last executing test programs: 5.273684393s ago: executing program 4 (id=3756): syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, &(0x7f0000000480)={0x0, 0x8981, 0x400, 0x0, 0x2f0}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 4.234158554s ago: executing program 4 (id=3761): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x6, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3dac09fff8f900", "acba84f0a6731f234db1cc7f3f382ad796f8ffffff2ea99509873931d2873103", "0f9dafb4", "ffffffffffffffff"}, 0x38) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0) 3.761791901s ago: executing program 4 (id=3764): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3.011268065s ago: executing program 2 (id=3767): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.506881564s ago: executing program 0 (id=3774): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) write$cgroup_pid(r1, 0x0, 0x0) 2.467566088s ago: executing program 0 (id=3776): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000700)="23b8db750850e0efdac8c0f75074647d41f9214c27d11603fba949c7747ea943080d031f9d9c3d75f451fc29e93b84ae83357f682209efc72cb57f40d27c", 0x3e}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES64], 0x30, 0x40480d1}}], 0x1, 0x810) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000004c0)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0x1}, 0x18) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x74, r7, {0xb, 0xffeb}, {0xfff1, 0xfff2}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 2.401364424s ago: executing program 0 (id=3778): bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="d2", 0x34000, 0x4005, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.067862587s ago: executing program 2 (id=3782): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) r0 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_open_dev$char_usb(0xc, 0xb4, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40098) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.83801261s ago: executing program 2 (id=3786): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f00000003c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 1.620863821s ago: executing program 2 (id=3787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x40090) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.553543647s ago: executing program 0 (id=3788): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) 1.516732141s ago: executing program 0 (id=3789): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) semget$private(0x0, 0x3, 0x421) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=']) iopl(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) 1.22430956s ago: executing program 2 (id=3790): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x34, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 932.473968ms ago: executing program 3 (id=3797): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020703400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 790.543982ms ago: executing program 3 (id=3799): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000380)=""/143, 0x1c, 0x8f, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000010c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES16, @ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x4, 0x8001, 0x0, 0x80000000b49, 0x200000000002, 0x4, 0xa, 0x3}, 0x0) brk(0x400000ffc000) 708.87991ms ago: executing program 4 (id=3800): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 634.878188ms ago: executing program 0 (id=3801): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x2cb1, 0x1c080, 0xd, 0x20002f7}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) shutdown(r0, 0x0) 356.765835ms ago: executing program 3 (id=3802): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$eJzs3T9sG2UbAPDnznHTP/m+9JO+T/pAHSpAKlJVJ+kfKEztiqhUqQMSC0SOG1Vx4ipOoIkike4VogMC1KVsMDCCGBgQCyMrC4gZqaIRSE0HMHJ8TtPULk6I4xL/ftLZ73t39vO+d35e+053cgB962j9IY14KiIuJhHDG5YNRLbwaGO91ZWl4v2VpWIStdqlX5JIIuLeylKxuX6SPR+KiOWI+H9EfJOPOJ6uv+W+ZqG6sDg1Xi6XZrP6yNz01ZHqwuKJK9Pjk6XJ0sypF186c/b0mbGTYxube7+2sZbfWl9v/Hjz3RvfvXL75qefHVkuvj+exLkYypZt7MdOamyTfJzbNP90N4L1UNLrBrAtuSzP66n0vxiOXJb1rdQ2Dg6Du9I8oItqgxE1oE8l8h/6VPN3QP34tznt5u+PO+cbByD1uKsrS8V3ohl/oHFuIvavHZsc/DV56Mikfrx5eDcbyp60fD0iRgcGHv38J9nnb/tGd6KBdNXX5xs76tH9n66PP9Fi/Blqnjv9m5rj32o2/q22iJ9rM/5d7DDG76//9FHb+NcH4+mW8ZP1+EmL+GlEvNlh/FuvfXm23bLaxxHHonX8puTx54dHLl8pl0Ybjy1jfHXsyMvt+x9xsE38xjnb/WtfMxv7vy9rU9ph/7/49vNnlh8T//lnH7//W23/AxHxXofx/3Pvk1fbLbtzPblb/xWw1f2fRD5udxj/hXNHf8iKzhoCAAAAAAAAAMAOSteuZUvSwno5TQuFxj28/42DablSnTt+uTI/M9G45u1w5NPmlVbDjXpSr49l1+M26yc31U/lsoC5A2v1QrFSnuhx3wEAAAAAAAAAAAAAAAAAAOBJcWjT/f+/5dbu/9/8d9XAXtX+L7+BvU7+Q/96OP+TnrUD2H2+/6Fv1eQ/9C/5D/1L/kP/kv/Qv+Q/9C/5D/1L/gMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChPtXurywV6/WJgYX5qcpbJyZK1anC9HyxUKzMXi1MViqT5VKhWJn+q/dLKpWrozEzf21krlSdG6kuLL4xXZmfaf6naCnf9R4BAAAAAAAAAAAAAAAAAADAP8/Q2pSkhYh8o56mhULEvyLicBLJ5Svl0mhE/Dsivs/lB+v1sV43GgAAAAAAAAAAAAAAAAAAAPaY6sLi1Hi5XJrtXmEgC9XFEJ0XBrayckQs72wz6u+45Vflsw3Y4023Nwq5J+Nz+OQXejgoAQAAAAAAAAAAAAAAAABAn3pw02+nr/ijuw0CAAAAAAAAAAAAAAAAAACAvpT+nEREfTo2/NzQ5qX7ktXc2nNEvH3r0gfXxufmZsfq8++uz5/7MJt/shftBzrVzNM0Iup5DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxQXVicGi+XS7PbLAx2sE6v+wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHX8GAAD//xLkz18=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffd}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sync() r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0x3, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @broadcast}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x20040040) ppoll(&(0x7f0000000100)=[{r1, 0x1008}, {r1, 0x100}, {r0, 0x2}, {r2, 0x8000}, {r0, 0x8122}, {0xffffffffffffffff, 0x480}, {r1, 0x280}, {r0, 0x128}, {r0, 0x481}], 0x9, &(0x7f0000000080), &(0x7f00000001c0)={[0x7ff]}, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pwrite64(r1, &(0x7f0000000880)="a7", 0x1, 0x2e63) 356.263265ms ago: executing program 4 (id=3803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 327.000598ms ago: executing program 4 (id=3804): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r5, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0) vmsplice(r6, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) 310.0329ms ago: executing program 1 (id=3805): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000", @ANYRES16, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace(0x10, r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x2c}}, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x60, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @private0, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000140)={0x0, 0xfd2a}) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./cgroup\x00', 0x1, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") 264.957454ms ago: executing program 1 (id=3806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x0) 264.365784ms ago: executing program 2 (id=3807): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d000000000000002800000028000000020000000000000000000003000002"], 0x0, 0x42}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000080), 0x0}, 0x20) utime(&(0x7f0000000200)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) 120.750639ms ago: executing program 1 (id=3808): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r1, 0x29ab, 0xd480, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_USERDATA={0x16, 0xc, "282572abf485ecd18a06d641dad585f3b730"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x17ac4937}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x382a0bb4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x21, 0xc, "8537dd3a52afa0e75391cd8de32c5568065d36bf2a5839249f3690dfca"}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8848}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xbc, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x250}, 0x1, 0x0, 0x0, 0x14}, 0x80c1) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x2, 0x90, &(0x7f0000000440)="14c444daaf3a5978f4db6eac44a2193748bac5204aad405d8a796a74ab8f60737a2a14d8ff4869a0f556d72fc28c21c380d823c446a457fcdcebf4aaa90bf02336f9322f1bb04b6b34480bae85d91b137df8cf439f25feb5c3010f24ca057d48c65a28b65e7e4abbec2aa36ece758c6f7074e64b0d4667ec4bc49eccc51b0f921eaf181df41d52a59b528af6e4903017"}]}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r7], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0xc000002) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 120.383539ms ago: executing program 3 (id=3809): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$cgroup_int(r1, &(0x7f0000000500)=0x9, 0x12) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 109.735269ms ago: executing program 3 (id=3810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x8000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@mark={{0x14, 0x1, 0x4f, 0xcb0}}], 0x18}}], 0x1, 0x404c804) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) readlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)=""/4073, 0x100e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 84.375781ms ago: executing program 1 (id=3811): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @mss={0x2, 0x1ff80}, @window={0x3, 0x8, 0x6}, @sack_perm, @window={0x3, 0xfffe}, @sack_perm], 0x8) sendto$inet(r2, &(0x7f0000000000)='%', 0x1, 0x4008805, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000080)="86", 0x1, 0x8000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) chown(0x0, 0xffffffffffffffff, 0x0) shutdown(r2, 0x1) 55.366045ms ago: executing program 1 (id=3812): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000005}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_q', 0x2}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 54.558715ms ago: executing program 3 (id=3813): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) 0s ago: executing program 1 (id=3814): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$eJzs28tvG8UfAPDvbuz2lz5+MVV59AEECqLikTRpKT1wAAQSB5CQ4FCOIUmrUrdBTZBoVUFBqBxRJe6IIxJ/ASe4IOCExBU4o0oV6qUtJ6O1dxvbtdPW2HWoPx9p45ndsWa+nh17dicbwMiazP4kEVsi4reImGhkWwtMNl6uXj47f+3y2fkkarU3/0rq5a5cPjtfFC3et7nIlCLST5PY1aHe5dNnjs9Vq4un8vz0yon3ppfHzzxz7MTc0cWjiydnDx06sH/muYOzz/YlziyuKzs/XNq949W3L7w+f/jCOz99kxTxt8XRJ5Md95YaL4/Xan2ubri2NqWT0hAbwm0Zy0/Jcn38T8RYrHbeRLzyyVAbBwxUrVar3df98LkacBdLYtgtAIaj+KHPrn+L7Q5NPdaFSy82LoCyuK/mW+NIKdK8TLnt+rafJiPi8Lm/v8y2aL8PMT6gSgGAkfZdNv95utP8L43m+0L/z9dQKhFxT0Rsi4iDEbE9Iu6NqJe9PyIeuGmNl1py7YskN84/04s9B3cLsvnf8/naVuv8r5j9RWUsz22tx19OjhyrLu7LP5O9Ud6Y5WfWqOP7l3/9vNux5vlftmX1F3PBvB0XSxtb37MwtzL3b2JudunjiJ2lTvEn11cCkojYEREv9FjHsSe/3t3tWJf4W9cgu+nDOlPtq4gnGv1/LtriLyTX1ydPd1qfnP5fVBf3TRdnxY1+/uX8G93qv3n/D1bW/5s6nv9F/H9Ukub12uXbr+P87591vabs9fzfkLzVsu+DuZWVUzMRG5LX6vlK8/7ZtnKzq+Wz+Pfu6Tz+t8XqJ7ErIrKT+MGIeCgiHs7b/khEPBoRe9aI/8eXHnu39/gHK4t/Yc3+j7b+X01siPY9nRNjx3/4tqXSyu3En/X/gXpqb77nVr7/bqVdvZ3NAAAA8N+TRsSWSNKp6+k0nZpq/A//9tiUVpeWV546svT+yYXGMwKVKKfFna6JpvuhM/llfZGfbcvvz+8bfzE2Xs9PzS9VF4YdPIy4zV3Gf+bPsWG3Dhg4z2vB6DL+YXQZ/zCarrU9CASMlg6//x49gxHRaf7/0RDaAdx5beN/zWU/EwO4u7j/B6PL+IfRZfzDSFoej5s/JH93JNKIWAfNaE2UI2IdNKOHRKTrohkSA0oM+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgP/4JAAD//5nH7E0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x18c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x140, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x128, 0x1, [@m_simple={0xec, 0x1e, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x3, '-\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x2, 0x20000000, 0x8, 0x13b}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3304, 0x7, 0x10000000, 0xf65e, 0x1}}]}, {0x7d, 0x6, "b83be43ce3f0453fdb55a3fbb55ce131cf300b92efaf853271bbac333e650817fc6029bf8265bde8d86f1542fce993992ec472fc2cf0229c29df9308275aa845e17dc1e479ef3bdaac2b22173aa0db0c5c17daa5d8bfdc1952fbe903567065fbecf72fa157c3aaac70e46ef54a9edbaa0fa0c723674743dac2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000080)) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): ies to shift op by -1; fix this program [ 193.846011][T12195] sit0: entered allmulticast mode [ 193.888456][T12196] netlink: 'syz.2.2435': attribute type 30 has an invalid length. [ 193.950509][T12195] sit0: entered promiscuous mode [ 193.973868][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2438'. [ 194.035854][T12207] netlink: 'syz.3.2439': attribute type 1 has an invalid length. [ 194.120470][T12208] 8021q: adding VLAN 0 to HW filter on device bond10 [ 194.129036][T12208] bond9: (slave bond10): making interface the new active one [ 194.137079][T12208] bond9: (slave bond10): Enslaving as an active interface with an up link [ 194.149805][T12207] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 194.169685][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2439'. [ 194.180827][T12207] 8021q: adding VLAN 0 to HW filter on device bond9 [ 194.470900][T12236] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 194.485086][T12236] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.532986][T12236] ip6erspan0: entered promiscuous mode [ 194.541718][T12236] bond5: (slave ip6erspan0): making interface the new active one [ 194.563342][T12236] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 194.580239][T12242] macvlan0: entered promiscuous mode [ 194.586196][T12242] bond5: entered promiscuous mode [ 194.591689][T12242] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 194.599784][T12242] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 194.625055][T12242] bond5: left promiscuous mode [ 194.663205][T12245] netlink: 'syz.0.2454': attribute type 30 has an invalid length. [ 194.718230][T12248] lo speed is unknown, defaulting to 1000 [ 194.724093][T12248] lo speed is unknown, defaulting to 1000 [ 