last executing test programs: 4m54.589477807s ago: executing program 32 (id=1314): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0) r2 = shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r4}, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x2, 0x4, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) socket(0xa, 0x80805, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) shmdt(r2) 4m3.634400618s ago: executing program 33 (id=3135): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 3m9.345503348s ago: executing program 34 (id=4424): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file0\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x1, 0x11fa, &(0x7f00000024c0)="$eJzs3E2LW1UYB/DH6fTFqfOi1moL0oNudHPpzMKNgs5iCtIspO0IrSDcOjcack1CbhiIiKMrt34OcelOEHe6mY2fwd1sXHYhXmnSaiPporTMLeH3WyQPOecPz8kbnJBzj9757vNuu8ra+SiWnnk3lgYR6U6KFEtx39fx5tu//vbq9Zu3rm63WjvXUrqyfWPzrZTS2qWfP/ryh9d+GZ398Me1n07H4cbHR39u/XF4/vDC0d83PutUqVOlXn+U8nS73x/lt8si7XWqbpbSB2WRV0Xq9KpiODPeLvuDwTjlvb3VlcGwqKqU98apW4zTqJ9Gw3HKP807vZRlWVpdCR7H7vd36rqOqOuTcSrquq6fjZU4G8/FaqzFemzE8/FCvBjn4qU4Hy/HK3FhMqvpvgEAAAAAAAAAAAAAAAAAAGCxPNb5/0sNNw8AAAAAAAAAAAAAAAAAAAAL4vrNW1e3W62daymdiSi/3d/d353eT8e329GJMoq4HOvxV0xO/09N6yvvt3Yup4mN+KY8uJc/2N89MZvfnFxOYG5+c5pPs/nTsfJgfivW49z8/Nbc/Jl44/UH8lmsx++fRD/K2Iu72fcmt3fzXy3fezJm8hcn8wAAAGARZOlfc/fvWfaw8Wn+EX4f+N/+fDkuLje7diKq8RfdvCyLYePF/Y6mjxxExFPS2AIXJ5+ONp5scWLmjdR8P0+4OHVMn9xmvo84Xv+96E13AgAAAAAAAAAAwKM4jn8sNr1GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mEHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8FQAA//+S58bP") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x40000002) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rename(0x0, 0x0) 3m5.803803908s ago: executing program 35 (id=4509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000002"], 0x48) 2m51.571580239s ago: executing program 36 (id=4994): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_io_uring_setup(0x298b, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x2400, 0x1}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) 2m49.399564312s ago: executing program 37 (id=5030): r0 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)='%', 0x1}], 0x1}, 0x0) 2m35.890938889s ago: executing program 38 (id=5019): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) 2m33.308066764s ago: executing program 4 (id=5459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x26}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 2m33.216825824s ago: executing program 4 (id=5462): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x130) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) mknod$loop(&(0x7f0000000780)='./bus\x00', 0x800, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) 2m32.877035996s ago: executing program 4 (id=5471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2042) ioctl$SNDRV_TIMER_IOCTL_GINFO(r2, 0xc0f85403, &(0x7f0000000380)={{0x3, 0x3, 0x200, 0x3, 0x6}, 0x5, 0x6, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0xcc, 0x9, 0x6}) 2m32.842449877s ago: executing program 4 (id=5475): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400, 0x80) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000000edf1139c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) 2m32.650392018s ago: executing program 4 (id=5484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 2m32.30826417s ago: executing program 4 (id=5494): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 2m32.30818225s ago: executing program 39 (id=5494): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 2m18.616185538s ago: executing program 2 (id=5866): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 2m18.612306538s ago: executing program 2 (id=5867): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x20c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008800}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 2m18.493584969s ago: executing program 2 (id=5869): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m18.431385809s ago: executing program 2 (id=5871): setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) dup2(r2, r1) 2m18.359902709s ago: executing program 2 (id=5873): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x196c82f6}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) io_setup(0x4, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m18.31209699s ago: executing program 2 (id=5874): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdafb, {0x0, 0x0, 0x0, r2, {0xffff, 0x3}, {0xfff1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r1) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m13.351474868s ago: executing program 9 (id=5990): sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2m13.09987886s ago: executing program 9 (id=5992): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r2, 0x0}]) 2m12.99606574s ago: executing program 9 (id=6005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, r3, r4, 0x1) 2m12.95688378s ago: executing program 9 (id=5996): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000e40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0x14, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cf6d61fd01335263bd9bffbcc2542ded71038259ea171ce1a320ef54ec32d71e14ef3dc177e9b48b009000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0/../file0\x00', 0x0, 0x100) syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000880)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xbd053, 0x0, 0x4, 0x0, &(0x7f00000008c0)) 2m12.692603532s ago: executing program 9 (id=5999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x40) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x805, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m12.548268643s ago: executing program 9 (id=6003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000300)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x4000001, {}, {0x0, 0xf0, 0x3}, 0x2, 0x1}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 2m12.539781043s ago: executing program 40 (id=6003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000300)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x3, 0x4000001, {}, {0x0, 0xf0, 0x3}, 0x2, 0x1}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x404c083}, 0x20000050) 2m4.002112002s ago: executing program 41 (id=5874): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdafb, {0x0, 0x0, 0x0, r2, {0xffff, 0x3}, {0xfff1, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r1) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m59.311233768s ago: executing program 8 (id=6288): bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_to_bond\x00', 0x400}) close(r0) 1m59.14619952s ago: executing program 8 (id=6294): r0 = io_uring_setup(0x4d42, &(0x7f0000000080)={0x0, 0xca6a, 0x40, 0x0, 0x83}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_op={0x1, 0x14}], 0x1) 1m59.06020991s ago: executing program 8 (id=6296): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$eJzs3c9rXFsdAPDvnSRt0uY5eeri+cD3iq+SFu1M0tg2uCgVxF1BrfsYkkkImWRCZtI2oZQU/wBBRBeuXLkR/AME6cZ9EQq6FxGl2FYXLtSRO3PHxnQmGV4nM+3k84HTe+6P3O/3dDq399x7yAng1LoQEbciYiQiLkdEPtuey0rsN0t63MsXD5bSkkS9fudvSSTZtta5kmx5Pvux8Yj4bnJgxwHV3b31xXK5tJ2tF2sbW8Xq7t6VtY3F1dJqaXNubvb6/I35a/MzPWvrzW/++Sc//MW3bv7mq/f+uPDXSw/TtCazfQfb0UvNpo81/i5aRiNi+ySCDcBI1p6xLo8/e8L5AABwtPQe/7MR8aXG/X8+Rhp3cwAAAMAwqScR/0oi6gAAAMDQyjXGwCa5QjYWYDJyuUKhOYb383EuV65Ua19ZqexsLjfHyk7FWG5lrVyaycYKT8VYkq7PNuqv1q8eWp+LiPcj4sf5iWTlbJQKS5Xy8qAffgAAAMApcf5Q//8f+Wb/HwAAABgyU4NOAAAAADhx+v8AAAAw/Dr2/xOTAQAAAMAQ+Pbt22mpt+a/Xr67u7NeuXtluVRdL2zsLBWWKttbhdVKZbVcKixVNo47X7lS2fpabO7cL9ZK1Vqxuru3sFHZ2awtNOb1Xih1O080AAAA0Dvvf/z4D0lE7H99olFSZ7J9+uow3HLHHzJxoJ6cZC5Af40MOgFgYD7dAF/DgmEYHNfHf16v9ykTYFCO69iPd9rxpPe5AAAAJ2P6C53f/wPDrYv3/23c6nkeQP95/w+nlzf5cHoZ4w+82ft/g4QAAOBdMNkoSa6QvQucjFyuUIh4rzEtwFiyslYuzUTEZyLi9/mxs+n67KCTBgAAAAAAAAAAAAAAAAAAAAAAAIB3TL2eRP2wM69vAgAAAN5dEbm/JNn8X9P5i5OHnw+cSf6Zbywj4t7P7vz0/mKttj2bbn+efzVrWLb9at8fXwAAAACp3/7/aquf3urHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAP1ZPmcunliwdL/Qz87BsRMRWRxm2V5p7RGG8sx2MsIs79PYnRAz+X5jvSg/j7jyLig3bxkzStmMqyOBw/FxETA45/vgfx4TR7nF5/brX7/uXiQmPZ/vs3mpU39exCp+tf7n/Xv5EO17/3uozx4dNfFTvGfxTx4Wj7608rftIh/iddxv/+9/b2Ou2r/zxiOtrHPxirWNvYKlZ3966sbSyullZLm3Nzs9fnb8xfm58prqyVS9mfbWP86Iu//s9R7T/XIf7UMe2/2GX7//30/ovPvbb14dVW/EuftP/8Pzgifvpv4svZ/wPp/ulWfb9ZP+ijX/7uo6Pav9yh/cd9/pe6bP/l7/zgT10eCgD0QXV3b32xXC5tH1l5Escf079K6z7kbcknvRdKKzf7F7T16KGXZ/44Pd+JJj8Rb8XnpdJNZYAXJQAA4ES8uukfdCYAAAAAAAAAAAAAAAAAAABwevXj14kNuo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN34bwAAAP//tfDGOw==") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x35b) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 1m58.96135711s ago: executing program 8 (id=6299): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x11, 0x553, &(0x7f0000001080)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 1m58.848489721s ago: executing program 8 (id=6305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x7f00, @empty, 0x3}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000050000103afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1m58.452226593s ago: executing program 8 (id=6310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r3 = dup(r2) ioctl$GIO_UNISCRNMAP(r3, 0x43403d0e, 0x0) 1m58.452091473s ago: executing program 42 (id=6310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r3 = dup(r2) ioctl$GIO_UNISCRNMAP(r3, 0x43403d0e, 0x0) 1m55.317502091s ago: executing program 6 (id=6357): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1m55.120141752s ago: executing program 6 (id=6361): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1m55.096062233s ago: executing program 6 (id=6362): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x168, 0x9, 0x0, 0xb, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r0 = socket$inet6(0xa, 0x2, 0x0) capset(0x0, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x0, 0x8}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x1000, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m55.011345263s ago: executing program 6 (id=6364): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 1m54.958652043s ago: executing program 6 (id=6365): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x29}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x48990}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 1m54.705573685s ago: executing program 6 (id=6366): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 1m54.705398054s ago: executing program 43 (id=6366): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 1.683724791s ago: executing program 0 (id=9044): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006f00000095000000000000004d9e240781a86a52c93f0b8b3b94af1111c8871ea957b0c8bdee4bad713ed48fa87c3dd129247c3f01a0461b32d5f4d6b6de12b457049dae8706aabfbdb3b03a6daa91aa4dffd9bec75a1501000000000000075d7ce8a2a3ae884df7095ae6aca2ffdac737b5a1eaaeaa5cb8b86a6724a7b422a8338eac8ca722cfaf84eb8735931f4d00398ab45c1e57de97b16736d65701d79a90"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 1.613491821s ago: executing program 0 (id=9046): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0xd]}, 0x8, 0x80800) memfd_secret(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) brk(0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.604174152s ago: executing program 7 (id=9047): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r2}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 1.552102392s ago: executing program 0 (id=9050): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r3, 0x4e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) unshare(0x22020400) 1.551897861s ago: executing program 7 (id=9051): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000800)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 1.551504881s ago: executing program 1 (id=9052): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.547121222s ago: executing program 7 (id=9053): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() 1.329198763s ago: executing program 7 (id=9055): epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2c01) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x1, 0xd, 0x8, 0x0, 0x9, 0x0}) io_uring_enter(r0, 0x628, 0xc88d, 0x43, 0x0, 0x0) 1.264059933s ago: executing program 5 (id=9056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfeff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r0}, 0x18) sync() r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1.221107154s ago: executing program 3 (id=9057): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) 1.188290314s ago: executing program 5 (id=9058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 1.187649314s ago: executing program 1 (id=9059): unshare(0x62040200) unshare(0x40000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x24) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000002c0)={'nat\x00', 0x0, [0xa, 0xff, 0x3, 0x4, 0x1]}, &(0x7f0000000200)=0x54) 1.079438134s ago: executing program 5 (id=9060): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000980), 0x20000992) 1.062445724s ago: executing program 3 (id=9061): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 944.618945ms ago: executing program 3 (id=9062): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) removexattr(&(0x7f0000000200)='./cgroup\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000000000000000000000000004ef4d0945fc76f543d606bca09faa84d715c98", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@block_validity}, {@quota}]}, 0x3, 0x452, &(0x7f0000000780)="$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") 944.383855ms ago: executing program 1 (id=9063): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000800)={r1, 0x4, 0x1, 'u'}, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) creat(0x0, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03"], 0x34}}, 0x0) 844.235256ms ago: executing program 1 (id=9064): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) socketpair(0x0, 0x0, 0xfffffffe, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 843.931016ms ago: executing program 3 (id=9065): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xe0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) gettid() 743.026706ms ago: executing program 1 (id=9066): ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x56b5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x9, @local, 0x4}, 0x1c) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000100)}, {&(0x7f0000000340)="7e2a6c41b32066f51dae1318170c68d2c20af39620068e5a3789e3ca8f560adcb648b6ca52c0854014ec23badb3ce7d96cec629106ec86367ca0ad16c4942e93e248f756e79670f76cae1289cbb67ae9535e84ba614284d992fb57c98474dc04582a7cc20a3d1a34ffef7d176907791231e23b98f3340eafabdd2a4e02be6127028b04d47f40860b4296c04fb5f65855d0c5ad044cbfab2de43944dafe778a40adfe4c672c84b1ad5103def4fc1a1851c5ba72111da9c17c0535d137b0871168b2114d9964504b929cb9e8a2f54cfa3309e54c3be7aaf1cc4aff398c5d4198418eb12158d9e1c3000000", 0xea}, {&(0x7f00000004c0)="6ef89387e370264c46ee7abde91c4a7791dda3ccb8df577c68e003f23c94ab212509e59adb3fa4eb2cc1988f86cdf0159c033b3a56e21495a9620cce855aeacf65c45c1820e97edf88d9d4137f5449c002001d1f15feb9580f9a86a0cbc68e0aef06aad0d837be7568c70c02152777a0e433b3dd9110000a0000", 