last executing test programs: 20m5.841226076s ago: executing program 2 (id=2127): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3d, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8, 0x1}, 0x1313a1, 0x400000, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 20m5.473632687s ago: executing program 2 (id=2131): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) close(0x3) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="090000000000000002000000e0000002"], 0x110) lsm_list_modules(&(0x7f0000000040), 0x0, 0x0) close(0x3) 20m4.815768805s ago: executing program 2 (id=2135): getgid() r0 = socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c567de", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) 20m0.862022176s ago: executing program 2 (id=2157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x101, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0x7, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 19m59.399246611s ago: executing program 2 (id=2166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x7, 0x9, 0x2d}, {0xffffff89, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x8, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0xffffffff, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0xf}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 19m59.286249767s ago: executing program 2 (id=2169): getgid() r0 = socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c567de", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) 19m43.802779679s ago: executing program 32 (id=2169): getgid() r0 = socket$netlink(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='dctcp', 0x5) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14c567de", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004881}, 0x0) 3m53.002560668s ago: executing program 3 (id=8282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x30, 0x1, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 3m52.8008681s ago: executing program 3 (id=8291): r0 = syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 3m52.708230475s ago: executing program 3 (id=8296): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2, @in=@private=0xa010100, 0x0, 0x0, 0x4e21, 0x4000, 0x2}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9c0, 0x3}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in=@multicast2, 0xffffffff, 0x4, 0x0, 0x0, 0x200, 0x4000000, 0x1}}, 0xe4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 3m52.548466304s ago: executing program 3 (id=8299): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 3m52.061092223s ago: executing program 3 (id=8303): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000240)=ANY=[@ANYBLOB="757466383d312c726f6469722c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c636865636b3d7374726963742c756e695f786c6174653d302c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303030343030302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c71756965742c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c757466383d302c666c7573682c726f6469722c73686f72746e616d653d6d697865642c73686f77657865632c636865636b3d72656c617865642c726f6469722c726f6469722c007cbda5978eff1afd303a09806ce0c610fe00684c0c67004cdbbd0b9992b0bbea8911a2050000006311c61fb0edf19ed5b7f8d03bfbf22d5655a02f9c7e7307c4f0cbeda2b4e5b2821ba502f452ce09bae8f886c9b612847e26f9afb26c9805000000000000000bc8604552e1dcb75008cfdd8a85c302b83f5ba6d806e8f77268091776f01e8c0465aa4a0ac02f13f9daeab1932f5688fd0ba15f0fc0d94f21c352fe6bc02b893c57f77281db316d62c523025b2c545ab273f28000ba55a384f4ddaa65567a7eb6e51c9d5b69a84c1cec408643486d4c6a17a1fe12f05c1bf8b7494265dc0493bbc87c7f86f7e5e9ed79d5822adebabbe3c1e9320ad777219218ae6103ce6a392927ef866f4b0bcfecea44742736cfc57fe72eee93d416f6ff7da7641eb9865ee1f09a9b76f87189d2f0113ebf44794240ccdfdee8fa1eccb4abfa1d4d470623d6e1530497c7e64924d946272d4fa346cfecac39646cbbf431869c533429e09b", @ANYRES16], 0x88, 0x2a9, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r0, 0x4) close(r0) 3m51.396336712s ago: executing program 3 (id=8309): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ddff0080000000000100000085000000530000001801000020784d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000500000085000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0xc, 0x0, 0x0, 0x85) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x4000000) setreuid(0x0, 0xee00) 3m51.367470853s ago: executing program 33 (id=8309): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ddff0080000000000100000085000000530000001801000020784d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000500000085000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0xc, 0x0, 0x0, 0x85) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x4000000) setreuid(0x0, 0xee00) 2m9.595435852s ago: executing program 6 (id=9508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="011327b97000fddbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4010) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) 2m9.206710115s ago: executing program 6 (id=9513): r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m9.054641034s ago: executing program 6 (id=9516): ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 2m8.510927846s ago: executing