194.730105][T12248] lo speed is unknown, defaulting to 1000 [ 194.737721][T12248] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 194.747842][T12248] lo speed is unknown, defaulting to 1000 [ 194.754641][T12248] lo speed is unknown, defaulting to 1000 [ 194.763229][T12248] lo speed is unknown, defaulting to 1000 [ 194.769505][T12248] lo speed is unknown, defaulting to 1000 [ 194.776958][T12248] lo speed is unknown, defaulting to 1000 [ 194.908399][T12275] loop1: detected capacity change from 0 to 512 [ 194.944398][T12275] EXT4-fs (loop1): 1 orphan inode deleted [ 194.951300][T12275] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.964352][ T9534] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:36: Failed to release dquot type 1 [ 194.977384][T12275] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.019818][T12273] lo speed is unknown, defaulting to 1000 [ 195.119431][T12275] lo speed is unknown, defaulting to 1000 [ 195.316492][T12295] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2471'. [ 195.329091][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.409601][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2475'. [ 195.605632][T12312] netlink: 'syz.4.2478': attribute type 30 has an invalid length. [ 196.712849][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 196.712943][ T29] audit: type=1400 audit(1760228290.002:9668): avc: denied { watch } for pid=12336 comm="syz.0.2485" path="/file0" dev="ramfs" ino=33109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=fifo_file permissive=1 [ 196.788116][ T29] audit: type=1400 audit(1760228290.042:9669): avc: denied { execute_no_trans } for pid=12336 comm="syz.0.2485" path="/file1" dev="ramfs" ino=33108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 196.879634][T12326] netlink: 'syz.4.2482': attribute type 2 has an invalid length. [ 196.982561][T12326] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2482'. [ 197.220819][T12349] $Hÿ: (slave dummy0): Releasing backup interface [ 197.231081][T12349] dummy0: left promiscuous mode [ 197.237655][T12349] bridge_slave_0: left allmulticast mode [ 197.243499][T12349] bridge_slave_0: left promiscuous mode [ 197.249309][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.259320][T12349] bridge_slave_1: left allmulticast mode [ 197.265122][T12349] bridge_slave_1: left promiscuous mode [ 197.270933][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.280741][T12349] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 197.288518][T12349] bond_slave_0: left promiscuous mode [ 197.295076][T12349] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 197.303073][T12349] bond_slave_1: left promiscuous mode [ 197.309598][T12349] team0: Port device team_slave_0 removed [ 197.316713][T12349] team0: Port device team_slave_1 removed [ 197.323057][T12349] bond1: (slave veth5): Releasing active interface [ 197.330084][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 197.340396][T12349] bond2: (slave ip6gretap1): Releasing active interface [ 197.348799][T12349] batadv1: left allmulticast mode [ 197.354030][T12349] batadv1: left promiscuous mode [ 197.359084][T12349] bridge0: port 3(batadv1) entered disabled state [ 197.370938][T12349] bond9: (slave bond10): Releasing backup interface [ 197.377745][T12349] bond9: (slave bond10): the permanent HWaddr of slave - 6e:56:e6:4d:fb:59 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 197.397465][T12349] bond9: (slave gretap1): making interface the new active one [ 197.408604][T12349] bond9: (slave gretap1): Releasing backup interface [ 197.443620][T12350] team0: Mode changed to "loadbalance" [ 197.481343][T12324] lo speed is unknown, defaulting to 1000 [ 197.608132][T12364] tipc: Enabling of bearer rejected, already enabled [ 197.627390][ T29] audit: type=1400 audit(1760228290.912:9670): avc: denied { map } for pid=12359 comm="syz.1.2497" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 197.632495][T12361] vhci_hcd: invalid port number 96 [ 197.651874][ T29] audit: type=1326 audit(1760228290.912:9671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 197.656847][T12361] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 197.687520][ T29] audit: type=1326 audit(1760228290.912:9672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 197.711057][ T29] audit: type=1326 audit(1760228290.912:9673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 197.738641][ T29] audit: type=1326 audit(1760228290.912:9674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 197.764213][ T29] audit: type=1326 audit(1760228291.022:9675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 197.787824][ T29] audit: type=1326 audit(1760228291.022:9676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.1.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 197.866444][T12371] loop1: detected capacity change from 0 to 2048 [ 197.881858][ T29] audit: type=1326 audit(1760228291.132:9677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12369 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 197.944000][T12371] Alternate GPT is invalid, using primary GPT. [ 197.950366][T12371] loop1: p1 p2 p3 [ 197.954141][T12371] loop1: partition table partially beyond EOD, truncated [ 198.351676][T12385] lo speed is unknown, defaulting to 1000 [ 198.470865][T12398] vlan0: entered allmulticast mode [ 198.476206][T12398] bridge_slave_0: entered allmulticast mode [ 198.622802][T12411] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 198.641988][T12411] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2509'. [ 198.685880][T12415] loop1: detected capacity change from 0 to 512 [ 198.725207][T12415] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2521: bg 0: block 248: padding at end of block bitmap is not set [ 198.755925][T12415] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2521: Failed to acquire dquot type 1 [ 198.770721][T12415] EXT4-fs (loop1): 1 truncate cleaned up [ 198.777101][T12415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.790401][T12415] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.802473][T12415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.869727][T12426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'. [ 198.889725][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2513'. [ 199.086745][T12429] lo speed is unknown, defaulting to 1000 [ 199.257912][T12435] loop3: detected capacity change from 0 to 1024 [ 199.268196][T12435] EXT4-fs: Ignoring removed orlov option [ 199.273959][T12435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.297486][T12435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.344907][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.799256][T12448] lo speed is unknown, defaulting to 1000 [ 200.602941][T12476] loop3: detected capacity change from 0 to 512 [ 200.627558][T12476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.583325][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.609188][T12482] lo speed is unknown, defaulting to 1000 [ 201.701163][T12497] loop1: detected capacity change from 0 to 512 [ 201.719995][T12497] EXT4-fs (loop1): orphan cleanup on readonly fs [ 201.728564][T12497] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2536: bad orphan inode 13 [ 201.750774][T12497] ext4_test_bit(bit=12, block=18) = 1 [ 201.756468][T12497] is_bad_inode(inode)=0 [ 201.760669][T12497] NEXT_ORPHAN(inode)=2130706432 [ 201.765575][T12497] max_ino=32 [ 201.768782][T12497] i_nlink=1 [ 201.772819][T12497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.791642][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 201.791660][ T29] audit: type=1400 audit(1760228295.082:9793): avc: denied { ioctl } for pid=12493 comm="syz.3.2535" path="socket:[33424]" dev="sockfs" ino=33424 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 201.801245][T12497] bridge0: port 4(syz_tun) entered blocking state [ 201.830270][T12497] bridge0: port 4(syz_tun) entered disabled state [ 201.836958][T12497] syz_tun: entered allmulticast mode [ 201.871647][T12497] syz_tun: entered promiscuous mode [ 201.882150][T12499] ªªªªªª: renamed from lo (while UP) [ 201.938223][T12473] lo speed is unknown, defaulting to 1000 [ 201.959719][T12506] netlink: 'syz.4.2538': attribute type 13 has an invalid length. [ 201.968314][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.034908][ T29] audit: type=1400 audit(1760228295.322:9794): avc: denied { create } for pid=12509 comm="syz.0.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.082339][ T29] audit: type=1400 audit(1760228295.352:9795): avc: denied { getopt } for pid=12509 comm="syz.0.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.141513][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2539'. [ 202.166626][T12514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.175751][T12514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.215940][T12514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.225062][T12514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.241759][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.250954][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.268625][T12519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.277717][T12519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.308065][T12514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2542'. [ 202.444152][ T29] audit: type=1400 audit(1760228295.722:9796): avc: denied { create } for pid=12529 comm="syz.3.2547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 202.480454][T12530] loop3: detected capacity change from 0 to 128 [ 202.499611][T12530] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 202.512218][T12530] ext4 filesystem being mounted at /517/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 202.526395][ T29] audit: type=1400 audit(1760228295.812:9797): avc: denied { read write open } for pid=12529 comm="syz.3.2547" path="/517/mnt/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 202.612547][T12536] loop1: detected capacity change from 0 to 1764 [ 202.622899][ T29] audit: type=1400 audit(1760228295.912:9798): avc: denied { mount } for pid=12535 comm="syz.1.2549" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 202.623475][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.662788][ T29] audit: type=1400 audit(1760228295.952:9799): avc: denied { create } for pid=12537 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.703924][ T29] audit: type=1400 audit(1760228295.972:9800): avc: denied { setopt } for pid=12537 comm="syz.3.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 202.732912][ T29] audit: type=1400 audit(1760228295.992:9801): avc: denied { write } for pid=12535 comm="syz.1.2549" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 202.762928][ T29] audit: type=1400 audit(1760228296.022:9802): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 202.790444][T12542] : renamed from bond0 [ 202.861884][T12553] xt_policy: neither incoming nor outgoing policy selected [ 203.046263][T12559] loop1: detected capacity change from 0 to 2048 [ 203.118667][T12559] loop1: p2 p3 p7 [ 204.015976][T12593] Cannot find add_set index 4 as target [ 204.120622][T12584] lo speed is unknown, defaulting to 1000 [ 204.935515][T12634] lo speed is unknown, defaulting to 1000 [ 205.445467][T12654] loop1: detected capacity change from 0 to 512 [ 205.472548][T12654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.492650][T12654] EXT4-fs (loop1): 1 truncate cleaned up [ 205.502187][T12654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.604062][T12642] lo speed is unknown, defaulting to 1000 [ 205.661996][T12647] lo speed is unknown, defaulting to 1000 [ 205.693279][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.734629][T12667] loop1: detected capacity change from 0 to 1024 [ 205.741397][T12667] EXT4-fs: Ignoring removed orlov option [ 205.801683][T12667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.850257][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.912192][T12679] syzkaller0: entered promiscuous mode [ 205.917879][T12679] syzkaller0: entered allmulticast mode [ 206.509975][T12696] loop3: detected capacity change from 0 to 256 [ 206.683345][T12696] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 206.952312][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 206.952332][ T29] audit: type=1400 audit(1760228300.222:9943): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 207.051764][T12702] bond2: (slave bridge7): Enslaving as an active interface with an up link [ 207.091725][ T29] audit: type=1400 audit(1760228300.282:9944): avc: denied { setopt } for pid=12701 comm="syz.2.2606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.142989][T12702] macvlan0: entered promiscuous mode [ 207.148349][T12702] macvlan0: entered allmulticast mode [ 207.185001][T12702] bond2: entered promiscuous mode [ 207.190119][T12702] bridge7: entered promiscuous mode [ 207.196193][T12702] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 207.248525][T12702] bond2: left promiscuous mode [ 207.253480][T12702] bridge7: left promiscuous mode [ 207.440581][ T29] audit: type=1400 audit(1760228300.722:9945): avc: denied { name_bind } for pid=12724 comm="syz.3.2614" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 207.505106][T12732] netlink: 'syz.2.2617': attribute type 1 has an invalid length. [ 207.544430][T12732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.557691][ T29] audit: type=1400 audit(1760228300.842:9946): avc: denied { mounton } for pid=12734 comm="syz.1.2618" path="/530/bus" dev="tmpfs" ino=2809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 207.606058][T12736] veth13: entered promiscuous mode [ 207.618264][T12736] bond6: (slave veth13): Enslaving as an active interface with a down link [ 207.648481][ T29] audit: type=1400 audit(1760228300.932:9947): avc: denied { ioctl } for pid=12739 comm="syz.0.2620" path="socket:[34713]" dev="sockfs" ino=34713 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.702318][T12742] __nla_validate_parse: 5 callbacks suppressed [ 207.702334][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2620'. [ 207.704185][T12732] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 207.754942][ T29] audit: type=1400 audit(1760228301.042:9948): avc: denied { bind } for pid=12739 comm="syz.0.