last executing test programs: 1m44.997024593s ago: executing program 1 (id=766): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) 1m44.959608148s ago: executing program 1 (id=768): tkill(0x0, 0x11) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000040)={0x11, 0x4}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000200300140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x44010) 1m44.94109641s ago: executing program 1 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0xd354, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x200, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff5, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0xa, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0x9, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8002, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x8000004, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x8, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xa, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x7, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) 1m44.926389022s ago: executing program 1 (id=770): r0 = io_uring_setup(0x799f, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x0, 0xfffffffc}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r2, 0x0, 0x80000001}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.881541648s ago: executing program 1 (id=771): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) write$binfmt_elf32(r1, 0x0, 0x69) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x118, r2, 0x210, 0x70bd25, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000120}, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 1m44.781213401s ago: executing program 1 (id=775): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1000000000000008}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1m29.76413354s ago: executing program 32 (id=775): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1000000000000008}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 3.082934827s ago: executing program 0 (id=2315): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000000c0)='./file1\x00', 0x4823e, 0x180) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x2}, {0x10, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2.852917007s ago: executing program 0 (id=2316): sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r4 = socket$kcm(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) setsockopt$sock_attach_bpf(r4, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4) 2.280851922s ago: executing program 0 (id=2319): openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x401003, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$tipc(0x1e, 0x5, 0x0) open(0x0, 0x80, 0x122) unshare(0x2a020400) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.999856828s ago: executing program 5 (id=2327): io_uring_setup(0x1a1f, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23f}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) personality(0x87bf5ac905ea0f7f) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x2, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1b, 0x100, &(0x7f0000001100)="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"}) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.829197731s ago: executing program 5 (id=2329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c9", 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 1.715495336s ago: executing program 5 (id=2332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) 1.714912766s ago: executing program 4 (id=2333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000005dc0), 0x0, 0x2001, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x401c2103, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.614988569s ago: executing program 5 (id=2334): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000002a00), 0x0, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) r2 = dup(r1) ioctl$GIO_UNISCRNMAP(r2, 0x43403d0e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r3, 0x0, 0x4004881) 1.477810447s ago: executing program 5 (id=2335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0x60, &(0x7f0000000280)=ANY=[], 0x0, 0x804, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r1, 0x0, 0x11, 0x9) fremovexattr(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="adc8703d5326fd5b9d17f7355542f8526a6c5408f9cc21d46069725410bbb2d7f8bc1bb99f7a9b8db5b18939151321fca0900a2a9de910b846943f35f587d1a79833208aeacdba5d27c9295c81486b399e385806bc019b3824d1cb4e15c27c9d8cfa019a181a818f4187f10e39a375cdec6e70e159280c54bbd083bb45131c3f6f9dacc93a91951a9da5f0a0cdf2aa46a7984ea75f0d04d227dc56eaab828b6aa1041ecb39084d5a1f45c26612499d2824b14e0b96e04720227ed82726633a88e8ac17dbbd1a382618d0dbf4a430d3ccf69782f0085ef06a8f5e63698b26925cb8f1eda3de6a6fa97a5be085ccccc8f75226d695340c9e3420"]) 1.400597557s ago: executing program 4 (id=2336): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000040000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.309901848s ago: executing program 0 (id=2339): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 1.220832241s ago: executing program 0 (id=2340): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x307, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x29, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xdd, 0x7, 0x11}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0xb3c, &(0x7f00000000c0)={0x0, 0x45d6, 0x1, 0x4, 0x7, 0x0, r3}) 1.198659433s ago: executing program 4 (id=2341): mkdirat(0xffffffffffffff9c, 0x0, 0x181) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket$inet(0xa, 0x80004, 0xfffffffc) listen(r0, 0x8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x14000, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1.169307427s ago: executing program 3 (id=2342): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(r0, &(0x7f0000005840), 0x4000000000000ef, 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x9a7, &(0x7f0000000040)={0x0, 0x6e98, 0xc000, 0x80008, 0x150}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.137204181s ago: executing program 4 (id=2343): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffac) 1.109554135s ago: executing program 3 (id=2344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, 0x0, 0x0) sendmsg$inet6(r4, 0x0, 0x54) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/187, 0xbb) 1.014277347s ago: executing program 3 (id=2345): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "0500"}, 0x10}, 0x1, 0x0, 0x0, 0x90}, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000840)="08000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f59", 0x1f}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead9", 0x101}], 0x3) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 949.781545ms ago: executing program 3 (id=2346): syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 752.787421ms ago: executing program 4 (id=2349): add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000100)="d8", 0x1, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@initdev, 0x0}, &(0x7f00000004c0)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', r0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) set_robust_list(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r5, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 733.429454ms ago: executing program 2 (id=2350): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 699.299618ms ago: executing program 4 (id=2351): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0, r3}) sendmmsg$inet(r4, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x40) 687.229559ms ago: executing program 2 (id=2352): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1) recvmmsg(r0, &(0x7f0000002000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/49, 0x31}, 0x8}], 0x1, 0x132c1d195b3331a8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYBLOB="5f3a1aed187b123aa5f1398a1e7e50257650e71555fdaf5437b923cc7b8f560052050fca2a3e9cf9f7004ce40d0d00000000000000fa0a0f1a4d81ef", @ANYRES16, @ANYRES16, @ANYRESOCT], 0x20}}, 0x0) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 634.000247ms ago: executing program 0 (id=2353): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x9, 0x1, 'SNAT\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000010000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) 370.949501ms ago: executing program 2 (id=2354): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11238}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000340), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f0010000", @ANYRES16=r5, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e64000000c40103808000"], 0x1f0}}, 0x0) 309.137739ms ago: executing program 3 (id=2355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20048040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) 245.427398ms ago: executing program 3 (id=2356): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x906, 0xfffffffffffffffd, 0x8, 0x0, 0x4, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xb9, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x3fb, 0x64, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4054) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0x8b25714e) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) readv(0xffffffffffffffff, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 172.095557ms ago: executing program 2 (id=2357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x1002025, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000100000000000000000002100000fe020009001b000008001900", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c800}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 168.672768ms ago: executing program 5 (id=2358): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2a7203d3}, 0x18) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0xa, @broadcast, 0x4e23, 0x1, 'wrr\x00', 0x0, 0x0, 0x30}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040844) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2240, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 100.797826ms ago: executing program 2 (id=2359): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) pipe2(0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x8b25714e) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4050) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x800000000007fff}, 0x18) mkdir(0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x845}, 0x10) kernel console output (not intermixed with test programs): r on device team0 [ 88.408813][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.416036][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.426952][T10652] macvlan0: entered promiscuous mode [ 88.432358][T10652] macvlan0: entered allmulticast mode [ 88.438246][T10652] bond4: entered promiscuous mode [ 88.443827][T10652] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 88.451705][T10652] bond4: left promiscuous mode [ 88.462103][ T4886] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.469181][ T4886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.533382][T10563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.636674][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 88.702809][T10563] veth0_vlan: entered promiscuous mode [ 88.719155][T10563] veth1_vlan: entered promiscuous mode [ 88.755383][T10563] veth0_macvtap: entered promiscuous mode [ 88.782448][T10563] veth1_macvtap: entered promiscuous mode [ 88.813122][T10563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.855052][T10563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.868594][ T4860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.917908][ T4860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.943508][ T4860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.044427][ T4860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.144223][T10677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.156268][T10677] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.188748][T10677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.424098][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1026'. [ 89.433706][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1027'. [ 89.997305][T10728] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1035'. [ 90.449087][T10728] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10728 comm=syz.4.1035 [ 91.676967][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 91.676984][ T29] audit: type=1400 audit(1768277784.497:6213): avc: denied { connect } for pid=10762 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.747467][ T29] audit: type=1400 audit(1768277784.527:6214): avc: denied { bind } for pid=10762 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.767262][ T29] audit: type=1400 audit(1768277784.527:6215): avc: denied { write } for pid=10762 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 91.786862][ T29] audit: type=1326 audit(1768277784.567:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 91.810664][ T29] audit: type=1326 audit(1768277784.567:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 91.834682][ T29] audit: type=1326 audit(1768277784.567:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 91.858344][ T29] audit: type=1326 audit(1768277784.567:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 91.881877][ T29] audit: type=1326 audit(1768277784.567:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 91.905518][ T29] audit: type=1326 audit(1768277784.567:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 