program 6 (id=9517): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0xb00) r0 = syz_clone(0x20800200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) 2m8.09210422s ago: executing program 6 (id=9530): r0 = socket(0x2b, 0x1, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffd, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x8}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2m4.601515024s ago: executing program 6 (id=9540): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x5f4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 2m4.50715546s ago: executing program 34 (id=9540): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x5f4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 14.240520506s ago: executing program 0 (id=10824): timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_create(0xb, 0x0, &(0x7f0000000300)=0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) personality(0x5000002) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) timer_settime(r0, 0x1, &(0x7f0000000600)={{}, {0x0, 0x3938700}}, 0x0) 12.908903904s ago: executing program 0 (id=10838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.875435306s ago: executing program 0 (id=10839): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7, 0x6) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10020) 12.79907553s ago: executing program 0 (id=10841): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f00000001c0)=@xdp, 0x80, 0x0}, 0x9}], 0x2, 0x40, 0x0) 12.737283304s ago: executing program 0 (id=10842): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x2) fchdir(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 12.031155485s ago: executing program 0 (id=10856): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11004, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x4e}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 12.008197457s ago: executing program 35 (id=10856): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11004, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x4e}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f00000006c0)={0x0, 0x11f8, 0x8, 0x0, 0x3b7}, &(0x7f0000000500)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0xd12, 0xd9bd, 0x9, 0x0, 0x0) 5.096352892s ago: executing program 1 (id=10912): capset(&(0x7f0000000080)={0x20071026}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) close(0x3) 5.053118224s ago: executing program 4 (id=10915): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$zero(0xffffffffffffff9c, 0x0, 0x200802, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xcdd1dff97325e36a, &(0x7f00000003c0)={[{@block_validity}, {@nodiscard}, {@sysvgroups}, {@barrier_val={'barrier', 0x3d, 0x40000000071b3}}, {@grpjquota}, {@orlov}, {@bsdgroups}, {@noauto_da_alloc}, {@usrjquota_path={'usrjquota', 0x3d, './file0/file0'}}]}, 0x7, 0x580, &(0x7f0000001b40)="$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") ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0xfffffffffffffff8) 3.718761982s ago: executing program 4 (id=10929): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20004450) r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_open_procfs(0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x339}, 0x94) 3.656413406s ago: executing program 7 (id=10930): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4c001, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000080)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 3.569281931s ago: executing program 7 (id=10933): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2.344462712s ago: executing program 7 (id=10940): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x10000000, 0x0, 0x0, 0x14}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.999244293s ago: executing program 4 (id=10942): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x58ee, 0x800, 0x200, 0x13c}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x20040000}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 1.87616202s ago: executing program 7 (id=10945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.858043971s ago: executing program 1 (id=10946): ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.833716042s ago: executing program 8 (id=10947): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.833151953s ago: executing program 7 (id=10948): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0) munlockall() pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 1.752599417s ago: executing program 8 (id=10949): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ddff0080000000000100000085000000530000001801000020784d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x0) preadv2(r0, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0xc, 0x0, 0x0, 0x85) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x4000000) setreuid(0x0, 0xee00) 1.656736903s ago: executing program 1 (id=10950): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.350714361s ago: executing program 1 (id=10951): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) close(0x3) 1.008959851s ago: executing program 5 (id=10953): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, 0x0) 912.639306ms ago: executing program 1 (id=10954): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ddff0080000000000100000085000000530000001801000020784d2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e", 0x23}], 0x1, 0x0, 0x0, 0x5}, 0x0) preadv2(r1, &(0x7f0000001540)=[{&(0x7f0000001380)=""/129, 0x81}], 0xc, 0x0, 0x0, 0x85) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r12 = syz_pidfd_open(r11, 0x0) setns(r12, 0x4000000) setreuid(0x0, 0xee00) 819.626462ms ago: executing program 4 (id=10955): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x10040) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 766.184675ms ago: executing program 5 (id=10956): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000012c0)=@assoc_value={r3, 0xfffffff7}, &(0x7f0000001300)=0x8) 741.117777ms ago: executing program 7 (id=10957): unshare(0x6a040000) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x20004, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) close(r0) 739.941017ms ago: executing program 8 (id=10958): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000021000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000d4e97f49b5b754baebaea54b76", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x3fd, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) 310.065662ms ago: executing program 5 (id=10959): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x3, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = getpid() setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x35, &(0x7f00000003c0)={0x3a, 0x8}) 248.464855ms ago: executing program 4 (id=10960): socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 247.024835ms ago: executing program 4 (id=10961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x9, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x51, &(0x7f0000000480)={0x0, 0x32}}, 0x0) unshare(0x6020400) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 235.205086ms ago: executing program 8 (id=10962): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r2, 0x80000000, r0}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x30) 215.572917ms ago: executing program 5 (id=10963): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r2}, &(0x7f0000000380)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = gettid() tkill(r4, 0x16) 152.284021ms ago: executing program 5 (id=10964): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x9fd4, 0x9}, 0x8) 117.177933ms ago: executing program 8 (id=10965): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047f9, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 101.331534ms ago: executing program 5 (id=10966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 65.003246ms ago: executing program 8 (id=10967): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x3f, r1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7f, 0x15, 0x7, 0x3}]}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 0s ago: executing program 1 (id=10968): unshare(0x22020600) fchdir(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 audit(2000004024.587:4138): avc: denied { wake_alarm } for pid=2543 comm="syz.4.9390" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1330.474496][ T2558] __nla_validate_parse: 2 callbacks suppressed [ 1330.474513][ T2558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9393'. [ 1330.607729][ T2564] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.9394'. [ 1330.988764][ T28] audit: type=1400 audit(2000004025.977:4139): avc: denied { ioctl } for pid=2568 comm="syz.6.9398" path="socket:[126094]" dev="sockfs" ino=126094 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1331.221748][ T28] audit: type=1400 audit(2000004026.207:4140): avc: denied { watch } for pid=2596 comm="syz.6.9408" path="/195" dev="tmpfs" ino=1026 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1331.246938][ T2588] lo speed is unknown, defaulting to 1000 [ 1331.304069][ T28] audit: type=1400 audit(2000004026.287:4141): avc: denied { block_suspend } for pid=2596 comm="syz.6.9408" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1331.491671][ T28] audit: type=1400 audit(2000004026.477:4142): avc: denied { mounton } for pid=2592 comm="syz.5.9405" path="/proc/4252/task" dev="proc" ino=126120 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1331.553912][ T2606] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.9409'. [ 1331.580888][ T2593] loop5: detected capacity change from 0 to 32768 [ 1331.627738][ T2606] net_ratelimit: 16 callbacks suppressed [ 1331.627824][ T2606] netlink: zone id is out of range [ 1331.672115][ T2606] netlink: zone id is out of range [ 1331.708698][ T2606] netlink: zone id is out of range [ 1331.903519][T31748] loop5: p1 p3 < > [ 1332.076600][ T2606] netlink: set zone limit has 8 unknown bytes [ 1332.095735][ T2593] loop5: p1 p3 < > [ 1332.134272][ T2635] netlink: 'syz.5.9420': attribute type 1 has an invalid length. [ 1332.162618][ T28] audit: type=1400 audit(2000004027.147:4143): avc: denied { cpu } for pid=2636 comm="syz.1.9421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1332.193904][ T2635] bond51: entered promiscuous mode [ 1332.200027][ T2635] 8021q: adding VLAN 0 to HW filter on device bond51 [ 