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 207.862857][ T29] audit: type=1326 audit(1760228301.132:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.0.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 207.868595][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'. [ 207.886535][ T29] audit: type=1326 audit(1760228301.132:9950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.0.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 207.886573][ T29] audit: type=1326 audit(1760228301.132:9951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.0.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 207.886608][ T29] audit: type=1326 audit(1760228301.132:9952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12748 comm="syz.0.2622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 207.988719][T12756] netlink: 'syz.0.2625': attribute type 11 has an invalid length. [ 207.993607][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2624'. [ 208.451217][T12792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 208.466401][T12792] team0: entered promiscuous mode [ 208.471509][T12792] team0: entered allmulticast mode [ 208.482546][T12792] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.212969][T12807] netlink: 'syz.0.2646': attribute type 4 has an invalid length. [ 209.289108][T12812] bridge0: entered promiscuous mode [ 209.294438][T12812] bridge0: entered allmulticast mode [ 209.350950][T12809] loop3: detected capacity change from 0 to 4096 [ 209.384552][T12809] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 209.423641][T12809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.561162][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.615975][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2651'. [ 209.643554][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2651'. [ 209.742029][T12825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 209.933242][T12825] 8021q: adding VLAN 0 to HW filter on device bond11 [ 210.018365][ T3312] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 210.029312][ T3312] CPU: 0 UID: 0 PID: 3312 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.029376][ T3312] Tainted: [W]=WARN [ 210.029383][ T3312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.029395][ T3312] Call Trace: [ 210.029402][ T3312] [ 210.029410][ T3312] __dump_stack+0x1d/0x30 [ 210.029434][ T3312] dump_stack_lvl+0xe8/0x140 [ 210.029563][ T3312] dump_stack+0x15/0x1b [ 210.029579][ T3312] dump_header+0x81/0x220 [ 210.029681][ T3312] oom_kill_process+0x342/0x400 [ 210.029722][ T3312] out_of_memory+0x979/0xb80 [ 210.029763][ T3312] try_charge_memcg+0x610/0xa10 [ 210.029876][ T3312] charge_memcg+0x51/0xc0 [ 210.029903][ T3312] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 210.029937][ T3312] __read_swap_cache_async+0x17b/0x2d0 [ 210.029982][ T3312] swap_cluster_readahead+0x362/0x3c0 [ 210.030030][ T3312] swapin_readahead+0xde/0x6f0 [ 210.030056][ T3312] ? css_rstat_updated+0xb7/0x240 [ 210.030118][ T3312] ? __rcu_read_unlock+0x4f/0x70 [ 210.030143][ T3312] ? __rcu_read_unlock+0x4f/0x70 [ 210.030166][ T3312] ? swap_cache_get_folio+0x277/0x280 [ 210.030224][ T3312] do_swap_page+0x2ae/0x2370 [ 210.030307][ T3312] ? _raw_spin_unlock+0x26/0x50 [ 210.030422][ T3312] ? finish_task_switch+0xad/0x2b0 [ 210.030447][ T3312] ? __pfx_default_wake_function+0x10/0x10 [ 210.030484][ T3312] handle_mm_fault+0x9a5/0x2be0 [ 210.030516][ T3312] ? vma_start_read+0x141/0x1f0 [ 210.030581][ T3312] do_user_addr_fault+0x630/0x1080 [ 210.030605][ T3312] ? fpregs_restore_userregs+0xe2/0x1d0 [ 210.030679][ T3312] ? switch_fpu_return+0xe/0x20 [ 210.030763][ T3312] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 210.030800][ T3312] exc_page_fault+0x62/0xa0 [ 210.030823][ T3312] asm_exc_page_fault+0x26/0x30 [ 210.030844][ T3312] RIP: 0033:0x7f5846321745 [ 210.030859][ T3312] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6e 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 210.030884][ T3312] RSP: 002b:00007ffcf431a128 EFLAGS: 00010246 [ 210.030903][ T3312] RAX: 0000000000000000 RBX: 00000000000007e1 RCX: 00007f5846321743 [ 210.030920][ T3312] RDX: 00007ffcf431a140 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.030936][ T3312] RBP: 00007ffcf431a1ac R08: 0000000028762cab R09: 0000000000000000 [ 210.030952][ T3312] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 210.030969][ T3312] R13: 00000000000927c0 R14: 00000000000333fb R15: 00007ffcf431a200 [ 210.030992][ T3312] [ 210.031077][ T3312] memory: usage 307200kB, limit 307200kB, failcnt 3810 [ 210.282957][ T3312] memory+swap: usage 307716kB, limit 9007199254740988kB, failcnt 0 [ 210.290882][ T3312] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 210.298294][ T3312] Memory cgroup stats for /syz0: [ 210.298634][ T3312] cache 0 [ 210.306676][ T3312] rss 0 [ 210.309447][ T3312] shmem 0 [ 210.312481][ T3312] mapped_file 0 [ 210.315968][ T3312] dirty 0 [ 210.318939][ T3312] writeback 0 [ 210.322314][ T3312] workingset_refault_anon 876 [ 210.327018][ T3312] workingset_refault_file 1173 [ 210.331826][ T3312] swap 528384 [ 210.335237][ T3312] swapcached 8192 [ 210.338878][ T3312] pgpgin 245916 [ 210.342371][ T3312] pgpgout 245913 [ 210.345956][ T3312] pgfault 295775 [ 210.349555][ T3312] pgmajfault 265 [ 210.353227][ T3312] inactive_anon 8192 [ 210.357145][ T3312] active_anon 0 [ 210.360638][ T3312] inactive_file 4096 [ 210.364571][ T3312] active_file 0 [ 210.368130][ T3312] unevictable 0 [ 210.371589][ T3312] hierarchical_memory_limit 314572800 [ 210.377022][ T3312] hierarchical_memsw_limit 9223372036854771712 [ 210.378116][T12839] loop3: detected capacity change from 0 to 128 [ 210.383223][ T3312] total_cache 0 [ 210.383234][ T3312] total_rss 0 [ 210.383243][ T3312] total_shmem 0 [ 210.383251][ T3312] total_mapped_file 0 [ 210.383259][ T3312] total_dirty 0 [ 210.383268][ T3312] total_writeback 0 [ 210.383277][ T3312] total_workingset_refault_anon 876 [ 210.383287][ T3312] total_workingset_refault_file 1173 [ 210.383297][ T3312] total_swap 528384 [ 210.425712][ T3312] total_swapcached 8192 [ 210.429890][ T3312] total_pgpgin 245916 [ 210.433919][ T3312] total_pgpgout 245913 [ 210.438006][ T3312] total_pgfault 295775 [ 210.442079][ T3312] total_pgmajfault 265 [ 210.446295][ T3312] total_inactive_anon 8192 [ 210.450716][ T3312] total_active_anon 0 [ 210.454732][ T3312] total_inactive_file 4096 [ 210.459250][ T3312] total_active_file 0 [ 210.463254][ T3312] total_unevictable 0 [ 210.467312][ T3312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2646,pid=12806,uid=0 [ 210.482108][ T3312] Memory cgroup out of memory: Killed process 12806 (syz.0.2646) total-vm:95872kB, anon-rss:1264kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 210.502739][T12839] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.562508][T12839] ext4 filesystem being mounted at /541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 210.693373][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 211.764430][T12893] serio: Serial port ptm0 [ 212.086693][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 212.086712][ T29] audit: type=1400 audit(1760228305.372:10271): avc: denied { audit_write } for pid=12895 comm="syz.1.2677" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 212.114533][ T29] audit: type=1107 audit(1760228305.372:10272): pid=12895 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='›' [ 212.263424][ T29] audit: type=1326 audit(1760228305.552:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.287413][ T29] audit: type=1326 audit(1760228305.552:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.292089][T12905] netlink: 'syz.1.2680': attribute type 26 has an invalid length. [ 212.368548][ T29] audit: type=1326 audit(1760228305.552:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.392255][ T29] audit: type=1326 audit(1760228305.552:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.416100][ T29] audit: type=1326 audit(1760228305.552:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.439969][ T29] audit: type=1326 audit(1760228305.552:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.463855][ T29] audit: type=1326 audit(1760228305.552:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.487757][ T29] audit: type=1326 audit(1760228305.552:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12901 comm="syz.4.2679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 212.536477][T12919] tipc: Enabling of bearer rejected, failed to enable media [ 212.571055][T12921] tipc: Enabling of bearer rejected, failed to enable media [ 212.667264][T12931] --map-set only usable from mangle table [ 214.153360][T12987] lo speed is unknown, defaulting to 1000 [ 214.765504][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2714'. [ 214.774690][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2714'. [ 214.783777][T12992] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2714'. [ 215.004442][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2716'. [ 215.013659][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2716'. [ 215.055434][T12998] loop3: detected capacity change from 0 to 512 [ 215.212145][T12998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.225021][T13006] netlink: 'syz.1.2717': attribute type 13 has an invalid length. [ 215.272777][T12998] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.322784][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2716'. [ 215.461674][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.012595][T13030] tipc: Enabling of bearer rejected, failed to enable media [ 216.107520][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2727'. [ 216.745472][T13038] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2730'. [ 216.996170][T13041] lo speed is unknown, defaulting to 1000 [ 217.092586][T13060] netlink: 'syz.1.2738': attribute type 6 has an invalid length. [ 217.102825][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 217.102843][ T29] audit: type=1326 audit(1760228310.392:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.109935][T13060] netlink: 'syz.1.2738': attribute type 6 has an invalid length. [ 217.133055][ T29] audit: type=1326 audit(1760228310.392:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.164266][ T29] audit: type=1326 audit(1760228310.392:10337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.199554][ T29] audit: type=1326 audit(1760228310.452:10338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.223207][ T29] audit: type=1326 audit(1760228310.452:10339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.247319][ T29] audit: type=1326 audit(1760228310.452:10340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.270973][ T29] audit: type=1326 audit(1760228310.452:10341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.294782][ T29] audit: type=1326 audit(1760228310.452:10342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.318475][ T29] audit: type=1326 audit(1760228310.452:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.342142][ T29] audit: type=1326 audit(1760228310.452:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13051 comm="syz.3.2735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f01a40beec9 code=0x7ffc0000 [ 217.589517][T13080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2746'. [ 217.598745][T13080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2746'. [ 217.737391][T13098] siw: device registration error -23 [ 217.770459][T13102] netlink: 'syz.0.2755': attribute type 4 has an invalid length. [ 217.791844][T13102] netlink: 'syz.0.2755': attribute type 4 has an invalid length. [ 217.906213][T13109] syzkaller0: entered allmulticast mode [ 218.028098][T13096] lo speed is unknown, defaulting to 1000 [ 218.111834][T13107] lo speed is unknown, defaulting to 1000 [ 218.736280][T13133] netlink: 'syz.1.2765': attribute type 12 has an invalid length. [ 219.262684][T13158] lo speed is unknown, defaulting to 1000 [ 219.935967][T13184] netlink: 'syz.2.2785': attribute type 13 has an invalid length. [ 220.324215][T13193] __nla_validate_parse: 4 callbacks suppressed [ 220.324234][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2789'. [ 220.423519][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2789'. [ 220.474260][T13207] syz_tun: left allmulticast mode [ 220.479479][T13207] syz_tun: left promiscuous mode [ 220.484668][T13207] bridge0: port 4(syz_tun) entered disabled state [ 220.510428][T13207] $Hÿ: (slave dummy0): Releasing backup interface [ 220.523354][T13207] dummy0: left promiscuous mode [ 220.532486][T13207] bridge_slave_0: left allmulticast mode [ 220.538205][T13207] bridge_slave_0: left promiscuous mode [ 220.544129][T13207] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.564533][T13207] bridge_slave_1: left allmulticast mode [ 220.570403][T13207] bridge_slave_1: left promiscuous mode [ 220.576359][T13207] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.614615][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 220.626832][T13207] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 220.726570][T13207] bond_slave_0: left promiscuous mode [ 