807] bridge_slave_1: left allmulticast mode [ 99.626119][ T5807] bridge_slave_1: left promiscuous mode [ 99.632122][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.673021][ T5807] bond0: (slave bond_slave_0): Releasing backup interface [ 99.703852][ T5807] bond0: (slave bond_slave_1): Releasing backup interface [ 99.733984][ T5807] team0: Port device team_slave_0 removed [ 99.763273][ T5807] team0: Port device team_slave_1 removed [ 99.780376][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.802638][ T5807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.830885][ T5807] bond1: (slave ip6gretap1): Releasing active interface [ 99.853189][ T5811] team0: Mode changed to "activebackup" [ 99.905383][ T5818] bridge1: entered promiscuous mode [ 99.910678][ T5818] bridge1: entered allmulticast mode [ 99.959784][ T5818] team0: Port device bridge1 added [ 99.965411][ T5820] bridge0: port 1(team0) entered blocking state [ 99.971936][ T5820] bridge0: port 1(team0) entered disabled state [ 99.978751][ T5820] team0: entered allmulticast mode [ 99.983923][ T5820] team_slave_0: entered allmulticast mode [ 99.989945][ T5820] team_slave_1: entered allmulticast mode [ 100.029781][ T5820] team0: entered promiscuous mode [ 100.034953][ T5820] team_slave_0: entered promiscuous mode [ 100.040779][ T5820] team_slave_1: entered promiscuous mode [ 100.047967][ T5820] bridge0: port 1(team0) entered blocking state [ 100.054409][ T5820] bridge0: port 1(team0) entered forwarding state [ 100.144997][ T29] audit: type=1400 audit(2000000301.360:1005): avc: denied { mounton } for pid=5824 comm="syz.2.851" path="/163/file0" dev="tmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.549846][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 100.574284][ T5838] bond0: (slave dummy0): Releasing active interface [ 100.581039][ T5838] dummy0 (unregistering): left allmulticast mode [ 100.650770][ T5847] netlink: 'syz.3.858': attribute type 33 has an invalid length. [ 100.659352][ T5847] netlink: 164 bytes leftover after parsing attributes in process `syz.3.858'. [ 100.669248][ T5847] netlink: 14 bytes leftover after parsing attributes in process `syz.3.858'. [ 100.774874][ T5854] netlink: 'syz.3.862': attribute type 142 has an invalid length. [ 100.782740][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.862'. [ 100.856490][ T29] audit: type=1400 audit(2000000302.080:1006): avc: denied { ioctl } for pid=5855 comm="syz.0.860" path="socket:[13727]" dev="sockfs" ino=13727 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.900104][ T29] audit: type=1400 audit(2000000302.110:1007): avc: denied { write } for pid=5855 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 100.998424][ T5859] loop2: detected capacity change from 0 to 128 [ 101.007299][ T5859] msdos: Bad value for 'fmask' [ 101.324457][ T5877] loop4: detected capacity change from 0 to 256 [ 101.346560][ T29] audit: type=1400 audit(2000000302.560:1008): avc: denied { read write } for pid=5875 comm="syz.4.870" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.370602][ T29] audit: type=1400 audit(2000000302.560:1009): avc: denied { ioctl open } for pid=5875 comm="syz.4.870" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 101.660846][ T29] audit: type=1400 audit(2000000302.880:1010): avc: denied { ioctl } for pid=5890 comm="syz.4.876" path="socket:[13783]" dev="sockfs" ino=13783 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.695743][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.876'. [ 101.706300][ T5891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.732106][ T29] audit: type=1400 audit(2000000302.950:1011): avc: denied { firmware_load } for pid=5892 comm="syz.1.877" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 102.008782][ T29] audit: type=1400 audit(2000000303.230:1012): avc: denied { read } for pid=5901 comm="syz.2.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.081285][ T29] audit: type=1400 audit(2000000303.300:1013): avc: denied { getopt } for pid=5896 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.257691][ T5907] loop4: detected capacity change from 0 to 128 [ 102.284715][ T5907] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 102.514497][ T5908] uprobe: syz.3.882:5908 failed to unregister, leaking uprobe [ 102.726768][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.0.886'. [ 102.841684][ T5923] ipip0: entered promiscuous mode [ 103.081745][ T5928] syzkaller0: entered promiscuous mode [ 103.087317][ T5928] syzkaller0: entered allmulticast mode [ 103.167376][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 103.176758][ T5937] syz_tun (unregistering): left allmulticast mode [ 103.267905][ T5943] loop2: detected capacity change from 0 to 764 [ 103.293179][ T5943] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 103.315423][ T5945] VFS: Mount too revealing [ 103.427013][ T5959] netlink: 'syz.1.902': attribute type 13 has an invalid length. [ 103.956755][ T5971] lo speed is unknown, defaulting to 1000 [ 104.325354][ T5975] netlink: 176 bytes leftover after parsing attributes in process `syz.3.908'. [ 104.384384][ T5980] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 104.700802][ T5990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.748485][ T5996] vlan2: entered allmulticast mode [ 104.753802][ T5996] bond2: entered allmulticast mode [ 105.266084][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 105.266102][ T29] audit: type=1326 audit(2000000306.490:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.337992][ T29] audit: type=1326 audit(2000000306.530:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.361552][ T29] audit: type=1326 audit(2000000306.530:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.385327][ T29] audit: type=1326 audit(2000000306.530:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.408797][ T29] audit: type=1326 audit(2000000306.530:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.432224][ T29] audit: type=1326 audit(2000000306.530:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.455690][ T29] audit: type=1326 audit(2000000306.530:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.479347][ T29] audit: type=1326 audit(2000000306.530:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.503120][ T29] audit: type=1326 audit(2000000306.530:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.526765][ T29] audit: type=1326 audit(2000000306.530:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6013 comm="syz.3.922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 105.578758][ T6014] lo speed is unknown, defaulting to 1000 [ 105.686713][ T6027] xt_hashlimit: size too large, truncated to 1048576 [ 105.796604][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.930'. [ 105.815165][ T6035] : renamed from vxcan1 (while UP) [ 106.012220][ T6041] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 106.067295][ T6025] lo speed is unknown, defaulting to 1000 [ 106.191854][ T6045] bond3: entered promiscuous mode [ 106.197105][ T6045] bridge5: entered promiscuous mode [ 106.202516][ T6045] bond3: entered allmulticast mode [ 106.207716][ T6045] bridge5: entered allmulticast mode [ 106.335507][ T6050] xt_hashlimit: size too large, truncated to 1048576 [ 106.608107][ T6059] net_ratelimit: 10 callbacks suppressed [ 106.608136][ T6059] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.733046][ T6063] netlink: 176 bytes leftover after parsing attributes in process `syz.4.937'. [ 106.743423][ T6065] loop2: detected capacity change from 0 to 256 [ 108.295724][ T6100] netlink: 176 bytes leftover after parsing attributes in process `syz.1.951'. [ 108.492471][ T6111] gre4: entered promiscuous mode [ 108.497622][ T6111] gre4: entered allmulticast mode [ 108.507968][ T6098] lo speed is unknown, defaulting to 1000 [ 108.870391][ T6129] netlink: 'syz.2.962': attribute type 1 has an invalid length. [ 108.878346][ T6129] netlink: 668 bytes leftover after parsing attributes in process `syz.2.962'. [ 108.971496][ T6136] loop2: detected capacity change from 0 to 164 [ 108.991215][ T6136] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 109.112945][ T6136] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 109.126517][ T6136] Symlink component flag not implemented [ 109.132267][ T6136] Symlink component flag not implemented [ 109.148625][ T6136] Symlink component flag not implemented (7) [ 109.154655][ T6136] Symlink component flag not implemented (116) [ 109.250689][ T6141] loop2: detected capacity change from 0 to 128 [ 109.281197][ T6141] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.296568][ T6141] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.388296][ T6141] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 109.415736][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.436857][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.968'. [ 110.792492][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 110.792577][ T29] audit: type=1400 audit(2000000312.010:1663): avc: denied { setopt } for pid=6167 comm="syz.2.