1332.225263][T31749] udevd[31749]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1332.237713][T31748] udevd[31748]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1332.255562][T31749] udevd[31749]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1332.267777][T31748] udevd[31748]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1332.359773][ T2635] 8021q: adding VLAN 0 to HW filter on device bond51 [ 1332.367810][ T2635] bond51: (slave vcan1): The slave device specified does not support setting the MAC address [ 1332.379508][ T2635] bond51: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1332.396741][ T2635] bond51: (slave vcan1): making interface the new active one [ 1332.409833][ T2635] vcan1: entered promiscuous mode [ 1332.418538][ T2635] bond51: (slave vcan1): Enslaving as an active interface with an up link [ 1332.560652][ T2655] lo speed is unknown, defaulting to 1000 [ 1332.654170][ T28] audit: type=1400 audit(2000004027.637:4144): avc: denied { bind } for pid=2661 comm="syz.6.9429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1332.713820][ T28] audit: type=1400 audit(2000004027.647:4145): avc: denied { listen } for pid=2661 comm="syz.6.9429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1332.782269][ T28] audit: type=1400 audit(2000004027.667:4146): avc: denied { accept } for pid=2661 comm="syz.6.9429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1332.842971][ T28] audit: type=1400 audit(2000004027.677:4147): avc: denied { read } for pid=2661 comm="syz.6.9429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1333.129539][ T2677] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.9434'. [ 1333.140741][ T2677] netlink: zone id is out of range [ 1333.146661][ T2677] netlink: zone id is out of range [ 1333.156681][ T2677] netlink: zone id is out of range [ 1333.342211][ T2677] netlink: set zone limit has 8 unknown bytes [ 1333.362374][ T2688] loop5: detected capacity change from 0 to 2048 [ 1333.418755][ T2694] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9441'. [ 1333.428438][T31748] loop5: p3 < > p4 < > [ 1333.429800][ T2694] netlink: 104 bytes leftover after parsing attributes in process `syz.4.9441'. [ 1333.436507][T31748] loop5: partition table partially beyond EOD, truncated [ 1333.466383][T31748] loop5: p3 start 4284289 is beyond EOD, truncated [ 1333.478101][ T2688] loop5: p3 < > p4 < > [ 1333.482355][ T2688] loop5: partition table partially beyond EOD, truncated [ 1333.490488][ T2688] loop5: p3 start 4284289 is beyond EOD, truncated [ 1333.549986][T31748] udevd[31748]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1333.573045][T31748] udevd[31748]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1333.671168][ T2710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1333.680929][ T2710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.692706][ T2710] loop9: detected capacity change from 0 to 7 [ 1333.965704][ T2722] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1333.975783][ T2722] netlink: zone id is out of range [ 1333.981114][ T2722] netlink: zone id is out of range [ 1334.293685][ T2728] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.9452'. [ 1334.937735][ T2757] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9459'. [ 1335.084375][ T2758] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.9462'. [ 1335.773106][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1335.773124][ T28] audit: type=1400 audit(2000004030.767:4151): avc: denied { create } for pid=2751 comm="syz.6.9461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1335.968405][ T28] audit: type=1400 audit(2000004030.957:4152): avc: denied { write } for pid=2767 comm="syz.6.9465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1336.015442][ T28] audit: type=1400 audit(2000004031.007:4153): avc: denied { bind } for pid=2770 comm="syz.1.9466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1336.044980][ T28] audit: type=1400 audit(2000004031.027:4154): avc: denied { listen } for pid=2770 comm="syz.1.9466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1336.117803][ T2780] loop6: detected capacity change from 0 to 128 [ 1336.118943][ T2774] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.9464'. [ 1336.149906][ T2780] FAT-fs (loop6): Directory bread(block 32) failed [ 1336.156875][ T2780] FAT-fs (loop6): Directory bread(block 33) failed [ 1336.177018][ T2780] FAT-fs (loop6): Directory bread(block 34) failed [ 1336.186376][ T2780] FAT-fs (loop6): Directory bread(block 35) failed [ 1336.194362][ T2780] FAT-fs (loop6): Directory bread(block 36) failed [ 1336.200971][ T2780] FAT-fs (loop6): Directory bread(block 37) failed [ 1336.211284][ T2780] FAT-fs (loop6): Directory bread(block 38) failed [ 1336.229295][ T2780] FAT-fs (loop6): Directory bread(block 39) failed [ 1336.241246][ T2780] FAT-fs (loop6): Directory bread(block 40) failed [ 1336.256411][ T2780] FAT-fs (loop6): Directory bread(block 41) failed [ 1336.412544][ T28] audit: type=1400 audit(2000004031.397:4155): avc: denied { getopt } for pid=2790 comm="syz.6.9472" lport=38495 faddr=2001:: fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1336.477230][ T28] audit: type=1400 