last executing test programs: 10m24.707506s ago: executing program 32 (id=1044): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x800000) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000440)='\x00!', 0xfffffe37}], 0x1, 0x1, 0x3d) 10m24.02837407s ago: executing program 33 (id=1082): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000000000000008000000951da50000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 10m12.473694142s ago: executing program 34 (id=1582): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @dev={0xfe, 0x80, '\x00', 0x17}, [0xffffff00, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff000000], 'veth1_macvtap\x00', 'ip6erspan0\x00', {}, {0xff}, 0x29, 0x86, 0x7, 0x48}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz1\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'pimreg1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) 9m55.986819054s ago: executing program 35 (id=1634): sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 9m38.173575334s ago: executing program 36 (id=2597): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) 9m28.826400019s ago: executing program 37 (id=2951): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xb, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0x9, 0x0, 0x800000, 0x3, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 9m9.360648537s ago: executing program 38 (id=3698): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lsm_set_self_attr(0x67, 0x0, 0x87, 0x0) 8m27.056791203s ago: executing program 39 (id=5183): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0x100000025) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000240)={0x9, 0x4, 0x62, 0x401, 0x2, "b53bbbe899d259b8"}) 8m24.334814707s ago: executing program 40 (id=5267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0)={[{@noinit_itable}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_always}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x66], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x65], 0x2d, [0x38, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 6m51.693760797s ago: executing program 41 (id=8253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) 5m4.325759064s ago: executing program 3 (id=11726): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa9a, 0x76c4, 0x7, 0x7}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 5m4.046286449s ago: executing program 3 (id=11722): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 5m3.819394119s ago: executing program 3 (id=11735): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000300), 0x94}, 0x6}], 0x1, 0x10000, 0x0) 5m2.894204612s ago: executing program 3 (id=11738): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r0}, 0x2a) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 5m2.733203806s ago: executing program 3 (id=11739): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5m2.701321348s ago: executing program 3 (id=11741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) 4m56.08304429s ago: executing program 42 (id=11579): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2050}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4m47.67571703s ago: executing program 43 (id=11741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) 3m41.247137411s ago: executing program 5 (id=14060): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 3m41.194383525s ago: executing program 5 (id=14061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) listen(r1, 0x8) 3m40.747132506s ago: executing program 5 (id=14076): msgctl$IPC_SET(0x0, 0x1, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0xee00, 0x2}, 0x0, 0x0, 0x3, 0x6, 0x9, 0xff, 0x140000000, 0x495, 0x7, 0x5}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 3m40.712806328s ago: executing program 5 (id=14080): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x6) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xc4) getdents64(r2, &(0x7f0000000340)=""/244, 0xf4) lseek(r2, 0x8040000004, 0x1) getdents64(r2, 0x0, 0x0) 3m40.69175784s ago: executing program 5 (id=14081): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m40.671007792s ago: executing program 5 (id=14082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x61], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") 3m25.615718456s ago: executing program 44 (id=14082): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x61], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$eJzs3MtvG8UfAPDvOo82fcW/qj+gDyAIEKVA0qSl9MAFBBIHkJDgUI4hSatSt0FNkEhVQUCoHFElTlwQRyT+Ak5wQcAJCQ4c4I4qVaiXFk5Gm91NHdfOw3Xstv58pHVmdtee+Xpn7NmdeAPoWSPpQxKxIyL+iIjhLLtyh5Hsz41rF6f+uXZxKolq9Y2/k/508/VrF6eKXYvnbS8y/RGlT5LY36DcuYULZyYrlZnzeX5s/uy7Y3MLF545fXby1MypmXMTx48fPTL+3LGJZ9sSZxrX9X0fzB7Y+8pbl1+bOnH57Z++SYr46+K4xW8tFTmy2sbHq9WWXvQONJg+7KxZkbUM7gZ9WTeNgaX+Pxx9cfPgDcfLH3e1csCmqlar1fuab16sAvewJLpdA6A7ii/69Py3WDo09LgjXH0hOwFK476RL9mW/ijl+wzUnd+200hEnFj898t0ibWuQwAAtMF36fjn6Ubjv1LUXhfalc+hlCPifxGxOyKORcSeiPh/xNK+90fEAxssv36S5NbxT+lKS4GtUzr+ez6f21o5/itGf1Huy3M7l+IfSE6erswczt+TgzGwJc2Pr1LG9y/9+lmzbbXjv3RJyy/Ggnk9rvRvWfmc6cn5yduJudbVjyL29TeKP1meCUgiYm9E7GuxjNOHvj7QbNva8a+iDfNM1a8insiO/2LUxV9IsvnJcpP5ybGtUZk5PFa0ihiqefnF9ND9/Mul15uVf1vxt0F6/Lc1bP/L8ZeT2vnauY28+hdPpo+X/vy06TlNq+1/MHlzxbr3J+fnz49HDCavZpWuXT9Rt9/Ezf3T+A8+2rj/746b78T+iEgb8YMR8VBEPJzX/ZHfd635Lvz44mPvtB7/5krjn17/8a8ORxQNYWEw8sTymsaJvjM/fLui0HLj+Hc1Pf5Hl1IH8zXr+fxbT7022poBAADgblWKiB2RlEaX06XS6Gj2P/x7YlupMjs3/9TJ2ffOTWe/ESjHQKm40jVccz10PD+tL/ITdfkj+XXjz/uGlvKjU7OV6W4HDz1ue5P+n/qrr9u1Azad32tB79L/oXfp/9C7sv5fe7a/tWt1ATqrwff/UDfqAXReo/H/h+t54o721wXorLr+b9oPeojrf9C7Wun/PjPg3tC/2i2bBztaFaBz5oZi7R/J32uJrRu4QcDdlyjuXLMZRQykreVQRCxciFLXI5XYxES3P5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa478AAAD//9OC4M8=") 2m52.669703578s ago: executing program 9 (id=15378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x2710, @hyper}, 0x10) 2m52.602193634s ago: executing program 9 (id=15380): r0 = timerfd_create(0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) 2m52.52675814s ago: executing program 9 (id=15382): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @empty, 0xff, 0x100000100, 'team0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x29, 0x2, 0x40}, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@set2={{0x28}, {{0x2, 0x1, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2m52.42720266s ago: executing program 9 (id=15384): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 2m52.378196574s ago: executing program 9 (id=15387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000002c0), 0x13f}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 2m51.873674109s ago: executing program 9 (id=15404): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x2, 0xffff}, {0xfff1, 0x8}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x8, 0x2, {0xf36eb06d4f92d91a, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000881c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m51.822726423s ago: executing program 45 (id=15404): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xffff}, {0x2, 0xffff}, {0xfff1, 0x8}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x8, 0x2, {0xf36eb06d4f92d91a, 0x80000000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000881c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m34.069157618s ago: executing program 4 (id=15883): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4e4, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r2, 0x627, 0x4c2, 0x43, 0x0, 0x0) 2m33.746464807s ago: executing program 4 (id=15888): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2m33.166692609s ago: executing program 4 (id=15895): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000480), 0x400000000000341, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2m32.227742953s ago: executing program 4 (id=15935): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 2m32.171467538s ago: executing program 4 (id=15937): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) pidfd_getfd(r1, r1, 0x0) 2m31.543451294s ago: executing program 4 (id=15953): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff2c, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2m31.520857826s ago: executing program 46 (id=15953): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffff2c, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 53.643252935s ago: executing program 7 (id=18552): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0xf, 0x6, @local}, 0x14) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 53.48037839s ago: executing program 7 (id=18554): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x3ab, &(0x7f0000000bc0)="$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") acct(&(0x7f0000000280)='./file1\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c65) write$binfmt_elf64(r0, 0x0, 0x478) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 53.171043967s ago: executing program 7 (id=18562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 53.051061478s ago: executing program 7 (id=18568): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x261) 52.999453403s ago: executing program 7 (id=18570): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xd7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 52.02737044s ago: executing program 7 (id=18591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x20000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 52.016867861s ago: executing program 47 (id=18591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x20000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 3.066359836s ago: executing program 0 (id=19774): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2.942435186s ago: executing program 1 (id=19779): socket(0x1e, 0x4, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2.330589241s ago: executing program 8 (id=19795): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x44040001, 0x1}) 2.196940303s ago: executing program 0 (id=19799): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) listen(r0, 0xa97) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 2.145028158s ago: executing program 0 (id=19802): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x80, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000940)=0x1, 0x4) 2.087268503s ago: executing program 1 (id=19804): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 2.045547147s ago: executing program 8 (id=19806): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0xf, 0x6, @local}, 0x14) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.0111235s ago: executing program 1 (id=19807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.5588764s ago: executing program 0 (id=19810): prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.270532836s ago: executing program 0 (id=19811): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x80001021, 0x80, 0x6, 0x110}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0xc49, 0x1, 0x0, 0x0) r3 = msgget$private(0x0, 0x7ac) msgrcv(r3, 0x0, 0x0, 0x3, 0x2000) msgrcv(r3, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) msgsnd(r3, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) 1.270218106s ago: executing program 8 (id=19812): prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) close(r0) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 1.240843119s ago: executing program 6 (id=19814): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/249, 0xf9}], 0x1}, 0x0) socket$pppoe(0x18, 0x1, 0x0) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 1.22963715s ago: executing program 8 (id=19815): socket(0x1e, 0x4, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 417.708493ms ago: executing program 0 (id=19819): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 417.370342ms ago: executing program 1 (id=19820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r2, 0x0, 0x0, 0x20040044, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x100}, 0x1c) 417.113903ms ago: executing program 6 (id=19821): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 386.445136ms ago: executing program 6 (id=19822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) bind$tipc(r3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 369.282717ms ago: executing program 8 (id=19823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x1, 0x5) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 358.852438ms ago: executing program 1 (id=19824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vga_arbiter(r1, 0x0, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) open(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a80006002000064007d57f5494007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a483455aeb4edbb57a5025ccca9e00b60db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a0000000000008de6d7b140540d47", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 295.467274ms ago: executing program 2 (id=19825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 295.170144ms ago: executing program 6 (id=19826): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x20000000000f}, 0x18) r3 = syz_io_uring_setup(0x517, &(0x7f0000000100)={0x0, 0x15d2, 0x0, 0x2000000, 0x100003a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x48004, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r0, r1, 0x0) 242.150428ms ago: executing program 2 (id=19827): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 206.673662ms ago: executing program 2 (id=19828): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000300)={0x100c}) 196.222292ms ago: executing program 1 (id=19829): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x64}}, 0x2000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 148.944167ms ago: executing program 8 (id=19830): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000500)={0x0, 0x2, 0x0, 0x4, 0x26b}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) 136.047727ms ago: executing program 2 (id=19831): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r3}) 78.982493ms ago: executing program 6 (id=19832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) 77.485103ms ago: executing program 2 (id=19833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) 15.224689ms ago: executing program 2 (id=19834): socket(0x1e, 0x4, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 0s ago: executing program 6 (id=19835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x34, 0x2e, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff3, 0xffff}, {0x0, 0x1a}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): 8303][ T29] audit: type=1326 audit(868.168:18296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.202308][ T29] audit: type=1326 audit(868.168:18297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.226585][ T29] audit: type=1326 audit(868.168:18298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.249702][ T29] audit: type=1326 audit(868.168:18299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.273616][ T29] audit: type=1400 audit(868.168:18300): avc: denied { read } for pid=28847 comm="syz.6.17570" name="file0" dev="tmpfs" ino=1377 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 612.296564][ T29] audit: type=1326 audit(868.168:18301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.319871][ T29] audit: type=1326 audit(868.168:18302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.343920][ T29] audit: type=1326 audit(868.168:18303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.368100][ T29] audit: type=1326 audit(868.168:18304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28847 comm="syz.6.17570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 612.529440][T28863] loop1: detected capacity change from 0 to 1024 [ 612.569136][T28873] netlink: 'syz.0.17582': attribute type 1 has an invalid length. [ 612.587599][T28863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.603128][T28873] 8021q: adding VLAN 0 to HW filter on device bond8 [ 612.629718][T28873] bond8: (slave veth9): Enslaving as an active interface with a down link [ 612.658028][T28927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.668112][ T8216] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.684067][T28873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.700586][T28873] bond8: (slave batadv0): making interface the new active one [ 612.710547][T28873] batadv0: entered promiscuous mode [ 612.716369][T28873] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 612.780949][T28940] ref_ctr_offset mismatch. inode: 0x161b offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 612.847534][T28949] sctp: [Deprecated]: syz.7.17603 (pid 28949) Use of int in max_burst socket option. [ 612.847534][T28949] Use struct sctp_assoc_value instead [ 612.862928][T28952] loop6: detected capacity change from 0 to 2048 [ 612.876133][T28956] loop7: detected capacity change from 0 to 7 [ 612.882829][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 612.892452][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 612.901471][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 612.911108][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 612.919007][T28956] loop7: unable to read partition table [ 612.925657][T28956] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 612.942127][T28952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 613.039730][T22695] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 613.068047][T28980] netlink: 'syz.6.17601': attribute type 1 has an invalid length. [ 613.088140][T28980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.129197][T28980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.136753][T28980] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 613.149866][T28980] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 613.227588][T29033] tipc: Enabling of bearer rejected, already enabled [ 613.276024][T29035] lo speed is unknown, defaulting to 1000 [ 613.436020][T29049] __nla_validate_parse: 5 callbacks suppressed [ 613.436040][T29049] netlink: 2048 bytes leftover after parsing attributes in process `syz.6.17610'. [ 613.451578][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17610'. [ 613.915446][T29080] netlink: 'syz.7.17615': attribute type 29 has an invalid length. [ 613.934107][T29080] netlink: 'syz.7.17615': attribute type 29 has an invalid length. [ 613.965990][T29080] netlink: 500 bytes leftover after parsing attributes in process `syz.7.17615'. [ 614.027101][T29094] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 614.055770][T29091] lo speed is unknown, defaulting to 1000 [ 614.791119][T29171] netlink: 96 bytes leftover after parsing attributes in process `syz.8.17641'. [ 615.111889][T29188] cgroup: Setting release_agent not allowed [ 615.137496][T29194] lo: entered promiscuous mode [ 615.142335][T29194] lo: entered allmulticast mode [ 615.164327][T29194] tunl0: entered promiscuous mode [ 615.170312][T29194] tunl0: entered allmulticast mode [ 615.193377][T29194] gre0: entered promiscuous mode [ 615.199426][T29194] gre0: entered allmulticast mode [ 615.215651][T29194] gretap0: entered promiscuous mode [ 615.220994][T29194] gretap0: entered allmulticast mode [ 615.245621][T29194] erspan0: entered promiscuous mode [ 615.251005][T29194] erspan0: entered allmulticast mode [ 615.277721][T29194] ip_vti0: entered promiscuous mode [ 615.283013][T29194] ip_vti0: entered allmulticast mode [ 615.303609][T29194] ip6_vti0: entered promiscuous mode [ 615.309050][T29194] ip6_vti0: entered allmulticast mode [ 615.337429][T29194] sit0: entered promiscuous mode [ 615.342461][T29194] sit0: entered allmulticast mode [ 615.365231][T29194] ip6tnl0: entered promiscuous mode [ 615.370639][T29194] ip6tnl0: entered allmulticast mode [ 615.379479][T29204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29204 comm=syz.1.17652 [ 615.426974][T29194] ip6gre0: entered promiscuous mode [ 615.432285][T29194] ip6gre0: entered allmulticast mode [ 615.506842][T29194] syz_tun: entered allmulticast mode [ 615.529482][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17657'. [ 615.545684][T29194] bond0: entered promiscuous mode [ 615.550786][T29194] bond_slave_0: entered promiscuous mode [ 615.556801][T29194] bond_slave_1: entered promiscuous mode [ 615.562762][T29194] bond0: entered allmulticast mode [ 615.568101][T29194] bond_slave_0: entered allmulticast mode [ 615.573848][T29194] bond_slave_1: entered allmulticast mode [ 615.601956][T29194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.609613][T29217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17657'. [ 615.631650][T29194] team0: entered promiscuous mode [ 615.637666][T29194] team_slave_0: entered promiscuous mode [ 615.643582][T29194] team_slave_1: entered promiscuous mode [ 615.649484][T29194] team0: entered allmulticast mode [ 615.654725][T29194] team_slave_0: entered allmulticast mode [ 615.660506][T29194] team_slave_1: entered allmulticast mode [ 615.684892][T29194] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.714031][T29194] dummy0: entered promiscuous mode [ 615.719306][T29194] dummy0: entered allmulticast mode [ 615.762322][T29194] batman_adv: batadv0: Interface activated: dummy0 [ 615.769018][T29194] net_ratelimit: 12 callbacks suppressed [ 615.769036][T29194] batadv0: mtu less than device minimum [ 615.781070][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.792246][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.803393][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.814388][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.825441][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.836241][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.847360][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.858376][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.869604][T29194] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 615.925088][T29194] nlmon0: entered promiscuous mode [ 615.930283][T29194] nlmon0: entered allmulticast mode [ 616.024873][T29194] caif0: entered promiscuous mode [ 616.029959][T29194] caif0: entered allmulticast mode [ 616.549491][T29249] lo speed is unknown, defaulting to 1000 [ 616.835334][T29273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.17678'. [ 616.845943][T29254] lo speed is unknown, defaulting to 1000 [ 616.897904][T29273] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17678'. [ 616.940037][T29254] lo speed is unknown, defaulting to 1000 [ 616.994231][T29254] lo speed is unknown, defaulting to 1000 [ 617.061117][T29254] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 617.175148][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 617.175163][ T29] audit: type=1326 audit(873.178:18335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.211484][T29254] lo speed is unknown, defaulting to 1000 [ 617.245867][T29254] lo speed is unknown, defaulting to 1000 [ 617.273572][ T29] audit: type=1326 audit(873.228:18336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.297700][ T29] audit: type=1326 audit(873.228:18337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.320789][ T29] audit: type=1326 audit(873.228:18338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.345130][ T29] audit: type=1326 audit(873.228:18339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.368353][ T29] audit: type=1326 audit(873.228:18340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.392377][ T29] audit: type=1326 audit(873.228:18341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.416459][ T29] audit: type=1326 audit(873.228:18342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.416743][T29254] lo speed is unknown, defaulting to 1000 [ 617.439465][ T29] audit: type=1326 audit(873.228:18343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.469413][ T29] audit: type=1326 audit(873.228:18344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29300 comm="syz.7.17681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fa6898ef749 code=0x7ffc0000 [ 617.493731][T29305] ref_ctr_offset mismatch. inode: 0x330 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 617.514701][T19215] IPVS: starting estimator thread 0... [ 617.547270][T29254] lo speed is unknown, defaulting to 1000 [ 617.559823][T29254] lo speed is unknown, defaulting to 1000 [ 617.582856][T29254] lo speed is unknown, defaulting to 1000 [ 617.606705][T29254] lo speed is unknown, defaulting to 1000 [ 617.617293][T29308] IPVS: using max 1680 ests per chain, 84000 per kthread [ 617.635180][T29254] lo speed is unknown, defaulting to 1000 [ 617.757422][T29324] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17689'. [ 617.832502][T29328] netlink: 'syz.6.17692': attribute type 12 has an invalid length. [ 618.078036][T29356] loop7: detected capacity change from 0 to 512 [ 618.098374][T29356] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.17701: bg 0: block 248: padding at end of block bitmap is not set [ 618.166716][T29356] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.17701: Failed to acquire dquot type 1 [ 618.185374][T29356] EXT4-fs (loop7): 1 truncate cleaned up [ 618.191586][T29356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.211624][T29356] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.17701: deleted inode referenced: 12 [ 618.249064][T29367] netlink: 96 bytes leftover after parsing attributes in process `syz.8.17703'. [ 618.258736][ T9639] batadv0: left promiscuous mode [ 618.273580][T26030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.588870][T29393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17715'. [ 618.600414][T29393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17715'. [ 618.626439][T29398] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17716'. [ 618.938211][T29426] netlink: 'syz.8.17729': attribute type 30 has an invalid length. [ 619.763485][T29477] syzkaller0: entered allmulticast mode [ 619.808294][T29477] syzkaller0 (unregistering): left allmulticast mode [ 620.162214][T29503] SELinux: failed to load policy [ 620.343384][T29520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17767'. [ 620.379335][T29520] netlink: 92 bytes leftover after parsing attributes in process `syz.0.17767'. [ 620.888585][T29567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17785'. [ 620.938082][T29572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17788'. [ 621.157360][T29588] syzkaller0: entered allmulticast mode [ 621.165603][T29588] syzkaller0 (unregistering): left allmulticast mode [ 621.189137][T29593] netlink: 24 bytes leftover after parsing attributes in process `syz.8.17795'. [ 621.253888][T29613] netlink: 7 bytes leftover after parsing attributes in process `syz.8.17798'. [ 621.263930][T29613] netlink: 7 bytes leftover after parsing attributes in process `syz.8.17798'. [ 621.387732][T29626] lo speed is unknown, defaulting to 1000 [ 621.467417][T29631] lo speed is unknown, defaulting to 1000 [ 621.533764][T29660] syzkaller0: entered allmulticast mode [ 621.556331][T29660] syzkaller0 (unregistering): left allmulticast mode [ 621.616946][T29626] lo speed is unknown, defaulting to 1000 [ 621.712107][T29695] IPVS: Error connecting to the multicast addr [ 621.726871][T29631] lo speed is unknown, defaulting to 1000 [ 621.732998][T29646] siw: device registration error -23 [ 622.032569][T29731] lo: entered promiscuous mode [ 622.037598][T29731] lo: entered allmulticast mode [ 622.057685][T29731] tunl0: entered promiscuous mode [ 622.062863][T29731] tunl0: entered allmulticast mode [ 622.069159][T29731] : entered promiscuous mode [ 622.073900][T29731] : entered allmulticast mode [ 622.151219][T29731] gretap0: entered promiscuous mode [ 622.156555][T29731] gretap0: entered allmulticast mode [ 622.177897][T29731] erspan0: entered promiscuous mode [ 622.183181][T29731] erspan0: entered allmulticast mode [ 622.255745][T29731] ip_vti0: entered promiscuous mode [ 622.261054][T29731] ip_vti0: entered allmulticast mode [ 622.315629][T29731] ip6_vti0: entered promiscuous mode [ 622.321005][T29731] ip6_vti0: entered allmulticast mode [ 622.367651][T29747] sctp: [Deprecated]: syz.8.17832 (pid 29747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.367651][T29747] Use struct sctp_sack_info instead [ 622.387321][T29731] sit0: entered promiscuous mode [ 622.392312][T29731] sit0: entered allmulticast mode [ 622.401825][T29731] ip6tnl0: entered promiscuous mode [ 622.407276][T29731] ip6tnl0: entered allmulticast mode [ 622.414041][T29731] ip6gre0: entered promiscuous mode [ 622.419518][T29731] ip6gre0: entered allmulticast mode [ 622.430435][T29747] sctp: [Deprecated]: syz.8.17832 (pid 29747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.430435][T29747] Use struct sctp_sack_info instead [ 