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 110.821506][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 111.233561][ T6182] netlink: 27 bytes leftover after parsing attributes in process `syz.0.982'. [ 111.367452][ T6163] loop4: detected capacity change from 0 to 2048 [ 111.382212][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 111.431142][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 111.452810][ T6191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6191 comm=syz.0.986 [ 111.455896][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 111.605429][ T29] audit: type=1400 audit(2000000312.820:1664): avc: denied { create } for pid=6207 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.625739][ T29] audit: type=1400 audit(2000000312.830:1665): avc: denied { write } for pid=6207 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.649590][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 111.665749][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.673380][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.684317][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.691887][ T6208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.748540][ T6216] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 111.757259][ T6216] Unknown options in mask 20 [ 111.789954][ T6214] __nla_validate_parse: 2 callbacks suppressed [ 111.790097][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.995'. [ 111.794296][ T6220] xt_hashlimit: size too large, truncated to 1048576 [ 111.897012][ T6225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.950422][ T29] audit: type=1400 audit(2000000313.170:1666): avc: denied { sqpoll } for pid=6226 comm="syz.1.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.003909][ T6230] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1000'. [ 112.112155][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1002'. [ 112.133365][ T6237] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6237 comm=syz.2.1002 [ 112.433498][ T29] audit: type=1400 audit(2000000313.640:1667): avc: denied { map } for pid=6244 comm="syz.4.1006" path="socket:[18441]" dev="sockfs" ino=18441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 112.456900][ T29] audit: type=1400 audit(2000000313.640:1668): avc: denied { read } for pid=6244 comm="syz.4.1006" path="socket:[18441]" dev="sockfs" ino=18441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.111392][ T6259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 113.249981][ T6271] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.303268][ T6252] lo speed is unknown, defaulting to 1000 [ 113.470812][ T6288] loop2: detected capacity change from 0 to 512 [ 113.524428][ T6288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.537260][ T6288] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.565547][ T6288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 113.604992][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.667325][ T29] audit: type=1326 audit(2000000314.890:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 113.690925][ T29] audit: type=1326 audit(2000000314.890:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 113.714445][ T29] audit: type=1326 audit(2000000314.890:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 113.738033][ T29] audit: type=1326 audit(2000000314.890:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.4.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 113.762012][ T6303] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1023'. [ 113.771269][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1023'. [ 113.880499][ T6308] loop4: detected capacity change from 0 to 1024 [ 113.902024][ T6308] EXT4-fs: Ignoring removed orlov option [ 113.907883][ T6308] EXT4-fs: inline encryption not supported [ 113.995980][ T6308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.189168][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.565271][ T6323] loop2: detected capacity change from 0 to 512 [ 114.610442][ T6320] lo speed is unknown, defaulting to 1000 [ 115.008466][ T6335] lo speed is unknown, defaulting to 1000 [ 116.712598][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'. [ 116.758151][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1047'. [ 116.768470][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.776021][ T6363] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6363 comm=syz.2.1045 [ 116.847311][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.869152][ T6363] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 116.955269][ T6376] dvmrp6: entered allmulticast mode [ 116.970074][ T6378] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1051'. [ 117.168763][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 117.168783][ T29] audit: type=1400 audit(2000000318.390:1895): avc: denied { read } for pid=6384 comm="syz.3.1054" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 117.283538][ T29] audit: type=1400 audit(2000000318.500:1896): avc: denied { execute_no_trans } for pid=6396 comm="syz.2.1058" path="/211/file1" dev="tmpfs" ino=1119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.701062][ T6401] loop2: detected capacity change from 0 to 512 [ 117.723720][ T6401] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1060: corrupted inode contents [ 117.738108][ T6401] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 117.747470][ T6401] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.1060: corrupted inode contents [ 117.759603][ T6401] EXT4-fs error (device loop2): ext4_evict_inode:301: inode #15: comm syz.2.1060: mark_inode_dirty error [ 117.774297][ T6401] EXT4-fs (loop2): 1 orphan inode deleted [ 117.780790][ T6401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.887522][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.951748][ T29] audit: type=1400 audit(2000000319.170:1897): avc: denied { setopt } for pid=6418 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 117.971343][ T29] audit: type=1400 audit(2000000319.170:1898): avc: denied { write } for pid=6418 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.116928][ T6424] lo speed is unknown, defaulting to 1000 [ 118.504007][ T6426] lo speed is unknown, defaulting to 1000 [ 119.252974][ T6448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 119.624765][ T29] audit: type=1326 audit(2000000320.840:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 119.648516][ T29] audit: type=1326 audit(2000000320.840:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 119.679463][ T29] audit: type=1326 audit(2000000320.900:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 119.703033][ T29] audit: type=1326 audit(2000000320.900:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 119.726568][ T29] audit: type=1326 audit(2000000320.900:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 119.750169][ T29] audit: type=1326 audit(2000000320.900:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6462 comm="syz.3.1081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 120.489840][ T6481] ref_ctr increment failed for inode: 0x4e8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881042f4380 [ 120.677912][ T6489] lo: Caught tx_queue_len zero misconfig [ 120.694666][ T6487] netlink: 'syz.3.1090': attribute type 1 has an invalid length. [ 120.749013][ T6487] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 120.761504][ T6487] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 120.771904][ T6487] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 120.844100][ T6498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 120.895946][ T6498] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6498 comm=syz.2.1095 [ 120.945490][ T6506] netlink: 'syz.3.1099': attribute type 83 has an invalid length. [ 121.008956][ T6508] bond1: (slave veth7): Enslaving as an active interface with a down link [ 121.022886][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 121.031913][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 121.144224][ T6508] bond1: (slave veth9): Enslaving as an active interface with a down link [ 121.316183][ T6529] lo speed is unknown, defaulting to 1000 [ 122.274092][ T6566] loop2: detected capacity change from 0 to 128 [ 122.291540][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 122.652772][ T6566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.665175][ T6566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.712766][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1123'. [ 122.742564][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 122.796424][ T6573] vlan0: entered promiscuous mode [ 122.801519][ T6573] bridge0: entered promiscuous mode [ 122.807094][ T6573] vlan0: entered allmulticast mode [ 122.812513][ T6573] bridge0: entered allmulticast mode [ 122.856126][ T6580] netlink: 'syz.1.1128': attribute type 1 has an invalid length. [ 122.866566][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 122.866645][ T29] audit: type=1400 audit(2000000324.090:2254): avc: denied { connect } for pid=6576 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.920818][ T6580] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.929130][ T6580] bond1: (slave bond2): making interface the new active one [ 122.937042][ T6580] bond1: (slave bond2): Enslaving as an active interface with an up link [ 122.964032][ T6580] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 122.976536][ T6580] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 123.350474][ T6603] tmpfs: Unsupported parameter 'huge' [ 123.365197][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.365197][ T31] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 123.416844][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.416844][ T31] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 123.503441][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.503441][ T31] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 123.589532][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.589532][ T31] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 123.672352][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.672352][ T31] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 123.685802][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.685802][ T31] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 123.699364][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.699364][ T31] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 123.712862][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.712862][ T31] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 123.726955][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.726955][ T31] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 123.740481][ T31] kworker/u8:1: attempt to access beyond end of device [ 123.740481][ T31] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 123.766834][ T29] audit: type=1326 audit(2000000324.990:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 123.896890][ T29] audit: type=1326 audit(2000000325.030:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 123.920404][ T29] audit: type=1326 audit(2000000325.030:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 123.943963][ T29] audit: type=1326 audit(2000000325.030:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 123.967409][ T29] audit: type=1326 audit(2000000325.030:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 123.990914][ T29] audit: type=1326 audit(2000000325.030:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 124.014367][ T29] audit: type=1326 audit(2000000325.030:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 124.037958][ T29] audit: type=1326 audit(2000000325.030:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 124.061498][ T29] audit: type=1326 audit(2000000325.030:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6606 comm="syz.0.1135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 124.208284][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1140'. [ 124.265274][ T6618] lo speed is unknown, defaulting to 1000 [ 124.413475][ T6631] loop4: detected capacity change from 0 to 256 [ 124.490864][ T6635] netlink: 'syz.3.1147': attribute type 10 has an invalid length. [ 124.500264][ T6635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.510137][ T6635] team0: Port device bond0 added [ 124.515922][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'. [ 124.764215][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.775204][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.878504][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'. [ 124.900446][ T6654] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 124.909282][ T1793] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.919410][ T1793] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.928804][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1153'. [ 124.933115][ T1793] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.946721][ T1793] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.960315][ T6654] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 124.985893][ T6654] bond3 (unregistering): Released all slaves [ 124.995386][ T1793] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.004543][ T1793] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.019283][ T1793] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.029682][ T1793] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 125.586719][ T6702] loop4: detected capacity change from 0 to 128 [ 125.593506][ T6702] msdos: Bad value for 'fmask' [ 125.826961][ T6711] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1163'. [ 127.092366][ T6741] tipc: Enabling of bearer rejected, failed to enable media [ 127.821867][ T6760] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1177'. [ 127.899489][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1181'. [ 127.970196][ T6763] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 127.998492][ T6763] macvlan2: entered promiscuous mode [ 128.003900][ T6763] macvlan2: entered allmulticast mode [ 128.009932][ T6763] bond2: entered promiscuous mode [ 128.015038][ T6763] bridge2: entered promiscuous mode [ 128.020733][ T6763] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.033932][ T6763] bond2: left promiscuous mode [ 128.038876][ T6763] bridge2: left promiscuous mode [ 128.389598][ T6801] loop2: detected capacity change from 0 to 512 [ 128.398354][ T6801] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 128.439515][ T6801] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.1189: inode has both inline data and extents flags [ 128.473752][ T6801] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1189: couldn't read orphan inode 17 (err -117) [ 128.523047][ T6801] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.564436][ T6801] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1189: bg 0: block 65: padding at end of block bitmap is not set [ 128.579175][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 128.588227][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1172'. [ 128.626133][ T6801] __quota_error: 27 callbacks suppressed [ 128.626153][ T6801] Quota error (device loop2): write_blk: dquota write failed [ 128.652690][ T6801] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 128.667521][ T6816] Quota error (device loop2): do_check_range: Getting block 144 out of range 0-5 [ 128.693794][ T29] audit: type=1400 audit(2000000329.910:2291): avc: denied { mounton } for pid=6820 comm="syz.1.1191" path="/267/file0" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 128.717345][ T6825] FAT-fs (loop3): unable to read boot sector [ 128.731538][ T6801] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1189: Failed to acquire dquot type 0 [ 129.614480][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.002417][ T6858] loop4: detected capacity change from 0 to 512 [ 130.273469][ T6858] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.309194][ T6858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.322412][ T6858] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.407491][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.513053][ T29] audit: type=1326 audit(2000000331.730:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 130.536646][ T29] audit: type=1326 audit(2000000331.730:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 130.574720][ T29] audit: type=1326 audit(2000000331.780:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 130.598384][ T29] audit: type=1326 audit(2000000331.790:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 130.622126][ T29] audit: type=1326 audit(2000000331.790:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 130.645807][ T29] audit: type=1326 audit(2000000331.790:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6874 comm="syz.4.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ed0daeb9 code=0x7ffc0000 [ 130.670388][ T6879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'. [ 130.715761][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 130.909502][ T6890] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 131.165428][ T6909] netlink: 'syz.2.1217': attribute type 7 has an invalid length. [ 131.173311][ T6909] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1217'. [ 131.218048][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 131.227992][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 132.004888][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1224'. [ 132.655309][ T6935] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff0xffffffffffffffff0x000000000000025d0xffffffffffffffff' [ 132.783329][ T6945] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 132.816733][ T6941] macvlan0: entered promiscuous mode [ 132.822098][ T6941] macvlan0: entered allmulticast mode [ 132.853481][ T6941] bond3: entered promiscuous mode [ 132.858645][ T6941] bridge1: entered promiscuous mode [ 132.910031][ T6941] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 132.935347][ T6941] bond3: left promiscuous mode [ 132.940201][ T6941] bridge1: left promiscuous mode [ 133.636571][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 133.636590][ T29] audit: type=1400 audit(2000000590.851:2510): avc: denied { getattr } for pid=6976 comm="syz.2.1241" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=19663 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.838035][ T6989] __nla_validate_parse: 1 callbacks suppressed [ 133.838057][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 134.070520][ T7004] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1247'. [ 134.080828][ T6999] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1247'. [ 134.109960][ T7006] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 134.119775][ T7006] smc: net device bond0 applied user defined pnetid SYZ0 [ 134.127520][ T7006] smc: net device bond0 erased user defined pnetid SYZ0 [ 134.199685][ T29] audit: type=1326 audit(2000000591.421:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.228082][ T29] audit: type=1326 audit(2000000591.421:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.251682][ T29] audit: type=1326 audit(2000000591.421:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.275171][ T29] audit: type=1326 audit(2000000591.451:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.298957][ T29] audit: type=1326 audit(2000000591.451:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.322398][ T29] audit: type=1326 audit(2000000591.451:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.345948][ T29] audit: type=1326 audit(2000000591.451:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.369533][ T29] audit: type=1326 audit(2000000591.451:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.393199][ T29] audit: type=1326 audit(2000000591.451:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7012 comm="syz.2.