220.733183][T13207] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 220.741278][T13207] bond_slave_1: left promiscuous mode [ 220.749499][T13207] team0: Port device team_slave_0 removed [ 220.756839][T13207] team0: Port device team_slave_1 removed [ 220.763396][T13207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.771129][T13207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.779021][T13207] batadv1: left allmulticast mode [ 220.784138][T13207] batadv1: left promiscuous mode [ 220.789188][T13207] bridge0: port 3(batadv1) entered disabled state [ 220.798008][T13207] bond2: (slave bridge7): Releasing backup interface [ 220.810384][T13214] team0: Mode changed to "loadbalance" [ 221.072386][T13224] lo speed is unknown, defaulting to 1000 [ 221.401743][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 221.410785][T13228] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2800'. [ 221.444329][T13228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2800'. [ 221.536597][T13231] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2799'. [ 221.692400][T13246] netlink: 'syz.0.2803': attribute type 13 has an invalid length. [ 221.821146][T13255] macvtap0: entered allmulticast mode [ 221.826684][T13255] bridge0: entered allmulticast mode [ 221.837673][T13255] bridge0: port 1(macvtap0) entered blocking state [ 221.844323][T13255] bridge0: port 1(macvtap0) entered disabled state [ 221.858355][T13255] bridge0: left allmulticast mode [ 221.933719][T13263] : (slave dummy0): Releasing backup interface [ 221.942950][T13263] : (slave bond_slave_0): Releasing backup interface [ 221.950733][T13263] : (slave bond_slave_1): Releasing backup interface [ 221.959126][T13263] team0: Port device team_slave_0 removed [ 221.966433][T13263] team0: Port device team_slave_1 removed [ 221.972979][T13263] bond1: (slave wireguard0): Releasing backup interface [ 221.980088][T13263] bond1: (slave wireguard1): making interface the new active one [ 221.990358][T13263] bond1: (slave wireguard1): Releasing backup interface [ 221.998537][T13263] bond2: (slave ip6gretap0): Releasing active interface [ 222.007031][T13263] bond5: (slave ip6erspan0): Releasing active interface [ 222.016191][T13263] bond6: (slave veth13): Releasing active interface [ 222.024696][T13265] team0: Mode changed to "loadbalance" [ 222.037987][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2815'. [ 222.114384][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 222.114403][ T29] audit: type=1326 audit(1760228315.402:10843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9529645d67 code=0x7ffc0000 [ 222.146176][ T29] audit: type=1326 audit(1760228315.432:10844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95295eaf79 code=0x7ffc0000 [ 222.169889][ T29] audit: type=1326 audit(1760228315.432:10845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9529645d67 code=0x7ffc0000 [ 222.193458][ T29] audit: type=1326 audit(1760228315.432:10846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95295eaf79 code=0x7ffc0000 [ 222.217052][ T29] audit: type=1326 audit(1760228315.432:10847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 222.240906][ T29] audit: type=1326 audit(1760228315.532:10848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9529645d67 code=0x7ffc0000 [ 222.265580][ T29] audit: type=1326 audit(1760228315.532:10849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95295eaf79 code=0x7ffc0000 [ 222.289244][ T29] audit: type=1326 audit(1760228315.532:10850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 222.313205][ T29] audit: type=1326 audit(1760228315.552:10851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9529645d67 code=0x7ffc0000 [ 222.336952][ T29] audit: type=1326 audit(1760228315.552:10852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.1.2813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95295eaf79 code=0x7ffc0000 [ 222.427598][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 222.520820][T13273] loop3: detected capacity change from 0 to 32768 [ 222.564982][T13273] Set syz1 is full, maxelem 65536 reached [ 223.205181][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 224.280166][T13335] lo speed is unknown, defaulting to 1000 [ 225.864481][T13384] tipc: Enabling of bearer rejected, failed to enable media [ 226.360872][T13402] lo speed is unknown, defaulting to 1000 [ 226.813760][T13417] __nla_validate_parse: 4 callbacks suppressed [ 226.813777][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2874'. [ 227.075791][T13434] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 227.277031][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 227.277046][ T29] audit: type=1326 audit(1760228320.562:11523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.310195][T13438] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 227.320115][ T29] audit: type=1326 audit(1760228320.592:11524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.343691][ T29] audit: type=1326 audit(1760228320.592:11525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.367418][ T29] audit: type=1326 audit(1760228320.592:11526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.391012][ T29] audit: type=1326 audit(1760228320.592:11527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.414710][ T29] audit: type=1326 audit(1760228320.592:11528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.438216][ T29] audit: type=1326 audit(1760228320.592:11529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.461830][ T29] audit: type=1326 audit(1760228320.592:11530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.485437][ T29] audit: type=1326 audit(1760228320.592:11531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.508937][ T29] audit: type=1326 audit(1760228320.592:11532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13437 comm="syz.2.2881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 227.719153][T13447] lo speed is unknown, defaulting to 1000 [ 228.240908][T13468] lo speed is unknown, defaulting to 1000 [ 228.537702][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2890'. [ 228.579062][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 228.589944][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2890'. [ 232.021773][T13662] lo speed is unknown, defaulting to 1000 [ 232.566483][T13668] netlink: 'syz.3.2920': attribute type 1 has an invalid length. [ 232.835814][T13668] 8021q: adding VLAN 0 to HW filter on device bond12 [ 232.850362][T13674] veth17: entered promiscuous mode [ 232.858429][T13674] bond12: (slave veth17): Enslaving as an active interface with a down link [ 233.062876][T13668] bond12: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 233.228741][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 233.228759][ T29] audit: type=1400 audit(1760228326.512:11622): avc: denied { connect } for pid=13688 comm="syz.4.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 233.305678][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2932'. [ 233.713526][ T29] audit: type=1326 audit(1760228326.972:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.736679][ T29] audit: type=1326 audit(1760228326.972:11624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.759852][ T29] audit: type=1326 audit(1760228326.972:11625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.782837][ T29] audit: type=1400 audit(1760228326.972:11626): avc: denied { wake_alarm } for pid=13710 comm="GPL" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 233.803577][ T29] audit: type=1326 audit(1760228326.972:11627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.826678][ T29] audit: type=1326 audit(1760228326.972:11628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.849743][ T29] audit: type=1326 audit(1760228326.972:11629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.872829][ T29] audit: type=1326 audit(1760228326.972:11630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.895889][ T29] audit: type=1326 audit(1760228326.972:11631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13710 comm="GPL" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 233.933502][T13716] loop3: detected capacity change from 0 to 1024 [ 233.940655][T13716] EXT4-fs: Ignoring removed orlov option [ 233.962504][T13716] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 234.524894][T13716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.986851][T13714] lo speed is unknown, defaulting to 1000 [ 235.622866][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.707377][T13765] loop3: detected capacity change from 0 to 8192 [ 235.915040][T13788] netlink: 'syz.4.2963': attribute type 30 has an invalid length. [ 236.306186][T13789] lo speed is unknown, defaulting to 1000 [ 237.403751][T13811] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2971'. [ 237.893542][T13816] tipc: Enabling of bearer rejected, failed to enable media [ 238.132850][T13824] netlink: 'syz.2.2976': attribute type 2 has an invalid length. [ 238.140669][T13824] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2976'. [ 238.553514][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 238.553538][ T29] audit: type=1400 audit(1760228331.842:11728): avc: denied { name_connect } for pid=13832 comm="syz.4.2980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 239.248445][ T29] audit: type=1400 audit(1760228332.332:11729): avc: denied { write } for pid=13832 comm="syz.4.2980" lport=39850 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 239.272245][ T29] audit: type=1400 audit(1760228332.332:11730): avc: denied { setopt } for pid=13832 comm="syz.4.2980" lport=39850 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 239.329933][T13840] netlink: 'syz.1.2982': attribute type 12 has an invalid length. [ 239.351137][ T29] audit: type=1400 audit(1760228332.632:11731): avc: denied { create } for pid=13841 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 239.371026][ T29] audit: type=1400 audit(1760228332.632:11732): avc: denied { bind } for pid=13841 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 239.390727][ T29] audit: type=1400 audit(1760228332.642:11733): avc: denied { listen } for pid=13841 comm="syz.3.2983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 239.493837][ T29] audit: type=1326 audit(1760228332.782:11734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13855 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 239.520156][ T29] audit: type=1326 audit(1760228332.782:11735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13855 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 239.543868][ T29] audit: type=1326 audit(1760228332.802:11736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13855 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 239.567647][ T29] audit: type=1326 audit(1760228332.802:11737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13855 comm="syz.0.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58462eeec9 code=0x7ffc0000 [ 240.667260][T13875] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2995'. [ 240.703139][T13875] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13875 comm=syz.1.2995 [ 240.735760][T13876] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2994'. [ 240.776730][T13878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2996'. [ 240.891950][T13885] netlink: 'syz.0.3007': attribute type 13 has an invalid length. [ 240.904624][T13885] gretap0: refused to change device tx_queue_len [ 240.911550][T13885] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.203595][T13910] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3008'. [ 241.256306][T13914] netlink: 'syz.2.3010': attribute type 30 has an invalid length. [ 241.301307][T13916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3011'. [ 241.323839][T13916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13916 comm=syz.3.3011 [ 241.377446][T13918] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3012'. [ 241.398597][T13920] netlink: 'syz.2.3013': attribute type 13 has an invalid length. [ 241.413746][T13920] gretap0: refused to change device tx_queue_len [ 241.420553][T13920] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.645035][T13931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13931 comm=syz.4.3018 [ 242.095786][T13946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3023'. [ 242.116455][T13946] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13946 comm=syz.0.3023 [ 242.389794][T13949] lo speed is unknown, defaulting to 1000 [ 243.572601][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 243.572620][ T29] audit: type=1326 audit(1760228336.862:12040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c33275d67 code=0x7ffc0000 [ 243.617398][ T29] audit: type=1326 audit(1760228336.862:12041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3321af79 code=0x7ffc0000 [ 243.641003][ T29] audit: type=1326 audit(1760228336.862:12042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 243.664963][ T29] audit: type=1326 audit(1760228336.862:12043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c33275d67 code=0x7ffc0000 [ 243.688489][ T29] audit: type=1326 audit(1760228336.862:12044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3321af79 code=0x7ffc0000 [ 243.712115][ T29] audit: type=1326 audit(1760228336.862:12045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 243.735833][ T29] audit: type=1326 audit(1760228336.892:12046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c33275d67 code=0x7ffc0000 [ 243.759509][ T29] audit: type=1326 audit(1760228336.892:12047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3321af79 code=0x7ffc0000 [ 243.783181][ T29] audit: type=1326 audit(1760228336.892:12048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 243.806801][ T29] audit: type=1326 audit(1760228336.902:12049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.2.