0x7a}], 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 601.695397ms ago: executing program 0 (id=9067): r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], 0x0, 0x1ffff7d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) 527.503908ms ago: executing program 3 (id=9068): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadfd82f5f27d2a52, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 472.238688ms ago: executing program 0 (id=9069): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) 471.948028ms ago: executing program 7 (id=9070): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 418.472908ms ago: executing program 5 (id=9071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1, 0xa3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000016c0)={0x8, 0xfff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r4 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) pread64(r4, &(0x7f00000006c0)=""/4096, 0x1000, 0xf) utimes(&(0x7f0000000180)='./file2\x00', &(0x7f0000000200)={{}, {0x0, 0x2710}}) 403.603349ms ago: executing program 3 (id=9072): socket$igmp6(0xa, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000000000000300000200000002000000000000000100000000000001"], 0x0, 0x42}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 296.274009ms ago: executing program 7 (id=9073): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000140)={0x6, 0x43, 0x8, 0xa, 0x22, 0x5, 0x5, 0x6, 0x3, 0x2, 0x4, 0x6d, 0x6, 0x2}, 0xe) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x2}, 0x8) 69.51877ms ago: executing program 0 (id=9074): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) ustat(0x3, &(0x7f0000000040)) 69.35843ms ago: executing program 5 (id=9075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r1, &(0x7f00000003c0)="d33dd4", 0x3, 0x80, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 24.72897ms ago: executing program 5 (id=9076): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r0], &(0x7f00000005c0)=""/234, 0xfffffffffffffd6c, 0xea, 0xffffffff, 0xdd57, 0x10000}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 0s ago: executing program 1 (id=9077): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = io_uring_setup(0x4743, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f00000004c0)={0x0}, 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r1, 0x0, 0x0, 0x40) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): e+0x7b/0xa0 [ 333.012319][ T1021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.012350][ T1021] RIP: 0033:0x7f197102efc9 [ 333.012368][ T1021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.012394][ T1021] RSP: 002b:00007f196fa97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 333.012423][ T1021] RAX: ffffffffffffffda RBX: 00007f1971285fa0 RCX: 00007f197102efc9 [ 333.012439][ T1021] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 333.012455][ T1021] RBP: 00007f19710b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.012472][ T1021] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 333.012515][ T1021] R13: 00007f1971286038 R14: 00007f1971285fa0 R15: 00007fff443cb808 [ 333.012541][ T1021] [ 333.707108][ T3420] IPVS: starting estimator thread 0... [ 333.795083][ T1062] IPVS: using max 2208 ests per chain, 110400 per kthread [ 333.802681][ T1075] vhci_hcd: default hub control req: 8013 vff0c i0000 l0 [ 333.866836][ T1081] macvlan1: entered promiscuous mode [ 333.873063][ T1081] ipvlan0: entered promiscuous mode [ 333.878861][ T1081] ipvlan0: left promiscuous mode [ 333.887513][ T1081] macvlan1: left promiscuous mode [ 334.085166][ T1098] vhci_hcd: default hub control req: 8013 vff0c i0000 l0 [ 334.436989][ T1116] loop7: detected capacity change from 0 to 1024 [ 334.453139][ T1116] EXT4-fs: inline encryption not supported [ 334.464921][ T1112] syzkaller0: entered promiscuous mode [ 334.490243][ T1116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.630061][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.656606][ T1132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.673056][ T1132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.699153][ T1132] netlink: 'syz.5.7136': attribute type 5 has an invalid length. [ 334.732425][ T1140] team0: entered promiscuous mode [ 334.737566][ T1140] team0: entered allmulticast mode [ 334.746855][ T1140] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.882653][ T1152] block device autoloading is deprecated and will be removed. [ 334.938117][ T1156] pim6reg1: entered promiscuous mode [ 334.943530][ T1156] pim6reg1: entered allmulticast mode [ 334.952182][ T1158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1158 comm=syz.7.7147 [ 335.053234][ T1164] netlink: 'syz.3.7151': attribute type 1 has an invalid length. [ 335.187957][ T1176] __nla_validate_parse: 5 callbacks suppressed [ 335.187975][ T1176] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7156'. [ 335.256270][ T1178] syzkaller0: entered promiscuous mode [ 335.296425][ T1182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.305177][ T1182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.314847][ T1182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7159'. [ 335.331179][ T1182] netlink: 'syz.7.7159': attribute type 5 has an invalid length. [ 335.609151][ T1187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.617686][ T1187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.074858][ T1193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1193 comm=syz.1.7162 [ 336.176190][ T1199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7167'. [ 336.193683][ T1199] team1: entered promiscuous mode [ 336.198886][ T1199] team1: entered allmulticast mode [ 336.206725][ T1199] 8021q: adding VLAN 0 to HW filter on device team1 [ 336.296108][ T1209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.307358][ T1209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.316671][ T1209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7173'. [ 336.326152][ T1209] netlink: 'syz.7.7173': attribute type 5 has an invalid length. [ 336.765149][ T1226] loop5: detected capacity change from 0 to 2048 [ 336.772663][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 336.772680][ T29] audit: type=1400 audit(354.879:14168): avc: denied { read write } for pid=1227 comm="syz.3.7180" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.801941][ T29] audit: type=1400 audit(354.879:14169): avc: denied { open } for pid=1227 comm="syz.3.7180" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 336.826524][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.834019][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.841468][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.848950][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.856447][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.863884][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.871292][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.878790][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.886228][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.893692][ T36] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 336.902296][ T36] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz1 [ 336.903468][ T1226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.949762][ T29] audit: type=1400 audit(355.068:14170): avc: denied { read write open } for pid=1225 comm="syz.5.7181" path="/363/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 336.999548][ T1235] netlink: 'syz.7.7183': attribute type 1 has an invalid length. [ 337.008253][T27691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.041551][ T1235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.073636][ T1241] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 337.083088][ T1241] bond1: (slave batadv1): making interface the new active one [ 337.091928][ T1241] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 337.100793][ T1243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7186'. [ 337.119548][ T1243] netlink: 'syz.1.7186': attribute type 5 has an invalid length. [ 337.185764][ T29] audit: type=1326 audit(355.309:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.1.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 337.208822][ T29] audit: type=1326 audit(355.309:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.1.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 337.239477][ T29] audit: type=1326 audit(355.309:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.1.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 337.262756][ T29] audit: type=1326 audit(355.309:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.1.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 337.285881][ T29] audit: type=1326 audit(355.309:14175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.1.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 337.309582][ T29] audit: type=1326 audit(355.383:14176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.1.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 337.332657][ T29] audit: type=1326 audit(355.383:14177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1253 comm="syz.1.7191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 337.437291][ T1269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7194'. [ 337.446573][ T1269] IPVS: Error connecting to the multicast addr [ 337.483068][ T1271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.492404][ T1271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.502041][ T1271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7195'. [ 337.511151][ T1271] netlink: 'syz.5.7195': attribute type 5 has an invalid length. [ 337.614333][ T1262] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7203'. [ 337.677367][ T1279] loop7: detected capacity change from 0 to 512 [ 337.692960][ T1279] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.7197: bad orphan inode 11862016 [ 337.704542][ T1279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 337.737375][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 337.761373][ T9] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz1 [ 337.783557][ T1296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.792804][ T1296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.801964][ T1296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7201'. [ 337.811072][ T1296] netlink: 'syz.0.7201': attribute type 5 has an invalid length. [ 338.109979][ T1311] Falling back ldisc for ttyS3. [ 338.120836][ T1315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.129935][ T1315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.139549][ T1315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7220'. [ 338.148689][ T1315] netlink: 'syz.5.7220': attribute type 5 has an invalid length. [ 338.418095][ T1330] netlink: 'syz.0.7215': attribute type 1 has an invalid length. [ 338.432420][ T1330] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.450892][ T1330] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 338.459592][ T1330] bond1: (slave batadv1): making interface the new active one [ 338.468308][ T1330] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 338.744010][ T1351] futex_wake_op: syz.3.7227 tries to shift op by -1; fix this program [ 338.778318][ T1353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.805023][ T1353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.819972][ T1353] netlink: 'syz.5.7228': attribute type 5 has an invalid length. [ 339.483325][ T1393] pim6reg1: entered promiscuous mode [ 339.488736][ T1393] pim6reg1: entered allmulticast mode [ 339.874865][ T1415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.891777][ T1415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.911039][ T1415] netlink: 'syz.3.7254': attribute type 5 has an invalid length. [ 340.870179][ T1457] __nla_validate_parse: 6 callbacks suppressed [ 340.870200][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7270'. [ 340.889245][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7270'. [ 340.917798][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7270'. [ 340.927783][ T1457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7270'. [ 341.117371][ T1478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7282'. [ 341.135210][ T1478] netlink: 'syz.1.7282': attribute type 5 has an invalid length. [ 341.255718][ T1489] loop5: detected capacity change from 0 to 1024 [ 341.263575][ T1489] EXT4-fs: Ignoring removed bh option [ 341.275322][ T1489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.307834][T27691] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.346404][ T1500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7292'. [ 341.358534][ T1500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7292'. [ 341.368455][ T1500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7292'. [ 341.378141][ T1500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7292'. [ 341.542632][ T1512] netlink: 'syz.7.7298': attribute type 1 has an invalid length. [ 341.553841][ T1512] netlink: 224 bytes leftover after parsing attributes in process `syz.7.7298'. [ 341.574324][ T1515] futex_wake_op: syz.0.7308 tries to shift op by -1; fix this program [ 341.775130][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 341.775146][ T29] audit: type=1326 audit(360.128:14266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 341.805011][ T29] audit: type=1326 audit(360.128:14267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 341.828085][ T29] audit: type=1326 audit(360.128:14268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 341.851045][ T29] audit: type=1326 audit(360.128:14269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 341.874005][ T29] audit: type=1326 audit(360.128:14270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 341.897024][ T29] audit: type=1326 audit(360.128:14271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 341.919955][ T29] audit: type=1400 audit(360.139:14272): avc: denied { kexec_image_load } for pid=1538 comm="syz.7.7306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 341.939551][ T29] audit: type=1326 audit(360.139:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 341.962562][ T29] audit: type=1326 audit(360.139:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1538 comm="syz.7.7306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 342.109227][ T1556] netlink: 'syz.1.7311': attribute type 5 has an invalid length. [ 342.160827][ T29] audit: type=1326 audit(360.538:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1559 comm="syz.5.7314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 342.623939][ T1567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.632566][ T1567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.641779][ T1567] netlink: 'syz.0.7316': attribute type 5 has an invalid length. [ 343.030695][ T1694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.039500][ T1694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.049062][ T1694] netlink: 'syz.5.7329': attribute type 5 has an invalid length. [ 343.108341][ T1702] loop7: detected capacity change from 