91.929078][ T29] audit: type=1326 audit(1768277784.567:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10764 comm="syz.3.1047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 92.039791][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1050'. [ 92.093134][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1050'. [ 92.215757][T10787] loop5: detected capacity change from 0 to 512 [ 92.224221][T10787] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.269761][T10780] validate_nla: 2 callbacks suppressed [ 92.269781][T10780] netlink: 'syz.0.1054': attribute type 12 has an invalid length. [ 92.324497][T10787] EXT4-fs (loop5): 1 truncate cleaned up [ 92.330814][T10787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.611676][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.158581][T10813] loop5: detected capacity change from 0 to 1024 [ 93.174749][T10813] EXT4-fs: Ignoring removed orlov option [ 93.195586][T10813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.425867][T10839] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1075'. [ 93.450485][T10843] loop2: detected capacity change from 0 to 1024 [ 93.518994][T10843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.576491][T10843] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 93.699014][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.736925][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.764130][T10858] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 93.791839][T10858] hsr_slave_1 (unregistering): left promiscuous mode [ 93.969283][T10864] loop2: detected capacity change from 0 to 128 [ 94.002681][T10860] loop5: detected capacity change from 0 to 1024 [ 94.040066][T10860] EXT4-fs: Ignoring removed nobh option [ 94.054101][T10864] bio_check_eod: 98 callbacks suppressed [ 94.054122][T10864] syz.2.1082: attempt to access beyond end of device [ 94.054122][T10864] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 94.074833][T10864] syz.2.1082: attempt to access beyond end of device [ 94.074833][T10864] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 94.077168][T10860] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.088786][T10864] syz.2.1082: attempt to access beyond end of device [ 94.088786][T10864] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 94.088836][T10864] syz.2.1082: attempt to access beyond end of device [ 94.088836][T10864] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 94.088875][T10864] syz.2.1082: attempt to access beyond end of device [ 94.088875][T10864] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 94.088969][T10864] syz.2.1082: attempt to access beyond end of device [ 94.088969][T10864] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 94.089010][T10864] syz.2.1082: attempt to access beyond end of device [ 94.089010][T10864] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 94.089051][T10864] syz.2.1082: attempt to access beyond end of device [ 94.089051][T10864] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 94.089091][T10864] syz.2.1082: attempt to access beyond end of device [ 94.089091][T10864] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 94.089175][T10864] syz.2.1082: attempt to access beyond end of device [ 94.089175][T10864] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 94.257193][T10873] 8021q: adding VLAN 0 to HW filter on device bond6 [ 94.271309][T10873] vlan4: entered allmulticast mode [ 94.276792][T10873] bond6: entered allmulticast mode [ 94.322109][T10860] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.1081: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 94.385101][T10860] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1081: couldn't read orphan inode 11 (err -117) [ 94.413543][T10860] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.489922][T10860] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1081: Invalid block bitmap block 0 in block_group 0 [ 94.507509][T10860] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1081: Failed to acquire dquot type 0 [ 94.538017][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.699164][T10891] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.792146][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1092'. [ 95.651683][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1103'. [ 95.684726][T10923] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.1103'. [ 95.711493][T10923] netlink: zone id is out of range [ 95.716712][T10923] netlink: zone id is out of range [ 95.750890][T10923] netlink: zone id is out of range [ 95.769242][T10923] netlink: zone id is out of range [ 95.784712][T10923] netlink: zone id is out of range [ 95.793167][T10923] netlink: zone id is out of range [ 95.834926][T10923] netlink: set zone limit has 8 unknown bytes [ 95.988877][T10944] tipc: Failed to remove unknown binding: 66,0,0/2126:2039852429/2039852430 [ 96.003781][T10945] macsec1: entered promiscuous mode [ 96.009379][T10945] bridge0: entered promiscuous mode [ 96.019488][T10944] tipc: Failed to remove unknown binding: 66,0,0/2126:2039852429/2039852430 [ 96.033621][T10945] bridge0: port 1(macsec1) entered blocking state [ 96.040388][T10945] bridge0: port 1(macsec1) entered disabled state [ 96.076121][T10945] macsec1: entered allmulticast mode [ 96.081694][T10945] bridge0: entered allmulticast mode [ 96.147782][T10945] macsec1: left allmulticast mode [ 96.152855][T10945] bridge0: left allmulticast mode [ 96.201305][T10945] bridge0: left promiscuous mode [ 96.386189][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1121'. [ 96.425207][T10965] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 96.433078][T10965] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 96.440946][T10965] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 96.502090][T10974] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 96.687487][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 96.687507][ T29] audit: type=1326 audit(1768277789.507:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 96.741023][ T29] audit: type=1326 audit(1768277789.537:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 96.765180][ T29] audit: type=1326 audit(1768277789.537:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 96.789058][ T29] audit: type=1326 audit(1768277789.537:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 96.812759][ T29] audit: type=1326 audit(1768277789.537:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3fbeeff749 code=0x7ffc0000 [ 96.836628][ T29] audit: type=1326 audit(1768277789.547:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 96.860232][ T29] audit: type=1326 audit(1768277789.547:6537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 96.883963][ T29] audit: type=1326 audit(1768277789.547:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3fbeeff749 code=0x7ffc0000 [ 96.907593][ T29] audit: type=1326 audit(1768277789.557:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 96.931003][ T29] audit: type=1326 audit(1768277789.557:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10948 comm="syz.0.1114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 97.011701][T10976] Set syz1 is full, maxelem 65536 reached [ 97.078763][T10983] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.166321][T10983] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.216841][T10983] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.265812][T10983] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.355336][ T4864] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.384028][ T4864] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.404202][ T4864] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.418475][ T4864] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.376770][T11007] veth11: entered promiscuous mode [ 98.400164][T11009] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1137'. [ 98.635583][T11014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1139'. [ 98.911942][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 98.925269][T11033] batman_adv: batadv0: Removing interface: veth1_vlan [ 98.943657][T11037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=11037 comm=syz.4.1147 [ 98.947991][T11034] netlink: 'syz.2.1150': attribute type 16 has an invalid length. [ 98.964473][T11034] netlink: 'syz.2.1150': attribute type 17 has an invalid length. [ 98.992782][T11034] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 99.759843][T11067] all: renamed from bridge_slave_0 [ 99.844191][T11071] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1161'. [ 99.894541][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1163'. [ 100.203078][T11091] ref_ctr increment failed for inode: 0x4bf offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104319440 [ 100.468217][T11112] loop5: detected capacity change from 0 to 512 [ 100.746349][T11112] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 100.775270][T11112] EXT4-fs (loop5): orphan cleanup on readonly fs [ 100.825046][T11112] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1176: corrupted inode contents [ 100.911155][T11112] EXT4-fs (loop5): Remounting filesystem read-only [ 100.948480][T11112] EXT4-fs (loop5): 1 truncate cleaned up [ 100.972712][ T910] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.983514][ T910] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 100.994616][ T910] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 101.005482][T11112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.024963][T11112] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.112384][T11120] netlink: 'syz.5.1179': attribute type 4 has an invalid length. [ 102.085436][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 102.085454][ T29] audit: type=1400 audit(1768277794.907:6742): avc: denied { listen } for pid=11133 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 102.114642][ T29] audit: type=1326 audit(1768277794.927:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.138463][ T29] audit: type=1326 audit(1768277794.927:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.162743][ T29] audit: type=1326 audit(1768277794.977:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.186496][ T29] audit: type=1326 audit(1768277794.977:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.210202][ T29] audit: type=1326 audit(1768277794.977:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.235041][ T29] audit: type=1326 audit(1768277795.037:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.258853][ T29] audit: type=1326 audit(1768277795.037:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.282662][ T29] audit: type=1326 audit(1768277795.037:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.306198][ T29] audit: type=1326 audit(1768277795.037:6751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11138 comm="syz.5.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 102.365179][T11145] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 102.375483][T11145] bridge_slave_1: left allmulticast mode [ 102.381292][T11145] bridge_slave_1: left promiscuous mode [ 102.383285][T11147] netlink: 'syz.0.1188': attribute type 10 has an invalid length. [ 102.387240][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.394914][T11147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1188'. [ 102.417848][T11145] bridge_slave_0: left allmulticast mode [ 102.423519][T11145] bridge_slave_0: left promiscuous mode [ 102.429297][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.578665][T11147] team0: Failed to send options change via netlink (err -105) [ 102.586326][T11147] team0: Port device geneve1 added [ 102.602679][ T910] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.611441][ T910] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.623260][ T910] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.640925][ T910] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.762107][T11182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11182 comm=syz.2.1200 [ 103.033563][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 103.832326][T11216] loop5: detected capacity change from 0 to 2048 [ 103.840285][T11224] netlink: 'syz.3.1213': attribute type 4 has an invalid length. [ 103.904883][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 103.920899][T11216] loop5: p1 < > p4 [ 103.934476][T11216] loop5: p4 size 8388608 extends beyond EOD, truncated [ 103.952162][T11216] netlink: 664 bytes leftover after parsing attributes in process `syz.5.1211'. [ 104.688081][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 104.740582][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1225'. [ 104.925794][T11273] loop2: detected capacity change from 0 to 2048 [ 104.947430][T11273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.960138][T11273] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.031127][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.347441][T11301] loop2: detected capacity change from 0 to 512 [ 105.376228][T11301] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 105.391381][T11301] EXT4-fs (loop2): mount failed [ 105.642264][T11306] loop2: detected capacity change from 0 to 128 [ 105.660420][T11306] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 105.742463][T11308] loop2: detected capacity change from 0 to 8192 [ 105.834125][T11314] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 106.654589][T11336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1247'. [ 107.209649][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 107.209668][ T29] audit: type=1400 audit(1768277800.027:6818): avc: denied { ioctl } for pid=11355 comm="syz.3.1255" path="socket:[17092]" dev="sockfs" ino=17092 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.270093][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 107.315019][ T29] audit: type=1400 audit(1768277800.087:6819): avc: denied { create } for pid=11355 comm="syz.3.1255" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.336045][ T29] audit: type=1400 audit(1768277800.107:6820): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=1319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.598710][ T29] audit: type=1400 audit(1768277800.417:6821): avc: denied { write } for pid=11370 comm="syz.0.1260" path="socket:[17118]" dev="sockfs" ino=17118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 107.845313][ T29] audit: type=1326 audit(1768277800.567:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11379 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf6d7265e7 code=0x7ffc0000 [ 107.869428][ T29] audit: type=1326 audit(1768277800.567:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11379 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf6d6cb829 code=0x7ffc0000 [ 107.880880][T11384] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1265'. [ 107.893402][ T29] audit: type=1326 audit(1768277800.567:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11379 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbf6d7265e7 code=0x7ffc0000 [ 107.893431][ T29] audit: type=1326 audit(1768277800.567:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11379 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbf6d6cb829 code=0x7ffc0000 [ 107.949527][ T29] audit: type=1326 audit(1768277800.567:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11379 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 107.973430][ T29] audit: type=1326 audit(1768277800.567:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11379 comm="syz.4.