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c33275d67 code=0x7ffc0000 [ 243.912938][T13995] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 244.112936][T13989] lo speed is unknown, defaulting to 1000 [ 244.179142][T14008] loop3: detected capacity change from 0 to 1024 [ 244.186462][T14008] EXT4-fs: Ignoring removed nobh option [ 244.192075][T14008] EXT4-fs: inline encryption not supported [ 244.219827][T14008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.282484][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.578611][T14043] blktrace: Concurrent blktraces are not allowed on loop5 [ 244.715902][T14052] xfrm0: entered promiscuous mode [ 244.721089][T14052] xfrm0: entered allmulticast mode [ 244.869456][T14050] lo speed is unknown, defaulting to 1000 [ 245.480801][T14068] netlink: 'syz.0.3062': attribute type 4 has an invalid length. [ 245.548784][T14075] netlink: 'syz.0.3062': attribute type 4 has an invalid length. [ 245.976176][T14089] lo speed is unknown, defaulting to 1000 [ 246.767869][T14113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14113 comm=syz.3.3081 [ 246.829780][T14115] wireguard0: entered promiscuous mode [ 246.835346][T14115] wireguard0: entered allmulticast mode [ 247.340463][T14121] lo speed is unknown, defaulting to 1000 [ 248.027090][T14166] Set syz1 is full, maxelem 65536 reached [ 248.523152][T14176] lo speed is unknown, defaulting to 1000 [ 248.812635][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 248.812652][ T29] audit: type=1326 audit(1760228342.082:12216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14178 comm="syz.4.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 248.842964][ T29] audit: type=1326 audit(1760228342.082:12217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14178 comm="syz.4.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 248.866995][ T29] audit: type=1326 audit(1760228342.082:12218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14178 comm="syz.4.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 248.890670][ T29] audit: type=1326 audit(1760228342.082:12219): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14178 comm="syz.4.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 248.914659][ T29] audit: type=1326 audit(1760228342.082:12220): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14178 comm="syz.4.3103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 249.005095][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 249.422522][T14198] vti0: entered promiscuous mode [ 249.452096][T14200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3111'. [ 249.510013][T14200] IPVS: Unknown mcast interface: ipvlan1 [ 249.856401][ T29] audit: type=1326 audit(1760228343.142:12221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14207 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 249.880185][ T29] audit: type=1326 audit(1760228343.142:12222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14207 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 249.903953][ T29] audit: type=1326 audit(1760228343.142:12223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14207 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 249.913895][T14183] lo speed is unknown, defaulting to 1000 [ 249.927598][ T29] audit: type=1326 audit(1760228343.142:12224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14207 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 249.956923][ T29] audit: type=1326 audit(1760228343.142:12225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14207 comm="syz.1.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 250.167776][T14234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3122'. [ 250.212548][T14234] netlink: 'syz.4.3122': attribute type 4 has an invalid length. [ 250.220349][T14234] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3122'. [ 250.684603][T14216] Set syz1 is full, maxelem 65536 reached [ 250.731098][T14247] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3125'. [ 250.776068][T14247] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14247 comm=syz.3.3125 [ 250.903532][T14257] vhci_hcd: invalid port number 96 [ 250.908793][T14257] vhci_hcd: default hub control req: 0314 vfffa i0060 l0 [ 251.152312][T14264] wireguard2: entered promiscuous mode [ 251.157843][T14264] wireguard2: entered allmulticast mode [ 251.323642][T14267] lo speed is unknown, defaulting to 1000 [ 251.375034][T14284] netlink: 'syz.4.3140': attribute type 4 has an invalid length. [ 251.387448][T14284] netlink: 'syz.4.3140': attribute type 4 has an invalid length. [ 251.987853][T14312] netlink: 'syz.3.3151': attribute type 1 has an invalid length. [ 252.012374][T14312] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address [ 252.023795][T14312] bond13: (slave vxcan1): Error -95 calling set_mac_address [ 252.072827][T14317] bond13: (slave bridge8): Enslaving as an active interface with a down link [ 252.131168][T14312] macvlan0: entered promiscuous mode [ 252.136658][T14312] macvlan0: entered allmulticast mode [ 252.142756][T14312] bond13: entered promiscuous mode [ 252.148300][T14312] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 252.160204][T14312] bond13: left promiscuous mode [ 252.458094][T14337] lo speed is unknown, defaulting to 1000 [ 252.550068][T14345] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.3163'. [ 252.580738][T14348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3164'. [ 252.590089][T14348] IPVS: Unknown mcast interface: ipvlan1 [ 252.813977][T14361] netlink: 'syz.1.3169': attribute type 13 has an invalid length. [ 252.835407][T14361] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 252.845361][T14361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.861725][ T3406] lo speed is unknown, defaulting to 1000 [ 252.867772][ T3406] syz2: Port: 1 Link ACTIVE [ 252.914220][T14364] netlink: 'syz.2.3170': attribute type 16 has an invalid length. [ 252.925471][T14364] netdevsi: left promiscuous mode [ 252.936148][T14364] 8021q: adding VLAN 0 to HW filter on device  [ 252.946433][T14364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 253.094391][T14388] vti0: entered promiscuous mode [ 253.151832][T14369] lo speed is unknown, defaulting to 1000 [ 253.235212][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 253.244233][T14403] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3183'. [ 253.253367][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 253.409804][T14414] unsupported nlmsg_type 40 [ 254.071344][T14426] lo speed is unknown, defaulting to 1000 [ 254.521723][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 254.521742][ T29] audit: type=1326 audit(1760228347.802:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.693100][T14426] lo speed is unknown, defaulting to 1000 [ 254.699121][T14426] lo speed is unknown, defaulting to 1000 [ 254.732938][ T29] audit: type=1326 audit(1760228347.842:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.756962][ T29] audit: type=1326 audit(1760228347.842:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.780726][ T29] audit: type=1326 audit(1760228347.842:12337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.804565][ T29] audit: type=1326 audit(1760228347.842:12338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.828213][ T29] audit: type=1326 audit(1760228347.842:12339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.851793][ T29] audit: type=1326 audit(1760228347.842:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.875454][ T29] audit: type=1326 audit(1760228347.842:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.899074][ T29] audit: type=1326 audit(1760228347.842:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.922744][ T29] audit: type=1326 audit(1760228347.842:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14429 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 254.962101][T14426] infiniband sz1: set active [ 254.966929][T14426] infiniband sz1: added lo [ 254.971578][ T36] lo speed is unknown, defaulting to 1000 [ 254.983540][T14426] RDS/IB: sz1: added [ 254.988009][T14426] lo speed is unknown, defaulting to 1000 [ 255.028543][T14426] lo speed is unknown, defaulting to 1000 [ 255.033902][T14445] __nla_validate_parse: 4 callbacks suppressed [ 255.033923][T14445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3197'. [ 255.067462][T14426] lo speed is unknown, defaulting to 1000 [ 255.104253][T14426] lo speed is unknown, defaulting to 1000 [ 255.144267][T14426] lo speed is unknown, defaulting to 1000 [ 255.204381][T14453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3201'. [ 255.242451][T14455] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3202'. [ 255.256131][T14461] netlink: 'syz.1.3201': attribute type 4 has an invalid length. [ 255.263989][T14461] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3201'. [ 255.274147][T14461] .`: renamed from $Hÿ (while UP) [ 255.332948][T14463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3204'. [ 255.761513][T14466] lo speed is unknown, defaulting to 1000 [ 255.946274][T14466] lo speed is unknown, defaulting to 1000 [ 256.709564][T14499] lo speed is unknown, defaulting to 1000 [ 256.716393][T14499] lo speed is unknown, defaulting to 1000 [ 257.275960][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 257.300224][T14481] lo speed is unknown, defaulting to 1000 [ 257.316396][T14507] netlink: 'syz.0.3216': attribute type 4 has an invalid length. [ 257.324339][T14507] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3216'. [ 257.342347][T14481] lo speed is unknown, defaulting to 1000 [ 257.688557][T14503] lo speed is unknown, defaulting to 1000 [ 257.694993][T14503] lo speed is unknown, defaulting to 1000 [ 258.150436][T14533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3224'. [ 258.627456][T14548] lo speed is unknown, defaulting to 1000 [ 258.641022][T14548] lo speed is unknown, defaulting to 1000 [ 258.747386][T14554] lo speed is unknown, defaulting to 1000 [ 258.762979][T14554] lo speed is unknown, defaulting to 1000 [ 258.807469][T14556] rdma_rxe: rxe_newlink: failed to add lo [ 258.854835][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3234'. [ 259.065071][T14572] team_slave_1: Caught tx_queue_len zero misconfig [ 259.072287][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'. [ 259.320888][T14583] netlink: 'syz.1.3241': attribute type 30 has an invalid length. [ 259.410360][T14592] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 259.508615][T14594] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 259.516223][T14594] 0ªî{X¹¦: entered allmulticast mode [ 259.638123][T14594] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 259.683685][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 259.683703][ T29] audit: type=1326 audit(1760228353.033:12600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.734815][ T29] audit: type=1326 audit(1760228353.064:12601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.758562][ T29] audit: type=1326 audit(1760228353.064:12602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.782297][ T29] audit: type=1326 audit(1760228353.064:12603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.805962][ T29] audit: type=1326 audit(1760228353.064:12604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.829586][ T29] audit: type=1326 audit(1760228353.064:12605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.853340][ T29] audit: type=1326 audit(1760228353.064:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.877103][ T29] audit: type=1326 audit(1760228353.064:12607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.900985][ T29] audit: type=1326 audit(1760228353.064:12608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 259.924645][ T29] audit: type=1326 audit(1760228353.064:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14600 comm="syz.1.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 260.023816][T14611] __nla_validate_parse: 4 callbacks suppressed [ 260.023835][T14611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3253'. [ 260.059676][T14615] netlink: 'syz.3.3254': attribute type 4 has an invalid length. [ 260.067626][T14615] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3254'. [ 260.081385][T14615] .