0 to 1024 [ 343.115341][ T1702] EXT4-fs: Ignoring removed nobh option [ 343.119037][ T1698] syzkaller0: entered promiscuous mode [ 343.126479][ T1698] syzkaller0: entered allmulticast mode [ 343.136246][ T1703] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 343.149215][ T1702] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.181245][ T9] infiniband syz2: ib_query_port failed (-19) [ 343.193116][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.284362][ T1713] SELinux: ebitmap: truncated map [ 343.294216][ T1713] SELinux: failed to load policy [ 343.418308][ T1733] hub 8-0:1.0: USB hub found [ 343.423029][ T1733] hub 8-0:1.0: 8 ports detected [ 343.468900][ T1739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.477653][ T1739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.487182][ T1739] netlink: 'syz.0.7349': attribute type 5 has an invalid length. [ 344.134058][ T1780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.142848][ T1780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.152597][ T1780] netlink: 'syz.3.7367': attribute type 5 has an invalid length. [ 344.422769][ T1798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.432008][ T1798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.442300][ T1798] netlink: 'syz.7.7375': attribute type 5 has an invalid length. [ 344.475975][ T1802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.484726][ T1802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.493976][ T1802] netlink: 'syz.5.7377': attribute type 5 has an invalid length. [ 345.175834][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.206438][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.228740][ T1838] netlink: 'syz.5.7395': attribute type 5 has an invalid length. [ 345.497310][ T1851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.514275][ T1851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.544437][ T1851] netlink: 'syz.7.7400': attribute type 5 has an invalid length. [ 345.635673][ T1857] __nla_validate_parse: 28 callbacks suppressed [ 345.635700][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7403'. [ 345.681907][ T1857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7403'. [ 345.854304][ T1868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.861643][ T1868] IPv6: NLM_F_CREATE should be set when creating new route [ 345.874863][ T1870] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7409'. [ 345.965150][ T1880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7414'. [ 345.984609][ T1880] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.000496][ T1880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7414'. [ 346.017464][ T1880] bond1 (unregistering): Released all slaves [ 346.170105][ T1895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.193096][ T1895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.204143][ T1902] netlink: 96 bytes leftover after parsing attributes in process `syz.7.7424'. [ 346.236570][ T1895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7421'. [ 346.246119][ T1895] netlink: 'syz.0.7421': attribute type 5 has an invalid length. [ 346.451292][ T1919] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7432'. [ 346.507552][ T1919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.520893][ T1926] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7432'. [ 346.539071][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 346.539090][ T29] audit: type=1400 audit(365.126:14407): avc: denied { mounton } for pid=1924 comm="syz.5.7434" path="/proc/900/task" dev="proc" ino=82725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 346.567437][ T29] audit: type=1400 audit(365.126:14408): avc: denied { mount } for pid=1924 comm="syz.5.7434" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 346.609210][ T29] audit: type=1400 audit(365.189:14409): avc: denied { connect } for pid=1928 comm="syz.3.7435" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 346.636513][ T1926] bond2 (unregistering): Released all slaves [ 346.945306][ T1960] loop5: detected capacity change from 0 to 1024 [ 346.962348][ T1960] EXT4-fs: Ignoring removed i_version option [ 346.968560][ T1960] EXT4-fs: test_dummy_encryption option not supported [ 347.018713][ T1965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7451'. [ 347.034358][ T1965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.064723][ T1965] bond2 (unregistering): Released all slaves [ 347.114548][ T29] audit: type=1400 audit(365.735:14410): avc: denied { create } for pid=1972 comm="syz.3.7454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 347.190616][ T29] audit: type=1400 audit(365.767:14411): avc: denied { setopt } for pid=1972 comm="syz.3.7454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 347.256456][ T1985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.267482][ T1985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.285908][ T1985] netlink: 'syz.0.7458': attribute type 5 has an invalid length. [ 347.313181][ T29] audit: type=1400 audit(365.945:14412): avc: denied { create } for pid=1993 comm="syz.1.7465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 347.377170][ T29] audit: type=1400 audit(366.008:14413): avc: denied { write } for pid=1993 comm="syz.1.7465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 347.411392][ T29] audit: type=1400 audit(366.039:14414): avc: denied { setopt } for pid=2001 comm="syz.5.7468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 347.432066][ T29] audit: type=1326 audit(366.060:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.5.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 347.471804][ T29] audit: type=1326 audit(366.060:14416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.5.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 347.778732][ T2029] vlan2: entered allmulticast mode [ 347.843533][ T2031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.851227][ T2031] IPv6: NLM_F_CREATE should be set when creating new route [ 347.859248][ T2031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.866521][ T2031] IPv6: NLM_F_CREATE should be set when creating new route [ 348.055208][ T2051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.063873][ T2051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.073930][ T2051] netlink: 'syz.7.7490': attribute type 5 has an invalid length. [ 348.153072][ T2055] vlan0: entered allmulticast mode [ 348.158277][ T2055] dummy0: entered allmulticast mode [ 348.230435][ T2055] vlan0: entered allmulticast mode [ 348.921466][ T2119] vlan0: entered allmulticast mode [ 348.926626][ T2119] bridge_slave_0: entered allmulticast mode [ 348.979487][ T2123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.988425][ T2123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.045296][ T2123] netlink: 'syz.0.7521': attribute type 5 has an invalid length. [ 349.086922][ T2129] dummy0: entered promiscuous mode [ 349.098194][ T2129] macsec1: entered promiscuous mode [ 349.107948][ T2129] dummy0: left promiscuous mode [ 349.173654][ T2139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.182298][ T2139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.191394][ T2139] netlink: 'syz.7.7528': attribute type 5 has an invalid length. [ 349.498882][ T2152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.506190][ T2152] IPv6: NLM_F_CREATE should be set when creating new route [ 349.514763][ T2152] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.522051][ T2152] IPv6: NLM_F_CREATE should be set when creating new route [ 349.666414][ T2162] netlink: 'syz.0.7538': attribute type 13 has an invalid length. [ 349.830127][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.837561][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.969047][ T2162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.001009][ T2162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.184348][ T8088] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.195921][ T2166] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 350.218371][ T8088] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.256722][ T8088] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.280356][ T8088] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.306789][ T2191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.314147][ T2191] IPv6: NLM_F_CREATE should be set when creating new route [ 350.350231][ T2191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 350.357489][ T2191] IPv6: NLM_F_CREATE should be set when creating new route [ 350.606839][ T2210] vlan0: entered allmulticast mode [ 350.613258][ T2210] dummy0: entered allmulticast mode [ 350.666776][ T2210] vlan0: entered allmulticast mode [ 350.730070][ T2216] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 350.985634][ T2232] lo speed is unknown, defaulting to 1000 [ 350.998818][ T2232] lo speed is unknown, defaulting to 1000 [ 351.011263][ T2232] lo speed is unknown, defaulting to 1000 [ 351.019268][ T2232] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 351.032183][ T2232] lo speed is unknown, defaulting to 1000 [ 351.039516][ T2232] lo speed is unknown, defaulting to 1000 [ 351.046017][ T2232] lo speed is unknown, defaulting to 1000 [ 351.057055][ T2232] lo speed is unknown, defaulting to 1000 [ 351.076664][ T2232] lo speed is unknown, defaulting to 1000 [ 351.089975][ T2232] lo speed is unknown, defaulting to 1000 [ 351.277347][ T2242] IPv6: Can't replace route, no match found [ 351.390491][ T2246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.399635][ T2246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.409298][ T2246] __nla_validate_parse: 12 callbacks suppressed [ 351.409315][ T2246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7569'. [ 351.425687][ T2246] netlink: 'syz.3.7569': attribute type 5 has an invalid length. [ 351.633725][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 351.633792][ T29] audit: type=1400 audit(883.477:14556): avc: denied { bind } for pid=2261 comm="syz.1.7575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 351.686287][ T2265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7576'. [ 351.695763][ T2265] netlink: 'syz.1.7576': attribute type 5 has an invalid length. [ 351.716116][ T2267] lo speed is unknown, defaulting to 1000 [ 352.291314][ T2284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.300534][ T2284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.316364][ T2284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7585'. [ 352.327041][ T2284] netlink: 'syz.3.7585': attribute type 5 has an invalid length. [ 352.354580][ T29] audit: type=1400 audit(884.233:14557): avc: denied { sqpoll } for pid=2287 comm="syz.1.7587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 352.394926][ T2291] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 352.410224][ T2293] IPv6: Can't replace route, no match found [ 352.455547][ T29] audit: type=1400 audit(884.338:14558): avc: denied { bind } for pid=2297 comm="syz.1.7593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.475491][ T29] audit: type=1326 audit(884.348:14559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.5.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 352.495290][ T2299] netlink: 'syz.1.7593': attribute type 10 has an invalid length. [ 352.498477][ T29] audit: type=1326 audit(884.348:14560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.5.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 352.529441][ T29] audit: type=1400 audit(884.380:14561): avc: denied { setopt } for pid=2297 comm="syz.1.7593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.549627][ T29] audit: type=1326 audit(884.411:14562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.5.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 352.572607][ T29] audit: type=1326 audit(884.411:14563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.5.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 352.595681][ T29] audit: type=1326 audit(884.411:14564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.5.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 352.619059][ T29] audit: type=1326 audit(884.411:14565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2300 comm="syz.5.7591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 352.665083][ T2299] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 352.676880][ T2299] team0: Failed to send options change via netlink (err -105) [ 352.684478][ T2299] team0: Port device netdevsim1 added [ 352.913683][ T2318] lo speed is unknown, defaulting to 1000 [ 352.944367][ T2323] IPv6: Can't replace route, no match found [ 353.280701][ T2351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.290838][ T2351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.311840][ T2351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7614'. [ 353.328008][ T2351] netlink: 'syz.7.7614': attribute type 5 has an invalid length. [ 353.548560][ T2375] ip6t_srh: unknown srh match flags 4000 [ 353.555223][ T2375] 9pnet_fd: Insufficient options for proto=fd [ 353.585381][ T2477] macsec1: entered promiscuous mode [ 353.591025][ T2477] dummy0: entered promiscuous mode [ 353.598708][ T2477] dummy0: left promiscuous mode [ 353.631207][ T2481] pim6reg1: entered promiscuous mode [ 353.636627][ T2481] pim6reg1: entered allmulticast mode [ 353.760685][ T2488] netlink: 'syz.3.7629': attribute type 10 has an invalid length. [ 353.805793][ T2494] netlink: 'syz.0.7632': attribute type 30 has an invalid length. [ 353.940892][ T2509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.949457][ T2509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.959157][ T2509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7638'. [ 353.968100][ T2509] netlink: 'syz.5.7638': attribute type 5 has an invalid length. [ 354.091368][ T2517] ip6gre1: entered promiscuous mode [ 354.096687][ T2517] ip6gre1: entered allmulticast mode [ 354.106062][ T2517] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 354.272422][ T2524] macsec1: entered promiscuous mode [ 354.277772][ T2524] dummy0: entered promiscuous mode [ 354.283920][ T2524] dummy0: left promiscuous mode [ 355.500008][ T2563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.519043][ T2563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.546037][ T2563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7659'. [ 355.585814][ T2563] netlink: 'syz.5.7659': attribute type 5 has an invalid length. [ 355.684012][ T2570] ip6gre3: entered promiscuous mode [ 355.689434][ T2570] ip6gre3: entered allmulticast mode [ 355.741071][ T2570] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 355.968780][ T2592] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7672'. [ 356.462643][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 356.462661][ T29] audit: type=1400 audit(888.548:14692): avc: denied { create } for pid=2602 comm="syz.3.7678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 356.563602][ T2613] netlink: 'syz.3.7681': attribute type 30 has an invalid length. [ 356.679179][ T2626] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7685'. [ 356.814064][ T29] audit: type=1326 