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 107.977347][T11384] 1ªX¹¦À: renamed from 60ªX¹¦À [ 108.029296][T11384] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 108.089079][T11392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.096438][T11392] IPv6: NLM_F_CREATE should be set when creating new route [ 108.166544][T11398] loop5: detected capacity change from 0 to 2048 [ 108.203233][T11402] loop2: detected capacity change from 0 to 1024 [ 108.212645][T11402] EXT4-fs: Ignoring removed orlov option [ 108.223639][T11398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.223919][T11402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.268030][T11398] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.340773][T11410] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 108.580010][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.792093][T11424] netlink: 664 bytes leftover after parsing attributes in process `syz.4.1278'. [ 108.858229][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.962903][T11439] bridge0: port 1(batadv0) entered blocking state [ 108.969746][T11439] bridge0: port 1(batadv0) entered disabled state [ 109.013332][T11443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 109.061384][T11439] batadv0: entered allmulticast mode [ 109.067329][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1284'. [ 109.099261][T11439] batadv0: entered promiscuous mode [ 109.464320][ T4875] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 109.473729][ T4875] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 109.515251][T11462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.771864][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1295'. [ 110.881298][T11486] loop2: detected capacity change from 0 to 128 [ 110.977220][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 111.727342][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 111.963947][T11535] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 112.005739][T11535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.021182][T11535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 112.035700][T11535] bond1 (unregistering): Released all slaves [ 112.230772][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 112.230803][ T29] audit: type=1400 audit(1768277805.047:7201): avc: denied { create } for pid=11530 comm="syz.5.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.333521][ T29] audit: type=1400 audit(1768277805.147:7202): avc: denied { write } for pid=11530 comm="syz.5.1317" path="socket:[18039]" dev="sockfs" ino=18039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 112.426532][ T29] audit: type=1400 audit(1768277805.237:7203): avc: denied { associate } for pid=11557 comm="syz.4.1322" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 112.575870][ T29] audit: type=1326 audit(1768277805.347:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f193eba65e7 code=0x7ffc0000 [ 112.599351][ T29] audit: type=1326 audit(1768277805.347:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f193eb4b829 code=0x7ffc0000 [ 112.622957][ T29] audit: type=1326 audit(1768277805.347:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f193eba65e7 code=0x7ffc0000 [ 112.646478][ T29] audit: type=1326 audit(1768277805.347:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f193eb4b829 code=0x7ffc0000 [ 112.670275][ T29] audit: type=1326 audit(1768277805.347:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f193eba65e7 code=0x7ffc0000 [ 112.693820][ T29] audit: type=1326 audit(1768277805.347:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f193eb4b829 code=0x7ffc0000 [ 112.717486][ T29] audit: type=1326 audit(1768277805.347:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11558 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f193eba65e7 code=0x7ffc0000 [ 113.389595][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 113.534597][T11575] bond0: (slave bond_slave_0): Releasing backup interface [ 113.579893][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 113.589398][T11575] bond0: (slave bond_slave_1): Releasing backup interface [ 113.631431][T11575] team0: Port device team_slave_0 removed [ 113.666641][T11575] team0: Port device team_slave_1 removed [ 113.673397][T11575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.680818][T11575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.738518][T11575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.746002][T11575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.766741][T11575] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 113.782968][T11578] team0: Mode changed to "activebackup" [ 113.849773][T11583] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 113.859397][T11584] bond5: entered promiscuous mode [ 113.864681][T11584] bridge4: entered promiscuous mode [ 113.870229][T11584] bond5: entered allmulticast mode [ 113.875599][T11584] bridge4: entered allmulticast mode [ 113.966778][T11589] netlink: 'syz.2.1337': attribute type 4 has an invalid length. [ 114.054643][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1338'. [ 114.094458][T11596] netlink: 'syz.2.1340': attribute type 3 has an invalid length. [ 114.102258][T11596] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 114.110147][T11596] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1340'. [ 114.203609][T11605] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1343'. [ 114.641985][T11620] loop2: detected capacity change from 0 to 128 [ 114.654432][T11620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.690775][T11620] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.752443][ T3318] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.818077][T11626] loop2: detected capacity change from 0 to 512 [ 114.845146][T11626] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.865544][T11626] EXT4-fs (loop2): 1 truncate cleaned up [ 114.871784][T11626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.171963][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 115.533266][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.602154][T11660] loop2: detected capacity change from 0 to 512 [ 115.618579][T11660] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 115.656801][T11660] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1363: bg 0: block 104: invalid block bitmap [ 115.669651][T11660] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 115.684933][T11660] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1363: invalid indirect mapped block 1 (level 1) [ 115.699232][T11660] EXT4-fs (loop2): 1 truncate cleaned up [ 115.705524][T11660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.839854][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.901959][T11686] IPVS: Unknown mcast interface: macvlan0 [ 115.918062][T11686] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 115.926070][T11686] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1370'. [ 115.952039][T11686] dummy0: entered promiscuous mode [ 115.957850][T11686] bridge0: port 2(dummy0) entered blocking state [ 115.964451][T11686] bridge0: port 2(dummy0) entered disabled state [ 115.971630][T11686] dummy0: entered allmulticast mode [ 115.998443][T11686] bridge0: port 2(dummy0) entered blocking state [ 116.004963][T11686] bridge0: port 2(dummy0) entered listening state [ 116.013463][T11692] netlink: 'syz.2.1370': attribute type 10 has an invalid length. [ 116.024529][T11690] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.051121][T11692] bridge0: port 2(dummy0) entered disabled state [ 116.057987][T11692] dummy0: left allmulticast mode [ 116.063302][T11692] dummy0: left promiscuous mode [ 116.068492][T11692] bridge0: port 2(dummy0) entered disabled state [ 116.083047][T11686] loop2: detected capacity change from 0 to 512 [ 116.091312][T11686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.104950][T11692] team0: Port device dummy0 added [ 116.110261][T11686] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 116.121927][T11690] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.185802][T11690] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.245921][T11690] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.340518][ T4886] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.360462][ T4886] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.369486][ T4886] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.377944][ T4886] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.422805][T11703] atomic_op ffff88811be43528 conn xmit_atomic 0000000000000000 [ 116.590216][T11722] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1385'. [ 116.643746][T11726] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.687489][T11726] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.806946][T11726] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.861329][T11726] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.932122][T11735] futex_wake_op: syz.3.1390 tries to shift op by -1; fix this program [ 116.947988][ T910] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.966857][ T910] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.984503][ T910] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.000541][ T910] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.147166][T11740] tipc: Started in network mode [ 117.147783][T11741] loop2: detected capacity change from 0 to 512 [ 117.152108][T11740] tipc: Node identity ac14140f, cluster identity 4711 [ 117.158891][T11741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.165794][T11740] tipc: New replicast peer: 255.255.255.255 [ 117.178544][T11740] tipc: Enabled bearer , priority 10 [ 117.185346][T11741] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.209083][T11741] EXT4-fs (loop2): 1 truncate cleaned up [ 117.266066][T11741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.540833][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1394'. [ 117.648897][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.736236][ T29] kauditd_printk_skb: 3402 callbacks suppressed [ 117.736252][ T29] audit: type=1326 audit(1768277810.557:10613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.797309][ T29] audit: type=1326 audit(1768277810.557:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.821247][ T29] audit: type=1326 audit(1768277810.557:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.845034][ T29] audit: type=1326 audit(1768277810.557:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.868786][ T29] audit: type=1326 audit(1768277810.557:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.892600][ T29] audit: type=1326 audit(1768277810.557:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.916494][ T29] audit: type=1326 audit(1768277810.557:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11755 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6d762005 code=0x7ffc0000 [ 117.940229][ T29] audit: type=1326 audit(1768277810.557:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.964572][ T29] audit: type=1326 audit(1768277810.557:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 117.988330][ T29] audit: type=1326 audit(1768277810.557:10622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11750 comm="syz.4.