622.431349][T29731] syz_tun: entered allmulticast mode [ 622.453945][T29731] ip6gretap0: entered promiscuous mode [ 622.460505][T29731] ip6gretap0: entered allmulticast mode [ 622.468678][T29731] vcan0: entered promiscuous mode [ 622.473747][T29731] vcan0: entered allmulticast mode [ 622.480221][T29731] bond0: entered promiscuous mode [ 622.486342][T29731] bond0: entered allmulticast mode [ 622.492033][T29731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.500958][T29731] dummy0: entered promiscuous mode [ 622.507969][T29731] nlmon0: entered promiscuous mode [ 622.513158][T29731] nlmon0: entered allmulticast mode [ 622.520819][T29731] caif0: entered promiscuous mode [ 622.525945][T29731] caif0: entered allmulticast mode [ 622.531082][T29731] net_ratelimit: 11 callbacks suppressed [ 622.531103][T29731] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.553208][T18997] lo speed is unknown, defaulting to 1000 [ 622.558998][T18997] syz0: Port: 1 Link ACTIVE [ 622.574408][ T9650] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.595483][ T9650] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.615670][ T9639] batadv2: left promiscuous mode [ 622.625928][ T9650] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.649732][ T9650] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 622.672505][T29762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.730230][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 622.730300][ T29] audit: type=1326 audit(878.728:18425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.824843][ T29] audit: type=1326 audit(878.758:18426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.849206][ T29] audit: type=1326 audit(878.758:18427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.872377][ T29] audit: type=1326 audit(878.758:18428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.896489][ T29] audit: type=1326 audit(878.758:18429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.919740][ T29] audit: type=1326 audit(878.758:18430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.943753][ T29] audit: type=1326 audit(878.768:18431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.967742][ T29] audit: type=1326 audit(878.768:18432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 622.990871][ T29] audit: type=1326 audit(878.768:18433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 623.015053][ T29] audit: type=1326 audit(878.768:18434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29772 comm="syz.6.17842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff13fb5f783 code=0x7ffc0000 [ 623.140517][T29796] lo: entered promiscuous mode [ 623.145582][T29796] lo: entered allmulticast mode [ 623.179960][T29796] tunl0: entered promiscuous mode [ 623.186053][T29796] tunl0: entered allmulticast mode [ 623.202204][T29796] : entered promiscuous mode [ 623.206989][T29796] : entered allmulticast mode [ 623.225440][T29796] gretap0: left promiscuous mode [ 623.230440][T29796] gretap0: entered promiscuous mode [ 623.235769][T29796] gretap0: entered allmulticast mode [ 623.243956][T29796] erspan0: entered promiscuous mode [ 623.250090][T29796] erspan0: entered allmulticast mode [ 623.258229][T29796] ip_vti0: entered promiscuous mode [ 623.263493][T29796] ip_vti0: entered allmulticast mode [ 623.270867][T29796] ip6_vti0: entered promiscuous mode [ 623.277350][T29796] ip6_vti0: entered allmulticast mode [ 623.316407][T29796] sit0: entered promiscuous mode [ 623.321438][T29796] sit0: entered allmulticast mode [ 623.337387][T29796] ip6tnl0: entered promiscuous mode [ 623.342656][T29796] ip6tnl0: entered allmulticast mode [ 623.350668][T29796] ip6gre0: entered promiscuous mode [ 623.355995][T29796] ip6gre0: entered allmulticast mode [ 623.382648][T29796] syz_tun: entered allmulticast mode [ 623.391304][T29796] vcan0: entered promiscuous mode [ 623.396438][T29796] vcan0: entered allmulticast mode [ 623.406370][T29796] $H: entered promiscuous mode [ 623.411500][T29796] bond_slave_0: entered promiscuous mode [ 623.418209][T29796] bond_slave_1: entered promiscuous mode [ 623.424037][T29796] veth0_virt_wifi: entered promiscuous mode [ 623.430233][T29796] $H: entered allmulticast mode [ 623.435397][T29796] bond_slave_0: entered allmulticast mode [ 623.441147][T29796] bond_slave_1: entered allmulticast mode [ 623.447910][T29796] veth0_virt_wifi: entered allmulticast mode [ 623.498246][T29796] team0: entered promiscuous mode [ 623.503345][T29796] team_slave_0: entered promiscuous mode [ 623.509342][T29796] bridge4: entered promiscuous mode [ 623.514820][T29796] team0: entered allmulticast mode [ 623.519978][T29796] team_slave_0: entered allmulticast mode [ 623.526759][T29796] bridge4: entered allmulticast mode [ 623.547686][T29796] nlmon0: entered promiscuous mode [ 623.552918][T29796] nlmon0: entered allmulticast mode [ 623.560380][T29796] caif0: entered promiscuous mode [ 623.565685][T29796] caif0: entered allmulticast mode [ 623.570866][T29796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 623.599021][T29801] lo speed is unknown, defaulting to 1000 [ 623.651978][T29806] geneve2: entered promiscuous mode [ 623.657405][T29806] geneve2: entered allmulticast mode [ 623.713248][T29801] lo speed is unknown, defaulting to 1000 [ 623.724138][ T336] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.765546][ T336] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.773974][ T336] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.790171][ T336] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.893356][T29854] lo speed is unknown, defaulting to 1000 [ 623.905215][T29861] __nla_validate_parse: 10 callbacks suppressed [ 623.905280][T29861] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17864'. [ 624.085294][T29874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29874 comm=syz.7.17871 [ 624.170881][ T9650] batadv0: left promiscuous mode [ 624.228241][T29854] lo speed is unknown, defaulting to 1000 [ 624.591234][T29854] netlink: 28 bytes leftover after parsing attributes in process `syz.8.17865'. [ 624.761833][T29932] veth0_to_team: entered promiscuous mode [ 625.079499][T29953] lo speed is unknown, defaulting to 1000 [ 625.088643][T29960] bridge0: port 1(gretap0) entered blocking state [ 625.095342][T29960] bridge0: port 1(gretap0) entered disabled state [ 625.118251][T29960] bridge0: port 1(gretap0) entered blocking state [ 625.124773][T29960] bridge0: port 1(gretap0) entered forwarding state [ 625.260064][T29953] lo speed is unknown, defaulting to 1000 [ 625.316829][T29985] lo: entered promiscuous mode [ 625.321734][T29985] lo: entered allmulticast mode [ 625.329472][T29985] tunl0: entered promiscuous mode [ 625.334625][T29985] tunl0: entered allmulticast mode [ 625.346499][T29985] gre0: entered promiscuous mode [ 625.351589][T29985] gre0: entered allmulticast mode [ 625.362692][T29985] gretap0: entered promiscuous mode [ 625.368009][T29985] gretap0: entered allmulticast mode [ 625.375583][T29985] erspan0: entered promiscuous mode [ 625.380986][T29985] erspan0: entered allmulticast mode [ 625.388915][T29985] ip_vti0: entered promiscuous mode [ 625.394146][T29985] ip_vti0: entered allmulticast mode [ 625.400715][T29985] ip6_vti0: entered promiscuous mode [ 625.406225][T29985] ip6_vti0: entered allmulticast mode [ 625.430022][T29985] sit0: entered promiscuous mode [ 625.435119][T29985] sit0: entered allmulticast mode [ 625.441584][T29985] ip6tnl0: entered promiscuous mode [ 625.447753][T29985] ip6tnl0: entered allmulticast mode [ 625.473995][T29985] ip6gre0: entered promiscuous mode [ 625.480188][T29985] ip6gre0: entered allmulticast mode [ 625.507300][T29985] syz_tun: entered promiscuous mode [ 625.512559][T29985] syz_tun: entered allmulticast mode [ 625.544296][T29985] ip6gretap0: entered promiscuous mode [ 625.550010][T29985] ip6gretap0: entered allmulticast mode [ 625.558099][T29985] bridge0: entered promiscuous mode [ 625.563357][T29985] bridge0: entered allmulticast mode [ 625.571752][T29985] vcan0: entered promiscuous mode [ 625.576966][T29985] vcan0: entered allmulticast mode [ 625.626133][T29985] bond0: entered promiscuous mode [ 625.631231][T29985] bond_slave_0: entered promiscuous mode [ 625.637035][T29985] bond_slave_1: entered promiscuous mode [ 625.642847][T29985] bond0: entered allmulticast mode [ 625.648092][T29985] bond_slave_0: entered allmulticast mode [ 625.653864][T29985] bond_slave_1: entered allmulticast mode [ 625.687508][T29985] team0: entered promiscuous mode [ 625.692610][T29985] team_slave_0: entered promiscuous mode [ 625.698587][T29985] team_slave_1: entered promiscuous mode [ 625.704331][T29985] team0: entered allmulticast mode [ 625.709614][T29985] team_slave_0: entered allmulticast mode [ 625.716451][T29985] team_slave_1: entered allmulticast mode [ 625.734358][T29985] dummy0: entered promiscuous mode [ 625.739669][T29985] dummy0: entered allmulticast mode [ 625.750261][T29985] nlmon0: entered promiscuous mode [ 625.755599][T29985] nlmon0: entered allmulticast mode [ 625.769238][T29985] caif0: entered promiscuous mode [ 625.774376][T29985] caif0: entered allmulticast mode [ 625.780523][T29985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 626.566185][T30044] netlink: 'syz.6.17921': attribute type 4 has an invalid length. [ 626.711088][T30062] loop7: detected capacity change from 0 to 1024 [ 626.748084][T30062] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 626.958144][T30089] lo speed is unknown, defaulting to 1000 [ 627.003048][T30096] bridge0: port 3(gretap0) entered blocking state [ 627.010800][T30096] bridge0: port 3(gretap0) entered disabled state [ 627.040035][T30096] bridge0: port 3(gretap0) entered blocking state [ 627.046636][T30096] bridge0: port 3(gretap0) entered forwarding state [ 627.118103][T30101] lo speed is unknown, defaulting to 1000 [ 627.195532][T30089] lo speed is unknown, defaulting to 1000 [ 627.597034][T30101] lo speed is unknown, defaulting to 1000 [ 628.044776][T30187] lo speed is unknown, defaulting to 1000 [ 628.054299][T30197] bridge0: port 1(gretap0) entered blocking state [ 628.060833][T30197] bridge0: port 1(gretap0) entered disabled state [ 628.101144][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 628.101163][ T29] audit: type=1400 audit(884.098:18530): avc: denied { shutdown } for pid=30199 comm="syz.6.17960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 628.227947][T30187] lo speed is unknown, defaulting to 1000 [ 628.452468][ T29] audit: type=1400 audit(884.448:18531): avc: denied { connect } for pid=30228 comm="syz.6.17964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 628.509963][T30231] netlink: 5 bytes leftover after parsing attributes in process `syz.0.17965'. [ 628.521687][ T29] audit: type=1400 audit(884.458:18532): avc: denied { write } for pid=30228 comm="syz.6.17964" laddr=fe80::a8aa:aaff:feaa:aaaa lport=27746 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 628.546878][ T29] audit: type=1326 audit(884.478:18533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.0.17965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 628.570034][ T29] audit: type=1326 audit(884.478:18534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.0.17965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 628.584982][T30231] 0{X: renamed from gretap0 (while UP) [ 628.595451][ T29] audit: type=1326 audit(884.478:18535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.0.17965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 628.623117][ T29] audit: type=1326 audit(884.478:18536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.0.17965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 628.647250][ T29] audit: type=1326 audit(884.478:18537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.0.17965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 628.670428][ T29] audit: type=1326 audit(884.478:18538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.0.17965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 628.694488][ T29] audit: type=1326 audit(884.478:18539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30230 comm="syz.0.17965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 628.735423][T30231] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 628.771459][T30240] lo: left promiscuous mode [ 628.777052][T30240] lo: left allmulticast mode [ 628.786563][T30240] netlink: 'syz.7.17968': attribute type 13 has an invalid length. [ 628.814503][T30240] tunl0: left promiscuous mode [ 628.819428][T30240] tunl0: left allmulticast mode [ 628.836083][T30240] gre0: left promiscuous mode [ 628.840832][T30240] gre0: left allmulticast mode [ 628.885858][T30240] gretap0: refused to change device tx_queue_len [ 628.900495][T30240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 629.634007][T30306] netlink: 172 bytes leftover after parsing attributes in process `syz.7.17993'. [ 629.654462][T30302] lo speed is unknown, defaulting to 1000 [ 629.685570][T30313] bridge0: port 3(gretap0) entered blocking state [ 629.692083][T30313] bridge0: port 3(gretap0) entered disabled state [ 629.724889][T30313] gretap0: entered allmulticast mode [ 629.742177][T30313] gretap0: entered promiscuous mode [ 629.768910][T30313] bridge0: port 3(gretap0) entered blocking state [ 629.775506][T30313] bridge0: port 3(gretap0) entered forwarding state [ 629.805616][T30319] tipc: Started in network mode [ 629.810643][T30319] tipc: Node identity ac14140f, cluster identity 4711 [ 629.826081][T30319] tipc: New replicast peer: 255.255.255.255 [ 629.832204][T30319] tipc: Enabled bearer , priority 10 [ 629.850603][T30317] lo speed is unknown, defaulting to 1000 [ 629.936029][T30330] netlink: 'syz.1.18002': attribute type 4 has an invalid length. [ 629.964046][T18948] lo speed is unknown, defaulting to 1000 [ 629.969988][T18948] syz0: Port: 1 Link DOWN [ 630.096446][T30302] lo speed is unknown, defaulting to 1000 [ 630.211491][T30364] lo: entered promiscuous mode [ 630.217324][T30364] lo: entered allmulticast mode [ 630.263133][T30364] tunl0: entered promiscuous mode [ 630.268542][T30364] tunl0: entered allmulticast mode [ 630.275957][T30321] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17996'. [ 630.284998][T30321] netlink: 28 bytes leftover after parsing attributes in process `syz.7.17996'. [ 630.300573][T30364] gre0: entered promiscuous mode [ 630.306585][T30364] gre0: entered allmulticast mode [ 630.324091][T30364] erspan0: entered promiscuous mode [ 630.329569][T30364] erspan0: entered allmulticast mode [ 630.337547][T30364] ip_vti0: entered promiscuous mode [ 630.342782][T30364] ip_vti0: entered allmulticast mode [ 630.349671][T30364] ip6_vti0: entered promiscuous mode [ 630.355084][T30364] ip6_vti0: entered allmulticast mode [ 630.361573][T30364] sit0: entered promiscuous mode [ 630.367625][T30364] sit0: entered allmulticast mode [ 630.374058][T30364] ip6tnl0: entered promiscuous mode [ 630.379337][T30364] ip6tnl0: entered allmulticast mode [ 630.386235][T30364] ip6gre0: entered promiscuous mode [ 630.391464][T30364] ip6gre0: entered allmulticast mode [ 630.405385][T30364] syz_tun: entered promiscuous mode [ 630.410644][T30364] syz_tun: entered allmulticast mode [ 630.417384][T30364] ip6gretap0: entered promiscuous mode [ 630.422869][T30364] ip6gretap0: entered allmulticast mode [ 630.430832][T30364] bridge0: entered promiscuous mode [ 630.436211][T30364] bridge0: entered allmulticast mode [ 630.443019][T30364] .