`: renamed from $Hÿ [ 260.223653][T14623] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 260.234189][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3261'. [ 260.269946][T14630] bridge4: port 1(ip6gretap0) entered blocking state [ 260.276794][T14630] bridge4: port 1(ip6gretap0) entered disabled state [ 260.296495][T14630] ip6gretap0: entered allmulticast mode [ 260.304734][T14630] ip6gretap0: entered promiscuous mode [ 260.333604][T14634] veth7: entered promiscuous mode [ 260.338853][T14634] bridge4: port 2(veth7) entered blocking state [ 260.345300][T14634] bridge4: port 2(veth7) entered disabled state [ 260.388918][T14634] veth7: entered allmulticast mode [ 260.420867][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 260.472171][T14642] netlink: 'syz.2.3265': attribute type 10 has an invalid length. [ 260.496009][T14647] tipc: Enabling of bearer rejected, failed to enable media [ 260.598503][T14658] netlink: 60 bytes leftover after parsing attributes in process `+}[@'. [ 260.776609][T14677] ALSA: seq fatal error: cannot create timer (-22) [ 261.295686][T14691] lo speed is unknown, defaulting to 1000 [ 261.302662][T14691] lo speed is unknown, defaulting to 1000 [ 262.510521][T14722] lo speed is unknown, defaulting to 1000 [ 262.517320][T14722] lo speed is unknown, defaulting to 1000 [ 262.881531][T14726] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3291'. [ 264.096615][T14744] Set syz1 is full, maxelem 65536 reached [ 264.258797][T14767] netlink: 'syz.0.3305': attribute type 1 has an invalid length. [ 264.289573][T14767] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 264.300964][T14767] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 264.373041][T14773] gretap1: entered promiscuous mode [ 264.410605][T14773] bond0: (slave gretap1): making interface the new active one [ 264.418622][T14773] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 264.607543][T14767] macvlan0: entered promiscuous mode [ 264.612903][T14767] macvlan0: entered allmulticast mode [ 264.621507][T14767] bond0: entered promiscuous mode [ 264.627115][T14767] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 264.638401][T14767] bond0: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 264.651175][T14767] bond0: left promiscuous mode [ 265.389187][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 265.389203][ T29] audit: type=1326 audit(1760228358.878:13124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.423618][ T29] audit: type=1326 audit(1760228358.908:13125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.447448][ T29] audit: type=1326 audit(1760228358.908:13126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.471237][ T29] audit: type=1326 audit(1760228358.908:13127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.494858][ T29] audit: type=1326 audit(1760228358.908:13128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.518522][ T29] audit: type=1326 audit(1760228358.908:13129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.542163][ T29] audit: type=1326 audit(1760228358.908:13130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.565969][ T29] audit: type=1326 audit(1760228358.908:13131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.589622][ T29] audit: type=1326 audit(1760228358.908:13132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.613245][ T29] audit: type=1326 audit(1760228358.908:13133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14803 comm="syz.2.3316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 265.704670][T14819] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3319'. [ 265.714246][T14819] 0ªX¹¦À: renamed from caif0 [ 265.721717][T14819] 0ªX¹¦À: entered allmulticast mode [ 265.727076][T14819] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 265.789114][T14823] netlink: 'syz.0.3320': attribute type 5 has an invalid length. [ 265.825233][T14825] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3322'. [ 265.992255][T14842] netlink: 'syz.3.3329': attribute type 4 has an invalid length. [ 266.115822][T14847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3330'. [ 266.187741][T14823] 8021q: adding VLAN 0 to HW filter on device bond6 [ 266.196315][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3331'. [ 266.540445][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 266.615213][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 266.670625][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 266.692241][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 266.701638][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 266.710981][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 266.761244][T14863] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 267.471497][T14881] .`: left promiscuous mode [ 267.527231][T14881] wg2: left promiscuous mode [ 267.531956][T14881] wg2: left allmulticast mode [ 267.603435][T14881] xfrm0: left promiscuous mode [ 267.608358][T14881] xfrm0: left allmulticast mode [ 267.686807][T14881] veth2: left promiscuous mode [ 267.691819][T14881] veth2: left allmulticast mode [ 267.696897][T14881] bond1: left allmulticast mode [ 267.701993][T14881] veth5: left promiscuous mode [ 267.716805][T14881] bridge0: left allmulticast mode [ 267.722047][T14881] macvtap0: left allmulticast mode [ 267.736197][T14881] veth8: left promiscuous mode [ 267.741096][T14881] veth8: left allmulticast mode [ 267.801312][T14886] netlink: 'syz.0.3344': attribute type 4 has an invalid length. [ 267.817188][T14881] veth14: left promiscuous mode [ 267.822178][T14881] veth14: left allmulticast mode [ 267.837046][T14889] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 267.854463][T14891] netlink: 'syz.0.3344': attribute type 4 has an invalid length. [ 267.865015][T14881] team0: left promiscuous mode [ 267.869935][T14881] team0: left allmulticast mode [ 267.895794][T14881] veth17: left promiscuous mode [ 267.906733][T14881] vti0: left promiscuous mode [ 267.915469][T14875] lo speed is unknown, defaulting to 1000 [ 267.926685][T14890] ipvlan0: entered promiscuous mode [ 267.941469][T14890] bridge0: port 1(ipvlan0) entered blocking state [ 267.948084][T14890] bridge0: port 1(ipvlan0) entered disabled state [ 267.954867][T14890] ipvlan0: entered allmulticast mode [ 267.960863][T14890] ipvlan0: left allmulticast mode [ 267.994948][T14889] dummy0: entered promiscuous mode [ 268.001575][T14889] .`: (slave dummy0): Enslaving as an active interface with an up link [ 268.039577][T14875] lo speed is unknown, defaulting to 1000 [ 268.048883][ T10] lo speed is unknown, defaulting to 1000 [ 268.054966][ T23] lo speed is unknown, defaulting to 1000 [ 268.226488][T14907] infiniband syz!: set down [ 268.231174][T14907] infiniband syz!: added team_slave_0 [ 268.273107][T14907] RDS/IB: syz!: added [ 268.548176][T14933] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14933 comm=syz.0.3359 [ 268.919038][T14948] tipc: Enabling of bearer rejected, failed to enable media [ 269.408922][T14919] lo speed is unknown, defaulting to 1000 [ 269.421864][T14919] lo speed is unknown, defaulting to 1000 [ 269.888677][T14991] bridge: RTM_NEWNEIGH with invalid ether address [ 270.242850][T15006] netlink: 'syz.1.3385': attribute type 4 has an invalid length. [ 270.312431][ T36] lo speed is unknown, defaulting to 1000 [ 270.318326][ T36] syz2: Port: 1 Link DOWN [ 270.325553][T15012] netlink: 'syz.1.3385': attribute type 4 has an invalid length. [ 270.336240][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 270.336254][ T29] audit: type=1326 audit(1760228363.900:13322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.450949][ T36] lo speed is unknown, defaulting to 1000 [ 270.456776][ T36] syz2: Port: 1 Link ACTIVE [ 270.501628][ T29] audit: type=1326 audit(1760228363.930:13323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.525652][ T29] audit: type=1326 audit(1760228363.930:13324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.549472][ T29] audit: type=1326 audit(1760228363.930:13325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.573143][ T29] audit: type=1326 audit(1760228363.930:13326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.596938][ T29] audit: type=1326 audit(1760228363.930:13327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.620648][ T29] audit: type=1326 audit(1760228363.930:13328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.644352][ T29] audit: type=1326 audit(1760228363.930:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.668234][ T29] audit: type=1326 audit(1760228363.940:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 270.691889][ T29] audit: type=1326 audit(1760228363.940:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 271.335430][T15044] raw_sendmsg: syz.4.3396 forgot to set AF_INET. Fix it! [ 271.454879][T15026] lo speed is unknown, defaulting to 1000 [ 271.474945][T15026] lo speed is unknown, defaulting to 1000 [ 271.492054][T15051] netlink: 'syz.4.3399': attribute type 1 has an invalid length. [ 271.567858][T15051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.609654][T15060] syz_tun: entered allmulticast mode [ 271.615685][T15060] syz_tun: left allmulticast mode [ 271.645246][T15051] vlan0: entered promiscuous mode [ 271.650483][T15051] bond2: entered promiscuous mode [ 271.655681][T15051] vlan0: entered allmulticast mode [ 271.660856][T15051] bond2: entered allmulticast mode [ 271.692445][T15064] __nla_validate_parse: 8 callbacks suppressed [ 271.692464][T15064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3403'. [ 271.770473][T15070] netlink: 'syz.2.3405': attribute type 4 has an invalid length. [ 271.826559][T15070] netlink: 'syz.2.3405': attribute type 4 has an invalid length. [ 271.943854][T15085] netlink: 'syz.3.3410': attribute type 1 has an invalid length. [ 271.964062][T15085] 8021q: adding VLAN 0 to HW filter on device bond14 [ 271.998260][T15085] veth1: entered promiscuous mode [ 272.015965][T15085] bond14: (slave veth1): Enslaving as an active interface with a down link [ 272.036172][T15085] erspan0: entered allmulticast mode [ 272.055072][T15085] bond14: (slave erspan0): making interface the new active one [ 272.063823][T15085] erspan0: entered promiscuous mode [ 272.069249][T15085] bond14: (slave erspan0): Enslaving as an active interface with an up link [ 272.123660][T15089] netlink: 'syz.3.3411': attribute type 4 has an invalid length. [ 272.132976][T15089] netlink: 'syz.3.3411': attribute type 4 has an invalid length. [ 272.188709][T15093] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3413'. [ 273.370559][T15125] netlink: 'syz.2.3425': attribute type 10 has an invalid length. [ 273.380548][T15125] netlink: 'syz.2.3425': attribute type 10 has an invalid length. [ 273.393506][T15125] : (slave dummy0): Enslaving as an active interface with an up link [ 273.430154][T15128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.447456][T15128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.454759][T15128] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 273.465943][T15128] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 273.495891][T15130] macvlan0: entered promiscuous mode [ 273.501729][T15130] bond7: entered promiscuous mode [ 273.507641][T15130] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 273.515904][T15130] bond7: left promiscuous mode [ 273.696741][T15143] .`: (slave dummy0): Releasing backup interface [ 273.704116][T15143] dummy0: left promiscuous mode [ 273.711163][T15143] batman_adv: batadv0: Adding interface: dummy0 [ 273.717566][T15143] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.743002][T15143] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 274.157143][T15163] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.593720][T14898] lo speed is unknown, defaulting to 1000 [ 274.599712][T14898] sz1: Port: 1 Link DOWN [ 274.659484][T15171] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.690792][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3443'. [ 274.699984][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3443'. [ 274.874602][T15182] tipc: Enabling of bearer rejected, failed to enable media [ 274.883580][T15178] random: crng reseeded on system resumption [ 275.033438][T15195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3452'. [ 275.179153][T15209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.197888][T15209] batadv0: entered promiscuous mode [ 275.223594][T15209] .`: (slave batadv0): Enslaving as an active interface with an up link [ 275.353771][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 275.353786][ T29] audit: type=1326 audit(1760228368.970:13535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.414363][ T29] audit: type=1326 audit(1760228369.020:13536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.438044][ T29] audit: type=1326 audit(1760228369.020:13537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.461651][ T29] audit: type=1326 audit(1760228369.020:13538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.485415][ T29] audit: type=1326 audit(1760228369.020:13539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.509057][ T29] audit: type=1326 audit(1760228369.020:13540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.532725][ T29] audit: type=1326 audit(1760228369.020:13541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.556410][ T29] audit: type=1326 audit(1760228369.020:13542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.580176][ T29] audit: type=1326 audit(1760228369.020:13543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.604503][ T29] audit: type=1326 audit(1760228369.020:13544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.1.3458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 275.868524][T15228] __vm_enough_memory: pid: 15228, comm: syz.1.3461, bytes: 21200305463296 not enough memory for the allocation [ 276.474774][T15241] macvtap0: entered promiscuous mode [ 276.486607][T15241] macvtap0: left promiscuous mode [ 276.536506][T15242] syz_tun: entered allmulticast mode [ 276.552774][T15242] dvmrp1: entered allmulticast mode [ 276.617973][T15239] lo speed is unknown, defaulting to 1000 [ 276.624322][T15239] lo speed is unknown, defaulting to 1000 [ 276.737151][T15245] $Hÿ: renamed from .