audit(2000004031.467:4156): avc: denied { name_bind } for pid=2792 comm="syz.6.9474" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1336.527748][ T28] audit: type=1400 audit(2000004031.517:4157): avc: denied { listen } for pid=2794 comm="syz.6.9475" lport=34496 faddr=::ffff:172.20.255.187 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1336.553124][ T28] audit: type=1400 audit(2000004031.517:4158): avc: denied { accept } for pid=2794 comm="syz.6.9475" lport=34496 faddr=::ffff:172.20.255.187 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1336.607278][ T28] audit: type=1400 audit(2000004031.517:4159): avc: denied { write } for pid=2794 comm="syz.6.9475" lport=34496 faddr=::ffff:172.20.255.187 fport=65534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1336.667353][ T2800] loop6: detected capacity change from 0 to 512 [ 1336.732472][ T2800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1336.766093][ T2800] ext4 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.803374][ T2805] netlink: 'syz.5.9478': attribute type 2 has an invalid length. [ 1336.837251][T31742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.946947][ T2816] loop6: detected capacity change from 0 to 1024 [ 1336.954579][ T2816] EXT4-fs: inline encryption not supported [ 1336.970360][ T28] audit: type=1400 audit(2000004031.957:4160): avc: denied { write } for pid=2819 comm="syz.4.9479" path="socket:[125850]" dev="sockfs" ino=125850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1337.011071][ T2816] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1337.075259][T31742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1337.505414][ T2848] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9489'. [ 1337.515959][ T2848] net_ratelimit: 16 callbacks suppressed [ 1337.516024][ T2848] netlink: zone id is out of range [ 1337.529082][ T2848] netlink: zone id is out of range [ 1337.539292][ T2848] netlink: zone id is out of range [ 1337.694454][ T2848] netlink: set zone limit has 8 unknown bytes [ 1337.902421][ T2865] loop6: detected capacity change from 0 to 1024 [ 1337.951918][ T2865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1337.972988][ T2865] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1337.987584][ T2865] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.9499: lblock 0 mapped to illegal pblock 0 (length 6) [ 1338.004050][ T2865] EXT4-fs error (device loop6): ext4_ext_remove_space:2956: inode #15: comm syz.6.9499: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1338.034119][ T2865] EXT4-fs error (device loop6): ext4_map_blocks:818: inode #15: comm syz.6.9499: lblock 0 mapped to illegal pblock 0 (length 1) [ 1338.058211][ T2865] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1338.152981][ T2865] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1338.152981][ T2865] [ 1338.324033][ T2881] loop5: detected capacity change from 0 to 1024 [ 1338.346690][ T2881] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.849733][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1338.879384][ T12] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 1338.941638][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 117 [ 1338.973078][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1338.973078][ T12] [ 1339.007764][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2088 with max blocks 2048 with error 28 [ 1339.040662][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1339.040662][ T12] [ 1339.060700][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 1339.070788][ T12] EXT4-fs (loop6): Free/Dirty block details [ 1339.083019][ T12] EXT4-fs (loop6): free_blocks=0 [ 1339.538787][ T2912] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9515'. [ 1339.549154][ T2912] netlink: zone id is out of range [ 1339.555134][ T2912] netlink: zone id is out of range [ 1339.564276][ T2912] netlink: zone id is out of range [ 1339.739261][ T2912] netlink: set zone limit has 8 unknown bytes [ 1340.086442][ T2916] loop6: detected capacity change from 0 to 8192 [ 1340.115574][ T2916] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1340.216495][ T2916] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1340.241182][ T2916] FAT-fs (loop6): Filesystem has been set read-only [ 1340.253254][ T2933] tipc: Enabled bearer , priority 18 [ 1340.984585][ T2958] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9534'. [ 1341.109652][ T2958] netlink: 7 bytes leftover after parsing attributes in process `syz.1.9534'. [ 1343.782170][ T23] tipc: Node number set to 936039685 [ 1343.857886][T11888] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.868842][T11888] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.917201][T11888] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.939134][T11888] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.996013][T11888] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.015534][T11888] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.074522][ T2997] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1344.120731][ T2997] netlink: zone id is out of range [ 1344.140680][ T2997] netlink: zone id is out of range [ 1344.369268][ T2997] netlink: set zone limit has 8 