audit(888.915:14693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 356.837232][ T29] audit: type=1326 audit(888.915:14694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 356.894683][ T29] audit: type=1326 audit(888.967:14695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 356.917649][ T29] audit: type=1326 audit(888.967:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 356.940564][ T29] audit: type=1326 audit(888.967:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 356.963788][ T29] audit: type=1326 audit(888.967:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 356.986781][ T29] audit: type=1326 audit(888.967:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 357.009969][ T29] audit: type=1326 audit(888.967:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 357.032875][ T29] audit: type=1326 audit(888.967:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2636 comm="syz.3.7688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 357.432094][ T2763] netlink: 'syz.7.7697': attribute type 30 has an invalid length. [ 357.530866][ T2772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.539714][ T2772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.548847][ T2772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7702'. [ 357.558046][ T2772] netlink: 'syz.3.7702': attribute type 5 has an invalid length. [ 357.701945][ T2770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.710574][ T2770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.912590][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.958962][ T2778] netlink: 'syz.5.7705': attribute type 5 has an invalid length. [ 357.971465][ T2778] batman_adv: batadv0: Adding interface: vxlan0 [ 357.977782][ T2778] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 357.999728][ T2778] batman_adv: batadv0: Interface activated: vxlan0 [ 358.007501][ T8088] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.017083][ T8088] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.025896][ T8088] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.034843][ T8088] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.270117][ T2794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.284812][ T2794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.345293][ T2794] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7713'. [ 358.366808][ T2794] netlink: 'syz.7.7713': attribute type 5 has an invalid length. [ 359.741191][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 359.770576][ T2876] netlink: 'syz.7.7748': attribute type 10 has an invalid length. [ 359.792049][ T2876] team0: Port device dummy0 added [ 359.888335][ T2881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.897158][ T2881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.917755][ T2881] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7750'. [ 359.936907][ T2881] netlink: 'syz.7.7750': attribute type 5 has an invalid length. [ 360.333680][ T2897] geneve0: entered allmulticast mode [ 360.736881][ T8088] Bluetooth: hci0: Frame reassembly failed (-84) [ 361.136179][ T2960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7780'. [ 361.146748][ T2960] netlink: 'syz.1.7780': attribute type 5 has an invalid length. [ 361.227184][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 361.227204][ T29] audit: type=1326 audit(893.545:14849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.274752][ T29] audit: type=1326 audit(893.597:14850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.298011][ T29] audit: type=1326 audit(893.597:14851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.321124][ T29] audit: type=1326 audit(893.597:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.344236][ T29] audit: type=1326 audit(893.597:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.367561][ T29] audit: type=1326 audit(893.597:14854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.451714][ T29] audit: type=1326 audit(893.723:14855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.474767][ T29] audit: type=1326 audit(893.723:14856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.7781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb72a41efc9 code=0x7ffc0000 [ 361.784173][ T3081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3081 comm=syz.3.7785 [ 362.468295][ T29] audit: type=1400 audit(894.857:14857): avc: denied { connect } for pid=3202 comm="syz.0.7793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 362.509488][ T3206] netlink: 'syz.3.7794': attribute type 4 has an invalid length. [ 362.533624][ T2181] lo speed is unknown, defaulting to 1000 [ 362.539452][ T2181] syz2: Port: 1 Link DOWN [ 362.550181][ T3206] netlink: 'syz.3.7794': attribute type 4 has an invalid length. [ 362.572409][ T2181] lo speed is unknown, defaulting to 1000 [ 362.578230][ T2181] syz2: Port: 1 Link ACTIVE [ 362.722657][ T3682] Bluetooth: hci0: command 0x1003 tx timeout [ 362.728770][T10619] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 362.743137][ T3217] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 362.744833][ T29] audit: type=1400 audit(895.130:14858): avc: denied { append } for pid=3216 comm="syz.3.7799" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 363.135320][ T3235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7808'. [ 363.185910][ T3235] bridge_slave_1: left allmulticast mode [ 363.191868][ T3235] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.219634][ T3235] bridge_slave_0: left promiscuous mode [ 363.225373][ T3235] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.278111][ T3235] bridge0 (unregistering): left allmulticast mode [ 363.534429][ T3251] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7814'. [ 363.598672][ T3240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7810'. [ 363.768257][ T3264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7821'. [ 364.005171][ T3286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.014302][ T3286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.026018][ T3286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7831'. [ 364.035528][ T3286] netlink: 'syz.7.7831': attribute type 5 has an invalid length. [ 364.285452][ T3304] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7837'. [ 364.377885][ T3312] hub 6-0:1.0: USB hub found [ 364.387563][ T3312] hub 6-0:1.0: 8 ports detected [ 364.782813][ T3337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7850'. [ 364.845777][ T3345] netlink: 87 bytes leftover after parsing attributes in process `syz.5.7853'. [ 364.902029][ T3351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.914015][ T3351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.970015][ T3351] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7856'. [ 364.991611][ T3351] netlink: 'syz.5.7856': attribute type 5 has an invalid length. [ 365.301779][ T3379] IPv6: Can't replace route, no match found [ 365.434691][ T3389] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7869'. [ 365.773136][ T3431] netlink: 'syz.1.7884': attribute type 5 has an invalid length. [ 365.811885][ T3432] team1: entered promiscuous mode [ 365.816962][ T3432] team1: entered allmulticast mode [ 365.827327][ T3432] 8021q: adding VLAN 0 to HW filter on device team1 [ 365.882435][ T3437] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 365.890744][ T3437] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 365.923273][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.950192][ T3441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.959177][ T3441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.968752][ T3441] netlink: 'syz.3.7889': attribute type 5 has an invalid length. [ 366.063214][ T3449] xt_connbytes: Forcing CT accounting to be enabled [ 366.070690][ T3449] Cannot find set identified by id 0 to match [ 366.428487][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 366.428571][ T29] audit: type=1400 audit(899.014:14902): avc: denied { ioctl } for pid=3457 comm="syz.5.7906" path="socket:[86545]" dev="sockfs" ino=86545 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 366.583839][ T29] audit: type=1400 audit(899.171:14903): avc: denied { connect } for pid=3468 comm="syz.3.7899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.748234][ T3477] hub 6-0:1.0: USB hub found [ 366.756003][ T3477] hub 6-0:1.0: 8 ports detected [ 366.938689][ T3495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.947411][ T3495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.956859][ T3495] netlink: 'syz.0.7910': attribute type 5 has an invalid length. [ 367.525347][ T2181] page_pool_release_retry() stalled pool shutdown: id 114, 1 inflight 60 sec [ 367.742851][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 368.003661][ T3529] __nla_validate_parse: 8 callbacks suppressed [ 368.003682][ T3529] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7925'. [ 368.028920][ T3531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3531 comm=syz.0.7926 [ 368.082503][ T3534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7928'. [ 368.091858][ T3534] netlink: 'syz.1.7928': attribute type 5 has an invalid length. [ 368.133237][ T2181] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 60 sec [ 368.355446][ T29] audit: type=1400 audit(901.030:14904): avc: denied { accept } for pid=3540 comm="syz.0.7931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.394496][ T29] audit: type=1400 audit(901.030:14905): avc: denied { read } for pid=3540 comm="syz.0.7931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 368.450553][ T3545] $Hÿ: renamed from .` [ 368.462404][ T3545] $Hÿ: entered promiscuous mode [ 368.467497][ T3545] bond_slave_0: entered promiscuous mode [ 368.473231][ T3545] bond_slave_1: entered promiscuous mode [ 368.612079][ T3557] tipc: Started in network mode [ 368.617136][ T3557] tipc: Node identity 2205e2e5c2df, cluster identity 4711 [ 368.624458][ T3557] tipc: Enabled bearer , priority 0 [ 368.633596][ T3556] tipc: Resetting bearer [ 368.656463][ T29] audit: type=1326 audit(901.345:14906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3560 comm="syz.3.7941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb72a41efc9 code=0x0 [ 368.667939][ T3556] tipc: Disabling bearer [ 368.888937][ T3575] lo speed is unknown, defaulting to 1000 [ 368.907808][ T3579] wg2: entered promiscuous mode [ 368.912793][ T3579] wg2: entered allmulticast mode [ 368.993773][ T3584] bridge: RTM_NEWNEIGH with invalid ether address [ 369.028990][ T3587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7951'. [ 369.148003][ T3596] tipc: Started in network mode [ 369.152955][ T3596] tipc: Node identity 0e1a30aeb781, cluster identity 4711 [ 369.160226][ T3596] tipc: Enabled bearer , priority 0 [ 369.169147][ T3595] tipc: Resetting bearer [ 369.212067][ T3595] tipc: Disabling bearer [ 369.693799][ T3610] wg2: entered promiscuous mode [ 369.698810][ T3610] wg2: entered allmulticast mode [ 370.028060][ T29] audit: type=1326 audit(902.783:14907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3734 comm="syz.5.7971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f468f5aefc9 code=0x0 [ 370.420562][ T3848] wg2: entered promiscuous mode [ 370.425500][ T3848] wg2: entered allmulticast mode [ 370.484307][ T3854] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.557452][ T3854] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.587517][ T29] audit: type=1400 audit(903.371:14908): avc: denied { listen } for pid=3955 comm="syz.7.7982" lport=51851 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 370.624433][ T29] audit: type=1400 audit(903.402:14909): avc: denied { setopt } for pid=3955 comm="syz.7.7982" lport=51851 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 370.647613][ T29] audit: type=1400 audit(903.402:14910): avc: denied { write } for pid=3955 comm="syz.7.7982" lport=51851 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 370.682690][ T3854] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.741867][ T3854] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.784782][ T3966] pimreg: entered allmulticast mode [ 370.791211][ T3966] pimreg: left allmulticast mode [ 370.823823][ T8147] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.841096][ T8147] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.854460][ T8147] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.876854][ T8147] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.100322][ T3985] wg2: entered promiscuous mode [ 371.105243][ T3985] wg2: entered allmulticast mode [ 371.161132][ T29] audit: type=1400 audit(903.875:14911): avc: denied { getopt } for pid=3982 comm="syz.3.7993" lport=50839 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 371.412696][ T4107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.430583][ T4107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.449480][ T4107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8004'. [ 371.459012][ T4107] netlink: 'syz.0.8004': attribute type 5 has an invalid length. [ 372.169293][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 372.169308][ T29] audit: type=1326 audit(905.029:14913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 372.198434][ T29] audit: type=1326 audit(905.029:14914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 372.274121][ T29] audit: type=1326 audit(905.113:14915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 372.297123][ T29] audit: type=1326 audit(905.113:14916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 372.320068][ T29] audit: type=1326 audit(905.113:14917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 372.363351][ T29] audit: type=1326 audit(905.239:14918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 372.386356][ T29] audit: type=1326 audit(905.239:14919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.8015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 372.469543][ T4347] tipc: Failed to remove unknown binding: 66,1,1/0:3014911837/3014911839 [ 372.503560][ T4347] tipc: Failed to remove unknown binding: 66,1,1/0:3014911837/3014911839 [ 372.574574][ T29] audit: type=1400 audit(905.460:14920): avc: denied { override_creds } for pid=4405 comm="syz.5.8032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 373.049747][ T4674] wg2: entered promiscuous mode [ 373.054829][ T4674] wg2: entered allmulticast mode [ 373.865310][ T4690] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8037'. [ 373.984357][ T4695] netlink: 'syz.0.8039': attribute type 7 has an invalid length. [ 373.992248][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8039'. [ 374.003456][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8040'. [ 374.145616][ T29] audit: type=1326 audit(907.118:14921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4705 comm="syz.0.8045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f197102efc9 code=0x0 [ 374.191353][ T29] audit: type=1404 audit(907.139:14922): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 374.417997][ T4816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.427499][ T4816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.439931][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8059'. [ 