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 134.643794][ T7028] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 134.651928][ T7021] netlink: 'syz.4.1254': attribute type 3 has an invalid length. [ 134.667458][ T7028] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'. [ 134.685788][ T7028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.702656][ T7028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.714577][ T7028] bond4: (slave geneve2): making interface the new active one [ 134.723411][ T7028] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 134.732993][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 134.752666][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 134.804956][ T1793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 134.817122][ T1793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 134.976639][ T7037] lo speed is unknown, defaulting to 1000 [ 136.233515][ T7064] wireguard0: entered promiscuous mode [ 136.239099][ T7064] wireguard0: entered allmulticast mode [ 136.453451][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1276'. [ 136.462747][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 136.840282][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1282'. [ 136.858008][ T7095] 8021q: adding VLAN 0 to HW filter on device bond4 [ 136.898730][ T7095] macvlan2: entered promiscuous mode [ 136.904132][ T7095] macvlan2: entered allmulticast mode [ 136.910845][ T7095] bond4: entered promiscuous mode [ 136.916291][ T7095] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.924316][ T7095] bond4: left promiscuous mode [ 137.205527][ T7111] loop4: detected capacity change from 0 to 128 [ 137.334936][ T7117] bio_check_eod: 94 callbacks suppressed [ 137.334956][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.334956][ T7117] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 137.415398][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.415398][ T7117] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 137.514025][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.514025][ T7117] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 137.595209][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.595209][ T7117] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 137.611000][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.611000][ T7117] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 137.662505][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.662505][ T7117] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 137.715354][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.715354][ T7117] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 137.741778][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.741778][ T7117] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 137.785266][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.785266][ T7117] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 137.825080][ T7117] syz.4.1288: attempt to access beyond end of device [ 137.825080][ T7117] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 137.868049][ T7130] lo speed is unknown, defaulting to 1000 [ 137.969566][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1296'. [ 138.066718][ T7136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7136 comm=syz.4.1296 [ 138.120579][ T7141] loop4: detected capacity change from 0 to 512 [ 138.149681][ T7141] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 138.200755][ T7141] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 138.241967][ T7141] loop4: detected capacity change from 0 to 512 [ 138.255990][ T7141] EXT4-fs: inline encryption not supported [ 138.294894][ T7141] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 138.303085][ T7141] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.310810][ T7141] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 138.326426][ T7141] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 138.333347][ T7141] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.1297: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 138.351536][ T7141] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1297: couldn't read orphan inode 13 (err -117) [ 138.374774][ T7141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.416079][ T7141] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 138.429280][ T7141] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c01c, mo2=0002] [ 138.455714][ T7141] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 138.456436][ T7151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1300'. [ 138.490393][ T7151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7151 comm=syz.1.1300 [ 138.503214][ T7153] EXT4-fs error (device loop4): ext4_lookup:1785: comm syz.4.1297: inode #15: comm syz.4.1297: iget: illegal inode # [ 138.547965][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.589612][ T7155] sit0: Caught tx_queue_len zero misconfig [ 138.595738][ T7155] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1301'. [ 138.657938][ T7158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1303'. [ 140.063777][ T7191] lo speed is unknown, defaulting to 1000 [ 140.141268][ T7198] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff0xffffffffffffffff0x00000000000002ad0xffffffffffffffff' [ 140.304516][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 140.304534][ T29] audit: type=1400 audit(2000000853.525:2594): avc: denied { mounton } for pid=7206 comm="syz.4.1318" path="/256/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 140.407848][ T29] audit: type=1400 audit(2000000853.635:2595): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 140.427933][ T29] audit: type=1400 audit(2000000853.635:2596): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.604959][ T7217] capability: warning: `syz.2.1322' uses deprecated v2 capabilities in a way that may be insecure [ 141.062621][ T7230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.115008][ T7230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.416835][ T29] audit: type=1400 audit(2000000855.635:2597): avc: denied { getopt } for pid=7268 comm="syz.4.1342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 142.422818][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 142.665100][ T7272] msdos: Unknown parameter '18446744073709551615017777777777777777777770xffffffffffffffff0xffffffffffffffff0x00000000000002b00xffffffffffffffff' [ 142.820532][ T7285] netlink: 'syz.3.1348': attribute type 4 has an invalid length. [ 142.837462][ T7285] netlink: 'syz.3.1348': attribute type 4 has an invalid length. [ 143.118054][ T7293] lo speed is unknown, defaulting to 1000 [ 143.295641][ T29] audit: type=1326 audit(2000000856.525:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 143.354139][ T29] audit: type=1326 audit(2000000856.525:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 143.377741][ T29] audit: type=1326 audit(2000000856.525:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 143.444236][ T29] audit: type=1326 audit(2000000856.625:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 143.467811][ T29] audit: type=1326 audit(2000000856.625:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7282 comm="syz.1.1347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 143.531271][ T7306] tipc: Failed to remove unknown binding: 66,0,0/0:758136373/758136374 [ 143.543076][ T7306] tipc: Failed to remove unknown binding: 66,0,0/0:758136373/758136374 [ 143.634621][ T7308] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 143.667312][ T7308] netlink: 'syz.0.1357': attribute type 4 has an invalid length. [ 143.684257][ T10] lo speed is unknown, defaulting to 1000 [ 143.690082][ T10] syz2: Port: 1 Link ACTIVE [ 143.927574][ T7313] lo speed is unknown, defaulting to 1000 [ 143.968746][ T7314] xt_hashlimit: size too large, truncated to 1048576 [ 144.199603][ T7313] netlink: 'syz.1.1360': attribute type 2 has an invalid length. [ 144.315501][ T7313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1360'. [ 144.752610][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 144.761698][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 144.819441][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1373'. [ 144.839311][ T29] audit: type=1400 audit(2000000858.025:2603): avc: denied { bind } for pid=7350 comm="syz.3.