` [ 276.766943][T15237] syz_tun: left allmulticast mode [ 277.135687][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3478'. [ 277.574184][T15294] validate_nla: 3 callbacks suppressed [ 277.574243][T15294] netlink: 'syz.4.3485': attribute type 12 has an invalid length. [ 277.929574][T15305] netlink: '+}[@': attribute type 4 has an invalid length. [ 277.980071][T15307] netlink: 'syz.0.3489': attribute type 4 has an invalid length. [ 277.990922][ T36] lo speed is unknown, defaulting to 1000 [ 277.996838][ T36] sz1: Port: 1 Link ACTIVE [ 278.013497][ T3413] lo speed is unknown, defaulting to 1000 [ 278.019303][ T3413] sz1: Port: 1 Link DOWN [ 278.130719][T15315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15315 comm=syz.2.3493 [ 278.153091][T15318] netlink: 'syz.0.3495': attribute type 1 has an invalid length. [ 278.176490][T15318] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.264795][T15325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3496'. [ 278.307065][T15318] bond7: (slave geneve2): making interface the new active one [ 278.316123][T15318] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 278.325168][ T9516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.348373][ T9516] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.389742][ T9516] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.599164][ T9516] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.633338][T15331] netlink: 'syz.2.3497': attribute type 3 has an invalid length. [ 278.814248][T15338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.923091][T15338] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 278.932260][T15338] bond8: (slave macvlan0): Enslaving as a backup interface with an up link [ 278.948451][T15345] netlink: 'syz.2.3500': attribute type 30 has an invalid length. [ 278.995543][T15345] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3500'. [ 279.074869][ T9516] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 279.181946][ T9516] bond8: (slave macvlan0): link status up again after 0 ms [ 279.189264][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 279.218375][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3507'. [ 279.231474][ T4581] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 279.252950][T15365] wg2: entered promiscuous mode [ 279.257858][T15365] wg2: entered allmulticast mode [ 279.263442][T15361] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15361 comm=syz.2.3507 [ 279.301395][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 279.321327][T15363] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3509'. [ 279.361617][T15374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3521'. [ 279.383827][T15374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15374 comm=syz.4.3521 [ 279.410179][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 279.529232][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 279.648335][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 279.758833][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 279.868964][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 279.873368][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3515'. [ 279.912052][T15387] team1: entered promiscuous mode [ 279.917184][T15387] team1: entered allmulticast mode [ 279.939474][T15387] 8021q: adding VLAN 0 to HW filter on device team1 [ 279.949577][T15393] netlink: 'syz.3.3518': attribute type 6 has an invalid length. [ 280.240311][T15410] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3524'. [ 280.249616][T15410] 0ªX¹¦À: renamed from caif0 [ 280.269172][T15410] 0ªX¹¦À: entered allmulticast mode [ 280.329739][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 280.329834][ T29] audit: type=1400 audit(1760228373.993:13681): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=3549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 280.788756][ T29] audit: type=1400 audit(1760228374.451:13682): avc: denied { create } for pid=15453 comm="syz.3.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 280.810933][T15454] bridge0: entered allmulticast mode [ 281.101049][ T29] audit: type=1400 audit(1760228374.731:13683): avc: denied { write } for pid=15458 comm="syz.3.3540" path="socket:[47280]" dev="sockfs" ino=47280 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.154771][ T29] audit: type=1400 audit(1760228374.791:13684): avc: denied { setopt } for pid=15458 comm="syz.3.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 281.489051][T15472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15472 comm=syz.4.3545 [ 281.513428][T15474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.560865][T15474] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 281.570035][T15474] bond3: (slave macvlan0): Enslaving as a backup interface with a down link [ 281.579099][T15469] lo speed is unknown, defaulting to 1000 [ 281.585957][T15469] lo speed is unknown, defaulting to 1000 [ 281.688102][T15484] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3550'. [ 281.699204][ T29] audit: type=1326 audit(1760228375.361:13685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 281.722955][ T29] audit: type=1326 audit(1760228375.361:13686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 281.746630][ T29] audit: type=1326 audit(1760228375.382:13687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 281.747969][T15484] 1ªX¹¦À: renamed from 60ªX¹¦À [ 281.770467][ T29] audit: type=1326 audit(1760228375.382:13688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f952964ef03 code=0x7ffc0000 [ 281.798814][ T29] audit: type=1326 audit(1760228375.382:13689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f952964d97f code=0x7ffc0000 [ 281.826234][ T29] audit: type=1326 audit(1760228375.454:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15482 comm="syz.1.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f952964ef57 code=0x7ffc0000 [ 281.871377][T15483] netlink: 'syz.1.3549': attribute type 13 has an invalid length. [ 281.879447][T15483] netlink: 'syz.1.3549': attribute type 27 has an invalid length. [ 281.911598][ T3413] lo speed is unknown, defaulting to 1000 [ 281.917546][ T3413] syz2: Port: 1 Link DOWN [ 281.923546][T15491] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3553'. [ 281.936496][T15491] batadv0: entered promiscuous mode [ 281.941833][T15491] batadv0: entered allmulticast mode [ 281.988846][T15498] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 282.096150][T15507] netlink: 'syz.2.3559': attribute type 1 has an invalid length. [ 282.111027][T15507] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.148064][T15507] bond8: (slave geneve2): making interface the new active one [ 282.168433][T15507] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 282.182688][T15515] sz1: rxe_newlink: already configured on lo [ 282.193155][ T4581] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.201813][ T4581] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.210410][ T4581] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.219029][ T4581] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.447541][T15533] __nla_validate_parse: 1 callbacks suppressed [ 282.447560][T15533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3568'. [ 282.514454][T15537] geneve2: entered promiscuous mode [ 282.519752][T15537] geneve2: entered allmulticast mode [ 283.437676][ T9538] erspan0: left promiscuous mode [ 284.109058][ T4581] net_ratelimit: 36 callbacks suppressed [ 284.109074][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.225866][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.333047][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.440252][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.547554][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.654856][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.762014][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.869225][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 284.976518][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 285.083739][ T9516] bond8: (slave macvlan0): failed to get link speed/duplex [ 285.189104][T15546] netlink: 'syz.0.3581': attribute type 6 has an invalid length. [ 285.252309][T15559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'. [ 285.325864][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 285.325883][ T29] audit: type=1326 audit(1760228379.093:13757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.355869][ T29] audit: type=1326 audit(1760228379.103:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.379861][ T29] audit: type=1326 audit(1760228379.103:13759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.477059][T15569] bridge0: left promiscuous mode [ 285.503923][ T29] audit: type=1326 audit(1760228379.165:13760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.527565][ T29] audit: type=1326 audit(1760228379.185:13761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.551222][ T29] audit: type=1326 audit(1760228379.185:13762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.575052][ T29] audit: type=1326 audit(1760228379.196:13763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.598766][ T29] audit: type=1326 audit(1760228379.196:13764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.622514][ T29] audit: type=1326 audit(1760228379.196:13765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 285.646128][ T29] audit: type=1326 audit(1760228379.196:13766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15565 comm="syz.1.3577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 286.822814][T15611] lo speed is unknown, defaulting to 1000 [ 286.829090][T15611] lo speed is unknown, defaulting to 1000 [ 287.723554][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3600'. [ 287.749033][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3600'. [ 287.776916][T15638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3600'. [ 287.810004][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3603'. [ 287.842533][T15648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'. [ 287.859675][T15636] 0ªî{X¹¦: left allmulticast mode [ 287.864979][T15636] $Hÿ: left promiscuous mode [ 287.869987][T15636] batadv0: left promiscuous mode [ 287.875792][T15636] xfrm0: left promiscuous mode [ 287.880701][T15636] xfrm0: left allmulticast mode [ 287.885700][T15636] geneve0: left allmulticast mode [ 287.891480][T15636] ipip0: left promiscuous mode [ 287.896506][T15636] vlan0: left promiscuous mode [ 287.901360][T15636] bond1: left promiscuous mode [ 287.906298][T15636] vlan0: left allmulticast mode [ 287.911269][T15636] bond1: left allmulticast mode [ 288.524141][T15658] netlink: 'syz.1.3608': attribute type 39 has an invalid length. [ 288.694514][T15673] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3616'. [ 288.715177][T15673] 0ªX¹¦À: renamed from caif0 [ 288.723792][T15677] netlink: 'syz.1.3618': attribute type 2 has an invalid length. [ 288.731694][T15677] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.3618'. [ 288.741961][T15673] 0ªX¹¦À: entered allmulticast mode [ 288.749226][T15682] syz_tun: entered allmulticast mode [ 288.762285][T15680] syz_tun: left allmulticast mode [ 288.817435][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3622'. [ 288.833814][T15693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3622'. [ 288.843969][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3623'. [ 289.075812][ T4581] net_ratelimit: 27 callbacks suppressed [ 289.075834][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 289.149185][T15704] netlink: 'syz.3.3627': attribute type 5 has an invalid length. [ 289.195373][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 289.310936][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 289.418658][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 289.528165][ T4581] bond8: (slave macvlan0): failed to get link speed/duplex [ 289.702645][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 289.811583][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 289.920314][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 290.049746][T15721] netlink: 'syz.2.3632': attribute type 10 has an invalid length. [ 290.065338][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 290.174616][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 290.342007][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 290.342027][ T29] audit: type=1326 audit(1760228384.229:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.372062][ T29] audit: type=1326 audit(1760228384.229:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.395736][ T29] audit: type=1326 audit(1760228384.229:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.419519][ T29] audit: type=1326 audit(1760228384.229:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.434853][T15713] lo speed is unknown, defaulting to 1000 [ 290.443308][ T29] audit: type=1326 audit(1760228384.229:14019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.478223][T15713] lo speed is unknown, defaulting to 1000 [ 290.485977][ T29] audit: type=1326 audit(1760228384.372:14020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.509824][ T29] audit: type=1326 audit(1760228384.372:14021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.533801][ T29] audit: type=1326 audit(1760228384.372:14022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.564621][ T29] audit: type=1326 audit(1760228384.453:14023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.629958][ T29] audit: type=1326 audit(1760228384.524:14024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15725 comm="syz.2.3634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3327eec9 code=0x7ffc0000 [ 290.748995][T15743] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 290.780441][T15747] syz0: rxe_newlink: already configured on bond_slave_0 [ 290.874335][T15756] can0: slcan on ttyS3. [ 290.941705][T15756] can0 (unregistered): slcan off ttyS3. [ 290.947712][T15756] Falling back ldisc for ttyS3. [ 290.997659][T15761] batman_adv: batadv0: Removing interface: dummy0 [ 291.104200][T15764] SELinux: failed to load policy [ 292.050826][T15809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.535616][T15818] tipc: Enabling of bearer rejected, failed to enable media [ 293.122009][T15844] __nla_validate_parse: 4 callbacks suppressed [ 293.122028][T15844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3678'. [ 