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 118.066116][T11765] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 118.132833][T11767] loop2: detected capacity change from 0 to 1024 [ 118.160247][T11767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.180670][T11767] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 118.204438][ T3418] tipc: Node number set to 2886997007 [ 118.214483][T11767] System zones: 0-1, 3-36 [ 118.228318][T11767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.275081][T11767] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.320922][T11767] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 118.422322][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.511434][T11783] lo speed is unknown, defaulting to 1000 [ 118.556810][T11783] lo speed is unknown, defaulting to 1000 [ 118.625194][T11783] lo speed is unknown, defaulting to 1000 [ 118.651975][T11783] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.701075][T11783] lo speed is unknown, defaulting to 1000 [ 118.710773][T11783] lo speed is unknown, defaulting to 1000 [ 118.723592][T11783] lo speed is unknown, defaulting to 1000 [ 118.737753][T11783] lo speed is unknown, defaulting to 1000 [ 118.751875][T11783] lo speed is unknown, defaulting to 1000 [ 118.766046][T11783] lo speed is unknown, defaulting to 1000 [ 118.873175][T11794] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1410'. [ 118.882294][T11794] netlink: 'syz.0.1410': attribute type 7 has an invalid length. [ 118.890142][T11794] netlink: 'syz.0.1410': attribute type 8 has an invalid length. [ 118.898147][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 119.116155][T11794] syz_tun: entered promiscuous mode [ 119.124955][T11794] erspan0: entered promiscuous mode [ 119.134058][T11794] gretap0: entered promiscuous mode [ 119.142689][T11794] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 119.152947][T11794] hsr1: Slave B (erspan0) is not up; please bring it up to get a fully working HSR network [ 119.163115][T11794] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 119.228553][T11801] netlink: 'syz.2.1412': attribute type 13 has an invalid length. [ 119.384547][ T4874] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.392993][ T4874] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.411606][ T4874] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.438927][ T4874] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.504800][T11811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1419'. [ 119.545725][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 119.557686][T11815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 119.586320][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 119.617643][T11821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1423'. [ 119.639178][T11821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 119.745480][T11834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11834 comm=syz.4.1429 [ 120.101214][T11854] netlink: 'syz.3.1436': attribute type 1 has an invalid length. [ 120.115477][T11854] 8021q: adding VLAN 0 to HW filter on device bond7 [ 120.139602][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1436'. [ 120.157009][T11854] bond7 (unregistering): Released all slaves [ 120.229560][T11857] lo speed is unknown, defaulting to 1000 [ 120.530578][T11870] loop5: detected capacity change from 0 to 764 [ 120.647307][T11872] syzkaller0: entered promiscuous mode [ 120.653020][T11872] syzkaller0: entered allmulticast mode [ 120.687485][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1443'. [ 121.545961][T11912] syz_tun: entered allmulticast mode [ 121.569302][T11912] syz_tun: left allmulticast mode [ 121.600359][T11918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1459'. [ 121.920583][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1469'. [ 121.954904][T11948] netlink: '+}[K': attribute type 13 has an invalid length. [ 122.040338][ T4879] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.052666][ T4879] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.076731][ T4879] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.094459][ T4879] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.381276][T11955] bridge0: port 1(batadv0) entered blocking state [ 122.388000][T11955] bridge0: port 1(batadv0) entered disabled state [ 122.394903][T11955] batadv0: entered allmulticast mode [ 122.400963][T11955] batadv0: entered promiscuous mode [ 122.531308][T11970] IPVS: Unknown mcast interface: macvlan0 [ 122.554464][T11970] netlink: 'syz.3.1479': attribute type 10 has an invalid length. [ 122.562562][T11970] dummy0: entered promiscuous mode [ 122.594140][T11970] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 122.611420][T11979] netlink: 'syz.3.1479': attribute type 10 has an invalid length. [ 122.624578][T11979] dummy0: left promiscuous mode [ 122.640931][T11979] team0: Port device dummy0 added [ 122.757444][ T29] kauditd_printk_skb: 508 callbacks suppressed [ 122.757463][ T29] audit: type=1326 audit(1768277815.577:11131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 122.834479][ T29] audit: type=1326 audit(1768277815.577:11132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff355b7f783 code=0x7ffc0000 [ 122.858346][ T29] audit: type=1326 audit(1768277815.577:11133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff355b7f807 code=0x7ffc0000 [ 122.881912][ T29] audit: type=1326 audit(1768277815.577:11134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff355b36bdd code=0x7ffc0000 [ 122.905530][ T29] audit: type=1326 audit(1768277815.577:11135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff355bb3e89 code=0x7ffc0000 [ 122.929537][ T29] audit: type=1326 audit(1768277815.577:11136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff355b36c47 code=0x7ffc0000 [ 122.953090][ T29] audit: type=1326 audit(1768277815.577:11137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 122.976704][ T29] audit: type=1326 audit(1768277815.577:11138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff355b7f749 code=0x7ffc0000 [ 122.984568][ T4879] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 123.000428][ T29] audit: type=1326 audit(1768277815.607:11139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ff355b36357 code=0x7ffc0000 [ 123.009629][ T4879] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 123.035947][T11987] lo speed is unknown, defaulting to 1000 [ 123.042446][ T29] audit: type=1326 audit(1768277815.607:11140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11976 comm="syz.5.1482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff355b363b6 code=0x7ffc0000 [ 123.268137][T12014] erspan0: entered promiscuous mode [ 123.606923][T12027] netlink: 'syz.4.1498': attribute type 30 has an invalid length. [ 123.676366][T12033] syzkaller0: entered promiscuous mode [ 123.681942][T12033] syzkaller0: entered allmulticast mode [ 124.021633][T12052] lo speed is unknown, defaulting to 1000 [ 124.071301][T12053] siw: device registration error -23 [ 124.303629][T12055] bridge: RTM_NEWNEIGH with invalid ether address [ 124.386471][T12057] syzkaller0: entered allmulticast mode [ 124.392218][T12057] syzkaller0: entered promiscuous mode [ 124.411731][T12050] Set syz1 is full, maxelem 65536 reached [ 124.418254][T12057] syzkaller0 (unregistering): left allmulticast mode [ 124.425035][T12057] syzkaller0 (unregistering): left promiscuous mode [ 124.830392][T12099] xt_hashlimit: max too large, truncated to 1048576 [ 124.841814][T12099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.889673][T12111] __nla_validate_parse: 9 callbacks suppressed [ 124.889757][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 124.909652][T12111] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 124.946349][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 124.972084][T12122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1532'. [ 125.015896][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 125.032351][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 125.071588][T12136] tipc: Started in network mode [ 125.076561][T12136] tipc: Node identity 84e, cluster identity 4711 [ 125.082918][T12136] tipc: Node number set to 2126 [ 125.113964][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 125.123230][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 125.240190][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1547'. [ 125.408636][T12149] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1545'. [ 125.448874][T12170] loop5: detected capacity change from 0 to 2048 [ 125.515732][T12170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.614842][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.012934][T12196] tipc: Started in network mode [ 126.017898][T12196] tipc: Node identity ac14140f, cluster identity 4711 [ 126.042138][T12196] tipc: New replicast peer: 255.255.255.255 [ 126.048343][T12196] tipc: Enabled bearer , priority 10 [ 126.091386][T12198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12198 comm=syz.4.1566 [ 126.124544][T12198] netlink: 'syz.4.1566': attribute type 1 has an invalid length. [ 126.296102][T12208] netlink: 'syz.3.1571': attribute type 12 has an invalid length. [ 126.983684][T12242] xt_hashlimit: max too large, truncated to 1048576 [ 127.016445][T12242] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.054317][ T3382] tipc: Node number set to 2886997007 [ 127.147081][T12253] loop2: detected capacity change from 0 to 128 [ 127.765319][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 127.765336][ T29] audit: type=1326 audit(1768277820.587:11808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 127.800366][T12270] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 127.821589][T12270] Unknown options in mask 20 [ 127.903782][ T29] audit: type=1326 audit(1768277820.617:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 127.927635][ T29] audit: type=1326 audit(1768277820.617:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 127.951625][ T29] audit: type=1326 audit(1768277820.617:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 127.975414][ T29] audit: type=1326 audit(1768277820.637:11812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 127.999613][ T29] audit: type=1326 audit(1768277820.637:11813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 128.023454][ T29] audit: type=1326 audit(1768277820.647:11814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 128.024654][T12272] $Hÿ: renamed from bond0 [ 128.047196][ T29] audit: type=1326 audit(1768277820.647:11815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 128.047312][ T29] audit: type=1326 audit(1768277820.647:11816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 128.100227][ T29] audit: type=1326 audit(1768277820.657:11817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12257 comm="syz.5.1587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff355bb2005 code=0x7ffc0000 [ 128.135999][T12272] $Hÿ: entered promiscuous mode [ 128.439861][T12289] 8021q: adding VLAN 0 to HW filter on device bond6 [ 128.456516][T12289] team0: Port device dummy0 removed [ 128.465388][T12289] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 128.503912][T12289] bond6 (unregistering): (slave dummy0): Releasing backup interface [ 128.520195][T12289] bond6 (unregistering): Released all slaves [ 128.896191][T12301] veth12: entered promiscuous mode [ 128.901374][T12301] veth12: entered allmulticast mode [ 128.995347][T12307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12307 comm=syz.2.1608 [ 129.077492][T12313] lo speed is unknown, defaulting to 1000 [ 130.180161][T12398] netlink: 'syz.2.1643': attribute type 2 has an invalid length. [ 130.220235][T12400] syzkaller0: entered allmulticast mode [ 130.226606][T12400] syzkaller0: entered promiscuous mode [ 130.233757][T12400] syzkaller0 (unregistering): left allmulticast mode [ 130.240577][T12400] syzkaller0 (unregistering): left promiscuous mode [ 130.305756][T12404] netlink: '+}[@': attribute type 6 has an invalid length. [ 130.673277][T12423] lo speed is unknown, defaulting to 1000 [ 131.112332][T12423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.123247][T12423] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.139265][T12423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.172389][T12419] lo speed is unknown, defaulting to 1000 [ 131.298318][T12439] __nla_validate_parse: 11 callbacks suppressed [ 131.298337][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'. [ 131.482861][T12444] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1662'. [ 131.493061][T12444] netlink: zone id is out of range [ 131.498412][T12444] netlink: zone id is out of range [ 131.503824][T12444] netlink: zone id is out of range [ 131.509390][T12444] netlink: zone id is out of range [ 131.514976][T12444] netlink: zone id is out of range [ 131.520139][T12444] netlink: zone id is out of range [ 131.525410][T12444] netlink: zone id is out of range [ 131.530627][T12444] netlink: zone id is out of range [ 131.535836][T12444] netlink: zone id is out of range [ 132.133059][T12471] veth2: entered promiscuous mode [ 132.138445][T12471] veth2: entered allmulticast mode [ 132.328487][T12479] netlink: 'syz.4.1674': attribute type 2 has an invalid length. [ 132.533797][T12493] lo speed is unknown, defaulting to 1000 [ 132.566319][T12505] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.621152][T12505] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.677778][ T3480] IPVS: starting estimator thread 0... [ 132.678464][T12505] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.718121][T12505] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.730661][T12518] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1691'. [ 132.776143][T12512] IPVS: using max 2400 ests per chain, 120000 per kthread [ 132.789265][ T4875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.814050][ T4875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.832118][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 132.832136][ T29] audit: type=1326 audit(1768278081.648:12076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 132.870242][ T4875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.884363][ T4875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.896921][ T29] audit: type=1326 audit(1768278081.658:12077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 132.920711][ T29] audit: type=1326 audit(1768278081.688:12078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 132.938898][T12525] lo speed is unknown, defaulting to 1000 [ 132.944507][ T29] audit: type=1326 audit(1768278081.688:12079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 132.954177][T12531] lo speed is unknown, defaulting to 1000 [ 132.974556][ T29] audit: type=1326 audit(1768278081.688:12080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 133.004174][ T29] audit: type=1326 audit(1768278081.688:12081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 133.027905][ T29] audit: type=1326 audit(1768278081.688:12082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 133.051830][ T29] audit: type=1326 audit(1768278081.688:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 133.075485][ T29] audit: type=1326 audit(1768278081.688:12084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 133.099188][ T29] audit: type=1326 audit(1768278081.688:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12527 comm="syz.4.1695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 133.132820][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'. [ 133.292274][T12551] 8021q: adding VLAN 0 to HW filter on device .