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 144.890773][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 144.900564][ T7347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 146.349066][ T7377] netlink: 'syz.4.1383': attribute type 39 has an invalid length. [ 146.518990][ T29] audit: type=1400 audit(2000000859.745:2604): avc: denied { ioctl } for pid=7380 comm="syz.3.1384" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21317 ioctlcmd=0x662c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.924163][ T7385] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.034634][ T7385] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.057465][ T7394] netlink: 'syz.4.1388': attribute type 1 has an invalid length. [ 147.116991][ T7394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 147.157248][ T7394] bond4: (slave bond5): making interface the new active one [ 147.173892][ T7394] bond4: (slave bond5): Enslaving as an active interface with an up link [ 147.186018][ T7404] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1390'. [ 147.202479][ T7385] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.224392][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1388'. [ 147.253189][ T7401] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 147.264744][ T7405] 8021q: adding VLAN 0 to HW filter on device bond4 [ 147.326138][ T7385] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.414022][ T1793] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.425923][ T1793] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.603553][ T7420] lo speed is unknown, defaulting to 1000 [ 147.664877][ T1793] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.673130][ T1793] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.799938][ T7429] loop4: detected capacity change from 0 to 1024 [ 147.845681][ T7429] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.105193][ T7429] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.1400: iget: bogus i_mode (1) [ 148.156847][ T7429] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1400: couldn't read orphan inode 11 (err -117) [ 148.190720][ T7429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.999585][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.404948][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 149.413869][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 149.422941][ T7478] netlink: 'syz.0.1418': attribute type 1 has an invalid length. [ 150.847932][ T29] audit: type=1326 audit(2000000864.075:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 150.871498][ T29] audit: type=1326 audit(2000000864.075:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.000480][ T29] audit: type=1326 audit(2000000864.125:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.024054][ T29] audit: type=1326 audit(2000000864.125:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.047502][ T29] audit: type=1326 audit(2000000864.125:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.071012][ T29] audit: type=1326 audit(2000000864.125:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.094715][ T29] audit: type=1326 audit(2000000864.125:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.118379][ T29] audit: type=1326 audit(2000000864.135:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.141824][ T29] audit: type=1326 audit(2000000864.135:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7501 comm="syz.1.1426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 151.320861][ T7508] netlink: 'syz.3.1429': attribute type 1 has an invalid length. [ 151.356560][ T7508] 8021q: adding VLAN 0 to HW filter on device bond5 [ 151.402182][ T7508] ip6erspan0: entered promiscuous mode [ 151.411119][ T7508] bond5: (slave ip6erspan0): making interface the new active one [ 151.421056][ T7508] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 151.442880][ T7508] macvlan2: entered promiscuous mode [ 151.448748][ T7508] bond5: entered promiscuous mode [ 151.454452][ T7508] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.462998][ T7508] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 151.479410][ T7508] bond5: left promiscuous mode [ 151.713491][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 151.723296][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1433'. [ 151.804560][ T7524] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 151.829286][ T7524] bond6: (slave gretap1): making interface the new active one [ 151.845647][ T7524] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 152.584379][ T57] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.593030][ T57] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.601529][ T57] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.610310][ T7518] lo speed is unknown, defaulting to 1000 [ 152.630840][ T57] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.831302][ T7545] lo speed is unknown, defaulting to 1000 [ 153.380110][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 153.380127][ T29] audit: type=1326 audit(2000000866.605:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7581 comm="syz.1.1449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f780d8b4cd7 code=0x0 [ 154.219274][ T7605] batman_adv: batadv0: Interface deactivated: dummy0 [ 154.377649][ T7612] lo speed is unknown, defaulting to 1000 [ 155.025190][ T7627] netlink: 'syz.3.1462': attribute type 13 has an invalid length. [ 155.055146][ T7627] gretap0: refused to change device tx_queue_len [ 155.061922][ T7627] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.128714][ T7627] netlink: 'syz.3.1462': attribute type 4 has an invalid length. [ 155.473023][ T7642] loop4: detected capacity change from 0 to 764 [ 155.735843][ T7654] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1473'. [ 155.744934][ T7654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.745963][ T7642] iso9660: Unknown parameter 'overridC۝Am' [ 155.997164][ T7656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1474'. [ 156.006275][ T7656] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1474'. [ 156.015351][ T7656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1474'. [ 156.055243][ T7656] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1474'. [ 156.358395][ T7608] lo speed is unknown, defaulting to 1000 [ 156.604520][ T7673] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1480'. [ 156.704905][ T29] audit: type=1326 audit(2000000869.915:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.728482][ T29] audit: type=1326 audit(2000000869.915:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.751966][ T29] audit: type=1326 audit(2000000869.915:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.775533][ T29] audit: type=1326 audit(2000000869.915:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.799116][ T29] audit: type=1326 audit(2000000869.915:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.822632][ T29] audit: type=1326 audit(2000000869.915:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.846130][ T29] audit: type=1326 audit(2000000869.915:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.869552][ T29] audit: type=1326 audit(2000000869.915:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 156.892958][ T29] audit: type=1326 audit(2000000869.915:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7675 comm="syz.0.1481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 157.372836][ T7690] tipc: Enabling of bearer rejected, failed to enable media [ 157.767568][ T7709] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.127447][ T7734] syzkaller0: entered promiscuous mode [ 158.133015][ T7734] syzkaller0: entered allmulticast mode [ 158.397391][ T7742] tipc: Enabling of bearer rejected, failed to enable media [ 158.430507][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 158.496074][ T7748] macvlan2: entered allmulticast mode [ 158.501611][ T7748] hsr0: entered allmulticast mode [ 158.506752][ T7748] hsr_slave_0: entered allmulticast mode [ 158.512479][ T7748] hsr_slave_1: entered allmulticast mode [ 159.627449][ T7783] tipc: Enabling of bearer rejected, failed to enable media [ 160.389504][ T7801] netlink: 'syz.3.1521': attribute type 3 has an invalid length. [ 160.397400][ T7801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1521'. [ 160.463332][ T7803] syzkaller0: entered promiscuous mode [ 160.468942][ T7803] syzkaller0: entered allmulticast mode [ 160.605356][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 160.605375][ T29] audit: type=1326 audit(2000000873.835:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.640168][ T29] audit: type=1326 audit(2000000873.835:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.663686][ T29] audit: type=1326 