unknown bytes [ 1344.446621][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1344.446642][ T28] audit: type=1400 audit(2000004039.017:4175): avc: denied { mounton } for pid=2994 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1344.481588][T11888] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1344.504425][T11888] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.515213][ T28] audit: type=1400 audit(2000004039.487:4176): avc: denied { create } for pid=2983 comm="syz.5.9542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1344.515244][ T28] audit: type=1400 audit(2000004039.487:4177): avc: denied { write } for pid=3002 comm="syz.0.9546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1344.515272][ T28] audit: type=1400 audit(2000004039.487:4178): avc: denied { read } for pid=3002 comm="syz.0.9546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1344.636803][ T28] audit: type=1400 audit(2000004039.627:4179): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1344.682692][ T28] audit: type=1400 audit(2000004039.627:4180): avc: denied { search } for pid=3039 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.704979][ T2994] lo speed is unknown, defaulting to 1000 [ 1344.723890][ T28] audit: type=1400 audit(2000004039.627:4181): avc: denied { search } for pid=3039 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.764099][T11888] bridge_slave_1: left allmulticast mode [ 1344.769803][T11888] bridge_slave_1: left promiscuous mode [ 1344.782053][T11888] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.791548][T11888] bridge_slave_0: left allmulticast mode [ 1344.798531][T11888] bridge_slave_0: left promiscuous mode [ 1344.806304][T11888] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.812202][ T28] audit: type=1400 audit(2000004039.627:4182): avc: denied { search } for pid=3039 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1344.858703][ T28] audit: type=1400 audit(2000004039.627:4183): avc: denied { read } for pid=3039 comm="dhcpcd" name="n37" dev="tmpfs" ino=18053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1344.886756][ T28] audit: type=1400 audit(2000004039.627:4184): avc: denied { open } for pid=3039 comm="dhcpcd" path="/run/udev/data/n37" dev="tmpfs" ino=18053 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1345.016566][T11888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1345.027198][T11888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1345.037072][T11888] bond0 (unregistering): Released all slaves [ 1345.085517][T11888] IPVS: stopping backup sync thread 1324 ... [ 1345.128217][ T2994] chnl_net:caif_netlink_parms(): no params data found [ 1345.141698][T11888] hsr_slave_0: left promiscuous mode [ 1345.147978][T11888] hsr_slave_1: left promiscuous mode [ 1345.155914][T11888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.163703][T11888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.171311][T11888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.179096][T11888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.192812][T11888] veth1_macvtap: left promiscuous mode [ 1345.198609][T11888] veth0_macvtap: left promiscuous mode [ 1345.204405][T11888] veth1_vlan: left promiscuous mode [ 1345.209780][T11888] veth0_vlan: left promiscuous mode [ 1345.295696][T11888] team0 (unregistering): Port device team_slave_1 removed [ 1345.306036][T11888] team0 (unregistering): Port device team_slave_0 removed [ 1345.392813][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.400702][ T2994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.408456][ T2994] bridge_slave_0: entered allmulticast mode [ 1345.423716][ T2994] bridge_slave_0: entered promiscuous mode [ 1345.435245][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.442798][ T2994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.484763][ T2994] bridge_slave_1: entered allmulticast mode [ 1345.500507][ T2994] bridge_slave_1: entered promiscuous mode [ 1345.545993][ T2994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.569975][ T2994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.628304][ T2994] team0: Port device team_slave_0 added [ 1345.635681][ T2994] team0: Port device team_slave_1 added [ 1345.657371][ T2994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1345.684680][ T2994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.759693][ T2994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1345.792479][ T2994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1345.800013][ T2994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1345.840851][ T2994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.854585][T11888] IPVS: stop unused estimator thread 0... [ 1345.905896][ T2994] hsr_slave_0: entered promiscuous mode [ 1345.912373][ T2994] hsr_slave_1: entered promiscuous mode [ 1345.931330][ T2994] debugfs: 'hsr0' already exists in 'hsr' [ 1345.944143][ T2994] Cannot create hsr debugfs directory [ 1346.039019][ T3097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9556'. [ 1346.114676][ T2994] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1346.159399][ T2994] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1346.181238][ T2994] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1346.216793][ T2994] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1346.363056][T32094] kernel read not supported for file bpf-prog (pid: 32094 comm: kworker/0:3) [ 1346.411151][ T2994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.446187][ T2994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.465942][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.473091][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.508363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.515602][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.560495][ T2994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1346.750783][ T2994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.916643][ T2994] veth0_vlan: entered promiscuous mode [ 1346.949193][ T2994] veth1_vlan: entered promiscuous mode [ 1346.980584][ T2994] veth0_macvtap: entered promiscuous mode [ 1346.997924][ T2994] veth1_macvtap: entered promiscuous mode [ 1347.024661][ T2994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.046772][ T2994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.068719][T13830] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.078590][T13830] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.104166][T13830] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.122984][T13830] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.874436][ T3222] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9580'. [ 1347.902415][ T3222] netlink: zone id is out of range [ 1347.923327][ T3222] netlink: zone id is out of range [ 1348.197787][ T3222] netlink: set zone limit has 8 unknown bytes [ 1349.220668][ T3288] loop5: detected capacity change from 0 to 512 [ 1349.272033][ T3288] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.292788][ T3288] ext4 filesystem being mounted at /1467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1349.466238][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1349.532724][ T3320] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9610'. [ 1349.544421][ T3320] netlink: zone id is out of range [ 1349.550019][ T3320] netlink: zone id is out of range [ 1349.646605][ T3320] netlink: set zone limit has 8 unknown bytes [ 1350.214911][ T3341] tipc: Failed to remove unknown binding: 66,1,1/0:1904894613/1904894615 [ 1350.257398][ T3341] tipc: Failed to remove unknown binding: 66,1,1/0:1904894613/1904894615 [ 1351.590404][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1351.590423][ T28] audit: type=1400 audit(2000004046.567:4205): avc: denied { write } for pid=3376 comm="syz.7.9632" path="socket:[127545]" dev="sockfs" ino=127545 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1351.677504][ T3386] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9630'. [ 1351.688260][ T3386] netlink: zone id is out of range [ 1351.694578][ T3386] netlink: zone id is out of range [ 1351.815963][ T3386] netlink: set zone limit has 8 unknown bytes [ 1352.237318][ T3410] 9p: Bad value for 'wfdno' [ 1352.347112][ T3415] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.9635'. [ 1352.357222][ T3415] netlink: zone id is out of range [ 1352.362719][ T3415] netlink: zone id is out of range [ 1352.462645][ T3415] netlink: set zone limit has 8 unknown bytes [ 1353.208649][ T28] audit: type=1400 audit(2000004048.197:4206): avc: denied { create } for pid=3446 comm="syz.0.9648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1353.273960][ T28] audit: type=1400 audit(2000004048.197:4207): avc: denied { ioctl } for pid=3446 comm="syz.0.9648" path="socket:[127607]" dev="sockfs" ino=127607 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1353.514352][ T3465] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9650'. [ 1353.525481][ T3465] netlink: zone id is out of range [ 1354.039170][ T28] audit: type=1400 audit(2000004049.027:4208): avc: denied { mount } for pid=3474 comm="syz.0.9657" name="/" dev="hugetlbfs" ino=128665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1354.119038][ T28] audit: type=1400 audit(2000004049.057:4209): avc: denied { name_bind } for pid=3476 comm="syz.7.9658" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1354.181117][ T28] audit: type=1400 audit(2000004049.167:4210): avc: denied { bind } for pid=3478 comm="syz.0.9660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1354.203574][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9660'. [ 1354.336955][ T3497] loop7: detected capacity change from 0 to 1024 [ 1354.362616][ T3497] EXT4-fs: Ignoring removed orlov option [ 1354.417836][ T3497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1354.449045][ T28] audit: type=1400 audit(2000004049.437:4211): avc: denied { map } for pid=3494 comm="syz.7.9665" path="/28/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1354.558089][ T28] audit: type=1400 audit(2000004049.467:4212): avc: denied { execute } for pid=3494 comm="syz.7.9665" path="/28/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1354.614501][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1355.067153][ T3531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9677'. [ 1355.292684][ T3545] xt_hashlimit: size too large, truncated to 1048576 [ 