`: entered promiscuous mode [ 630.447878][T30364] bond_slave_0: entered promiscuous mode [ 630.453650][T30364] bond_slave_1: entered promiscuous mode [ 630.460381][T30364] .`: entered allmulticast mode [ 630.465309][T30364] bond_slave_0: entered allmulticast mode [ 630.471234][T30364] bond_slave_1: entered allmulticast mode [ 630.487148][T30364] 8021q: adding VLAN 0 to HW filter on device .` [ 630.495641][T30364] dummy0: entered promiscuous mode [ 630.500813][T30364] dummy0: entered allmulticast mode [ 630.508190][T30364] nlmon0: entered promiscuous mode [ 630.513349][T30364] nlmon0: entered allmulticast mode [ 630.527090][T30364] caif0: entered promiscuous mode [ 630.532170][T30364] caif0: entered allmulticast mode [ 630.537384][T30364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.563411][T30321] geneve2: entered promiscuous mode [ 630.568868][T30321] geneve2: entered allmulticast mode [ 630.616663][T30317] lo speed is unknown, defaulting to 1000 [ 630.729072][T30401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18010'. [ 630.907029][T30409] netlink: 'syz.0.18015': attribute type 1 has an invalid length. [ 630.959987][ T3499] tipc: Node number set to 2886997007 [ 631.705708][T30459] bridge0: entered promiscuous mode [ 631.711883][T30459] bridge0: port 1(macvtap2) entered blocking state [ 631.719598][T30459] bridge0: port 1(macvtap2) entered disabled state [ 631.738069][T30459] macvtap2: entered allmulticast mode [ 631.743715][T30459] bridge0: entered allmulticast mode [ 631.749814][T30459] macvtap2: left allmulticast mode [ 631.755200][T30459] bridge0: left allmulticast mode [ 631.761981][T30459] bridge0: left promiscuous mode [ 631.865674][T30474] lo: left promiscuous mode [ 631.870365][T30474] lo: left allmulticast mode [ 631.880504][T30477] netlink: 24 bytes leftover after parsing attributes in process `syz.7.18043'. [ 631.890232][T30478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18042'. [ 631.913312][T30474] netlink: 'syz.6.18039': attribute type 13 has an invalid length. [ 631.923292][T30478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18042'. [ 631.943016][T30474] tunl0: left promiscuous mode [ 631.948942][T30474] tunl0: left allmulticast mode [ 631.956431][T30474] gre0: left promiscuous mode [ 631.961158][T30474] gre0: left allmulticast mode [ 631.969284][T30474] gretap0: refused to change device tx_queue_len [ 631.978655][T30474] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 632.002011][T30495] netlink: 3 bytes leftover after parsing attributes in process `syz.0.18042'. [ 632.215591][T30515] netlink: 'syz.7.18052': attribute type 4 has an invalid length. [ 632.431822][T30528] netlink: 'syz.8.18058': attribute type 21 has an invalid length. [ 632.439935][T30528] netlink: 'syz.8.18058': attribute type 10 has an invalid length. [ 632.448185][T30528] netlink: 'syz.8.18058': attribute type 11 has an invalid length. [ 632.457335][T30528] netlink: 'syz.8.18058': attribute type 12 has an invalid length. [ 632.465530][T30528] netlink: 'syz.8.18058': attribute type 13 has an invalid length. [ 632.473871][T30528] netlink: 'syz.8.18058': attribute type 14 has an invalid length. [ 632.482446][T30528] netlink: 'syz.8.18058': attribute type 15 has an invalid length. [ 632.491436][T30528] netlink: 'syz.8.18058': attribute type 16 has an invalid length. [ 632.926205][T30578] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18080'. [ 632.935545][T30578] netlink: 28 bytes leftover after parsing attributes in process `syz.8.18080'. [ 633.046075][T30582] : entered promiscuous mode [ 633.080975][T30582] bridge0: port 2() entered blocking state [ 633.087914][T30582] bridge0: port 2() entered disabled state [ 633.106894][T30582] : entered allmulticast mode [ 633.111730][T30582] bridge0: entered allmulticast mode [ 633.126848][T30582] : left allmulticast mode [ 633.131429][T30582] bridge0: left allmulticast mode [ 633.216883][T30598] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=30598 comm=syz.8.18088 [ 633.229771][T30598] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=30598 comm=syz.8.18088 [ 633.538382][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 633.538398][ T29] audit: type=1326 audit(889.538:18715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.602987][T30610] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 633.618960][T30610] vhci_hcd vhci_hcd.2: invalid port number 96 [ 633.626181][T30610] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 633.682269][ T29] audit: type=1326 audit(889.568:18716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.706475][ T29] audit: type=1326 audit(889.568:18717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.729741][ T29] audit: type=1326 audit(889.568:18718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.753453][ T29] audit: type=1326 audit(889.598:18719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.777637][ T29] audit: type=1326 audit(889.598:18720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.800871][ T29] audit: type=1326 audit(889.598:18721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.824890][ T29] audit: type=1326 audit(889.598:18722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.848126][ T29] audit: type=1326 audit(889.598:18723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 633.872240][ T29] audit: type=1326 audit(889.618:18724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30613 comm="syz.8.18096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 634.110311][T30640] xt_hashlimit: max too large, truncated to 1048576 [ 634.635792][T30662] __nla_validate_parse: 7 callbacks suppressed [ 634.635813][T30662] netlink: 3 bytes leftover after parsing attributes in process `syz.1.18117'. [ 634.867396][T30691] tipc: Started in network mode [ 634.872337][T30691] tipc: Node identity ac14140f, cluster identity 4711 [ 634.887989][T30691] tipc: New replicast peer: 255.255.255.255 [ 634.894192][T30691] tipc: Enabled bearer , priority 10 [ 634.973977][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18134'. [ 634.988598][T30702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18134'. [ 635.008359][T30702] netlink: 3 bytes leftover after parsing attributes in process `syz.6.18134'. [ 635.024047][T30707] netlink: 24 bytes leftover after parsing attributes in process `syz.8.18124'. [ 635.243990][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18149'. [ 635.547417][T30788] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.18165'. [ 635.591355][T30795] bridge0: port 4(macvtap1) entered blocking state [ 635.598448][T30795] bridge0: port 4(macvtap1) entered disabled state [ 635.623824][T30795] macvtap1: entered allmulticast mode [ 635.634525][T30795] macvtap1: left allmulticast mode [ 635.885046][T18997] tipc: Node number set to 2886997007 [ 635.899652][T30839] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18180'. [ 636.033173][ T3499] Process accounting resumed [ 636.223965][T30849] tipc: Bearer : already 2 bearers with priority 10 [ 636.231372][T30849] tipc: Bearer : trying with adjusted priority [ 636.246711][T30849] tipc: Enabled bearer , priority 9 [ 636.661029][T30858] loop7: detected capacity change from 0 to 1024 [ 636.730528][T30858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.764821][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18194'. [ 636.777669][T30878] block device autoloading is deprecated and will be removed. [ 636.809662][T30875] bond2: (slave batadv0): Releasing active interface [ 636.964643][T26030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.288784][T30916] netlink: 24 bytes leftover after parsing attributes in process `syz.8.18202'. [ 637.967076][T31029] $H: renamed from .` (while UP) [ 637.986429][T31029] $H: left allmulticast mode [ 637.991351][T31029] bond_slave_0: left allmulticast mode [ 637.997884][T31029] bond_slave_1: left allmulticast mode [ 638.540697][T31076] pimreg: entered allmulticast mode [ 638.553996][T31076] pimreg: left allmulticast mode [ 638.645217][T31098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.652766][T31098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.683088][T31098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.690784][T31098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.834090][T31115] hsr_slave_1 (unregistering): left promiscuous mode [ 639.056208][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 639.056227][ T29] audit: type=1400 audit(895.058:18873): avc: denied { setopt } for pid=31147 comm="syz.7.18240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 639.183199][T31163] tipc: Enabling of bearer rejected, already enabled [ 639.206477][T31163] tipc: Disabling bearer [ 639.223142][T18999] Process accounting resumed [ 639.913427][T31212] $H: renamed from bond0 (while UP) [ 639.958049][T31212] $H: left allmulticast mode [ 639.962986][T31212] bond_slave_0: left allmulticast mode [ 639.968548][T31212] bond_slave_1: left allmulticast mode [ 639.983203][T31215] __nla_validate_parse: 10 callbacks suppressed [ 639.983221][T31215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18266'. [ 640.075394][T31223] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18268'. [ 640.084705][T31223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.092736][T31223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.117357][T31223] batman_adv: batadv0: Interface deactivated: dummy0 [ 640.124226][T31223] batman_adv: batadv0: Removing interface: dummy0 [ 640.163904][ T29] audit: type=1400 audit(896.158:18874): avc: denied { read } for pid=31230 comm="syz.7.18269" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.584012][ T29] audit: type=1326 audit(896.578:18875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f653bbf65e7 code=0x7ffc0000 [ 640.607143][ T29] audit: type=1326 audit(896.578:18876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f653bb9b829 code=0x7ffc0000 [ 640.630408][ T29] audit: type=1326 audit(896.578:18877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f653bbf65e7 code=0x7ffc0000 [ 640.692730][ T29] audit: type=1326 audit(896.588:18878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f653bb9b829 code=0x7ffc0000 [ 640.715999][ T29] audit: type=1326 audit(896.588:18879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 640.739156][ T29] audit: type=1326 audit(896.588:18880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 640.762447][ T29] audit: type=1326 audit(896.588:18881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 640.785671][ T29] audit: type=1326 audit(896.588:18882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31243 comm="syz.0.18274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 640.967508][T31251] sch_fq: defrate 0 ignored. [ 641.073520][T31257] vlan2: entered allmulticast mode [ 641.233384][T31265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18282'. [ 641.269483][T31265] bond8: (slave batadv0): Releasing active interface [ 641.594869][T31293] validate_nla: 10 callbacks suppressed [ 641.594891][T31293] netlink: 'syz.8.18293': attribute type 39 has an invalid length. [ 641.976371][T31329] netlink: 14 bytes leftover after parsing attributes in process `syz.6.18302'. [ 641.986756][T31329] hsr_slave_0: left promiscuous mode [ 642.454333][T31360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18316'. [ 642.464079][T31358] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18315'. [ 642.484308][T31358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.491865][T31358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.503644][T31358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.511373][T31358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.556866][T31364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18317'. [ 642.589027][T31364] syz_tun: left allmulticast mode [ 642.613111][T31364] syz_tun: refused to change device tx_queue_len [ 642.696237][T31372] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18321'. [ 643.092679][T31397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18331'. [ 643.131278][T31397] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18331'. [ 643.691714][T31418] syz_tun: left allmulticast mode [ 643.721369][T31418] syz_tun: refused to change device tx_queue_len [ 644.457139][T31461] xt_hashlimit: max too large, truncated to 1048576 [ 645.072896][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 645.072911][ T29] audit: type=1326 audit(901.068:19209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.154709][ T29] audit: type=1326 audit(901.118:19210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.177877][ T29] audit: type=1326 audit(901.118:19211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.201100][ T29] audit: type=1326 audit(901.118:19212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.224293][ T29] audit: type=1326 audit(901.118:19213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.247448][ T29] audit: type=1326 audit(901.118:19214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.270564][T31488] __nla_validate_parse: 2 callbacks suppressed [ 645.270581][T31488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18367'. [ 645.286234][ T29] audit: type=1326 audit(901.118:19215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.309366][ T29] audit: type=1326 audit(901.118:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.332481][ T29] audit: type=1326 audit(901.118:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.355591][ T29] audit: type=1326 audit(901.118:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31478 comm="syz.6.18362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 645.562506][T31513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18376'. [ 645.577388][T31513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18376'. [ 645.738624][T31534] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 646.621390][T31595] pimreg: entered allmulticast mode [ 646.638086][T31595] pimreg: left allmulticast mode [ 647.372398][T31637] vlan0: entered allmulticast mode [ 647.501732][T31649] pim6reg: entered allmulticast mode [ 647.524897][T31654] sch_tbf: burst 22 is lower than device wg0 mtu (1420) ! [ 647.535743][T31649] pim6reg: left allmulticast mode [ 647.742377][T31691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18442'. [ 647.756924][T31691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18442'. [ 647.758670][T31690] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18452'. [ 647.905367][T31699] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18444'. [ 648.155534][T31721] bridge: RTM_NEWNEIGH with invalid ether address [ 648.380180][T31747] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 648.391640][T31746] IPVS: stopping backup sync thread 31747 ... [ 649.068915][T31785] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.078858][T31785] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.149453][T31785] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.159464][T31785] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.228295][T31785] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.238315][T31785] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.316056][T31785] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 649.327220][T31785] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.396559][ T8367] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.404990][ T8367] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.445595][ T8367] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.453903][ T8367] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.463136][ T8367] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.471389][ T8367] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.480100][ T8367] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 649.489313][ T8367] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.940366][ T29] kauditd_printk_skb: 911 callbacks suppressed [ 652.940384][ T29] audit: type=1326 audit(908.938:20130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f13c665e7 code=0x7ffc0000 [ 652.995094][ T29] audit: type=1326 audit(908.978:20131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f13c0b829 code=0x7ffc0000 [ 653.018468][ T29] audit: type=1326 audit(908.978:20132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0f13c665e7 code=0x7ffc0000 [ 653.041525][ T29] audit: type=1326 audit(908.978:20133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0f13c0b829 code=0x7ffc0000 [ 653.064607][ T29] audit: type=1326 audit(908.978:20134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 653.087730][ T29] audit: type=1326 audit(908.978:20135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 653.110827][ T29] audit: type=1326 audit(908.978:20136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 653.134052][ T29] audit: type=1326 audit(908.978:20137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31885 comm="syz.1.18512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 653.250504][ T29] audit: type=1326 audit(909.088:20138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31905 comm="syz.8.18518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 653.274128][ T29] audit: type=1326 audit(909.088:20139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31905 comm="syz.8.18518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 653.739379][T31950] syzkaller0: entered allmulticast mode [ 653.765494][T31950] syzkaller0 (unregistering): left allmulticast mode [ 654.173245][T31985] loop7: detected capacity change from 0 to 4096 [ 654.206037][T31985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.358669][T26030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.607270][T31999] loop7: detected capacity change from 0 to 1024 [ 654.637361][T31999] EXT4-fs: Ignoring removed nobh option [ 654.643129][T31999] EXT4-fs: inline encryption not supported [ 654.688634][T31999] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.724063][T18997] Process accounting resumed [ 654.730227][T31999] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.18554: Allocating blocks 385-513 which overlap fs metadata [ 654.760682][T31999] EXT4-fs (loop7): pa ffff888107963af0: logic 16, phys. 129, len 24 [ 654.768823][T31999] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 654.796584][T31999] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 654.809081][T31999] EXT4-fs (loop7): This should not happen!! Data will be lost [ 654.809081][T31999] [ 654.818845][T31999] EXT4-fs (loop7): Total free blocks count 0 [ 654.824894][T31999] EXT4-fs (loop7): Free/Dirty block details [ 654.830811][T31999] EXT4-fs (loop7): free_blocks=128 [ 654.835991][T31999] EXT4-fs (loop7): dirty_blocks=0 [ 654.841061][T31999] EXT4-fs (loop7): Block reservation details [ 654.847209][T31999] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 654.907816][T32025] netlink: 87 bytes leftover after parsing attributes in process `syz.8.18563'. [ 655.151067][T32046] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 655.892324][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.8.18588'. [ 655.975931][ T9624] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.041665][ T9624] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.092962][T32100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 656.105879][ T9624] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.169973][ T9624] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.258940][ T9624] gretap0: left allmulticast mode [ 656.264051][ T9624] gretap0: left promiscuous mode [ 656.269200][ T9624] bridge0: port 3(gretap0) entered disabled state [ 656.306220][ T9624] bridge_slave_1: left allmulticast mode [ 656.311929][ T9624] bridge_slave_1: left promiscuous mode [ 656.318071][ T9624] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.350408][ T9624] bridge_slave_0: left promiscuous mode [ 656.356448][ T9624] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.607424][T32138] Set syz1 is full, maxelem 65536 reached [ 656.647972][ T9624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 656.679449][ T9624] bond_slave_0: left promiscuous mode [ 656.685031][ T9624] bond_slave_0: left allmulticast mode [ 656.723887][ T9624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.755759][ T9624] bond_slave_1: left promiscuous mode [ 656.761316][ T9624] bond_slave_1: left allmulticast mode [ 656.772660][ T9624] bond0 (unregistering): Released all slaves [ 656.941913][T32101] lo speed is unknown, defaulting to 1000 [ 656.975305][ T9624] tipc: Left network mode [ 657.152719][T32101] lo speed is unknown, defaulting to 1000 [ 657.288604][ T9624] veth1_macvtap: left promiscuous mode [ 657.300922][ T9624] veth0_macvtap: left promiscuous mode [ 657.310927][ T9624] veth1_vlan: left promiscuous mode [ 657.321059][ T9624] veth0_vlan: left promiscuous mode [ 657.497011][ T9624] team_slave_1 (unregistering): left promiscuous mode [ 657.503951][ T9624] team_slave_1 (unregistering): left allmulticast mode [ 657.523302][ T9624] team0 (unregistering): Port device team_slave_1 removed [ 657.534405][ T9624] team_slave_0 (unregistering): left promiscuous mode [ 657.542353][ T9624] team_slave_0 (unregistering): left allmulticast mode [ 657.550011][ T9624] team0 (unregistering): Port device team_slave_0 removed [ 657.607690][T32213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18622'. [ 657.678159][T32213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18622'. [ 657.722494][T32101] chnl_net:caif_netlink_parms(): no params data found [ 657.853927][T32353] atomic_op ffff88811a4c1d28 conn xmit_atomic 0000000000000000 [ 657.908606][T32101] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.916000][T32101] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.929451][T32101] bridge_slave_0: entered allmulticast mode [ 657.936746][T32101] bridge_slave_0: entered promiscuous mode [ 657.944287][T32101] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.951518][T32101] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.960046][T32101] bridge_slave_1: entered allmulticast mode [ 657.966681][T32101] bridge_slave_1: entered promiscuous mode [ 657.996815][T32101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.017341][T32101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.062055][T32101] team0: Port device team_slave_0 added [ 658.076941][T32101] team0: Port device team_slave_1 added [ 658.103460][T32101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.111538][T32101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.138431][T32101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.150580][T32101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.157705][T32101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.183706][T32101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.214936][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 658.214955][ T29] audit: type=1326 audit(914.198:20221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32473 comm="syz.8.18636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 658.245228][ T29] audit: type=1326 audit(914.198:20222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32473 comm="syz.8.18636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 658.268806][ T29] audit: type=1326 audit(914.198:20223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32473 comm="syz.8.18636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 658.292902][ T29] audit: type=1326 audit(914.208:20224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32473 comm="syz.8.18636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 658.317312][ T29] audit: type=1326 audit(914.208:20225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32473 comm="syz.8.18636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 658.368520][T32101] hsr_slave_0: entered promiscuous mode [ 658.377693][T32101] hsr_slave_1: entered promiscuous mode [ 658.476896][T32101] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.546816][T32101] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.606024][T32101] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.781635][T32101] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.886327][T32101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 658.934572][T32101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 658.952680][T32101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 658.973530][T32101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 659.045440][ T29] audit: type=1326 audit(915.048:20226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32611 comm="syz.0.18646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 659.127921][T32101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.144684][ T29] audit: type=1326 audit(915.048:20227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32611 comm="syz.0.18646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 659.168045][ T29] audit: type=1326 audit(915.048:20228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32611 comm="syz.0.18646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 659.177814][T32101] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.191115][ T29] audit: type=1326 audit(915.048:20229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32611 comm="syz.0.18646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 659.191209][ T29] audit: type=1326 audit(915.048:20230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32611 comm="syz.0.18646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 659.260124][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.267237][ T9627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.280959][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.288126][ T9627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.308529][T32101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.319031][T32101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.369557][T32629] lo speed is unknown, defaulting to 1000 [ 659.407423][T32101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.418192][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18653'. [ 659.427478][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18653'. [ 659.612979][T32629] lo speed is unknown, defaulting to 1000 [ 659.689206][T32101] veth0_vlan: entered promiscuous mode [ 659.698155][T32101] veth1_vlan: entered promiscuous mode [ 659.723586][T32101] veth0_macvtap: entered promiscuous mode [ 659.732161][T32101] veth1_macvtap: entered promiscuous mode [ 659.744174][T32101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.753623][T32101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.768741][ T336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.795454][ T336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.855131][ T336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.906165][ T336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.070804][T32703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18668'. [ 660.105709][T32704] loop7: detected capacity change from 0 to 7 [ 660.122054][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.131683][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.139932][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.149551][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.161262][T32704] loop7: unable to read partition table [ 660.170986][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.174916][T32704] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 