` [ 133.324027][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.374563][ T3480] lo speed is unknown, defaulting to 1000 [ 133.380347][ T3480] syz2: Port: 1 Link ACTIVE [ 133.385044][T12531] lo speed is unknown, defaulting to 1000 [ 133.394710][T12531] lo speed is unknown, defaulting to 1000 [ 133.399361][T12536] lo speed is unknown, defaulting to 1000 [ 133.674831][T12543] lo speed is unknown, defaulting to 1000 [ 133.690965][T12531] infiniband syz1: set down [ 133.695749][T12531] infiniband syz1: added lo [ 133.701155][T10491] lo speed is unknown, defaulting to 1000 [ 133.755112][T12531] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 133.755353][T12531] infiniband syz1: Couldn't open port 1 [ 133.817408][T12531] RDS/IB: syz1: added [ 133.828032][T12531] smc: adding ib device syz1 with port count 1 [ 133.847507][T12531] smc: ib device syz1 port 1 has no pnetid [ 133.862176][ T3382] lo speed is unknown, defaulting to 1000 [ 133.874088][T12531] lo speed is unknown, defaulting to 1000 [ 133.987338][T12531] lo speed is unknown, defaulting to 1000 [ 134.061840][T12531] lo speed is unknown, defaulting to 1000 [ 134.144756][T12531] lo speed is unknown, defaulting to 1000 [ 134.145298][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 134.203080][T12531] lo speed is unknown, defaulting to 1000 [ 134.303031][T12531] lo speed is unknown, defaulting to 1000 [ 134.326695][T12593] tipc: Enabled bearer , priority 0 [ 134.334699][T12592] tipc: Resetting bearer [ 134.388313][T12592] tipc: Disabling bearer [ 134.405991][T12531] lo speed is unknown, defaulting to 1000 [ 134.465701][T12597] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.1722'. [ 134.575647][T12603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1725'. [ 134.605248][T12605] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1726'. [ 134.786135][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1730'. [ 134.829033][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1732'. [ 134.962878][T12629] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.997930][T12631] veth14: entered promiscuous mode [ 135.003314][T12631] veth14: entered allmulticast mode [ 135.015047][T12629] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.076671][T12629] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.090362][T12641] netlink: 'syz.3.1741': attribute type 4 has an invalid length. [ 135.135629][T12629] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.200274][ T4892] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.211616][ T4892] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.222761][ T4892] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.233986][ T4892] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.369850][T12651] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.612800][T12651] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.819784][T12651] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.959221][T12651] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.003905][T12669] ref_ctr increment failed for inode: 0x764 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881053872c0 [ 136.167249][T12674] net_ratelimit: 6 callbacks suppressed [ 136.167267][T12674] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 136.356281][T12684] __nla_validate_parse: 5 callbacks suppressed [ 136.356298][T12684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1758'. [ 136.793546][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 136.817629][T12696] tipc: New replicast peer: 255.255.255.83 [ 136.823632][T12696] tipc: Enabled bearer , priority 10 [ 136.838580][ T825] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.855182][ T825] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.883650][ T825] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.948291][ T825] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.021803][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1767'. [ 137.130246][T12720] loop5: detected capacity change from 0 to 1024 [ 137.150211][T12716] lo speed is unknown, defaulting to 1000 [ 137.156504][T12720] EXT4-fs: Ignoring removed orlov option [ 137.166024][T12720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.184706][T12716] lo speed is unknown, defaulting to 1000 [ 137.259687][T12725] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 137.276376][T12725] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.289689][T12725] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 137.323124][T12721] lo speed is unknown, defaulting to 1000 [ 137.425668][T12721] lo speed is unknown, defaulting to 1000 [ 137.432420][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 137.449003][T12731] ip6gre1: entered allmulticast mode [ 137.654906][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.684932][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1787'. [ 137.722001][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 137.743560][T12739] batadv0 (unregistering): left allmulticast mode [ 137.750146][T12739] batadv0 (unregistering): left promiscuous mode [ 137.756558][T12739] bridge0: port 1(batadv0) entered disabled state [ 138.061791][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 138.061828][ T29] audit: type=1326 audit(1768278086.878:12241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.130898][ T29] audit: type=1326 audit(1768278086.878:12242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.155097][ T29] audit: type=1326 audit(1768278086.908:12243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.179151][ T29] audit: type=1326 audit(1768278086.908:12244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.202860][ T29] audit: type=1326 audit(1768278086.908:12245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.226772][ T29] audit: type=1326 audit(1768278086.918:12246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.250540][ T29] audit: type=1326 audit(1768278086.918:12247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12744 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbf6d762005 code=0x7ffc0000 [ 138.274591][ T29] audit: type=1326 audit(1768278086.928:12248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.298384][ T29] audit: type=1326 audit(1768278086.938:12249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.322223][ T29] audit: type=1326 audit(1768278086.938:12250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12742 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 138.349945][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 138.359618][T12747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'. [ 138.399296][T12750] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1781'. [ 138.400244][T12748] Cannot find del_set index 3 as target [ 138.550694][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1784'. [ 138.575282][T12756] lo speed is unknown, defaulting to 1000 [ 138.581706][T12756] lo speed is unknown, defaulting to 1000 [ 138.970239][T12780] tipc: Enabling of bearer rejected, failed to enable media [ 139.609346][T12810] xt_connbytes: Forcing CT accounting to be enabled [ 139.663185][T12810] set match dimension is over the limit! [ 139.691224][T12807] lo speed is unknown, defaulting to 1000 [ 139.715465][T12807] lo speed is unknown, defaulting to 1000 [ 139.845388][T12815] lo speed is unknown, defaulting to 1000 [ 140.007421][T12815] lo speed is unknown, defaulting to 1000 [ 140.417394][T12824] loop5: detected capacity change from 0 to 512 [ 140.432576][T12824] loop5: detected capacity change from 0 to 1024 [ 140.478173][T12824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.527692][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.655029][T12836] wireguard0: entered promiscuous mode [ 140.660558][T12836] wireguard0: entered allmulticast mode [ 140.672403][T12815] netlink: 'syz.4.1806': attribute type 2 has an invalid length. [ 140.721112][T12840] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 140.964767][T12845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.980340][T12845] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.996660][T12845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.012599][ T3418] lo speed is unknown, defaulting to 1000 [ 141.018684][ T3418] syz1: Port: 1 Link ACTIVE [ 141.036616][ T3418] lo speed is unknown, defaulting to 1000 [ 141.036777][T12838] lo speed is unknown, defaulting to 1000 [ 141.117639][T12841] lo speed is unknown, defaulting to 1000 [ 141.124089][T12841] lo speed is unknown, defaulting to 1000 [ 141.220668][T12838] lo speed is unknown, defaulting to 1000 [ 141.650657][T12866] siw: device registration error -23 [ 142.036312][T12886] __nla_validate_parse: 10 callbacks suppressed [ 142.036390][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1830'. [ 142.045810][T12889] netlink: 'syz.0.1832': attribute type 1 has an invalid length. [ 142.143740][T12889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.183482][T12889] bond2: (slave bond3): making interface the new active one [ 142.234729][T12899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1832'. [ 142.237045][T12889] bond2: (slave bond3): Enslaving as an active interface with an up link [ 142.255034][T12899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.358131][T12894] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 142.502463][T12908] tipc: New replicast peer: 255.255.255.83 [ 142.509018][T12908] tipc: Enabled bearer , priority 10 [ 142.550001][T12890] futex_wake_op: syz.5.1831 tries to shift op by -1; fix this program [ 143.065811][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 143.065829][ T29] audit: type=1326 audit(1768278091.888:12912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 143.106688][ T29] audit: type=1326 audit(1768278091.918:12913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 143.111525][T12931] netlink: 'syz.2.1847': attribute type 1 has an invalid length. [ 143.130288][ T29] audit: type=1326 audit(1768278091.918:12914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 143.162031][ T29] audit: type=1326 audit(1768278091.918:12915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 143.165173][T12931] 8021q: adding VLAN 0 to HW filter on device bond6 [ 143.185837][ T29] audit: type=1326 audit(1768278091.918:12916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3fbeeff749 code=0x7ffc0000 [ 143.216569][ T29] audit: type=1326 audit(1768278091.928:12917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 143.218241][T12931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1847'. [ 143.240302][ T29] audit: type=1326 audit(1768278091.928:12918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 143.272801][ T29] audit: type=1326 audit(1768278091.928:12919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3fbeeff749 code=0x7ffc0000 [ 143.297237][T12931] bond6: entered promiscuous mode [ 143.298019][ T29] audit: type=1326 audit(1768278092.068:12920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3fbeef65e7 code=0x7ffc0000 [ 143.325816][ T29] audit: type=1326 audit(1768278092.068:12921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12907 comm="syz.0.