374.450559][ T4816] netlink: 'syz.5.8059': attribute type 5 has an invalid length. [ 374.471314][ T4819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8050'. [ 374.581936][ T4830] netlink: 'syz.1.8054': attribute type 7 has an invalid length. [ 374.589826][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8054'. [ 374.873624][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8062'. [ 374.882837][ T4942] netlink: 'syz.1.8062': attribute type 5 has an invalid length. [ 375.242085][ T5056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8068'. [ 375.281729][ T5058] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.301079][ T5064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8071'. [ 375.338361][ T5058] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.358375][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8081'. [ 375.386346][ T5068] team2: entered promiscuous mode [ 375.391443][ T5068] team2: entered allmulticast mode [ 375.396725][ T5068] 8021q: adding VLAN 0 to HW filter on device team2 [ 375.407211][ T5058] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.451911][ T5058] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.505713][ T8145] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.523173][ T8145] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.555217][ T8145] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.572512][ T8145] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.593746][ T5075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.623891][ T5075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.671398][ T5075] netlink: 'syz.5.8084': attribute type 5 has an invalid length. [ 376.119142][ T5233] veth2: entered promiscuous mode [ 376.124226][ T5233] veth2: entered allmulticast mode [ 376.288183][ T5337] netlink: 'syz.0.8090': attribute type 4 has an invalid length. [ 376.393051][ T5352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.422355][ T5352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.434442][ T5352] netlink: 'syz.3.8097': attribute type 5 has an invalid length. [ 376.469577][ T5359] veth2: entered promiscuous mode [ 376.474718][ T5359] veth2: entered allmulticast mode [ 376.935314][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 376.935331][ T29] audit: type=1400 audit(910.047:15001): avc: denied { create } for pid=5378 comm="syz.7.8108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.966239][ T29] audit: type=1400 audit(910.068:15002): avc: denied { read } for pid=5378 comm="syz.7.8108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 377.163862][ T29] audit: type=1400 audit(910.289:15003): avc: denied { execute } for pid=5386 comm="syz.7.8110" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=88540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 377.284140][ T5508] veth2: entered promiscuous mode [ 377.289337][ T5508] veth2: entered allmulticast mode [ 377.330227][ T29] audit: type=1326 audit(910.457:15004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.8117" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f197102efc9 code=0x0 [ 377.353629][ T5514] Cannot find add_set index 2 as target [ 377.362598][ T29] audit: type=1400 audit(910.478:15005): avc: denied { setopt } for pid=5512 comm="syz.3.8116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 377.381867][ T29] audit: type=1400 audit(910.488:15006): avc: denied { create } for pid=5510 comm="syz.7.8115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.404138][ T29] audit: type=1400 audit(910.530:15007): avc: denied { write } for pid=5510 comm="syz.7.8115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.423240][ T29] audit: type=1400 audit(910.530:15008): avc: denied { connect } for pid=5510 comm="syz.7.8115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.442438][ T29] audit: type=1400 audit(910.530:15009): avc: denied { name_connect } for pid=5510 comm="syz.7.8115" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 377.464998][ T29] audit: type=1400 audit(910.604:15010): avc: denied { setopt } for pid=5510 comm="syz.7.8115" laddr=172.20.20.11 lport=37485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 377.493370][ T5525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.503110][ T5525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.512629][ T5525] netlink: 'syz.3.8122': attribute type 5 has an invalid length. [ 377.765519][ T5539] netlink: 'syz.7.8128': attribute type 4 has an invalid length. [ 377.939053][ T5552] lo speed is unknown, defaulting to 1000 [ 378.487363][ T5673] block device autoloading is deprecated and will be removed. [ 378.635097][ T5681] __nla_validate_parse: 3 callbacks suppressed [ 378.635157][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8145'. [ 378.858483][ T5563] Set syz1 is full, maxelem 65536 reached [ 378.951191][ T5695] lo speed is unknown, defaulting to 1000 [ 379.231304][ T5807] loop7: detected capacity change from 0 to 136 [ 379.799305][ T5946] netlink: 'syz.7.8170': attribute type 4 has an invalid length. [ 379.921532][ T5982] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 380.258220][ T6181] loop7: detected capacity change from 0 to 2048 [ 380.281571][ T6185] veth4: entered promiscuous mode [ 380.286651][ T6185] veth4: entered allmulticast mode [ 380.294301][ T6181] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.331651][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.378277][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.386925][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.397943][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8188'. [ 380.407534][ T6192] netlink: 'syz.7.8188': attribute type 5 has an invalid length. [ 380.536300][ T6297] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 380.537629][ T6296] IPVS: stopping master sync thread 6297 ... [ 380.899480][ T36] kernel read not supported for file /vcs (pid: 36 comm: kworker/1:1) [ 381.024358][ T6515] loop7: detected capacity change from 0 to 128 [ 381.153420][ T6523] binfmt_misc: register: failed to install interpreter file ./file2 [ 381.389586][ T6529] loop7: detected capacity change from 0 to 512 [ 381.404984][ T6529] EXT4-fs: Ignoring removed oldalloc option [ 381.425435][ T6529] EXT4-fs (loop7): 1 truncate cleaned up [ 381.437198][ T6529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.534070][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.611030][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8209'. [ 381.621022][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8209'. [ 381.729355][ T6550] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 381.764395][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 381.974754][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8220'. [ 382.011218][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 382.011234][ T29] audit: type=1400 audit(915.359:15112): avc: denied { name_connect } for pid=6565 comm="syz.0.8219" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 382.055161][ T29] audit: type=1400 audit(915.359:15113): avc: denied { accept } for pid=6565 comm="syz.0.8219" lport=53239 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 382.148048][ T6574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.156636][ T6574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.165916][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8224'. [ 382.175028][ T6574] netlink: 'syz.0.8224': attribute type 5 has an invalid length. [ 382.504350][ T29] audit: type=1326 audit(915.884:15114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.527413][ T29] audit: type=1326 audit(915.884:15115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.596247][ T6789] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 382.597714][ T29] audit: type=1326 audit(915.937:15116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.607159][ T6793] netlink: 'syz.5.8229': attribute type 10 has an invalid length. [ 382.626737][ T29] audit: type=1326 audit(915.937:15117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.657451][ T29] audit: type=1326 audit(915.937:15118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.669582][ T6793] team0: Port device dummy0 added [ 382.680394][ T29] audit: type=1326 audit(915.937:15119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.708289][ T29] audit: type=1326 audit(915.937:15120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.731283][ T29] audit: type=1326 audit(915.937:15121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6784 comm="syz.7.8230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4d7fefc9 code=0x7ffc0000 [ 382.754395][ T6797] netlink: 'syz.5.8229': attribute type 10 has an invalid length. [ 382.762951][ T6797] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 382.775193][ T6797] team0: Failed to send options change via netlink (err -105) [ 382.810501][ T6797] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 382.820435][ T6797] team0: Port device dummy0 removed [ 382.828544][ T6797] dummy0: entered promiscuous mode [ 382.834525][ T6797] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 382.960797][ T6812] block device autoloading is deprecated and will be removed. [ 383.020630][ T6819] SELinux: failed to load policy [ 383.080846][ T6832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.098569][ T6832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.115618][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8249'. [ 383.126096][ T6832] netlink: 'syz.3.8249': attribute type 5 has an invalid length. [ 383.137625][ T6833] lo speed is unknown, defaulting to 1000 [ 383.228466][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8247'. [ 383.237951][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8247'. [ 383.247274][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8247'. [ 383.351146][ T6843] tipc: Enabled bearer , priority 0 [ 383.359113][ T6842] tipc: Resetting bearer [ 383.391353][ T6842] tipc: Disabling bearer [ 383.593345][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 383.720783][ T6881] netlink: 'syz.5.8266': attribute type 10 has an invalid length. [ 383.756902][ T6881] batadv0: left promiscuous mode [ 383.762001][ T6881] bridge0: port 3(batadv0) entered disabled state [ 383.774996][ T6949] netlink: 'syz.5.8266': attribute type 10 has an invalid length. [ 383.782876][ T6949] __nla_validate_parse: 77 callbacks suppressed [ 383.782894][ T6949] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8266'. [ 383.807504][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.823631][ T6881] batadv0: entered promiscuous mode [ 383.837034][ T6881] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 383.864946][ T6949] $Hÿ: (slave batadv0): Releasing backup interface [ 383.925757][ T6949] bridge0: port 3(batadv0) entered blocking state [ 383.932336][ T6949] bridge0: port 3(batadv0) entered disabled state [ 384.205979][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8275'. [ 384.225918][ T7102] netlink: 'syz.1.8275': attribute type 5 has an invalid length. [ 384.694218][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a0c2600: rx timeout, send abort [ 384.711208][ T7234] loop0: detected capacity change from 0 to 512 [ 384.782571][ T7234] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 384.803638][ T7234] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.8287: Invalid block bitmap block 0 in block_group 0 [ 384.820482][ T7234] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 384.830063][ T7234] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.8287: attempt to clear invalid blocks 983261 len 1 [ 384.854326][ T7234] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.8287: Invalid inode table block 0 in block_group 0 [ 384.877395][ T7234] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 384.890940][ T7234] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 384.900503][ T7234] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.8287: Invalid inode table block 0 in block_group 0 [ 384.923003][ T7234] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 384.934217][ T7234] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.8287: mark_inode_dirty error [ 384.945964][ T7234] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 384.955298][ T7234] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.8287: Invalid inode table block 0 in block_group 0 [ 384.968720][ T7234] EXT4-fs (loop0): 1 truncate cleaned up [ 384.975448][ T7234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.025149][T29622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.129342][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.138583][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.150687][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8301'. [ 385.170335][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a0c2c00: rx timeout, send abort [ 385.170754][ T7363] netlink: 'syz.5.8301': attribute type 5 has an invalid length. [ 385.178830][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a0c2600: abort rx timeout. Force session deactivation [ 385.208470][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.217509][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.226941][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8302'. [ 385.237097][ T7432] netlink: 'syz.0.8302': attribute type 5 has an invalid length. [ 385.372171][ T7471] syzkaller0: entered promiscuous mode [ 385.377777][ T7471] syzkaller0: entered allmulticast mode [ 385.647160][ C0] vcan0: j1939_tp_rxtimer: 0xffff888166bcd400: rx timeout, send abort [ 385.655063][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a0c2c00: abort rx timeout. Force session deactivation [ 385.948031][ T7711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.957027][ T7711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.966709][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8322'. [ 385.975781][ T7711] netlink: 'syz.3.8322': attribute type 5 has an invalid length. [ 386.045529][ T7715] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 386.115652][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.124374][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.131971][ C0] vcan0: j1939_tp_rxtimer: 0xffff888166bcd400: abort rx timeout. Force session deactivation [ 386.134518][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8325'. [ 386.151399][ T7717] netlink: 'syz.0.8325': attribute type 5 has an invalid length. [ 386.169841][ T7719] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8326'. [ 386.190023][ T7719] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7719 comm=syz.7.8326 [ 386.330171][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8327'. [ 386.541314][ T2181] syz1: Port: 1 Link DOWN [ 386.559234][ T7738] loop7: detected capacity change from 0 to 1024 [ 386.566625][ T7738] EXT4-fs: Ignoring removed orlov option [ 386.592584][ T7738] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.629826][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.785767][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 386.785788][ T29] audit: type=1326 audit(920.388:15296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 