660.180613][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.213221][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.222908][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.233395][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.243037][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.251491][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.261095][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.270515][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.280145][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.288256][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.297894][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.306198][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.315819][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.325214][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 660.334822][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 660.824206][ T300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18688'. [ 660.941840][ T317] loop2: detected capacity change from 0 to 2048 [ 660.995374][ T317] loop2: p2 < > p4 [ 660.999822][ T317] loop2: p4 size 262144 extends beyond EOD, truncated [ 661.270316][ T349] netlink: 'syz.8.18698': attribute type 12 has an invalid length. [ 661.444098][ T361] netlink: 'syz.1.18705': attribute type 10 has an invalid length. [ 661.452238][ T363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.471192][ T361] dummy0: left promiscuous mode [ 661.481856][ T363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.505862][ T371] netlink: 'syz.1.18705': attribute type 10 has an invalid length. [ 661.527829][ T371] dummy0: entered promiscuous mode [ 661.545434][ T371] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 661.568714][ T373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18708'. [ 661.778384][ T388] netlink: 'syz.6.18715': attribute type 1 has an invalid length. [ 661.908852][ T398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18720'. [ 662.023062][ T414] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 662.702446][ T442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18732'. [ 663.027411][ T453] netlink: 64 bytes leftover after parsing attributes in process `syz.8.18735'. [ 663.280789][ T437] Set syz1 is full, maxelem 65536 reached [ 663.311372][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 663.311388][ T29] audit: type=1326 audit(919.308:20334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=506 comm="syz.1.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.359668][ T29] audit: type=1326 audit(919.348:20335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=506 comm="syz.1.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.383574][ T29] audit: type=1326 audit(919.348:20336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=506 comm="syz.1.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.407929][ T29] audit: type=1326 audit(919.348:20337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=506 comm="syz.1.18741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.460512][ T29] audit: type=1326 audit(919.458:20338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.1.18746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.484406][ T29] audit: type=1326 audit(919.458:20339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.1.18746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.588525][ T29] audit: type=1326 audit(919.458:20340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.1.18746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.612576][ T29] audit: type=1326 audit(919.458:20341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.1.18746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.636670][ T29] audit: type=1326 audit(919.458:20342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.1.18746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.659619][ T29] audit: type=1326 audit(919.458:20343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=513 comm="syz.1.18746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0f13c6f749 code=0x7ffc0000 [ 663.754114][ T527] bridge0: entered promiscuous mode [ 663.772794][ T527] macsec1: entered promiscuous mode [ 663.791729][ T527] bridge0: port 1(macsec1) entered blocking state [ 663.798322][ T527] bridge0: port 1(macsec1) entered disabled state [ 663.816449][ T527] macsec1: entered allmulticast mode [ 663.821808][ T527] bridge0: entered allmulticast mode [ 663.858021][ T527] macsec1: left allmulticast mode [ 663.863127][ T527] bridge0: left allmulticast mode [ 663.871444][ T527] bridge0: left promiscuous mode [ 663.933502][ T536] lo speed is unknown, defaulting to 1000 [ 664.239349][ T536] lo speed is unknown, defaulting to 1000 [ 664.883402][ T604] netlink: 'syz.1.18773': attribute type 1 has an invalid length. [ 664.948724][ T604] bond4: entered promiscuous mode [ 664.954084][ T604] bond4: entered allmulticast mode [ 664.961148][ T604] 8021q: adding VLAN 0 to HW filter on device bond4 [ 665.106667][ T655] netlink: 12 bytes leftover after parsing attributes in process `syz.8.18779'. [ 665.142289][ T661] netlink: 32 bytes leftover after parsing attributes in process `syz.6.18780'. [ 665.229742][ T665] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18781'. [ 665.282128][ T676] netlink: 24 bytes leftover after parsing attributes in process `syz.6.18785'. [ 665.367495][ T682] lo speed is unknown, defaulting to 1000 [ 665.507585][ T682] lo speed is unknown, defaulting to 1000 [ 665.933496][ T757] bridge: RTM_NEWNEIGH with invalid ether address [ 666.061274][ T765] netlink: 20 bytes leftover after parsing attributes in process `'. [ 666.171401][ T775] netlink: 'syz.2.18813': attribute type 1 has an invalid length. [ 666.194989][ T773] syzkaller0: entered allmulticast mode [ 666.210741][ T773] syzkaller0: entered promiscuous mode [ 666.255073][ T773] syzkaller0 (unregistering): left promiscuous mode [ 666.261756][ T773] syzkaller0 (unregistering): left allmulticast mode [ 666.309445][ T789] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 666.471058][ T803] lo speed is unknown, defaulting to 1000 [ 666.555340][ T797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18822'. [ 666.564378][ T797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18822'. [ 666.809091][ T803] lo speed is unknown, defaulting to 1000 [ 666.933669][ T840] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18830'. [ 667.019047][ T854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18830'. [ 667.125956][ T868] loop2: detected capacity change from 0 to 512 [ 667.165529][ T868] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.18836: bad orphan inode 11862016 [ 667.185359][ T868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 667.551787][ T892] lo speed is unknown, defaulting to 1000 [ 667.584739][T32101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 667.753180][ T908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18848'. [ 667.922035][ T892] lo speed is unknown, defaulting to 1000 [ 668.282273][ T978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=978 comm=syz.2.18856 [ 668.571092][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 668.571110][ T29] audit: type=1326 audit(924.568:20477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.694802][ T29] audit: type=1326 audit(924.598:20478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.717968][ T29] audit: type=1326 audit(924.598:20479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.741030][ T29] audit: type=1326 audit(924.598:20480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.764139][ T29] audit: type=1326 audit(924.598:20481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.787179][ T29] audit: type=1326 audit(924.598:20482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.810261][ T29] audit: type=1326 audit(924.598:20483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.833405][ T29] audit: type=1326 audit(924.598:20484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.856476][ T29] audit: type=1326 audit(924.598:20485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1014 comm="syz.0.18864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 668.879535][ T29] audit: type=1400 audit(924.618:20486): avc: denied { create } for pid=1017 comm="syz.2.18865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 669.021926][ T1043] macsec0: entered promiscuous mode [ 669.027427][ T1043] bridge0: entered promiscuous mode [ 669.047062][ T1043] bridge0: port 2(macsec0) entered blocking state [ 669.053621][ T1043] bridge0: port 2(macsec0) entered disabled state [ 669.074139][ T1043] macsec0: entered allmulticast mode [ 669.080642][ T1043] bridge0: entered allmulticast mode [ 669.099613][ T1043] macsec0: left allmulticast mode [ 669.105801][ T1043] bridge0: left allmulticast mode [ 669.135774][ T1043] bridge0: left promiscuous mode [ 669.272912][ T1063] lo speed is unknown, defaulting to 1000 [ 669.521707][ T1063] lo speed is unknown, defaulting to 1000 [ 670.301422][ T1183] __nla_validate_parse: 1 callbacks suppressed [ 670.301446][ T1183] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18886'. [ 670.536771][ T1200] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18895'. [ 671.904486][ T1333] Set syz1 is full, maxelem 6117 reached [ 671.998322][ T1343] loop2: detected capacity change from 0 to 1024 [ 672.028748][ T1343] EXT4-fs: Ignoring removed mblk_io_submit option [ 672.049653][ T1343] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 672.100004][ T1343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.279971][ T1343] EXT4-fs error (device loop2): __ext4_iget:5426: inode #12: block 13: comm syz.2.18920: invalid block [ 672.310562][ T1343] EXT4-fs (loop2): Remounting filesystem read-only [ 672.355286][T32101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 672.427163][ T1397] ip6tnl1: entered promiscuous mode [ 672.432631][ T1397] ip6tnl1: entered allmulticast mode [ 672.720759][ T1438] loop2: detected capacity change from 0 to 512 [ 672.784902][ T1438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 672.800644][ T1438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.887047][T32101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.061247][ T1477] tipc: Started in network mode [ 673.067176][ T1477] tipc: Node identity ac14140f, cluster identity 4711 [ 673.144672][ T1477] tipc: New replicast peer: 255.255.255.83 [ 673.150589][ T1477] tipc: Enabled bearer , priority 10 [ 673.420478][ T1497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.18951'. [ 673.502979][ T1510] netlink: 'syz.0.18955': attribute type 1 has an invalid length. [ 673.830807][ T1522] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.890579][ T1522] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.956529][ T1522] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.978247][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 673.978262][ T29] audit: type=1400 audit(929.978:20630): avc: denied { create } for pid=1553 comm="syz.2.18966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 674.017309][ T1522] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.027834][ T29] audit: type=1400 audit(930.008:20631): avc: denied { bind } for pid=1553 comm="syz.2.18966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 674.053152][ T1556] block device autoloading is deprecated and will be removed. [ 674.082645][ T9623] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.104262][ T9623] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.185038][ T9623] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.205687][ T9623] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.265632][ T3499] tipc: Node number set to 2886997007 [ 674.275066][ T1586] netlink: 96 bytes leftover after parsing attributes in process `syz.1.18974'. [ 674.545222][ T1620] lo speed is unknown, defaulting to 1000 [ 674.650492][ T1620] lo speed is unknown, defaulting to 1000 [ 674.795727][ T1664] netlink: 64 bytes leftover after parsing attributes in process `syz.2.18991'. [ 674.842444][ T1669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18993'. [ 674.851782][ T1669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18993'. [ 674.878146][ T1669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18993'. [ 674.887372][ T1669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18993'. [ 674.927381][ T29] audit: type=1400 audit(930.928:20632): avc: denied { ioctl } for pid=1677 comm="syz.8.18998" path="socket:[167950]" dev="sockfs" ino=167950 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 674.954053][ T1676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18996'. [ 674.990107][ T29] audit: type=1326 audit(930.988:20633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1681 comm="syz.2.18999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 675.013587][ T29] audit: type=1326 audit(930.988:20634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1681 comm="syz.2.18999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 675.027635][ T1684] netlink: 'syz.8.19000': attribute type 30 has an invalid length. [ 675.036875][ T29] audit: type=1326 audit(930.988:20635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1681 comm="syz.2.18999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 675.067708][ T29] audit: type=1326 audit(930.988:20636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1681 comm="syz.2.18999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 675.090713][ T29] audit: type=1326 audit(930.988:20637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1681 comm="syz.2.18999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 675.113890][ T29] audit: type=1326 audit(930.988:20638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1681 comm="syz.2.18999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 675.136930][ T29] audit: type=1326 audit(930.988:20639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1681 comm="syz.2.18999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 675.703402][ T1757] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 676.050395][ T1796] lo speed is unknown, defaulting to 1000 [ 676.181645][ T1796] lo speed is unknown, defaulting to 1000 [ 676.198100][ T1821] __nla_validate_parse: 2 callbacks suppressed [ 676.198116][ T1821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.19045'. [ 