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3fbee9b829 code=0x7ffc0000 [ 143.370793][T12931] bond6: (slave dummy0): making interface the new active one [ 143.378793][T12931] dummy0: entered promiscuous mode [ 143.384882][T12931] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 144.063178][T12978] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1862'. [ 144.078122][T12978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 144.513865][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1871'. [ 144.876163][T13026] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1882'. [ 144.922012][T13029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 145.152025][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1890'. [ 145.418866][T13051] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1891'. [ 145.428094][T13051] 1ªX¹¦À: renamed from 60ªX¹¦À [ 145.435430][T13051] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 145.553301][T13061] veth16: entered promiscuous mode [ 145.584999][T13062] futex_wake_op: syz.0.1894 tries to shift op by -1; fix this program [ 145.813283][T13074] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.964876][T13080] lo speed is unknown, defaulting to 1000 [ 145.977973][T13084] netlink: 'syz.3.1905': attribute type 1 has an invalid length. [ 145.981486][T13080] lo speed is unknown, defaulting to 1000 [ 146.005023][T13084] 8021q: adding VLAN 0 to HW filter on device bond7 [ 146.038222][T13084] bond7: entered promiscuous mode [ 146.054114][T13084] team0: Port device dummy0 removed [ 146.063513][T13084] bond7: (slave dummy0): making interface the new active one [ 146.077979][T13084] dummy0: entered promiscuous mode [ 146.084120][T13084] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 146.117362][T13086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.130253][T13086] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.139187][T13086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.160164][T13077] lo speed is unknown, defaulting to 1000 [ 146.190160][T13077] lo speed is unknown, defaulting to 1000 [ 146.504217][T13103] bond7: (slave dummy0): Releasing active interface [ 146.519510][T13103] dummy0: left promiscuous mode [ 146.535078][T13103] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 146.671592][T13117] netlink: 'syz.0.1917': attribute type 12 has an invalid length. [ 147.495830][T13143] TCP: TCP_TX_DELAY enabled [ 147.506880][T13143] tipc: Enabling of bearer rejected, already enabled [ 147.604925][T13145] loop5: detected capacity change from 0 to 1024 [ 147.614298][T13145] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.641996][T13145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.054659][T13161] __nla_validate_parse: 6 callbacks suppressed [ 148.054676][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 148.074645][T13161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 148.173071][ T29] kauditd_printk_skb: 1063 callbacks suppressed [ 148.173088][ T29] audit: type=1400 audit(1768278096.988:13985): avc: denied { write } for pid=13156 comm="syz.0.1938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 148.574559][ T29] audit: type=1400 audit(1768278097.398:13986): avc: denied { unmount } for pid=10563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 148.595442][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.610258][ T29] audit: type=1400 audit(1768278097.428:13987): avc: denied { create } for pid=13168 comm="syz.3.1931" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.623019][T13171] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1932'. [ 148.631772][ T29] audit: type=1400 audit(1768278097.428:13988): avc: denied { bind } for pid=13170 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.660593][ T29] audit: type=1400 audit(1768278097.428:13989): avc: denied { setopt } for pid=13170 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 148.681067][ T29] audit: type=1400 audit(1768278097.428:13990): avc: denied { create } for pid=13170 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.700943][ T29] audit: type=1400 audit(1768278097.428:13991): avc: denied { write } for pid=13170 comm="syz.4.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.736803][ T29] audit: type=1400 audit(1768278097.558:13992): avc: denied { write } for pid=13168 comm="syz.3.1931" name="file0" dev="tmpfs" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.759946][ T29] audit: type=1400 audit(1768278097.558:13993): avc: denied { open } for pid=13168 comm="syz.3.1931" path="/391/file0" dev="tmpfs" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.775335][T13173] lo speed is unknown, defaulting to 1000 [ 148.783072][ T29] audit: type=1400 audit(1768278097.558:13994): avc: denied { ioctl } for pid=13168 comm="syz.3.1931" path="/391/file0" dev="tmpfs" ino=2041 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 148.844793][T13173] lo speed is unknown, defaulting to 1000 [ 149.175626][T13207] netlink: 64 bytes leftover after parsing attributes in process `GPL'. [ 149.374651][T13173] netlink: 'syz.5.1930': attribute type 2 has an invalid length. [ 149.492181][T13173] loop5: detected capacity change from 0 to 8192 [ 149.518454][T13173] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1930'. [ 149.699885][T13211] futex_wake_op: syz.2.1952 tries to shift op by -1; fix this program [ 150.068888][T13249] loop5: detected capacity change from 0 to 1024 [ 151.104840][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 151.139691][T13261] batadv0 (unregistering): left allmulticast mode [ 151.146225][T13261] batadv0 (unregistering): left promiscuous mode [ 151.152632][T13261] bridge0: port 1(batadv0) entered disabled state [ 151.279243][T13267] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1970'. [ 151.299648][T13267] 0ªX¹¦À: renamed from 61ªX¹¦À [ 151.318999][T13267] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 151.357678][T13270] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1972'. [ 151.491938][T13280] netlink: 'syz.5.1977': attribute type 1 has an invalid length. [ 151.524194][T13280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.544605][T13280] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1977'. [ 151.568646][T13280] bond1: entered promiscuous mode [ 151.573729][T13280] bond1: entered allmulticast mode [ 151.704937][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1980'. [ 152.176439][T13319] lo speed is unknown, defaulting to 1000 [ 152.182816][T13319] lo speed is unknown, defaulting to 1000 [ 152.940667][T13376] ªªªªªª: renamed from wg2 [ 153.058696][T13387] loop5: detected capacity change from 0 to 128 [ 153.137620][T13392] tipc: Can't bind to reserved service type 1 [ 153.199935][T13389] lo speed is unknown, defaulting to 1000 [ 153.214458][T13389] lo speed is unknown, defaulting to 1000 [ 153.386656][T13389] netlink: 'syz.0.2016': attribute type 2 has an invalid length. [ 153.444451][ T29] kauditd_printk_skb: 434 callbacks suppressed [ 153.444544][ T29] audit: type=1326 audit(1768278102.268:14429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.485765][ T29] audit: type=1326 audit(1768278102.308:14430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.510469][ T29] audit: type=1326 audit(1768278102.328:14431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.516289][T13389] __nla_validate_parse: 7 callbacks suppressed [ 153.516376][T13389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2016'. [ 153.535442][ T29] audit: type=1326 audit(1768278102.358:14432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.573696][ T29] audit: type=1326 audit(1768278102.368:14433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.598005][ T29] audit: type=1326 audit(1768278102.378:14434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.622106][ T29] audit: type=1326 audit(1768278102.388:14435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.648393][ T29] audit: type=1326 audit(1768278102.418:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.672143][ T29] audit: type=1326 audit(1768278102.428:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.695943][ T29] audit: type=1326 audit(1768278102.438:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13398 comm="syz.2.2030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7fc00000 [ 153.726940][T13406] ip6gre0: entered promiscuous mode [ 153.733665][T13406] team0: Device ip6gre0 is of different type [ 153.901752][T13417] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2028'. [ 153.950151][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 153.993632][T13419] 9pnet: p9_errstr2errno: server reported unknown error [ 154.718613][T13445] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 154.764566][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'. [ 154.773666][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2040'. [ 154.785705][T13448] ip6gretap0: entered promiscuous mode [ 154.792154][T13448] ip6gretap0: left promiscuous mode [ 154.888319][T13452] syzkaller0: entered promiscuous mode [ 154.893940][T13452] syzkaller0: entered allmulticast mode [ 155.013417][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 155.046111][T13457] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 155.053472][T13457] bond0: option active_slave: invalid value (veth0_to_hsr) [ 155.065377][T13459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2044'. [ 155.132185][T13460] loop5: detected capacity change from 0 to 1024 [ 155.148460][T13460] EXT4-fs: Ignoring removed bh option [ 155.230593][T13460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.312814][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 155.382546][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 155.472580][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.474195][T13442] syz.2.2038 (13442) used greatest stack depth: 6120 bytes left [ 155.556731][T13490] lo speed is unknown, defaulting to 1000 [ 155.563562][T13490] lo speed is unknown, defaulting to 1000 [ 155.959396][T13518] tipc: Enabling of bearer rejected, failed to enable media [ 156.058477][T13521] lo speed is unknown, defaulting to 1000 [ 156.065184][T13521] lo speed is unknown, defaulting to 1000 [ 156.162304][T13522] loop5: detected capacity change from 0 to 512 [ 156.169044][T13522] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 156.269538][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 156.697762][T13549] vlan0: entered promiscuous mode [ 156.702953][T13549] bridge1: entered promiscuous mode [ 156.708441][T13549] vlan0: entered allmulticast mode [ 156.713569][T13549] bridge1: entered allmulticast mode [ 156.746354][T13538] netlink: 'syz.2.2072': attribute type 13 has an invalid length. [ 156.806787][T13538] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.518205][T13561] syz.4.2080 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 157.532243][T13561] CPU: 1 UID: 0 PID: 13561 Comm: syz.4.2080 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.532278][T13561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.532292][T13561] Call Trace: [ 157.532301][T13561] [ 157.532381][T13561] __dump_stack+0x1d/0x30 [ 157.532411][T13561] dump_stack_lvl+0x95/0xd0 [ 157.532480][T13561] dump_stack+0x15/0x1b [ 157.532504][T13561] dump_header+0x81/0x240 [ 157.532528][T13561] oom_kill_process+0x295/0x350 [ 157.532602][T13561] out_of_memory+0x97b/0xb80 [ 157.532630][T13561] try_charge_memcg+0x610/0xa10 [ 157.532687][T13561] obj_cgroup_charge_pages+0xa6/0x150 [ 157.532721][T13561] __memcg_kmem_charge_page+0x9f/0x170 [ 157.532749][T13561] __alloc_frozen_pages_noprof+0x18f/0x360 [ 157.532825][T13561] alloc_pages_mpol+0xb3/0x260 [ 157.532863][T13561] alloc_pages_noprof+0x90/0x130 [ 157.532897][T13561] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 157.532938][T13561] __kvmalloc_node_noprof+0x492/0x6b0 [ 157.532990][T13561] ? ip_set_alloc+0x24/0x30 [ 157.533027][T13561] ? ip_set_alloc+0x24/0x30 [ 157.533061][T13561] ip_set_alloc+0x24/0x30 [ 157.533174][T13561] hash_netiface_create+0x282/0x740 [ 157.533213][T13561] ? __pfx_hash_netiface_create+0x10/0x10 [ 157.533245][T13561] ip_set_create+0x3cc/0x970 [ 157.533270][T13561] ? __nla_parse+0x40/0x60 [ 157.533369][T13561] nfnetlink_rcv_msg+0x4c6/0x590 [ 157.533412][T13561] netlink_rcv_skb+0x123/0x220 [ 157.533449][T13561] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 157.533514][T13561] nfnetlink_rcv+0x167/0x16c0 [ 157.533538][T13561] ? kmem_cache_free+0xe3/0x3a0 [ 157.533569][T13561] ? __kfree_skb+0x109/0x150 [ 157.533599][T13561] ? nlmon_xmit+0x4f/0x60 [ 157.533621][T13561] ? consume_skb+0x49/0x150 [ 157.533711][T13561] ? nlmon_xmit+0x4f/0x60 [ 157.533730][T13561] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 157.533760][T13561] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 157.533788][T13561] ? __dev_queue_xmit+0x148/0x1ee0 [ 157.533856][T13561] ? ref_tracker_free+0x37d/0x3e0 [ 157.533882][T13561] ? __netlink_deliver_tap+0x4dc/0x500 [ 157.533917][T13561] netlink_unicast+0x5c0/0x690 [ 157.534009][T13561] netlink_sendmsg+0x58b/0x6b0 [ 157.534077][T13561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.534108][T13561] __sock_sendmsg+0x145/0x180 [ 157.534156][T13561] ____sys_sendmsg+0x31e/0x4a0 [ 157.534187][T13561] ___sys_sendmsg+0x17b/0x1d0 [ 157.534224][T13561] __x64_sys_sendmsg+0xd4/0x160 [ 157.534319][T13561] x64_sys_call+0x17ba/0x3000 [ 157.534400][T13561] do_syscall_64+0xca/0x2b0 [ 157.534434][T13561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.534457][T13561] RIP: 0033:0x7fbf6d72f749 [ 157.534494][T13561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.534513][T13561] RSP: 002b:00007fbf6c16e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.534534][T13561] RAX: ffffffffffffffda RBX: 00007fbf6d986090 RCX: 00007fbf6d72f749 [ 157.534548][T13561] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 157.534560][T13561] RBP: 00007fbf6d7b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 157.534573][T13561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.534629][T13561] R13: 00007fbf6d986128 R14: 00007fbf6d986090 R15: 00007fff3d2c1f48 [ 157.534646][T13561] [ 157.858905][T13561] memory: usage 