audit(2000000873.835:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.687310][ T29] audit: type=1326 audit(2000000873.835:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.711115][ T29] audit: type=1326 audit(2000000873.835:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.734946][ T29] audit: type=1326 audit(2000000873.835:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.758446][ T29] audit: type=1326 audit(2000000873.835:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.781929][ T29] audit: type=1326 audit(2000000873.835:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.805702][ T29] audit: type=1326 audit(2000000873.835:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.829104][ T29] audit: type=1326 audit(2000000873.835:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7811 comm="syz.1.1535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f780d8baeb9 code=0x7ffc0000 [ 160.877284][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.885974][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.478185][ T7839] netlink: 'syz.3.1534': attribute type 1 has an invalid length. [ 161.505884][ T7839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 161.697962][ T7839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 161.715501][ T7839] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.726995][ T7839] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 161.767700][ T7842] veth5: entered promiscuous mode [ 161.786005][ T7842] bond7: (slave veth5): Enslaving as an active interface with a down link [ 161.884998][ T7839] macvlan2: entered promiscuous mode [ 161.890455][ T7839] macvlan2: entered allmulticast mode [ 161.939709][ T7839] bond7: entered promiscuous mode [ 161.948332][ T7839] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.966995][ T7839] bond7: left promiscuous mode [ 162.272754][ T7897] netlink: 'syz.0.1554': attribute type 6 has an invalid length. [ 162.280940][ T7897] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1554'. [ 162.522548][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.531184][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.159414][ T7919] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 163.167993][ T7919] bridge_slave_1: left allmulticast mode [ 163.173853][ T7919] bridge_slave_1: left promiscuous mode [ 163.179768][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.189938][ T7919] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 163.284757][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1561'. [ 163.346424][ T7927] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1564'. [ 163.479546][ T7938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1569'. [ 163.499295][ T7940] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1570'. [ 163.513833][ T7938] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7938 comm=syz.2.1569 [ 163.555367][ T7940] team0: Port device bond0 removed [ 163.594685][ T7940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.677928][ T7940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.738447][ T7940] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 163.800127][ T7900] syz.1.1555 (7900) used greatest stack depth: 6104 bytes left [ 163.810618][ T7940] bond0 (unregistering): Released all slaves [ 163.824914][ T7953] netlink: 'syz.4.1574': attribute type 4 has an invalid length. [ 163.875725][ T7954] netlink: 'syz.4.1574': attribute type 4 has an invalid length. [ 164.047956][ T7962] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 164.257467][ T7960] loop4: detected capacity change from 0 to 512 [ 164.351998][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 164.455966][ T7960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.474533][ T7962] bond0: entered promiscuous mode [ 164.479656][ T7962] bond0: entered allmulticast mode [ 164.543355][ T7962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.595810][ T7968] bond0 (unregistering): Released all slaves [ 164.644547][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.767431][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1581'. [ 164.806543][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1581'. [ 164.839058][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1584'. [ 164.845651][ T7981] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 164.901820][ T7981] 8021q: adding VLAN 0 to HW filter on device bond6 [ 165.533334][ T8034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1598'. [ 165.771363][ T8046] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 165.816896][ T8046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.857704][ T8046] bond5: (slave gretap1): making interface the new active one [ 165.866954][ T8046] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 166.032001][ T8046] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8046 comm=syz.2.1605 [ 166.424479][ T8060] bond0 (unregistering): Released all slaves [ 166.928069][ T8066] syz.3.1619 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 166.942142][ T8066] CPU: 0 UID: 0 PID: 8066 Comm: syz.3.1619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.942178][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.942197][ T8066] Call Trace: [ 166.942207][ T8066] [ 166.942235][ T8066] __dump_stack+0x1d/0x30 [ 166.942282][ T8066] dump_stack_lvl+0x95/0xd0 [ 166.942313][ T8066] dump_stack+0x15/0x1b [ 166.942347][ T8066] dump_header+0x80/0x240 [ 166.942447][ T8066] oom_kill_process+0x295/0x350 [ 166.942492][ T8066] out_of_memory+0x97d/0xb80 [ 166.942569][ T8066] try_charge_memcg+0x62e/0xa10 [ 166.942607][ T8066] obj_cgroup_charge_pages+0x23/0xc0 [ 166.942653][ T8066] __memcg_kmem_charge_page+0x9e/0x170 [ 166.942708][ T8066] __alloc_frozen_pages_noprof+0x18a/0x350 [ 166.942813][ T8066] alloc_pages_mpol+0xb3/0x260 [ 166.942858][ T8066] alloc_pages_noprof+0x8f/0x130 [ 166.942924][ T8066] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 166.942968][ T8066] __kvmalloc_node_noprof+0x471/0x680 [ 166.943002][ T8066] ? ip_set_alloc+0x24/0x30 [ 166.943095][ T8066] ? ip_set_alloc+0x24/0x30 [ 166.943182][ T8066] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 166.943240][ T8066] ip_set_alloc+0x24/0x30 [ 166.943346][ T8066] hash_netiface_create+0x282/0x740 [ 166.943388][ T8066] ? __pfx_hash_netiface_create+0x10/0x10 [ 166.943432][ T8066] ip_set_create+0x3cf/0x970 [ 166.943568][ T8066] ? __nla_parse+0x40/0x60 [ 166.943618][ T8066] nfnetlink_rcv_msg+0x509/0x5d0 [ 166.943739][ T8066] netlink_rcv_skb+0x123/0x220 [ 166.943854][ T8066] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 166.943898][ T8066] nfnetlink_rcv+0x167/0x1720 [ 166.943940][ T8066] ? trace_event_reg+0xe0/0x190 [ 166.943967][ T8066] ? perf_trace_add+0x176/0x1a0 [ 166.944035][ T8066] ? event_sched_in+0xebd/0xf90 [ 166.944089][ T8066] ? perf_swevent_event+0x22f/0x450 [ 166.944138][ T8066] ? perf_tp_event+0x161f/0x1660 [ 166.944246][ T8066] ? _raw_spin_lock_bh+0x56/0xb0 [ 166.944291][ T8066] ? should_fail_ex+0x30/0x280 [ 166.944343][ T8066] ? selinux_nlmsg_lookup+0x99/0x890 [ 166.944373][ T8066] ? __rcu_read_unlock+0x33/0x70 [ 166.944476][ T8066] ? __netlink_lookup+0x276/0x2b0 [ 166.944508][ T8066] netlink_unicast+0x5c0/0x690 [ 166.944615][ T8066] netlink_sendmsg+0x5c8/0x6f0 [ 166.944726][ T8066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.944747][ T8066] ____sys_sendmsg+0x5af/0x600 [ 166.944771][ T8066] ___sys_sendmsg+0x195/0x1e0 [ 166.944894][ T8066] __x64_sys_sendmsg+0xd4/0x160 [ 166.944926][ T8066] x64_sys_call+0x17ba/0x3000 [ 166.944957][ T8066] do_syscall_64+0xc0/0x2a0 [ 166.945044][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.945073][ T8066] RIP: 0033:0x7f844a8caeb9 [ 166.945105][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.945190][ T8066] RSP: 002b:00007f8449327028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.945220][ T8066] RAX: ffffffffffffffda RBX: 00007f844ab45fa0 RCX: 00007f844a8caeb9 [ 166.945239][ T8066] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 166.945257][ T8066] RBP: 00007f844a938c1f R08: 0000000000000000 R09: 0000000000000000 [ 166.945287][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.945312][ T8066] R13: 00007f844ab46038 R14: 00007f844ab45fa0 R15: 00007ffd708d1c38 [ 166.945341][ T8066] [ 167.269300][ T8066] memory: usage 307200kB, limit 307200kB, failcnt 346 [ 167.276112][ T8066] memory+swap: usage 307548kB, limit 9007199254740988kB, failcnt 0 [ 167.284036][ T8066] kmem: usage 239520kB, limit 9007199254740988kB, failcnt 0 [ 167.291379][ T8066] Memory cgroup stats for /syz3: [ 167.365066][ T8066] cache 69296128 [ 167.373672][ T8066] rss 0 [ 167.376525][ T8066] shmem 0 [ 167.379488][ T8066] mapped_file 0 [ 167.383043][ T8066] dirty 0 [ 167.386053][ T8066] writeback 0 [ 167.389357][ T8066] workingset_refault_anon 23 [ 167.393966][ T8066] workingset_refault_file 3 [ 167.398676][ T8066] swap 356352 [ 167.401981][ T8066] swapcached 8192 [ 167.405718][ T8066] pgpgin 240358 [ 167.409196][ T8066] pgpgout 223438 [ 167.412804][ T8066] pgfault 195458 [ 167.416435][ T8066] pgmajfault 16 [ 167.420116][ T8066] inactive_anon 0 [ 167.423766][ T8066] active_anon 8192 [ 167.427539][ T8066] inactive_file 0 [ 167.431191][ T8066] active_file 0 [ 167.434728][ T8066] unevictable 69296128 [ 167.438914][ T8066] hierarchical_memory_limit 314572800 [ 167.444459][ T8066] hierarchical_memsw_limit 9223372036854771712 [ 167.450705][ T8066] total_cache 69296128 [ 167.454821][ T8066] total_rss 0 [ 167.458129][ T8066] total_shmem 0 [ 167.461631][ T8066] total_mapped_file 0 [ 167.465759][ T8066] total_dirty 0 [ 167.469247][ T8066] total_writeback 0 [ 167.473120][ T8066] total_workingset_refault_anon 23 [ 167.478328][ T8066] total_workingset_refault_file 3 [ 167.483532][ T8066] total_swap 356352 [ 167.487658][ T8066] total_swapcached 8192 [ 167.491857][ T8066] total_pgpgin 240358 [ 167.496201][ T8066] total_pgpgout 223438 [ 167.500326][ T8066] total_pgfault 195458 [ 167.504420][ T8066] total_pgmajfault 16 [ 167.508598][ T8066] total_inactive_anon 0 [ 167.512847][ T8066] total_active_anon 8192 [ 167.517484][ T8066] total_inactive_file 0 [ 167.521662][ T8066] total_active_file 0 [ 167.525704][ T8066] total_unevictable 69296128 [ 167.530316][ T8066] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1619,pid=8065,uid=0 [ 167.545488][ T8066] Memory cgroup out of memory: Killed process 8065 (syz.3.1619) total-vm:96048kB, anon-rss:1204kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 167.980939][ T8088] __nla_validate_parse: 2 callbacks suppressed [ 167.981041][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1613'. [ 169.265461][ T8131] netlink: 'syz.1.1628': attribute type 27 has an invalid length. [ 169.274943][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 169.274961][ T29] audit: type=1400 audit(2000000883.490:2688): avc: denied { accept } for pid=8126 comm="syz.4.1627" path="socket:[23474]" dev="sockfs" ino=23474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 169.319695][ T8132] loop4: detected capacity change from 0 to 512 [ 169.428706][ T29] audit: type=1400 audit(2000000883.530:2689): avc: denied { nlmsg_read } for pid=8126 comm="syz.4.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 169.465788][ T8131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.498226][ T8131] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.520480][ T29] audit: type=1326 audit(2000000883.710:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.544049][ T29] audit: type=1326 audit(2000000883.710:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.567716][ T29] audit: type=1326 audit(2000000883.710:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.591327][ T29] audit: type=1326 audit(2000000883.710:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.614913][ T29] audit: type=1326 audit(2000000883.710:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.638490][ T29] audit: type=1326 audit(2000000883.710:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.661933][ T29] audit: type=1326 audit(2000000883.710:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.685474][ T29] audit: type=1326 audit(2000000883.710:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8137 comm="syz.2.1631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 169.712840][ T8131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.026015][ T8143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.123274][ T8149] loop4: detected capacity change from 0 to 128 [ 170.138085][ T8149] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 170.176710][ T8149] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 170.241270][ T8143] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.1633: checksumming directory block 0 [ 170.288249][ T8147] lo speed is unknown, defaulting to 1000 [ 170.354336][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.406739][ T8158] syzkaller0: entered promiscuous mode [ 170.412261][ T8158] syzkaller0: entered allmulticast mode [ 170.574103][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 170.886818][ T8185] lo speed is unknown, defaulting to 1000 [ 171.315055][ T8206] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 171.323665][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1652'. [ 171.346673][ T3585] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 171.477830][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1654'. [ 171.646361][ T52] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 171.654346][ T52] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 172.176511][ T8226] lo speed is unknown, defaulting to 1000 [ 172.224512][ T8239] xt_cgroup: invalid path, errno=-2 [ 172.365071][ T3585] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 172.619822][ T4786] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 173.431573][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1675'. [ 173.696663][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 173.726115][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 173.853182][ T8299] lo speed is unknown, defaulting to 1000 [ 174.689897][ T8328] loop4: detected capacity change from 0 to 1024 [ 174.730466][ T8288] lo speed is unknown, defaulting to 1000 [ 174.764623][ T8328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.778391][ T8328] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.791675][ T8328] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1690: inode has both inline data and extents flags [ 174.817345][ T8328] EXT4-fs (loop4): Remounting filesystem read-only [ 174.832284][ T8328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1690'. [ 174.853320][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 174.911078][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1694'. [ 174.920178][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1694'. [ 174.929135][ T8340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1694'. [ 175.483534][ T8356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.534931][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 175.543889][ T8359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1697'. [ 175.644895][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 175.644916][ T29] audit: type=1400 audit(2000000892.856:2808): avc: denied { read } for pid=8362 comm="syz.0.1700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 175.728413][ T8352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 175.738495][ T8359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.757715][ T8359] bond7: (slave bond0): making interface the new active one [ 175.776661][ T8359] bond7: (slave bond0): Enslaving as an active interface with an up link [ 175.825971][ T8361] bond7: (slave bond0): Releasing active interface [ 175.838134][ T8361] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.858498][ T8361] batman_adv: batadv0: Interface activated: dummy0 [ 175.865142][ T8361] batadv0: mtu less than device minimum [ 175.871634][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.882547][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.893487][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.904327][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.915263][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.926341][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.937231][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.948160][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.959247][ T8361] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 175.976391][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 176.012013][ T8361] batman_adv: batadv0: Interface deactivated: dummy0 [ 176.018863][ T8361] batman_adv: batadv0: Removing interface: dummy0 [ 176.048733][ T8366] lo speed is unknown, defaulting to 1000 [ 176.213669][ T8380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.235438][ T8380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.266397][ T8380] cgroup: noprefix used incorrectly [ 176.303908][ T29] audit: type=1326 audit(2000000893.526:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.327784][ T29] audit: type=1326 audit(2000000893.526:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.351520][ T29] audit: type=1326 audit(2000000893.526:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.375153][ T29] audit: type=1326 audit(2000000893.526:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.398759][ T29] audit: type=1326 audit(2000000893.526:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.422508][ T29] audit: type=1326 audit(2000000893.526:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.446062][ T29] audit: type=1326 audit(2000000893.526:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.469698][ T29] audit: type=1326 audit(2000000893.526:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.493170][ T29] audit: type=1326 audit(2000000893.526:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8382 comm="syz.0.