676.219065][ T1821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.19045'. [ 676.649862][ T1841] xt_policy: too many policy elements [ 676.713231][ T1866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19055'. [ 676.753080][ T1868] vlan0: entered allmulticast mode [ 676.938333][ T1888] loop2: detected capacity change from 0 to 512 [ 676.946221][ T1888] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 676.958222][ T1888] EXT4-fs (loop2): 1 truncate cleaned up [ 676.964806][ T1888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.992915][T32101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.060590][ T1906] lo speed is unknown, defaulting to 1000 [ 677.157619][ T1906] lo speed is unknown, defaulting to 1000 [ 677.350265][ T1937] netlink: 'syz.6.19072': attribute type 1 has an invalid length. [ 677.380681][ T1937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.390105][ T1937] bond1: (slave batadv0): making interface the new active one [ 677.400368][ T1937] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 677.459667][ T1982] netlink: 'syz.6.19077': attribute type 3 has an invalid length. [ 677.548111][ T1990] netlink: 'syz.0.19081': attribute type 10 has an invalid length. [ 677.732881][ T2011] netlink: 'syz.0.19090': attribute type 3 has an invalid length. [ 677.942122][ T2047] netlink: 'syz.2.19105': attribute type 3 has an invalid length. [ 677.965691][ T2049] netlink: 19 bytes leftover after parsing attributes in process `syz.0.19115'. [ 678.048853][ T2051] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.056180][ T2051] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.114665][ T2051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.129504][ T2051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.191768][ T2053] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 678.201428][ T9646] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.231880][ T9646] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.257619][ T9646] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.286912][ T9646] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.326205][ T2079] loop2: detected capacity change from 0 to 764 [ 678.336998][ T2079] rock: directory entry would overflow storage [ 678.343259][ T2079] rock: sig=0x4f50, size=4, remaining=3 [ 678.348885][ T2079] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 679.026416][ T2130] loop2: detected capacity change from 0 to 128 [ 679.125794][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.125794][ T2126] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 679.146706][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.146706][ T2126] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 679.161123][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.161123][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.176001][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.176001][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.189977][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.189977][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.203851][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.203851][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.218654][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.218654][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.232667][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.232667][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.247441][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.247441][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.261414][ T2126] syz.2.19133: attempt to access beyond end of device [ 679.261414][ T2126] loop2: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 679.367961][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 679.367981][ T29] audit: type=1400 audit(935.368:20745): avc: denied { append } for pid=2143 comm="syz.6.19140" name="file0" dev="tmpfs" ino=3062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 679.520732][ T29] audit: type=1326 audit(935.518:20746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.584654][ T29] audit: type=1326 audit(935.548:20747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.608892][ T29] audit: type=1326 audit(935.548:20748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.631850][ T29] audit: type=1326 audit(935.548:20749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.656027][ T29] audit: type=1326 audit(935.548:20750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.679362][ T29] audit: type=1326 audit(935.548:20751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.703452][ T29] audit: type=1326 audit(935.548:20752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.727462][ T29] audit: type=1326 audit(935.548:20753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 679.750765][ T29] audit: type=1326 audit(935.548:20754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.8.19147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 680.017313][ T2189] netlink: 7 bytes leftover after parsing attributes in process `syz.1.19157'. [ 680.291457][ T2224] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.301885][ T2224] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.379674][ T2224] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.390090][ T2224] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.441044][ T2244] lo speed is unknown, defaulting to 1000 [ 680.469440][ T2224] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.479858][ T2224] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.521436][ T2260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19181'. [ 680.530898][ T2260] IPVS: Error connecting to the multicast addr [ 680.568850][ T2224] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 680.579247][ T2224] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.609451][ T2266] loop2: detected capacity change from 0 to 128 [ 680.637925][ T2244] lo speed is unknown, defaulting to 1000 [ 680.725393][ T9618] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.733649][ T9618] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.750818][ T9618] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.759163][ T9618] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.814592][ T9618] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.822840][ T9618] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.856919][ T2298] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.19185'. [ 680.876243][ T9618] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.884481][ T9618] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.945866][ T3499] page_pool_release_retry() stalled pool shutdown: id 387, 1 inflight 60 sec [ 681.183545][ T2322] lo speed is unknown, defaulting to 1000 [ 681.320468][ T2322] lo speed is unknown, defaulting to 1000 [ 681.594939][ T3498] page_pool_release_retry() stalled pool shutdown: id 388, 1 inflight 60 sec [ 681.626276][ T2380] vlan0: entered allmulticast mode [ 681.710411][ T2401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19214'. [ 681.743483][ T2404] lo speed is unknown, defaulting to 1000 [ 681.905611][ T2404] lo speed is unknown, defaulting to 1000 [ 682.052428][ T2450] loop2: detected capacity change from 0 to 1024 [ 682.072290][ T2452] vlan0: entered allmulticast mode [ 682.078053][ T2450] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 682.089987][ T2450] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 682.139102][ T2450] JBD2: no valid journal superblock found [ 682.146002][ T2450] EXT4-fs (loop2): Could not load journal inode [ 682.196298][ T2450] SELinux: security_context_str_to_sid (-Xܘ7.H\ %ue…WFct̝3 L;-n9;=B9g=g&K"D$bYX;:ݒ^-$<>'=7I.wnjuJpybnsΞ.) failed with errno=-22 [ 682.950013][ T2542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19260'. [ 682.974326][ T2542] netlink: 100 bytes leftover after parsing attributes in process `syz.0.19260'. [ 683.003926][ T2560] bond0: Caught tx_queue_len zero misconfig [ 683.307699][ T2583] lo speed is unknown, defaulting to 1000 [ 683.451361][ T2583] lo speed is unknown, defaulting to 1000 [ 683.841590][ T2670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19291'. [ 683.877524][ T2670] netlink: 100 bytes leftover after parsing attributes in process `syz.2.19291'. [ 684.756048][ T2735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19307'. [ 684.932815][ T2758] tipc: Enabling of bearer rejected, already enabled [ 684.981389][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 684.981405][ T29] audit: type=1326 audit(940.978:20841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.024784][ T29] audit: type=1326 audit(941.008:20842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.047913][ T29] audit: type=1326 audit(941.008:20843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.070982][ T29] audit: type=1326 audit(941.008:20844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.094056][ T29] audit: type=1326 audit(941.008:20845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.117065][ T29] audit: type=1326 audit(941.008:20846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.140094][ T29] audit: type=1326 audit(941.008:20847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.163311][ T29] audit: type=1326 audit(941.008:20848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.186464][ T29] audit: type=1326 audit(941.008:20849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.209498][ T29] audit: type=1326 audit(941.008:20850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2761 comm="syz.2.19317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee5b1df749 code=0x7ffc0000 [ 685.339954][ T2778] netlink: 'syz.0.19322': attribute type 2 has an invalid length. [ 686.651965][ T2869] vlan0: entered allmulticast mode [ 686.903667][ T2889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2889 comm=syz.6.19368 [ 686.917432][ T2889] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2889 comm=syz.6.19368 [ 686.961091][ T2895] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19380'. [ 686.974850][ T2895] bridge0: port 3(gretap0) entered disabled state [ 686.981421][ T2895] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.988682][ T2895] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.997161][ T2895] bridge0: left allmulticast mode [ 687.006932][ T2895] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19380'. [ 687.637283][ T2924] lo speed is unknown, defaulting to 1000 [ 687.752659][ T2924] lo speed is unknown, defaulting to 1000 [ 688.099119][ T2969] lo speed is unknown, defaulting to 1000 [ 688.300531][ T2969] lo speed is unknown, defaulting to 1000 [ 688.722672][ T3029] netlink: 'syz.2.19404': attribute type 30 has an invalid length. [ 688.939015][ T3045] netlink: 44 bytes leftover after parsing attributes in process `syz.8.19410'. [ 688.965676][ T3045] bridge0: port 1(gretap0) entered disabled state [ 688.990092][ T3049] netlink: 44 bytes leftover after parsing attributes in process `syz.8.19410'. [ 689.313255][ T3070] netlink: 7 bytes leftover after parsing attributes in process `syz.8.19419'. [ 690.152397][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 690.152417][ T29] audit: type=1400 audit(946.148:20980): avc: denied { read } for pid=3100 comm="syz.2.19432" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 690.182299][ T29] audit: type=1400 audit(946.148:20981): avc: denied { open } for pid=3100 comm="syz.2.19432" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 690.314597][ T29] audit: type=1326 audit(946.308:20982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3116 comm="syz.6.19449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 690.348988][ T29] audit: type=1326 audit(946.308:20983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3116 comm="syz.6.19449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 690.373134][ T29] audit: type=1326 audit(946.338:20984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3116 comm="syz.6.19449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 690.397202][ T29] audit: type=1326 audit(946.338:20985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3116 comm="syz.6.19449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 690.423363][ T3107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19435'. [ 690.432598][ T3107] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 690.500166][ T3126] netlink: 'syz.6.19442': attribute type 83 has an invalid length. [ 690.644123][ T29] audit: type=1400 audit(946.638:20986): avc: denied { name_bind } for pid=3144 comm="syz.6.19451" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 690.893647][ T3169] erspan0: left promiscuous mode [ 690.898741][ T3169] erspan0: left allmulticast mode [ 690.906875][ T3169] ip_vti0: left promiscuous mode [ 690.911872][ T3169] ip_vti0: left allmulticast mode [ 690.918099][ T3169] ip6_vti0: left promiscuous mode [ 690.923153][ T3169] ip6_vti0: left allmulticast mode [ 690.929566][ T3169] sit0: left promiscuous mode [ 690.934343][ T3169] sit0: left allmulticast mode [ 690.958580][ T3169] ip6tnl0: left promiscuous mode [ 690.963626][ T3169] ip6tnl0: left allmulticast mode [ 690.971809][ T3169] ip6gre0: left promiscuous mode [ 690.976851][ T3169] ip6gre0: left allmulticast mode [ 691.016280][ T3169] syz_tun: left promiscuous mode [ 691.021356][ T3169] syz_tun: left allmulticast mode [ 691.028406][ T3169] ip6gretap0: left promiscuous mode [ 691.033677][ T3169] ip6gretap0: left allmulticast mode [ 691.041703][ T3169] bridge0: left promiscuous mode [ 691.046971][ T3169] $H: left promiscuous mode [ 691.051862][ T3169] bond_slave_0: left promiscuous mode [ 691.057352][ T3169] bond_slave_1: left promiscuous mode [ 691.063287][ T3169] dummy0: left promiscuous mode [ 691.069204][ T3169] dummy0: left allmulticast mode [ 691.078984][ T3169] nlmon0: left promiscuous mode [ 691.083994][ T3169] nlmon0: left allmulticast mode [ 691.090406][ T3169] caif0: left promiscuous mode [ 691.096294][ T3169] caif0: left allmulticast mode [ 691.201735][ T3169] ip6gre1: left allmulticast mode [ 691.213773][ T9627] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.223148][ T9627] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.263408][ T9627] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.271953][ T9627] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.280963][ T9627] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.289523][ T9627] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.298976][ T9627] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.307437][ T9627] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.149456][ T29] audit: type=1326 audit(948.148:20987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.19484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 692.181660][ T29] audit: type=1326 audit(948.178:20988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.19484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 692.205702][ T29] audit: type=1326 audit(948.178:20989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.19484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3332fcf749 code=0x7ffc0000 [ 692.322978][ T3235] netlink: 76 bytes leftover after parsing attributes in process `syz.6.19486'. [ 692.371656][ T3238] atomic_op ffff88811581e128 conn xmit_atomic 0000000000000000 [ 692.944863][ T3279] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 692.963836][ T3279] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 693.307373][ T3315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19524'. [ 693.316779][ T3313] lo speed is unknown, defaulting to 1000 [ 693.577355][ T3313] lo speed is unknown, defaulting to 1000 [ 694.033951][ T3409] netlink: 'syz.8.19525': attribute type 13 has an invalid length. [ 694.331190][ T3423] ref_ctr_offset mismatch. inode: 0x1e20 offset: 0x0 ref_ctr_offset(old): 0x82 ref_ctr_offset(new): 0x0 [ 694.573982][ T3441] lo speed is unknown, defaulting to 1000 [ 694.729421][ T3441] lo speed is unknown, defaulting to 1000 [ 696.063589][ T3552] loop2: detected capacity change from 0 to 164 [ 696.118406][ T3552] Unsupported NM flag settings (240) [ 696.188076][ T3570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19575'. [ 696.197842][ T3570] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19575'. [ 696.201228][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19571'. [ 696.303924][ T3578] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19578'. [ 696.785462][ T3595] loop2: detected capacity change from 0 to 1024 [ 696.796604][ T3596] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.807175][ T3595] EXT4-fs: Ignoring removed nobh option [ 696.812826][ T3595] ext4: Unknown parameter 'smackfsdef' [ 696.844881][ T3596] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.884369][ T3608] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19596'. [ 696.897389][ T3596] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 696.970780][ T3596] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 697.051804][ T3618] loop2: detected capacity change from 0 to 512 [ 697.067940][ T9626] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.089634][ T53] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.108898][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.121657][ T53] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.146501][ T53] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.216716][ T3634] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 697.363946][T32101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.392078][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19593'. [ 697.403882][ T3648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19593'. [ 697.435751][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 697.435814][ T29] audit: type=1400 audit(953.428:21030): avc: denied { read } for pid=3645 comm="syz.2.19592" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 697.464618][ T29] audit: type=1400 audit(953.438:21031): avc: denied { open } for pid=3645 comm="syz.2.19592" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 697.487696][ T29] audit: type=1400 audit(953.438:21032): avc: denied { ioctl } for pid=3645 comm="syz.2.19592" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 697.738314][ T29] audit: type=1326 audit(953.738:21033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.0.19605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 697.813975][ T29] audit: type=1326 audit(953.738:21034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.0.19605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 697.838004][ T29] audit: type=1326 audit(953.738:21035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.0.19605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 697.861196][ T29] audit: type=1326 audit(953.748:21036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.0.19605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 697.885527][ T29] audit: type=1326 audit(953.748:21037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.0.19605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 697.908583][ T29] audit: type=1326 audit(953.748:21038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.0.19605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 697.932543][ T29] audit: type=1326 audit(953.748:21039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3673 comm="syz.0.19605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f653bbff749 code=0x7ffc0000 [ 697.980316][ T3678] loop2: detected capacity change from 0 to 1024 [ 697.995160][ T3678] EXT4-fs: Ignoring removed mblk_io_submit option [ 698.052103][ T3678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.174695][ T3695] pimreg: entered allmulticast mode [ 698.181095][ T3695] pimreg: left allmulticast mode [ 698.416772][T32101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.962385][ T3757] batadv_slave_0: Caught tx_queue_len zero misconfig [ 699.020998][ T3762] lo: Caught tx_queue_len zero misconfig [ 699.175504][ T3769] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 699.301732][ T3777] netlink: 'syz.2.19642': attribute type 1 has an invalid length. [ 699.310644][ T3777] netlink: 'syz.2.19642': attribute type 4 has an invalid length. [ 699.318570][ T3777] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.19642'. [ 699.343650][ T3777] netlink: 'syz.2.19642': attribute type 1 has an invalid length. [ 699.351666][ T3777] netlink: 'syz.2.19642': attribute type 4 has an invalid length. [ 699.359543][ T3777] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.19642'. [ 699.987677][ T3835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19659'. [ 700.026529][ T3835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19659'. [ 700.177915][ T3850] loop2: detected capacity change from 0 to 512 [ 700.236232][ T3850] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 700.284751][ T3850] EXT4-fs (loop2): mount failed [ 700.310518][ T3864] lo speed is unknown, defaulting to 1000 [ 700.336632][ T3874] netlink: 292 bytes leftover after parsing attributes in process `syz.0.19663'. [ 700.450556][ T3889] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.460524][ T3889] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.651089][ T3889] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.661023][ T3889] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.673034][ T3864] lo speed is unknown, defaulting to 1000 [ 700.717149][ T3889] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.727083][ T3889] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.807463][ T3889] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.817438][ T3889] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.897115][ T9640] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.905405][ T9640] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.926690][ T9640] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.934971][ T9640] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.964355][ T9640] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.972623][ T9640] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.985923][ T9640] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.994219][ T9640] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.175047][ T3952] netlink: 'syz.0.19683': attribute type 12 has an invalid length. [ 701.434365][T18997] IPVS: starting estimator thread 0... [ 701.525782][ T3998] IPVS: using max 2304 ests per chain, 115200 per kthread [ 702.034264][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19712'. [ 702.418528][ T4078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19724'. [ 702.427750][ T4078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19724'. [ 702.436942][ T4078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19724'. [ 702.446623][ T4078] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19724'. [ 702.455713][ T4078] netlink: 'syz.6.19724': attribute type 6 has an invalid length. [ 702.707718][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 702.707738][ T29] audit: type=1326 audit(958.708:21326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.758724][ T29] audit: type=1326 audit(958.708:21327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.781890][ T29] audit: type=1326 audit(958.738:21328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.804959][ T29] audit: type=1326 audit(958.738:21329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.828113][ T29] audit: type=1326 audit(958.738:21330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.851261][ T29] audit: type=1326 audit(958.738:21331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.874311][ T29] audit: type=1326 audit(958.738:21332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.897292][ T29] audit: type=1326 audit(958.738:21333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.920372][ T29] audit: type=1326 audit(958.738:21334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 702.943422][ T29] audit: type=1326 audit(958.738:21335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4096 comm="syz.6.19730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13fb5f749 code=0x7ffc0000 [ 703.212973][ T4119] rdma_op ffff88813af9b980 conn xmit_rdma 0000000000000000 [ 703.819662][ T3498] IPVS: starting estimator thread 0... [ 703.931898][ T4142] IPVS: using max 2112 ests per chain, 105600 per kthread [ 704.864648][ T4185] netlink: 24 bytes leftover after parsing attributes in process `syz.8.19767'. [ 704.900300][ T4185] IPVS: Error connecting to the multicast addr [ 704.914826][ T4189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4189 comm=syz.6.19770 [ 705.009319][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19786'. [ 705.039168][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19777'. [ 705.056279][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19777'. [ 705.066424][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19777'. [ 705.076197][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19777'. [ 705.415676][ T4242] netlink: 'syz.2.19790': attribute type 10 has an invalid length. [ 705.423795][ T4242] veth1_vlan: left promiscuous mode [ 705.430006][ T4242] batman_adv: batadv0: Adding interface: veth1_vlan [ 705.436696][ T4242] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.462466][ T4242] batman_adv: batadv0: Interface activated: veth1_vlan [ 705.546923][ T4252] lo speed is unknown, defaulting to 1000 [ 705.657664][ T4252] lo speed is unknown, defaulting to 1000 [ 706.118691][ T4322] netlink: 'syz.6.19809': attribute type 1 has an invalid length. [ 706.246980][ T4322] 8021q: adding VLAN 0 to HW filter on device bond2 [ 706.309170][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 706.400576][ T4326] bond2: (slave batadv1): making interface the new active one [ 706.454820][ T4326] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 707.708782][ T4396] netlink: 'syz.1.19824': attribute type 21 has an invalid length. [ 707.716918][ T4396] __nla_validate_parse: 4 callbacks suppressed [ 707.716938][ T4396] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19824'. [ 707.759351][ T4396] netlink: 'syz.1.19824': attribute type 5 has an invalid length. [ 707.767711][ T4396] netlink: 'syz.1.19824': attribute type 6 has an invalid length. [ 707.775615][ T4396] netlink: 3 bytes leftover after parsing attributes in process `syz.1.19824'. [ 708.052275][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 708.052294][ T29] audit: type=1326 audit(964.048:21826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4423 comm="syz.2.19834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee5b1df749 code=0x0 [ 708.102384][ T4426] netlink: 24 bytes leftover after parsing attributes in process `syz.6.19835'. [ 708.167395][ T4387] ================================================================== [ 708.175627][ T4387] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 708.182608][ T4387] [ 708.185052][ T4387] read-write to 0xffff88812063b8ac of 4 bytes by task 4397 on cpu 0: [ 708.193157][ T4387] fifo_open+0x86/0x5d0 [ 708.197358][ T4387] do_dentry_open+0x54b/0xa60 [ 708.202075][ T4387] vfs_open+0x37/0x1e0 [ 708.206176][ T4387] path_openat+0x1ddd/0x23b0 [ 708.210822][ T4387] do_filp_open+0x109/0x230 [ 708.215388][ T4387] do_sys_openat2+0xa6/0x150 [ 708.220013][ T4387] __x64_sys_open+0xe6/0x110 [ 708.224644][ T4387] x64_sys_call+0x166f/0x3000 [ 708.229371][ T4387] do_syscall_64+0xca/0x2b0 [ 708.233927][ T4387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.239858][ T4387] [ 708.242207][ T4387] read to 0xffff88812063b8ac of 4 bytes by task 4387 on cpu 1: [ 708.249784][ T4387] wait_for_partner+0xb5/0x1c0 [ 708.254697][ T4387] fifo_open+0x462/0x5d0 [ 708.258998][ T4387] do_dentry_open+0x54b/0xa60 [ 708.263731][ T4387] vfs_open+0x37/0x1e0 [ 708.267844][ T4387] path_openat+0x1ddd/0x23b0 [ 708.272490][ T4387] do_filp_open+0x109/0x230 [ 708.277049][ T4387] do_sys_openat2+0xa6/0x150 [ 708.281689][ T4387] __x64_sys_open+0xe6/0x110 [ 708.286325][ T4387] x64_sys_call+0x166f/0x3000 [ 708.291045][ T4387] do_syscall_64+0xca/0x2b0 [ 708.295612][ T4387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.301554][ T4387] [ 708.303910][ T4387] value changed: 0x00000001 -> 0x00000002 [ 708.309661][ T4387] [ 708.312013][ T4387] Reported by Kernel Concurrency Sanitizer on: [ 708.318200][ T4387] CPU: 1 UID: 0 PID: 4387 Comm: syz.0.19819 Not tainted syzkaller #0 PREEMPT(voluntary) [ 708.328059][ T4387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 708.338146][ T4387] ==================================================================