307200kB, limit 307200kB, failcnt 598 [ 157.865821][T13561] memory+swap: usage 307996kB, limit 9007199254740988kB, failcnt 0 [ 157.873733][T13561] kmem: usage 306148kB, limit 9007199254740988kB, failcnt 0 [ 157.881133][T13561] Memory cgroup stats for /syz4: [ 157.962400][T13561] cache 0 [ 157.970369][T13561] rss 4096 [ 157.973408][T13561] shmem 0 [ 157.976397][T13561] mapped_file 0 [ 157.980032][T13561] dirty 0 [ 157.983033][T13561] writeback 0 [ 157.986482][T13561] workingset_refault_anon 2252 [ 157.991254][T13561] workingset_refault_file 5239 [ 157.996062][T13561] swap 794624 [ 157.999360][T13561] swapcached 49152 [ 158.003087][T13561] pgpgin 246331 [ 158.006603][T13561] pgpgout 246063 [ 158.010326][T13561] pgfault 202306 [ 158.013914][T13561] pgmajfault 388 [ 158.017542][T13561] inactive_anon 1056768 [ 158.021721][T13561] active_anon 40960 [ 158.025574][T13561] inactive_file 0 [ 158.029302][T13561] active_file 0 [ 158.032777][T13561] unevictable 0 [ 158.036283][T13561] hierarchical_memory_limit 314572800 [ 158.041732][T13561] hierarchical_memsw_limit 9223372036854771712 [ 158.048183][T13561] total_cache 0 [ 158.051657][T13561] total_rss 4096 [ 158.055298][T13561] total_shmem 0 [ 158.058767][T13561] total_mapped_file 0 [ 158.062762][T13561] total_dirty 0 [ 158.066296][T13561] total_writeback 0 [ 158.070120][T13561] total_workingset_refault_anon 2252 [ 158.075479][T13561] total_workingset_refault_file 5239 [ 158.080779][T13561] total_swap 794624 [ 158.084822][T13561] total_swapcached 49152 [ 158.089157][T13561] total_pgpgin 246331 [ 158.093144][T13561] total_pgpgout 246063 [ 158.097246][T13561] total_pgfault 202306 [ 158.101327][T13561] total_pgmajfault 388 [ 158.105435][T13561] total_inactive_anon 1056768 [ 158.110136][T13561] total_active_anon 40960 [ 158.114502][T13561] total_inactive_file 0 [ 158.118663][T13561] total_active_file 0 [ 158.122652][T13561] total_unevictable 0 [ 158.126673][T13561] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2080,pid=13558,uid=0 [ 158.141449][T13561] Memory cgroup out of memory: Killed process 13558 (syz.4.2080) total-vm:94100kB, anon-rss:1268kB, file-rss:22308kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 158.229965][T13584] loop5: detected capacity change from 0 to 512 [ 158.253096][T13584] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 158.459328][T13595] geneve2: entered promiscuous mode [ 158.475014][ T4874] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.511588][ T4874] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.520920][ T4874] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.530344][ T4874] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.539454][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 158.539471][ T29] audit: type=1400 audit(1768278107.358:14632): avc: denied { write } for pid=13596 comm="syz.5.2094" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 158.539920][T13597] vhci_hcd vhci_hcd.0: invalid port number 23 [ 158.597581][T13597] netlink: 'syz.5.2094': attribute type 13 has an invalid length. [ 158.652912][ T29] audit: type=1326 audit(1768278107.468:14633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 158.732346][T13611] loop5: detected capacity change from 0 to 512 [ 158.739345][T13611] EXT4-fs: test_dummy_encryption option not supported [ 158.740569][ T29] audit: type=1326 audit(1768278107.498:14634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 158.769911][ T29] audit: type=1326 audit(1768278107.498:14635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 158.793815][ T29] audit: type=1326 audit(1768278107.498:14636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f00056ff749 code=0x7ffc0000 [ 158.818369][ T29] audit: type=1326 audit(1768278107.498:14637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f00056ff783 code=0x7ffc0000 [ 158.841849][ T29] audit: type=1326 audit(1768278107.498:14638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00056fe1ff code=0x7ffc0000 [ 158.865714][ T29] audit: type=1326 audit(1768278107.508:14639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f00056ff7d7 code=0x7ffc0000 [ 158.889364][ T29] audit: type=1326 audit(1768278107.508:14640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00056fdf90 code=0x7ffc0000 [ 158.913302][ T29] audit: type=1326 audit(1768278107.508:14641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13605 comm="syz.3.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f00056fe3aa code=0x7ffc0000 [ 158.942167][T13617] __nla_validate_parse: 4 callbacks suppressed [ 158.942209][T13617] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2102'. [ 158.958720][T13616] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 158.973699][T13616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.991685][T13616] ip6erspan0: entered promiscuous mode [ 159.000636][T13616] bond0: (slave ip6erspan0): making interface the new active one [ 159.009697][T13616] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 159.032164][T13616] macvlan0: entered promiscuous mode [ 159.038066][T13616] bond0: entered promiscuous mode [ 159.043478][T13616] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 159.084051][T13616] bond0: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 159.130059][T13616] bond0: left promiscuous mode [ 159.150559][T13624] veth18: entered promiscuous mode [ 159.156053][T13624] veth18: entered allmulticast mode [ 159.248039][T13631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2106'. [ 159.257668][T13631] hsr_slave_0: left promiscuous mode [ 160.133458][T13655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2115'. [ 160.181782][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 160.250689][T13659] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2117'. [ 160.436515][T13669] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 160.444154][T13669] vhci_hcd vhci_hcd.2: invalid port number 96 [ 160.450414][T13669] vhci_hcd vhci_hcd.2: default hub control req: 0314 vfffa i0060 l0 [ 160.562298][T13680] loop5: detected capacity change from 0 to 8192 [ 160.724718][T13692] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2132'. [ 160.736235][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2131'. [ 160.748163][T13692] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2132'. [ 161.361835][T13709] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.396199][T13712] SELinux: Context Ü is not valid (left unmapped). [ 161.436044][T13709] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.476714][T13722] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2144'. [ 161.509710][T13709] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.586241][T13709] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.773786][ T4874] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.791701][ T4874] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.814801][ T4874] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.843434][ T4874] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.027473][T13749] loop5: detected capacity change from 0 to 1024 [ 162.037793][T13749] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2152: bad orphan inode 134217728 [ 162.049916][T13749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.717550][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.815218][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2160'. [ 162.836803][T13769] netlink: 'syz.4.2161': attribute type 13 has an invalid length. [ 162.921343][ T165] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.039345][ T165] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.048811][T13772] netlink: 'syz.5.2158': attribute type 4 has an invalid length. [ 163.061207][ T165] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.084721][ T165] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.210169][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 164.210188][ T29] audit: type=1400 audit(1768278113.028:14801): avc: denied { write } for pid=13812 comm="syz.0.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 164.248872][T13813] infiniband !yz!: set down [ 164.253504][T13813] infiniband !yz!: added team_slave_0 [ 164.269679][T13813] RDS/IB: !yz!: added [ 164.274013][T13813] smc: adding ib device !yz! with port count 1 [ 164.280828][T13813] smc: ib device !yz! port 1 has no pnetid [ 164.554479][T13827] __nla_validate_parse: 5 callbacks suppressed [ 164.554500][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 164.658553][ T29] audit: type=1326 audit(1768278113.478:14802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.682669][ T29] audit: type=1326 audit(1768278113.478:14803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.720213][T10485] Process accounting resumed [ 164.746602][ T29] audit: type=1326 audit(1768278113.528:14804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.770389][ T29] audit: type=1326 audit(1768278113.538:14805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.794113][ T29] audit: type=1326 audit(1768278113.538:14806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.817798][ T29] audit: type=1326 audit(1768278113.538:14807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.841659][ T29] audit: type=1326 audit(1768278113.538:14808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.865567][ T29] audit: type=1326 audit(1768278113.538:14809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.889589][ T29] audit: type=1326 audit(1768278113.538:14810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.2.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 164.916736][T13843] 9p: Bad value for 'wfdno' [ 165.261761][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2199'. [ 165.296635][T13871] netlink: 'syz.3.2200': attribute type 12 has an invalid length. [ 165.746382][T13888] lo speed is unknown, defaulting to 1000 [ 165.774859][T13888] lo speed is unknown, defaulting to 1000 [ 166.006066][T13916] xt_hashlimit: max too large, truncated to 1048576 [ 166.026752][T13916] No such timeout policy "syz1" [ 166.389608][T13941] netlink: 'syz.5.2213': attribute type 3 has an invalid length. [ 166.887331][T13944] lo speed is unknown, defaulting to 1000 [ 166.893774][T13944] lo speed is unknown, defaulting to 1000 [ 167.124014][T13960] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2233'. [ 167.401979][T13966] lo speed is unknown, defaulting to 1000 [ 167.408649][T13966] lo speed is unknown, defaulting to 1000 [ 167.624812][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 167.658595][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2229'. [ 168.093850][T14000] IPv6: Can't replace route, no match found [ 168.321183][T14014] netlink: 'syz.4.2243': attribute type 10 has an invalid length. [ 168.329142][T14014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2243'. [ 168.341290][T14014] : entered promiscuous mode [ 168.346917][T14014] bridge0: port 1() entered blocking state [ 168.353035][T14014] bridge0: port 1() entered disabled state [ 168.359636][T14014] : entered allmulticast mode [ 168.367715][T14014] bridge0: entered allmulticast mode [ 168.374078][T14014] : left allmulticast mode [ 168.378775][T14014] bridge0: left allmulticast mode [ 168.745474][T14027] lo speed is unknown, defaulting to 1000 [ 168.754662][T14027] lo speed is unknown, defaulting to 1000 [ 169.482288][T14042] wireguard0: entered promiscuous mode [ 169.629296][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 169.629317][ T29] audit: type=1326 audit(1768278118.448:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.661271][ T29] audit: type=1326 audit(1768278118.448:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.685273][ T29] audit: type=1326 audit(1768278118.478:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.709145][ T29] audit: type=1326 audit(1768278118.478:15100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.732899][ T29] audit: type=1326 audit(1768278118.478:15101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.756579][ T29] audit: type=1326 audit(1768278118.478:15102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.780622][ T29] audit: type=1326 audit(1768278118.478:15103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.804941][ T29] audit: type=1326 audit(1768278118.478:15104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.828822][ T29] audit: type=1326 audit(1768278118.478:15105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 169.852846][ T29] audit: type=1326 audit(1768278118.478:15106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14054 comm="syz.2.2261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f193ebaf749 code=0x7ffc0000 [ 170.061009][T14069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2266'. [ 170.366105][T14071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2264'. [ 170.486799][T14074] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14074 comm=syz.5.2268 [ 170.730712][T14099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2278'. [ 170.932638][T14115] lo speed is unknown, defaulting to 1000 [ 170.938835][T14115] lo speed is unknown, defaulting to 1000 [ 171.060062][T14120] loop5: detected capacity change from 0 to 8192 [ 171.074157][T14120] netlink: 996 bytes leftover after parsing attributes in process `syz.5.2284'. [ 171.113341][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2288'. [ 171.249679][T14132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2290'. [ 171.364819][T14134] lo speed is unknown, defaulting to 1000 [ 171.371349][T14134] lo speed is unknown, defaulting to 1000 [ 