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f021bb8aeb9 code=0x7ffc0000 [ 176.906165][ T8373] syz.2.1703 (8373) used greatest stack depth: 6008 bytes left [ 177.621065][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 177.630206][ T8409] netlink: 'syz.1.1714': attribute type 3 has an invalid length. [ 177.638193][ T8409] netlink: 'syz.1.1714': attribute type 2 has an invalid length. [ 179.429534][ T8387] lo speed is unknown, defaulting to 1000 [ 180.606130][ T8411] lo speed is unknown, defaulting to 1000 [ 180.669746][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 180.669762][ T29] audit: type=1326 audit(2000000897.896:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 180.771894][ T29] audit: type=1326 audit(2000000897.936:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 180.795460][ T29] audit: type=1326 audit(2000000897.936:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 180.818908][ T29] audit: type=1326 audit(2000000897.936:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 180.842345][ T29] audit: type=1326 audit(2000000897.946:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f844a88b78e code=0x7ffc0000 [ 180.865915][ T29] audit: type=1326 audit(2000000897.956:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 180.889368][ T29] audit: type=1326 audit(2000000897.956:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 180.912852][ T29] audit: type=1326 audit(2000000897.956:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 180.936403][ T29] audit: type=1326 audit(2000000897.956:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f844a86c2d9 code=0x7ffc0000 [ 180.960075][ T29] audit: type=1326 audit(2000000897.956:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8431 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f844a8caeb9 code=0x7ffc0000 [ 181.290550][ T8432] lo speed is unknown, defaulting to 1000 [ 181.968059][ T8445] lo speed is unknown, defaulting to 1000 [ 181.975621][ T8460] tipc: Started in network mode [ 181.980565][ T8460] tipc: Node identity ac14140f, cluster identity 4711 [ 181.988295][ T8460] tipc: New replicast peer: 255.255.255.255 [ 181.994406][ T8460] tipc: Enabled bearer , priority 10 [ 182.914781][ T8471] __nla_validate_parse: 2 callbacks suppressed [ 182.921215][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1734'. [ 183.115222][ T10] tipc: Node number set to 2886997007 [ 183.797920][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 184.652154][ T8529] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 184.764898][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 185.197033][ T8542] lo speed is unknown, defaulting to 1000 [ 185.705154][ T8569] lo speed is unknown, defaulting to 1000 [ 185.849221][ T8572] geneve2: entered promiscuous mode [ 185.858500][ T8572] geneve2: entered allmulticast mode [ 185.892110][ T8583] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8583 comm=syz.0.1772 [ 185.926432][ T1793] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.944363][ T1793] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.965418][ T1793] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 185.986688][ T1793] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 186.184087][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 186.184104][ T29] audit: type=1400 audit(2000000903.406:2955): avc: denied { setattr } for pid=8597 comm="syz.4.1778" name="" dev="pipefs" ino=25747 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 186.213146][ T8598] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1778'. [ 186.232969][ T8598] 0{X: renamed from gretap0 (while UP) [ 186.265451][ T8598] 0{X: entered allmulticast mode [ 186.281660][ T29] audit: type=1400 audit(2000000903.506:2956): avc: denied { mounton } for pid=8604 comm="syz.0.1779" path="/bus" dev="rootfs" ino=25558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 186.305315][ T8598] net_ratelimit: 11 callbacks suppressed [ 186.305336][ T8598] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 186.419811][ T29] audit: type=1400 audit(2000000903.646:2957): avc: denied { audit_read } for pid=8610 comm="syz.1.1782" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.371501][ T8626] netlink: 'syz.4.1787': attribute type 1 has an invalid length. [ 187.392317][ T8626] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.447502][ T8626] 8021q: adding VLAN 0 to HW filter on device bond8 [ 187.454775][ T8626] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.475793][ T8634] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1798'. [ 187.517496][ T8626] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 187.924020][ T8646] netlink: 'syz.3.1790': attribute type 13 has an invalid length. [ 187.997162][ T29] audit: type=1326 audit(2000000905.216:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 188.020808][ T29] audit: type=1326 audit(2000000905.216:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 188.044267][ T29] audit: type=1326 audit(2000000905.216:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 188.068042][ T29] audit: type=1326 audit(2000000905.216:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 188.091790][ T29] audit: type=1326 audit(2000000905.216:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 188.115409][ T29] audit: type=1326 audit(2000000905.216:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 188.138961][ T29] audit: type=1326 audit(2000000905.216:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8644 comm="syz.2.1791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7918b8aeb9 code=0x7ffc0000 [ 188.398100][ T8657] loop4: detected capacity change from 0 to 512 [ 188.405223][ T8655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8655 comm=syz.0.1792 [ 188.434858][ T8657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.447641][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1794'. [ 188.479020][ T8657] EXT4-fs (loop4): 1 orphan inode deleted [ 188.484934][ T8657] EXT4-fs (loop4): 1 truncate cleaned up [ 188.491353][ T8657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.537478][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.576047][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1795'. [ 188.713526][ T8684] loop4: detected capacity change from 0 to 1024 [ 188.722818][ T8684] EXT4-fs: Ignoring removed oldalloc option [ 188.728914][ T8684] EXT4-fs: Ignoring removed bh option [ 188.767605][ T8684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.161759][ T8691] ================================================================== [ 189.169920][ T8691] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 189.177085][ T8691] [ 189.179447][ T8691] write to 0xffff888107e8f76c of 4 bytes by task 8684 on cpu 0: [ 189.187115][ T8691] xas_set_mark+0x12b/0x140 [ 189.191686][ T8691] __folio_start_writeback+0x17b/0x370 [ 189.197192][ T8691] ext4_bio_write_folio+0x5ad/0x9f0 [ 189.202457][ T8691] mpage_process_page_bufs+0x4a1/0x620 [ 189.207967][ T8691] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 189.213834][ T8691] ext4_do_writepages+0x9f6/0x2800 [ 189.219001][ T8691] ext4_writepages+0x18f/0x320 [ 189.223821][ T8691] do_writepages+0x1c6/0x310 [ 189.228566][ T8691] file_write_and_wait_range+0x178/0x2f0 [ 189.234242][ T8691] generic_buffers_fsync_noflush+0x45/0x130 [ 189.240190][ T8691] ext4_sync_file+0x1aa/0x680 [ 189.244934][ T8691] vfs_fsync_range+0x10d/0x130 [ 189.249756][ T8691] ext4_buffered_write_iter+0x34f/0x3c0 [ 189.255379][ T8691] ext4_file_write_iter+0x380/0xf70 [ 189.260667][ T8691] iter_file_splice_write+0x6bc/0xa80 [ 189.266082][ T8691] direct_splice_actor+0x156/0x2a0 [ 189.271235][ T8691] splice_direct_to_actor+0x311/0x670 [ 189.276753][ T8691] do_splice_direct+0x119/0x1a0 [ 189.281642][ T8691] do_sendfile+0x382/0x650 [ 189.286091][ T8691] __x64_sys_sendfile64+0x105/0x150 [ 189.291335][ T8691] x64_sys_call+0x2db1/0x3000 [ 189.296053][ T8691] do_syscall_64+0xc0/0x2a0 [ 189.300597][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.306528][ T8691] [ 189.308879][ T8691] read to 0xffff888107e8f76c of 4 bytes by task 8691 on cpu 1: [ 189.316451][ T8691] xas_find_marked+0x5d7/0x620 [ 189.321255][ T8691] filemap_get_folios_tag+0xfa/0x510 [ 189.326597][ T8691] mpage_prepare_extent_to_map+0x328/0xc50 [ 189.332441][ T8691] ext4_do_writepages+0x9f6/0x2800 [ 189.337610][ T8691] ext4_writepages+0x18f/0x320 [ 189.342406][ T8691] do_writepages+0x1c6/0x310 [ 189.347047][ T8691] file_write_and_wait_range+0x178/0x2f0 [ 189.352720][ T8691] generic_buffers_fsync_noflush+0x45/0x130 [ 189.358660][ T8691] ext4_sync_file+0x1aa/0x680 [ 189.363388][ T8691] vfs_fsync_range+0x10d/0x130 [ 189.368197][ T8691] ext4_buffered_write_iter+0x34f/0x3c0 [ 189.373805][ T8691] ext4_file_write_iter+0x380/0xf70 [ 189.379300][ T8691] iter_file_splice_write+0x6bc/0xa80 [ 189.384785][ T8691] direct_splice_actor+0x156/0x2a0 [ 189.390026][ T8691] splice_direct_to_actor+0x311/0x670 [ 189.395448][ T8691] do_splice_direct+0x119/0x1a0 [ 189.400334][ T8691] do_sendfile+0x382/0x650 [ 189.404793][ T8691] __x64_sys_sendfile64+0x105/0x150 [ 189.410036][ T8691] x64_sys_call+0x2db1/0x3000 [ 189.414756][ T8691] do_syscall_64+0xc0/0x2a0 [ 189.419337][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.425278][ T8691] [ 189.427622][ T8691] value changed: 0x0a000021 -> 0x04000021 [ 189.433365][ T8691] [ 189.435714][ T8691] Reported by Kernel Concurrency Sanitizer on: [ 189.441893][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.4.1800 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.451666][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.461756][ T8691] ================================================================== [ 189.811845][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.