386.835288][ T29] audit: type=1326 audit(920.409:15297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 386.858220][ T29] audit: type=1326 audit(920.409:15298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 386.881287][ T29] audit: type=1326 audit(920.409:15299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 386.904281][ T29] audit: type=1326 audit(920.409:15300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 386.927207][ T29] audit: type=1326 audit(920.409:15301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 386.950279][ T29] audit: type=1326 audit(920.409:15302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 386.973217][ T29] audit: type=1326 audit(920.409:15303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7759 comm="syz.5.8345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 387.010557][ T7768] netlink: 'syz.1.8348': attribute type 10 has an invalid length. [ 387.019783][ T29] audit: type=1400 audit(920.629:15304): avc: denied { append } for pid=7765 comm="syz.5.8347" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 387.030457][ T7768] batadv0: entered allmulticast mode [ 387.062180][ T7769] netlink: 'syz.1.8348': attribute type 10 has an invalid length. [ 387.063637][ T7768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.070033][ T7769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8348'. [ 387.079058][ T29] audit: type=1400 audit(920.629:15305): avc: denied { read } for pid=7765 comm="syz.5.8347" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 387.142623][ T7768] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 387.151897][ T7769] batadv0: entered promiscuous mode [ 387.161746][ T7769] bond0: (slave batadv0): Releasing backup interface [ 387.180424][ T7775] loop7: detected capacity change from 0 to 1024 [ 387.188224][ T7775] EXT4-fs: inline encryption not supported [ 387.196619][ T7769] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 387.219759][ T7775] EXT4-fs (loop7): orphan cleanup on readonly fs [ 387.227802][ T7775] EXT4-fs (loop7): 1 truncate cleaned up [ 387.237137][ T7775] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.255262][ T7775] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.267629][ T7784] team0: Port device team_slave_0 removed [ 387.475471][ T7815] lo speed is unknown, defaulting to 1000 [ 387.568535][ T7820] netlink: 'syz.3.8370': attribute type 10 has an invalid length. [ 387.579444][ T7820] netlink: 'syz.3.8370': attribute type 10 has an invalid length. [ 387.588889][ T7820] dummy0: entered promiscuous mode [ 387.594698][ T7820] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 387.739459][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8374'. [ 387.816252][ T7832] loop0: detected capacity change from 0 to 512 [ 387.824768][ T7832] EXT4-fs (loop0): orphan cleanup on readonly fs [ 387.831763][ T7832] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm +}[@: bad orphan inode 13 [ 387.841710][ T7832] ext4_test_bit(bit=12, block=18) = 1 [ 387.847121][ T7832] is_bad_inode(inode)=0 [ 387.851290][ T7832] NEXT_ORPHAN(inode)=2130706432 [ 387.856201][ T7832] max_ino=32 [ 387.859412][ T7832] i_nlink=1 [ 387.864134][ T7832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 387.890538][ T7832] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 387.909431][ T7832] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 387.924115][ T7832] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm +}[@: Failed to acquire dquot type 1 [ 387.935368][ T7832] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 387.970302][ T7943] loop7: detected capacity change from 0 to 128 [ 387.978451][T29622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.992948][ T7943] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 388.000946][ T7943] FAT-fs (loop7): Filesystem has been set read-only [ 388.007929][ T7943] syz.7.8378: attempt to access beyond end of device [ 388.007929][ T7943] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 388.478217][ T8244] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 388.488239][ T8248] loop7: detected capacity change from 0 to 1024 [ 388.513103][ T8248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.579212][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.608605][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.610801][ T8248] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm wÞ£ÿ: Allocating blocks 449-513 which overlap fs metadata [ 388.645169][ T8247] EXT4-fs (loop7): pa ffff888100760d90: logic 48, phys. 177, len 21 [ 388.653261][ T8247] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 388.665076][ T8254] __nla_validate_parse: 2 callbacks suppressed [ 388.665090][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8399'. [ 388.680471][ T8254] netlink: 'syz.3.8399': attribute type 5 has an invalid length. [ 388.704348][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.241703][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8414'. [ 389.439311][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8419'. [ 389.733181][ T8525] veth6: entered promiscuous mode [ 389.738444][ T8525] veth6: entered allmulticast mode [ 389.933585][ T8532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 390.464377][ T8778] netlink: 156 bytes leftover after parsing attributes in process `syz.7.8453'. [ 390.640065][ T8900] Cannot find add_set index 2 as target [ 390.666825][ T8902] pim6reg1: entered promiscuous mode [ 390.672277][ T8902] pim6reg1: entered allmulticast mode [ 390.742336][ T9004] lo speed is unknown, defaulting to 1000 [ 391.118128][ T9120] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8461'. [ 391.265426][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8466'. [ 391.291272][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8466'. [ 391.385408][ T9138] netlink: 'syz.7.8469': attribute type 12 has an invalid length. [ 391.555437][ T9153] lo speed is unknown, defaulting to 1000 [ 391.850236][ T9166] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.924690][ T9166] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.935519][ T9176] usb usb5: usbfs: process 9176 (syz.3.8487) did not claim interface 0 before use [ 392.002105][ T9183] lo speed is unknown, defaulting to 1000 [ 392.009897][ T9166] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.065173][ T9166] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.152394][ T8118] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.169366][ T8118] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.186811][ T8118] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.226372][ T8118] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.488950][ T9406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.501440][ T9408] block device autoloading is deprecated and will be removed. [ 392.511272][ T9406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.531180][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8496'. [ 392.553723][ T9406] netlink: 'syz.3.8496': attribute type 5 has an invalid length. [ 392.569055][ T9410] loop0: detected capacity change from 0 to 1024 [ 392.598018][ T9410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.641839][ T9410] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm wÞ£ÿ: Allocating blocks 449-513 which overlap fs metadata [ 392.676423][ T9409] EXT4-fs (loop0): pa ffff888100616620: logic 48, phys. 177, len 21 [ 392.684504][ T9409] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 392.719649][T29622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.292733][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 393.292751][ T29] audit: type=1400 audit(927.212:15382): avc: denied { read } for pid=9419 comm="syz.5.8500" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 393.322644][ T29] audit: type=1400 audit(927.212:15383): avc: denied { open } for pid=9419 comm="syz.5.8500" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 393.355020][ T29] audit: type=1400 audit(927.275:15384): avc: denied { ioctl } for pid=9419 comm="syz.5.8500" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 393.384619][ T29] audit: type=1400 audit(927.306:15385): avc: denied { read write } for pid=9421 comm="syz.7.8501" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 393.407927][ T29] audit: type=1400 audit(927.306:15386): avc: denied { open } for pid=9421 comm="syz.7.8501" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 393.441885][ T29] audit: type=1400 audit(927.306:15387): avc: denied { read } for pid=9421 comm="syz.7.8501" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 393.464149][ T29] audit: type=1400 audit(927.306:15388): avc: denied { open } for pid=9421 comm="syz.7.8501" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 393.569522][ T9539] syzkaller0: entered promiscuous mode [ 393.575056][ T9539] syzkaller0: entered allmulticast mode [ 393.638552][ T29] audit: type=1400 audit(927.579:15389): avc: denied { watch watch_reads } for pid=9544 comm="syz.3.8511" path="/1914" dev="tmpfs" ino=9891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 393.666551][ T9543] loop7: detected capacity change from 0 to 4096 [ 393.674444][ T9543] EXT4-fs: Ignoring removed nomblk_io_submit option [ 393.683466][ T9543] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.703802][ T29] audit: type=1400 audit(927.642:15390): avc: denied { append } for pid=9542 comm="syz.7.8508" path="/403/file0/blkio.bfq.io_service_time_recursive" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 393.738443][ T29] audit: type=1400 audit(927.674:15391): avc: denied { map } for pid=9542 comm="syz.7.8508" path="/403/file0/blkio.bfq.io_service_time_recursive" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 393.872011][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.912538][ T9659] syzkaller0: entered promiscuous mode [ 393.918151][ T9659] syzkaller0: entered allmulticast mode [ 393.951119][ T9659] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.037412][ T9663] loop7: detected capacity change from 0 to 1024 [ 394.044282][ T9663] EXT4-fs: Ignoring removed bh option [ 394.050490][ T9663] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 394.071995][ T9663] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.084413][ T9613] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8516'. [ 394.112982][ T9613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8516'. [ 394.129452][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.239044][ T9675] lo speed is unknown, defaulting to 1000 [ 394.776284][ T9858] syzkaller0: entered promiscuous mode [ 394.781904][ T9858] syzkaller0: entered allmulticast mode [ 394.808209][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8535'. [ 394.817160][ T9873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8535'. [ 394.925109][ T9979] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.011680][ T9979] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.069185][ T9994] netlink: 'syz.3.8542': attribute type 12 has an invalid length. [ 395.082320][ T9996] ip6gre3: entered promiscuous mode [ 395.087573][ T9996] ip6gre3: entered allmulticast mode [ 395.094192][ T8106] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 395.101946][ T8106] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 395.119924][ T2183] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 395.134863][T10000] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 395.144056][ T9979] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.215845][ T9979] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.276469][T10019] smc: net device bond0 applied user defined pnetid SYZ0 [ 395.299977][T10019] smc: net device bond0 erased user defined pnetid SYZ0 [ 395.310168][ T8094] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.318452][ T8094] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.339318][ T8094] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.357632][ T8094] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.415526][T10088] loop7: detected capacity change from 0 to 512 [ 395.422207][T10088] EXT4-fs: Ignoring removed i_version option [ 395.428279][T10088] EXT4-fs: Ignoring removed bh option [ 395.465219][T10088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.529695][ T3420] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 395.547555][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.568086][T10144] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 395.719418][T10161] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.745159][T10166] syzkaller0: entered promiscuous mode [ 395.750856][T10166] syzkaller0: entered allmulticast mode [ 395.775565][T10161] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.806812][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 395.824871][ T36] IPVS: starting estimator thread 0... [ 395.837599][T10161] team0: Port device netdevsim1 removed [ 395.845765][T10161] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.872245][ T3420] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 395.913289][T10161] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.929238][T10181] IPVS: using max 1872 ests per chain, 93600 per kthread [ 395.989050][ T8094] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.004010][ T8094] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.032450][T10289] lo speed is unknown, defaulting to 1000 [ 396.038803][ T8094] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.048010][T10290] syzkaller1: entered promiscuous mode [ 396.053584][T10290] syzkaller1: entered allmulticast mode [ 396.062543][ T8094] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.409725][T10528] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.483021][T10528] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.532919][T10528] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.569160][T10528] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.623597][ T8116] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.645454][ T8116] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.656375][ T8116] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.665690][ T8116] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.679253][T10639] macvlan1: entered promiscuous mode [ 396.685707][T10639] ipvlan0: entered promiscuous mode [ 396.691871][T10639] ipvlan0: left promiscuous mode [ 396.697184][T10639] macvlan1: left promiscuous mode [ 396.704298][T10641] smc: net device bond0 applied user defined pnetid SYZ0 [ 396.715293][T10641] smc: net device bond0 erased user defined pnetid SYZ0 [ 396.743165][T10643] syzkaller0: entered promiscuous mode [ 396.748706][T10643] syzkaller0: entered allmulticast mode [ 396.825316][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.833911][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.871158][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8606'. [ 396.945916][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8609'. [ 396.954895][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8609'. [ 397.033599][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.053519][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.127340][T10664] netlink: 