171.431750][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2292'. [ 171.568697][T14143] netlink: 'syz.5.2294': attribute type 1 has an invalid length. [ 171.582789][T14143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.592952][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2294'. [ 171.602675][T14143] bond2: entered promiscuous mode [ 171.608017][T14143] bond2: entered allmulticast mode [ 172.639445][T14176] lo speed is unknown, defaulting to 1000 [ 172.639814][T14176] lo speed is unknown, defaulting to 1000 [ 173.018899][T14190] xt_hashlimit: max too large, truncated to 1048576 [ 173.061682][T14190] No such timeout policy "syz1" [ 173.373563][T14200] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2313'. [ 173.412436][T14200] 0ªX¹¦À: renamed from caif0 [ 173.497166][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 173.700997][T14200] 0ªX¹¦À: entered allmulticast mode [ 173.708019][T14200] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 173.749941][T14206] syz.0.2316: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 173.764682][T14206] CPU: 0 UID: 0 PID: 14206 Comm: syz.0.2316 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.764775][T14206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.764787][T14206] Call Trace: [ 173.764794][T14206] [ 173.764802][T14206] __dump_stack+0x1d/0x30 [ 173.764832][T14206] dump_stack_lvl+0x95/0xd0 [ 173.764857][T14206] dump_stack+0x15/0x1b [ 173.764941][T14206] warn_alloc+0x12b/0x1a0 [ 173.764967][T14206] ? __schedule+0x85f/0xcd0 [ 173.765012][T14206] ? __rcu_read_unlock+0x4f/0x70 [ 173.765038][T14206] __vmalloc_node_range_noprof+0xa0/0x1310 [ 173.765079][T14206] ? __futex_wait+0x1fa/0x260 [ 173.765104][T14206] ? __pfx_futex_wake_mark+0x10/0x10 [ 173.765144][T14206] ? __rcu_read_unlock+0x4f/0x70 [ 173.765169][T14206] ? avc_has_perm_noaudit+0xab/0x130 [ 173.765298][T14206] ? should_fail_ex+0x30/0x280 [ 173.765324][T14206] ? should_failslab+0x8c/0xb0 [ 173.765347][T14206] vmalloc_user_noprof+0x7d/0xb0 [ 173.765372][T14206] ? xskq_create+0x80/0xe0 [ 173.765396][T14206] xskq_create+0x80/0xe0 [ 173.765418][T14206] xsk_init_queue+0x95/0xf0 [ 173.765450][T14206] xsk_setsockopt+0x477/0x640 [ 173.765500][T14206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 173.765538][T14206] __sys_setsockopt+0x184/0x200 [ 173.765571][T14206] __x64_sys_setsockopt+0x64/0x80 [ 173.765611][T14206] x64_sys_call+0x21d5/0x3000 [ 173.765636][T14206] do_syscall_64+0xca/0x2b0 [ 173.765744][T14206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.765766][T14206] RIP: 0033:0x7f3fbeeff749 [ 173.765828][T14206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.765892][T14206] RSP: 002b:00007f3fbd95f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.765917][T14206] RAX: ffffffffffffffda RBX: 00007f3fbf155fa0 RCX: 00007f3fbeeff749 [ 173.765930][T14206] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 173.765946][T14206] RBP: 00007f3fbef83f91 R08: 0000000000000004 R09: 0000000000000000 [ 173.765962][T14206] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 173.766014][T14206] R13: 00007f3fbf156038 R14: 00007f3fbf155fa0 R15: 00007ffd0781e8e8 [ 173.766033][T14206] [ 173.766051][T14206] Mem-Info: [ 173.990926][T14206] active_anon:29909 inactive_anon:3214 isolated_anon:0 [ 173.990926][T14206] active_file:20270 inactive_file:2522 isolated_file:0 [ 173.990926][T14206] unevictable:16905 dirty:282 writeback:0 [ 173.990926][T14206] slab_reclaimable:2536 slab_unreclaimable:110380 [ 173.990926][T14206] mapped:29360 shmem:20948 pagetables:1361 [ 173.990926][T14206] sec_pagetables:0 bounce:0 [ 173.990926][T14206] kernel_misc_reclaimable:0 [ 173.990926][T14206] free:1698746 free_pcp:16566 free_cma:0 [ 174.037572][T14206] Node 0 active_anon:119636kB inactive_anon:12856kB active_file:81080kB inactive_file:10088kB unevictable:67620kB isolated(anon):0kB isolated(file):0kB mapped:117440kB dirty:1128kB writeback:0kB shmem:83792kB kernel_stack:5088kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.066685][T14206] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.096556][T14206] lowmem_reserve[]: 0 2880 7859 7859 [ 174.102113][T14206] Node 0 DMA32 free:2945888kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 174.134147][T14206] lowmem_reserve[]: 0 0 4978 4978 [ 174.139524][T14206] Node 0 Normal free:3829548kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:119636kB inactive_anon:12856kB active_file:81080kB inactive_file:10088kB unevictable:67620kB writepending:1128kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:62940kB local_pcp:34416kB free_cma:0kB [ 174.174224][T14206] lowmem_reserve[]: 0 0 0 0 [ 174.178982][T14206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.192111][T14206] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945888kB [ 174.208919][T14206] Node 0 Normal: 1835*4kB (UME) 987*8kB (ME) 948*16kB (UME) 903*32kB (UME) 761*64kB (UME) 429*128kB (UME) 177*256kB (UME) 114*512kB (UME) 139*1024kB (UME) 67*2048kB (UM) 800*4096kB (UM) = 3822948kB [ 174.229264][T14206] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 174.238772][T14206] 60848 total pagecache pages [ 174.243464][T14206] 207 pages in swap cache [ 174.247846][T14206] Free swap = 68848kB [ 174.251956][T14206] Total swap = 124996kB [ 174.256168][T14206] 2097051 pages RAM [ 174.260003][T14206] 0 pages HighMem/MovableOnly [ 174.264861][T14206] 81271 pages reserved [ 174.366534][T14218] x_tables: duplicate underflow at hook 3 [ 174.388215][T14218] loop5: detected capacity change from 0 to 1024 [ 174.459509][T14224] lo speed is unknown, defaulting to 1000 [ 174.469195][T14224] lo speed is unknown, defaulting to 1000 [ 174.488601][T14226] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 174.513699][T14218] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 174.529194][T14231] ref_ctr increment failed for inode: 0x9f7 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810431ca40 [ 174.541506][T14218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.559222][T14218] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2320: bg 0: block 88: padding at end of block bitmap is not set [ 174.636656][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.651947][ T29] kauditd_printk_skb: 2317 callbacks suppressed [ 174.651963][ T29] audit: type=1326 audit(1768278123.468:17424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 174.689002][ T29] audit: type=1326 audit(1768278123.498:17425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14233 comm="syz.4.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf6d72f749 code=0x7ffc0000 [ 174.829668][T14246] tipc: Enabling of bearer rejected, failed to enable media [ 174.844263][ T29] audit: type=1400 audit(1768278123.638:17426): avc: denied { name_connect } for pid=14241 comm="syz.5.2329" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 174.914398][T14251] vlan0: entered promiscuous mode [ 174.919597][T14251] gretap0: entered promiscuous mode [ 175.044694][ T29] audit: type=1400 audit(1768278123.838:17427): avc: denied { append } for pid=14255 comm="syz.5.2334" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.068504][ T29] audit: type=1400 audit(1768278123.838:17428): avc: denied { ioctl } for pid=14255 comm="syz.5.2334" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 175.130751][T14258] loop5: detected capacity change from 0 to 128 [ 175.305976][T14266] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2338'. [ 175.328937][ T29] audit: type=1400 audit(1768278124.138:17429): avc: denied { setattr } for pid=14257 comm="syz.5.2335" name="tun" dev="devtmpfs" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 175.484574][T14258] bio_check_eod: 11431 callbacks suppressed [ 175.484597][T14258] syz.5.2335: attempt to access beyond end of device [ 175.484597][T14258] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 175.508244][T14276] ip6gre0: entered promiscuous mode [ 175.517389][ T29] audit: type=1400 audit(1768278124.328:17430): avc: denied { sqpoll } for pid=14275 comm="syz.4.2343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 175.541496][T14276] team0: Port device ip6gre0 added [ 175.569252][T14276] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.579623][T14258] syz.5.2335: attempt to access beyond end of device [ 175.579623][T14258] loop5: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 175.597792][T14258] syz.5.2335: attempt to access beyond end of device [ 175.597792][T14258] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 175.631080][T14258] syz.5.2335: attempt to access beyond end of device [ 175.631080][T14258] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 175.648521][T14258] syz.5.2335: attempt to access beyond end of device [ 175.648521][T14258] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 175.662219][T14258] syz.5.2335: attempt to access beyond end of device [ 175.662219][T14258] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 175.675852][T14258] syz.5.2335: attempt to access beyond end of device [ 175.675852][T14258] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 175.689517][T14258] syz.5.2335: attempt to access beyond end of device [ 175.689517][T14258] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 175.704915][T14258] syz.5.2335: attempt to access beyond end of device [ 175.704915][T14258] loop5: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 175.726320][T14258] syz.5.2335: attempt to access beyond end of device [ 175.726320][T14258] loop5: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 175.754338][ T29] audit: type=1400 audit(1768278124.568:17431): avc: denied { bind } for pid=14284 comm="syz.2.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 175.827535][T14283] lo speed is unknown, defaulting to 1000 [ 175.854770][T14283] lo speed is unknown, defaulting to 1000 [ 175.868269][T14290] openvswitch: netlink: Missing key (keys=40, expected=100) [ 175.911962][T14294] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.966758][ T29] audit: type=1400 audit(1768278124.778:17432): avc: denied { create } for pid=14293 comm="syz.4.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 175.986610][ T29] audit: type=1400 audit(1768278124.788:17433): avc: denied { ioctl } for pid=14293 comm="syz.4.2351" path="socket:[29078]" dev="sockfs" ino=29078 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 176.449014][T14314] loop5: detected capacity change from 0 to 1024 [ 176.455644][T14314] EXT4-fs: Ignoring removed orlov option [ 176.463759][T14314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.672048][T14321] ================================================================== [ 176.680152][T14321] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 176.688174][T14321] [ 176.690523][T14321] write to 0xffff88811b4efbd4 of 4 bytes by task 14314 on cpu 0: [ 176.698258][T14321] xas_set_mark+0x12b/0x140 [ 176.702805][T14321] __folio_start_writeback+0x155/0x340 [ 176.708306][T14321] ext4_bio_write_folio+0x5ad/0x9f0 [ 176.713542][T14321] mpage_process_page_bufs+0x4a1/0x620 [ 176.719113][T14321] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 176.724958][T14321] ext4_do_writepages+0x9f6/0x27e0 [ 176.730111][T14321] ext4_writepages+0x179/0x300 [ 176.734988][T14321] do_writepages+0x1c6/0x310 [ 176.739603][T14321] file_write_and_wait_range+0x156/0x2c0 [ 176.745339][T14321] generic_buffers_fsync_noflush+0x45/0x130 [ 176.751273][T14321] ext4_sync_file+0x1ab/0x690 [ 176.756057][T14321] vfs_fsync_range+0x10d/0x130 [ 176.761021][T14321] ext4_buffered_write_iter+0x34f/0x3c0 [ 176.766607][T14321] ext4_file_write_iter+0x387/0xf60 [ 176.771842][T14321] iter_file_splice_write+0x66b/0xa20 [ 176.777352][T14321] direct_splice_actor+0x156/0x2a0 [ 176.782666][T14321] splice_direct_to_actor+0x312/0x680 [ 176.788058][T14321] do_splice_direct+0xda/0x150 [ 176.792846][T14321] do_sendfile+0x380/0x650 [ 176.797370][T14321] __x64_sys_sendfile64+0x105/0x150 [ 176.802675][T14321] x64_sys_call+0x2db1/0x3000 [ 176.807472][T14321] do_syscall_64+0xca/0x2b0 [ 176.812018][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.818018][T14321] [ 176.820365][T14321] read to 0xffff88811b4efbd4 of 4 bytes by task 14321 on cpu 1: [ 176.828108][T14321] file_write_and_wait_range+0x10e/0x2c0 [ 176.833970][T14321] generic_buffers_fsync_noflush+0x45/0x130 [ 176.839998][T14321] ext4_sync_file+0x1ab/0x690 [ 176.844792][T14321] vfs_fsync_range+0x10d/0x130 [ 176.849670][T14321] ext4_buffered_write_iter+0x34f/0x3c0 [ 176.855256][T14321] ext4_file_write_iter+0x387/0xf60 [ 176.860512][T14321] iter_file_splice_write+0x66b/0xa20 [ 176.865925][T14321] direct_splice_actor+0x156/0x2a0 [ 176.871256][T14321] splice_direct_to_actor+0x312/0x680 [ 176.876649][T14321] do_splice_direct+0xda/0x150 [ 176.881525][T14321] do_sendfile+0x380/0x650 [ 176.886070][T14321] __x64_sys_sendfile64+0x105/0x150 [ 176.891396][T14321] x64_sys_call+0x2db1/0x3000 [ 176.896264][T14321] do_syscall_64+0xca/0x2b0 [ 176.900906][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.906818][T14321] [ 176.909195][T14321] value changed: 0x0a000021 -> 0x04000021 [ 176.914926][T14321] [ 176.917430][T14321] Reported by Kernel Concurrency Sanitizer on: [ 176.923697][T14321] CPU: 1 UID: 0 PID: 14321 Comm: syz.5.2358 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.924344][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 176.933527][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.933546][T14321] ================================================================== [ 177.365739][T10563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.