293.142418][T15846] bridge0: entered allmulticast mode [ 293.159134][T15848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3689'. [ 293.737239][T15869] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.041147][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3684'. [ 294.184191][ T9518] net_ratelimit: 29 callbacks suppressed [ 294.184211][ T9518] bond8: (slave macvlan0): failed to get link speed/duplex [ 294.299713][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 294.418106][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 294.436250][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3695'. [ 294.526743][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 294.635154][ T9518] bond8: (slave macvlan0): failed to get link speed/duplex [ 294.743725][ T9518] bond8: (slave macvlan0): failed to get link speed/duplex [ 294.852355][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 294.960726][ T9518] bond8: (slave macvlan0): failed to get link speed/duplex [ 295.069305][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 295.076725][T15922] syz_tun: entered allmulticast mode [ 295.094518][T15922] syz_tun: left allmulticast mode [ 295.159686][T15928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3705'. [ 295.178028][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 295.368606][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 295.368629][ T29] audit: type=1326 audit(1760228389.336:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.412508][ T29] audit: type=1326 audit(1760228389.366:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.437388][ T29] audit: type=1326 audit(1760228389.366:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.461348][ T29] audit: type=1326 audit(1760228389.366:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.484966][ T29] audit: type=1326 audit(1760228389.366:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.508655][ T29] audit: type=1326 audit(1760228389.366:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.532334][ T29] audit: type=1326 audit(1760228389.366:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.555947][ T29] audit: type=1326 audit(1760228389.366:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.579596][ T29] audit: type=1326 audit(1760228389.366:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.603279][ T29] audit: type=1326 audit(1760228389.366:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15930 comm="syz.4.3707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb043fdeec9 code=0x7ffc0000 [ 295.682975][T15939] 9pnet_virtio: no channels available for device ÿÿÿÿ [ 295.682975][T15939] [ 295.865172][T15951] netlink: 'syz.2.3712': attribute type 4 has an invalid length. [ 295.900531][T15934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.918985][T15951] netlink: 'syz.2.3712': attribute type 4 has an invalid length. [ 296.241077][T15957] IPv6: sit1: Disabled Multicast RS [ 296.247947][T15957] sit1: entered allmulticast mode [ 296.664272][T15965] serio: Serial port ptm0 [ 296.794183][T15972] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3719'. [ 296.909824][T15980] ipvlan0: entered promiscuous mode [ 296.915697][T15980] bridge0: port 1(ipvlan0) entered blocking state [ 296.922293][T15980] bridge0: port 1(ipvlan0) entered disabled state [ 296.929262][T15980] ipvlan0: entered allmulticast mode [ 296.934601][T15980] bridge0: entered allmulticast mode [ 296.940542][T15980] ipvlan0: left allmulticast mode [ 296.945660][T15980] bridge0: left allmulticast mode [ 297.368704][T15994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3725'. [ 297.404479][T15997] syz_tun: entered allmulticast mode [ 297.410985][T15997] syz_tun: left allmulticast mode [ 297.654653][T16006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3727'. [ 297.915747][T16002] lo speed is unknown, defaulting to 1000 [ 297.927841][T16002] lo speed is unknown, defaulting to 1000 [ 298.089290][T16016] IPv6: NLM_F_CREATE should be specified when creating new route [ 298.180986][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3735'. [ 298.190094][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3735'. [ 298.472412][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3745'. [ 298.714057][T16055] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3744'. [ 299.307456][ T4572] net_ratelimit: 29 callbacks suppressed [ 299.307479][ T4572] bond8: (slave macvlan0): failed to get link speed/duplex [ 299.429966][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 299.548734][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 299.756971][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 299.981414][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 300.584243][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 300.592742][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3759'. [ 300.748226][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 300.903547][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 301.437569][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 301.698386][T16099] tunl0: Caught tx_queue_len zero misconfig [ 301.718003][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 301.821224][T16105] rdma_rxe: rxe_newlink: failed to add bond0 [ 302.014361][T16109] lo speed is unknown, defaulting to 1000 [ 302.020688][T16109] lo speed is unknown, defaulting to 1000 [ 302.445445][T16125] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3762'. [ 302.660938][T16113] lo speed is unknown, defaulting to 1000 [ 302.676707][T16113] lo speed is unknown, defaulting to 1000 [ 303.151023][T16129] netlink: '+}[@': attribute type 4 has an invalid length. [ 303.161335][T16129] netlink: '+}[@': attribute type 4 has an invalid length. [ 303.209552][T16133] 8021q: adding VLAN 0 to HW filter on device bond9 [ 303.247238][T16132] lo speed is unknown, defaulting to 1000 [ 303.255726][T16132] lo speed is unknown, defaulting to 1000 [ 303.324642][T16136] $Hÿ: renamed from .` [ 303.331634][T16136] $Hÿ: entered promiscuous mode [ 303.338423][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 303.338441][ T29] audit: type=1400 audit(1760228397.385:14538): avc: denied { setopt } for pid=16135 comm="syz.3.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.413081][ T29] audit: type=1400 audit(1760228397.405:14539): avc: denied { bind } for pid=16135 comm="syz.3.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 303.470321][T16141] netlink: 'syz.0.3770': attribute type 4 has an invalid length. [ 303.478698][T16141] netlink: 'syz.0.3770': attribute type 4 has an invalid length. [ 303.490428][T16146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.499736][ T3399] lo speed is unknown, defaulting to 1000 [ 303.505551][ T3399] sz1: Port: 1 Link ACTIVE [ 303.575558][T16154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3775'. [ 303.599009][T16153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3776'. [ 303.646953][ T29] audit: type=1400 audit(1760228397.687:14540): avc: denied { getopt } for pid=16159 comm="syz.0.3778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.672318][T16158] netlink: 'syz.3.3777': attribute type 30 has an invalid length. [ 303.745202][T16163] netlink: '+}[@': attribute type 4 has an invalid length. [ 303.754744][T16163] netlink: '+}[@': attribute type 4 has an invalid length. [ 303.764510][ T2965] lo speed is unknown, defaulting to 1000 [ 303.770284][ T2965] syz2: Port: 1 Link ACTIVE [ 303.854879][T16161] lo speed is unknown, defaulting to 1000 [ 303.860977][T16161] lo speed is unknown, defaulting to 1000 [ 304.012992][ T29] audit: type=1326 audit(1760228398.060:14541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16171 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 304.036675][ T29] audit: type=1326 audit(1760228398.060:14542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16171 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 304.060464][ T29] audit: type=1326 audit(1760228398.060:14543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16171 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 304.084329][ T29] audit: type=1326 audit(1760228398.060:14544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16171 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 304.108332][ T29] audit: type=1326 audit(1760228398.060:14545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16171 comm="syz.1.3792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 304.151447][T16175] $Hÿ: renamed from  (while UP) [ 304.158607][T16175] $Hÿ: entered promiscuous mode [ 304.163833][T16175] dummy0: entered promiscuous mode [ 304.207892][ T29] audit: type=1400 audit(1760228398.251:14546): avc: denied { connect } for pid=16178 comm="syz.3.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 304.288944][ T9532] net_ratelimit: 21 callbacks suppressed [ 304.288960][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 304.418009][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 304.442040][T16181] lo speed is unknown, defaulting to 1000 [ 304.448382][T16181] lo speed is unknown, defaulting to 1000 [ 304.537154][ T9532] bond8: (slave macvlan0): failed to get link speed/duplex [ 304.656300][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 304.775535][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 304.855388][T16204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3793'. [ 304.874118][T16204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16204 comm=syz.3.3793 [ 304.887681][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 304.976872][T16209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3795'. [ 305.030313][T16209] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16209 comm=syz.3.3795 [ 305.047943][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 305.172884][ T9524] bond8: (slave macvlan0): failed to get link speed/duplex [ 305.183133][ T29] audit: type=1326 audit(1760228399.248:14547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16216 comm="syz.1.3798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952964eec9 code=0x7ffc0000 [ 305.654507][ T9524] bond8: (slave macvlan0): failed to get link speed/duplex [ 305.738226][T16238] tipc: Enabling of bearer rejected, already enabled [ 305.778884][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 305.882428][T16249] rdma_rxe: rxe_newlink: failed to add bond0 [ 305.930070][T16256] netlink: 'syz.3.3810': attribute type 4 has an invalid length. [ 306.130799][T16269] ================================================================== [ 306.138949][T16269] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 306.147575][T16269] [ 306.150177][T16269] write to 0xffff88811b2be768 of 8 bytes by task 16271 on cpu 1: [ 306.157915][T16269] shmem_file_splice_read+0x470/0x600 [ 306.163311][T16269] splice_direct_to_actor+0x26f/0x680 [ 306.168729][T16269] do_splice_direct+0xda/0x150 [ 306.173515][T16269] do_sendfile+0x380/0x650 [ 306.177968][T16269] __x64_sys_sendfile64+0x105/0x150 [ 306.183200][T16269] x64_sys_call+0x2bb4/0x3000 [ 306.187903][T16269] do_syscall_64+0xd2/0x200 [ 306.192422][T16269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.198353][T16269] [ 306.200690][T16269] write to 0xffff88811b2be768 of 8 bytes by task 16269 on cpu 0: [ 306.208425][T16269] shmem_file_splice_read+0x470/0x600 [ 306.213823][T16269] splice_direct_to_actor+0x26f/0x680 [ 306.219226][T16269] do_splice_direct+0xda/0x150 [ 306.224017][T16269] do_sendfile+0x380/0x650 [ 306.228481][T16269] __x64_sys_sendfile64+0x105/0x150 [ 306.233714][T16269] x64_sys_call+0x2bb4/0x3000 [ 306.238415][T16269] do_syscall_64+0xd2/0x200 [ 306.242946][T16269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.248854][T16269] [ 306.251193][T16269] value changed: 0x000000000003d59f -> 0x000000000003d6b2 [ 306.258307][T16269] [ 306.260641][T16269] Reported by Kernel Concurrency Sanitizer on: [ 306.266809][T16269] CPU: 0 UID: 0 PID: 16269 Comm: syz.1.3814 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.278199][T16269] Tainted: [W]=WARN [ 306.282015][T16269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.292092][T16269] ================================================================== [ 309.328271][ T1389] net_ratelimit: 31 callbacks suppressed [ 309.328294][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 309.447682][ T9524] bond8: (slave macvlan0): failed to get link speed/duplex [ 309.557080][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 309.666535][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 309.775944][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 309.885423][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 309.994897][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 310.104332][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 310.213785][ T9524] bond8: (slave macvlan0): failed to get link speed/duplex [ 310.323300][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 314.326224][ T9538] net_ratelimit: 35 callbacks suppressed [ 314.326245][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 314.445767][ T9524] bond8: (slave macvlan0): failed to get link speed/duplex [ 314.555415][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 314.665009][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 314.774572][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 314.884154][ T9538] bond8: (slave macvlan0): failed to get link speed/duplex [ 314.993693][ T9524] bond8: (slave macvlan0): failed to get link speed/duplex [ 315.103477][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 315.213001][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex [ 315.322648][ T1389] bond8: (slave macvlan0): failed to get link speed/duplex