'syz.1.8612': attribute type 12 has an invalid length. [ 397.289836][T10666] ------------[ cut here ]------------ [ 397.295405][T10666] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 397.319327][T10666] WARNING: CPU: 0 PID: 10666 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 397.329884][T10666] Modules linked in: [ 397.333887][T10666] CPU: 0 UID: 0 PID: 10666 Comm: syz.1.8613 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 397.345377][T10666] Tainted: [W]=WARN [ 397.349232][T10666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 397.359364][T10666] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 397.365722][T10666] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 c2 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 397.385413][T10666] RSP: 0018:ffffc900018a3408 EFLAGS: 00010282 [ 397.391623][T10666] RAX: eff6d7c921c51400 RBX: ffff8881b6837190 RCX: 0000000000080000 [ 397.399768][T10666] RDX: ffffc9000d626000 RSI: 000000000000ffc3 RDI: 000000000000ffc4 [ 397.407800][T10666] RBP: fffffffe00000030 R08: 0001c900018a3257 R09: 0000000000000000 [ 397.415845][T10666] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881b6837150 [ 397.423990][T10666] R13: ffff8881688c8000 R14: ffff8881688c8000 R15: ffff8881b6837188 [ 397.432688][T10666] FS: 00007f787d4cf6c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 397.441688][T10666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.448373][T10666] CR2: 0000000000000000 CR3: 00000001928d6000 CR4: 00000000003506f0 [ 397.456385][T10666] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 397.464447][T10666] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 397.472457][T10666] Call Trace: [ 397.475753][T10666] [ 397.478714][T10666] reg_set_min_max+0x215/0x260 [ 397.483581][T10666] check_cond_jmp_op+0x1370/0x19e0 [ 397.488911][T10666] do_check+0x3363/0x8460 [ 397.493374][T10666] ? do_check_common+0x1e1/0x12b0 [ 397.498429][T10666] do_check_common+0xc5e/0x12b0 [ 397.503371][T10666] bpf_check+0xaaae/0xd9d0 [ 397.507963][T10666] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 397.514042][T10666] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 397.519988][T10666] ? css_rstat_updated+0xb7/0x240 [ 397.525102][T10666] ? try_charge_memcg+0x215/0xa10 [ 397.530172][T10666] ? pcpu_block_update+0x24e/0x3b0 [ 397.535333][T10666] ? pcpu_block_refresh_hint+0x157/0x170 [ 397.541490][T10666] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 397.550487][T10666] ? css_rstat_updated+0xb7/0x240 [ 397.555599][T10666] ? __rcu_read_unlock+0x4f/0x70 [ 397.560713][T10666] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 397.566549][T10666] ? bpf_prog_alloc+0x5b/0x150 [ 397.571436][T10666] ? pcpu_alloc_noprof+0xd29/0x1250 [ 397.576674][T10666] ? should_fail_ex+0x30/0x280 [ 397.581493][T10666] ? should_failslab+0x8c/0xb0 [ 397.586293][T10666] ? __kmalloc_noprof+0x2a2/0x570 [ 397.591413][T10666] ? security_bpf_prog_load+0x60/0x140 [ 397.596965][T10666] ? selinux_bpf_prog_load+0xad/0xd0 [ 397.602301][T10666] ? security_bpf_prog_load+0x9e/0x140 [ 397.607817][T10666] bpf_prog_load+0xf6e/0x1100 [ 397.612568][T10666] ? security_bpf+0x2b/0x90 [ 397.617150][T10666] __sys_bpf+0x469/0x7c0 [ 397.621440][T10666] __x64_sys_bpf+0x41/0x50 [ 397.626010][T10666] x64_sys_call+0x2aee/0x3000 [ 397.630715][T10666] do_syscall_64+0xd2/0x200 [ 397.635272][T10666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 397.641393][T10666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 397.647257][T10666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.653174][T10666] RIP: 0033:0x7f787ea6efc9 [ 397.657644][T10666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.677339][T10666] RSP: 002b:00007f787d4cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.685809][T10666] RAX: ffffffffffffffda RBX: 00007f787ecc5fa0 RCX: 00007f787ea6efc9 [ 397.693835][T10666] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 397.701956][T10666] RBP: 00007f787eaf1f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.709962][T10666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.718066][T10666] R13: 00007f787ecc6038 R14: 00007f787ecc5fa0 R15: 00007ffeb9673aa8 [ 397.726102][T10666] [ 397.729150][T10666] ---[ end trace 0000000000000000 ]--- [ 398.064903][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 398.064922][ T29] audit: type=1400 audit(932.219:15481): avc: denied { create } for pid=10673 comm="syz.5.8615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.093314][ T29] audit: type=1400 audit(932.251:15482): avc: denied { setopt } for pid=10673 comm="syz.5.8615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.119113][ T29] audit: type=1400 audit(932.272:15483): avc: denied { write } for pid=10677 comm="syz.1.8617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 398.150266][T10676] pim6reg1: entered promiscuous mode [ 398.155860][T10676] pim6reg1: entered allmulticast mode [ 398.279307][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8623'. [ 398.405502][T10701] lo speed is unknown, defaulting to 1000 [ 398.425980][T10703] netlink: 'syz.5.8628': attribute type 7 has an invalid length. [ 398.433760][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8628'. [ 398.468632][T10706] lo speed is unknown, defaulting to 1000 [ 398.606785][ T29] audit: type=1400 audit(932.797:15484): avc: denied { map } for pid=10711 comm="syz.5.8632" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 398.721102][ T29] audit: type=1400 audit(932.912:15485): avc: denied { mount } for pid=10717 comm="syz.0.8634" name="/" dev="ramfs" ino=94054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 398.912010][T10729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8638'. [ 398.952433][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8638'. [ 398.996415][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 399.015805][ T29] audit: type=1400 audit(933.217:15486): avc: denied { kexec_image_load } for pid=10732 comm="syz.5.8648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 399.098588][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8643'. [ 399.130343][T10739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8642'. [ 399.213244][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8645'. [ 399.304493][T10763] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 399.481757][T10778] loop7: detected capacity change from 0 to 4096 [ 399.511336][T10778] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.530835][T10778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.548564][T10781] lo speed is unknown, defaulting to 1000 [ 399.580460][T10784] lo speed is unknown, defaulting to 1000 [ 399.994813][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.055010][T10802] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 400.079837][ T29] audit: type=1400 audit(934.329:15487): avc: denied { read } for pid=10803 comm="syz.5.8667" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.102548][ T29] audit: type=1400 audit(934.329:15488): avc: denied { open } for pid=10803 comm="syz.5.8667" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 400.329593][T10816] lo speed is unknown, defaulting to 1000 [ 400.358821][ T29] audit: type=1326 audit(934.623:15489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10815 comm="syz.7.8669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc4d7fefc9 code=0x0 [ 400.538019][ T29] audit: type=1400 audit(934.812:15490): avc: denied { bind } for pid=10821 comm="syz.1.8671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 400.572116][T10824] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8672'. [ 400.583738][T10824] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8672'. [ 400.595766][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8673'. [ 400.983294][T10969] lo speed is unknown, defaulting to 1000 [ 401.000701][T10971] syz_tun: entered allmulticast mode [ 401.653051][T11002] netlink: 'syz.1.8695': attribute type 3 has an invalid length. [ 402.085153][T11135] netlink: 'syz.1.8698': attribute type 8 has an invalid length. [ 402.112746][T11135] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 402.275962][T11212] lo speed is unknown, defaulting to 1000 [ 402.975295][T11451] netlink: 'syz.0.8717': attribute type 10 has an invalid length. [ 402.982677][T11452] vlan2: entered promiscuous mode [ 402.988343][T11452] bridge0: entered promiscuous mode [ 403.570355][T11594] tipc: Enabled bearer , priority 0 [ 403.587980][T11594] syzkaller0: entered promiscuous mode [ 403.593595][T11594] syzkaller0: entered allmulticast mode [ 403.618582][T11594] tipc: Resetting bearer [ 403.633421][T11593] tipc: Resetting bearer [ 403.649949][T11593] tipc: Disabling bearer [ 403.857784][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 403.857800][ T29] audit: type=1400 audit(938.308:15494): avc: denied { bind } for pid=11622 comm="syz.0.8747" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 403.887263][ T29] audit: type=1400 audit(938.308:15495): avc: denied { name_bind } for pid=11622 comm="syz.0.8747" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 403.908781][ T29] audit: type=1400 audit(938.308:15496): avc: denied { node_bind } for pid=11622 comm="syz.0.8747" saddr=ff00:0:0:2::1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 404.155120][ T29] audit: type=1400 audit(938.612:15497): avc: denied { read } for pid=11627 comm="syz.7.8749" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.178013][ T29] audit: type=1400 audit(938.612:15498): avc: denied { open } for pid=11627 comm="syz.7.8749" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.230841][ T29] audit: type=1400 audit(938.696:15499): avc: denied { ioctl } for pid=11627 comm="syz.7.8749" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 404.500185][T11764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8764'. [ 404.542068][T11767] syzkaller0: entered promiscuous mode [ 404.566726][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8766'. [ 404.582215][T11769] team1: entered promiscuous mode [ 404.587459][T11769] team1: entered allmulticast mode [ 404.593023][T11769] 8021q: adding VLAN 0 to HW filter on device team1 [ 404.624606][T11773] netlink: 'syz.3.8768': attribute type 3 has an invalid length. [ 404.648701][T11775] netlink: 'syz.3.8769': attribute type 1 has an invalid length. [ 404.669050][T11775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8769'. [ 404.679189][T11775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.693271][T11775] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.703263][T11775] bond1: (slave geneve2): making interface the new active one [ 404.711646][T11775] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 404.722493][T11778] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.733721][ T8134] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 404.742371][ T8134] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 404.752389][ T8134] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 404.761357][ T8134] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 404.780115][T11778] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.828096][T11778] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.866058][T11778] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.929033][ T3433] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.941986][ T3433] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.959445][ T3433] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.975045][ T3433] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.300784][T11806] netlink: 'syz.5.8782': attribute type 10 has an invalid length. [ 405.449448][ T29] audit: type=1326 audit(939.977:15500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.1.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 405.472610][ T29] audit: type=1326 audit(939.977:15501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.1.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 405.500785][ T29] audit: type=1326 audit(939.977:15502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.1.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 405.523787][ T29] audit: type=1326 audit(939.977:15503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11815 comm="syz.1.8787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ea6efc9 code=0x7ffc0000 [ 405.705889][T11830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8793'. [ 405.846050][T11837] netlink: 'syz.3.8796': attribute type 10 has an invalid length. [ 406.957784][T12100] syzkaller0: entered promiscuous mode [ 406.963425][T12100] syzkaller0: entered allmulticast mode [ 406.990723][T12102] netlink: 'syz.5.8823': attribute type 12 has an invalid length. [ 407.023722][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8825'. [ 407.168076][T12116] syzkaller0: entered promiscuous mode [ 407.369229][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 407.492643][T12239] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8838'. [ 408.020598][T12249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8841'. [ 408.383029][T12460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.429757][T12572] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8849'. [ 408.456400][T12572] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8849'. [ 408.497666][T12572] hub 2-0:1.0: USB hub found [ 408.508490][T12572] hub 2-0:1.0: 8 ports detected [ 408.519868][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8850'. [ 408.820285][T12698] syzkaller0: entered promiscuous mode [ 408.825937][T12698] syzkaller0: entered allmulticast mode [ 408.885893][T12702] loop7: detected capacity change from 0 to 1024 [ 408.892578][T12702] EXT4-fs: Ignoring removed bh option [ 408.898356][T12702] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 408.909397][T12702] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 408.919357][T12702] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 408.929525][T12702] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 409.245692][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 409.245709][ T29] audit: type=1326 audit(943.956:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.275567][ T29] audit: type=1326 audit(943.956:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.298741][ T29] audit: type=1326 audit(943.966:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.322266][ T29] audit: type=1326 audit(943.966:15575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.345515][ T29] audit: type=1326 audit(943.966:15576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.368902][ T29] audit: type=1326 audit(943.966:15577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.392141][ T29] audit: type=1326 audit(943.966:15578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.415579][ T29] audit: type=1326 audit(943.966:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.438948][ T29] audit: type=1326 audit(943.966:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.462370][ T29] audit: type=1326 audit(943.966:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12711 comm="syz.0.8865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f197102efc9 code=0x7ffc0000 [ 409.950401][T12848] syzkaller0: entered promiscuous mode [ 409.955973][T12848] syzkaller0: entered allmulticast mode [ 410.116359][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8885'. [ 410.417640][T12987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.424901][T12987] IPv6: NLM_F_CREATE should be set when creating new route [ 410.432152][T12987] IPv6: NLM_F_CREATE should be set when creating new route [ 410.443641][T12987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.684996][T13106] loop7: detected capacity change from 0 to 512 [ 410.709810][T13106] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.8903: corrupted in-inode xattr: e_name out of bounds [ 410.771037][T13106] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.8903: couldn't read orphan inode 15 (err -117) [ 410.802603][T13106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.850868][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.978376][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8908'. [ 410.987359][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8908'. [ 411.172517][T13138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8914'. [ 411.684182][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8906'. [ 411.690100][T13259] infiniband !yz!: set active [ 411.698019][T13259] infiniband !yz!: added team_slave_0 [ 411.711923][T13259] RDS/IB: !yz!: added [ 411.717592][T13259] smc: adding ib device !yz! with port count 1 [ 411.723868][T13259] smc: ib device !yz! port 1 has no pnetid [ 412.045304][T13150] Cannot find add_set index 0 as target [ 412.404752][T13307] loop7: detected capacity change from 0 to 8192 [ 412.428334][T13307] vfat: Unknown parameter 'À' [ 412.642139][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8948'. [ 412.675185][T13322] team0: No ports can be present during mode change [ 412.753048][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8940'. [ 412.856475][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.171936][T13652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13652 comm=syz.5.8960 [ 413.328906][T13665] loop7: detected capacity change from 0 to 512 [ 413.336056][T13665] EXT4-fs: Ignoring removed nobh option [ 413.355265][T13665] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.8965: corrupted inode contents [ 413.367526][T13665] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm syz.7.8965: mark_inode_dirty error [ 413.380958][T13665] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.8965: corrupted inode contents [ 413.394121][T13665] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.8965: mark_inode_dirty error [ 413.443140][T13665] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8965: Failed to acquire dquot type 0 [ 413.488294][T13665] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.8965: corrupted inode contents [ 413.567550][T13665] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm syz.7.8965: mark_inode_dirty error [ 413.580398][T13665] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.8965: corrupted inode contents [ 413.599547][T13665] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.8965: mark_inode_dirty error [ 413.612144][T13665] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.8965: corrupted inode contents [ 413.641953][T13665] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 413.657347][T13665] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.8965: corrupted inode contents [ 413.675731][T13665] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm syz.7.8965: mark_inode_dirty error [ 413.687450][T13665] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 413.701601][T13665] EXT4-fs (loop7): 1 truncate cleaned up [ 413.708251][T13665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.787668][T13880] syzkaller0: entered allmulticast mode [ 413.793818][T13880] syzkaller0: entered promiscuous mode [ 413.805671][T13880] syzkaller0 (unregistering): left allmulticast mode [ 413.812448][T13880] syzkaller0 (unregistering): left promiscuous mode [ 413.868047][T13665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.902420][T13884] loop7: detected capacity change from 0 to 1024 [ 413.933445][T13884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 413.947221][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8974'. [ 413.983998][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8974'. [ 414.006125][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 414.030547][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 414.030562][ T29] audit: type=1400 audit(949.980:15940): avc: denied { create } for pid=13898 comm="syz.7.8978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 414.063416][ T29] audit: type=1400 audit(950.011:15941): avc: denied { connect } for pid=13898 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 414.088405][T13896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8979'. [ 414.113909][ T29] audit: type=1400 audit(950.064:15942): avc: denied { setopt } for pid=13903 comm="syz.7.8982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 414.133175][ T29] audit: type=1400 audit(950.074:15943): avc: denied { read } for pid=13903 comm="syz.7.8982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 414.170312][ T29] audit: type=1400 audit(950.127:15944): avc: denied { watch } for pid=13901 comm="syz.5.8981" path="/691/control" dev="tmpfs" ino=3600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 414.198043][T13906] loop7: detected capacity change from 0 to 512 [ 414.228013][T13906] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.245119][T13910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13910 comm=syz.3.8984 [ 414.275226][T13906] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.8982: corrupted inode contents [ 414.321915][ T29] audit: type=1400 audit(950.232:15945): avc: denied { mac_admin } for pid=13903 comm="syz.7.8982" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 414.324762][T13906] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.8982: mark_inode_dirty error [ 414.342606][ T29] audit: type=1400 audit(950.232:15946): avc: denied { relabelto } for pid=13903 comm="syz.7.8982" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 414.379372][ T29] audit: type=1400 audit(950.232:15947): avc: denied { create } for pid=13907 comm="syz.0.8983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 414.398616][ T29] audit: type=1400 audit(950.232:15948): avc: denied { connect } for pid=13907 comm="syz.0.8983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 414.417915][ T29] audit: type=1400 audit(950.232:15949): avc: denied { write } for pid=13907 comm="syz.0.8983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 414.437722][T13906] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.8982: corrupted inode contents [ 414.459367][T13922] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.8982: corrupted inode contents [ 414.485520][T13922] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.8982: mark_inode_dirty error [ 414.497152][T13922] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.8982: corrupted inode contents [ 414.515351][T13922] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.8982: mark_inode_dirty error [ 414.533602][T13922] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.8982: corrupted inode contents [ 414.555564][T13922] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.8982: mark_inode_dirty error [ 414.761678][T13917] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.8982: corrupted inode contents [ 414.937929][T13953] pim6reg: entered allmulticast mode [ 414.944940][T30705] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.945655][T13953] pim6reg: left allmulticast mode [ 415.269159][T13967] lo speed is unknown, defaulting to 1000 [ 415.321051][T13969] syzkaller0: entered promiscuous mode [ 415.326596][T13969] syzkaller0: entered allmulticast mode [ 415.662826][T14084] __nla_validate_parse: 1 callbacks suppressed [ 415.662842][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9010'. [ 415.867197][T14095] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 415.913790][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 415.955428][T14095] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.029592][T14095] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.078896][T14095] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.135042][ T8094] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.153368][ T8094] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.178541][ T8094] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.204994][ T8094] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.415443][T14221] netlink: 'syz.7.9026': attribute type 1 has an invalid length. [ 416.474430][T14221] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 416.523994][ T8084] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.535268][T14221] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.626751][T14244] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9036'. [ 416.641065][ T8134] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 416.658140][T14244] hsr_slave_0: left promiscuous mode [ 416.694042][T14249] syzkaller0: entered promiscuous mode [ 416.699785][T14249] syzkaller0: entered allmulticast mode [ 416.815299][T14358] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 416.838042][T14363] loop7: detected capacity change from 0 to 512 [ 416.849426][T14358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.867891][T14363] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 416.883335][T14363] EXT4-fs (loop7): mount failed [ 416.898132][T14363] ªªªªªª: renamed from vlan0 (while UP) [ 417.015026][T14486] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.069901][T14486] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.126697][T14486] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.177967][T14486] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.245410][ T8134] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.275771][ T8134] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.296466][ T8134] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.318498][ T8134] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.378733][T14703] lo speed is unknown, defaulting to 1000 [ 417.465782][T14720] lo speed is unknown, defaulting to 1000 [ 417.511936][T14811] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9061'. [ 417.630521][T14814] syz.1.9063 (14814): attempted to duplicate a private mapping with mremap. This is not supported. [ 417.643719][T14814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9063'. [ 417.987414][T14924] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9067'. [ 418.084421][T14931] netlink: 131740 bytes leftover after parsing attributes in process `syz.7.9070'. [ 418.108518][T14931] netlink: zone id is out of range [ 418.113682][T14931] netlink: zone id is out of range [ 418.142263][T14931] netlink: zone id is out of range [ 418.152556][T14931] netlink: zone id is out of range [ 418.157736][T14931] netlink: del zone limit has 8 unknown bytes [ 418.560912][T14947] ================================================================== [ 418.569048][T14947] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 418.578033][T14947] [ 418.580370][T14947] write to 0xffff888115cc8320 of 4 bytes by task 14944 on cpu 1: [ 418.588190][T14947] selinux_inode_permission+0x3ac/0x740 [ 418.593774][T14947] security_inode_permission+0x6d/0xb0 [ 418.599263][T14947] inode_permission+0x106/0x310 [ 418.604161][T14947] link_path_walk+0x162/0x900 [ 418.608871][T14947] path_openat+0x1de/0x2170 [ 418.613429][T14947] do_filp_open+0x109/0x230 [ 418.617970][T14947] io_openat2+0x272/0x390 [ 418.622339][T14947] io_openat+0x1b/0x30 [ 418.626445][T14947] __io_issue_sqe+0xfe/0x2e0 [ 418.631075][T14947] io_issue_sqe+0x56/0xa80 [ 418.635543][T14947] io_submit_sqes+0x675/0x1060 [ 418.640346][T14947] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 418.645920][T14947] __x64_sys_io_uring_enter+0x78/0x90 [ 418.651333][T14947] x64_sys_call+0x2df0/0x3000 [ 418.656042][T14947] do_syscall_64+0xd2/0x200 [ 418.660580][T14947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.666525][T14947] [ 418.668869][T14947] read to 0xffff888115cc8320 of 4 bytes by task 14947 on cpu 0: [ 418.676520][T14947] selinux_inode_permission+0x334/0x740 [ 418.682103][T14947] security_inode_permission+0x6d/0xb0 [ 418.687595][T14947] inode_permission+0x106/0x310 [ 418.692481][T14947] link_path_walk+0x162/0x900 [ 418.697200][T14947] path_openat+0x1de/0x2170 [ 418.701737][T14947] do_filp_open+0x109/0x230 [ 418.706270][T14947] io_openat2+0x272/0x390 [ 418.710628][T14947] io_openat+0x1b/0x30 [ 418.714728][T14947] __io_issue_sqe+0xfe/0x2e0 [ 418.719357][T14947] io_issue_sqe+0x56/0xa80 [ 418.723804][T14947] io_wq_submit_work+0x3f7/0x5f0 [ 418.728782][T14947] io_worker_handle_work+0x44e/0x9b0 [ 418.734098][T14947] io_wq_worker+0x22e/0x860 [ 418.738626][T14947] ret_from_fork+0x122/0x1b0 [ 418.743226][T14947] ret_from_fork_asm+0x1a/0x30 [ 418.748005][T14947] [ 418.750326][T14947] value changed: 0x00000000 -> 0x00000001 [ 418.756046][T14947] [ 418.758371][T14947] Reported by Kernel Concurrency Sanitizer on: [ 418.764542][T14947] CPU: 0 UID: 0 PID: 14947 Comm: iou-wrk-14944 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 418.776184][T14947] Tainted: [W]=WARN [ 418.779987][T14947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.790048][T14947] ================================================================== [ 418.810102][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 418.810121][ T29] audit: type=1400 audit(954.998:16174): avc: denied { shutdown } for pid=14948 comm="syz.1.9077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.835729][ T29] audit: type=1326 audit(955.008:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f468f5a5e67 code=0x7ffc0000 [ 418.858662][ T29] audit: type=1326 audit(955.008:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f468f54b099 code=0x7ffc0000 [ 418.881640][ T29] audit: type=1326 audit(955.008:16177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f468f5a5e67 code=0x7ffc0000 [ 418.904563][ T29] audit: type=1326 audit(955.008:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f468f54b099 code=0x7ffc0000 [ 418.927468][ T29] audit: type=1326 audit(955.008:16179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 418.950757][ T29] audit: type=1326 audit(955.050:16180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f468f5a5e67 code=0x7ffc0000 [ 418.973813][ T29] audit: type=1326 audit(955.050:16181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f468f54b099 code=0x7ffc0000 [ 418.996791][ T29] audit: type=1326 audit(955.050:16182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f468f5aefc9 code=0x7ffc0000 [ 419.019778][ T29] audit: type=1326 audit(955.061:16183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14945 comm="syz.5.9076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f468f5a5e67 code=0x7ffc0000 [ 424.449093][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!