1355.564495][ T3443] Bluetooth: hci0: Frame reassembly failed (-84) [ 1355.572290][ T28] audit: type=1400 audit(2000004050.557:4213): avc: denied { ioctl } for pid=3552 comm="syz.7.9687" path="socket:[128782]" dev="sockfs" ino=128782 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1355.930318][ T3565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9691'. [ 1356.221392][ T3578] netlink: 'syz.5.9697': attribute type 3 has an invalid length. [ 1356.230818][ T3578] netlink: 'syz.5.9697': attribute type 1 has an invalid length. [ 1356.239983][ T3578] netlink: 198116 bytes leftover after parsing attributes in process `syz.5.9697'. [ 1356.323372][ T3581] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9695'. [ 1356.333725][ T3581] net_ratelimit: 2 callbacks suppressed [ 1356.333814][ T3581] netlink: zone id is out of range [ 1356.345376][ T3581] netlink: zone id is out of range [ 1356.465404][ T3581] netlink: set zone limit has 8 unknown bytes [ 1356.811393][ T3590] loop5: detected capacity change from 0 to 128 [ 1356.828663][ T3590] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1356.843917][ T3590] ext4 filesystem being mounted at /1478/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1356.875838][T10300] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1357.311164][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9710'. [ 1357.374972][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9710'. [ 1357.385183][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.400781][ T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.410962][ T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.443954][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1357.643019][ T3556] Bluetooth: hci0: command 0x1003 tx timeout [ 1357.649185][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1357.698723][ T28] audit: type=1400 audit(2000004052.687:4214): avc: denied { bind } for pid=3655 comm="syz.0.9716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1357.720847][ T28] audit: type=1400 audit(2000004052.707:4215): avc: denied { setopt } for pid=3655 comm="syz.0.9716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.155483][ T28] audit: type=1400 audit(2000004053.147:4216): avc: denied { ioctl } for pid=3689 comm="syz.7.9725" path="socket:[129135]" dev="sockfs" ino=129135 ioctlcmd=0xf502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1358.221750][ T28] audit: type=1400 audit(2000004053.177:4217): avc: denied { shutdown } for pid=3689 comm="syz.7.9725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1358.292657][ T3698] hub 8-0:1.0: USB hub found [ 1358.304052][ T3698] hub 8-0:1.0: 8 ports detected [ 1358.370632][ T28] audit: type=1400 audit(2000004053.357:4218): avc: denied { execute_no_trans } for pid=3702 comm="syz.1.9727" path="/2173/file0" dev="tmpfs" ino=11219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1358.432870][ T3702] process '/newroot/2173/file0' started with executable stack [ 1358.439880][ T3710] loop7: detected capacity change from 0 to 512 [ 1358.471222][ T3710] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1358.569151][ T3716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9730'. [ 1358.716260][ T3726] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9731'. [ 1358.731367][ T3726] netlink: zone id is out of range [ 1358.737150][ T3726] netlink: zone id is out of range [ 1358.745640][ T3726] netlink: zone id is out of range [ 1360.352761][ T3726] netlink: set zone limit has 8 unknown bytes [ 1360.368302][ T3729] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9732'. [ 1360.394354][ T3729] netlink: zone id is out of range [ 1360.399789][ T3729] netlink: zone id is out of range [ 1360.423852][ T3729] netlink: zone id is out of range [ 1360.609060][ T28] audit: type=1400 audit(2000004054.807:4219): avc: denied { remount } for pid=3733 comm="syz.4.9733" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1360.833348][ T3710] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1360.849267][ T3710] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.9729: bg 0: block 248: padding at end of block bitmap is not set [ 1360.885973][ T3710] loop7: lost filesystem error report for type 5 error -117 [ 1360.886151][ T3710] Quota error (device loop7): write_blk: dquota write failed [ 1360.893587][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1360.893611][ C1] EXT4-fs (loop7): last error at time 2000004055: ext4_validate_block_bitmap:441 [ 1360.925778][ T3710] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1360.944181][ T3710] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.9729: Failed to acquire dquot type 1 [ 1360.955808][ T3710] loop7: lost filesystem error report for type 5 error -117 [ 1360.956315][ T3710] EXT4-fs (loop7): 1 truncate cleaned up [ 1360.970339][ T3710] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1360.987111][ T3710] EXT4-fs (loop7): shut down requested (1) [ 1361.136678][ T3762] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9735'. [ 1361.371521][ T3762] net_ratelimit: 3 callbacks suppressed [ 1361.371681][ T3762] netlink: set zone limit has 8 unknown bytes [ 1361.528905][ T28] audit: type=1400 audit(2000004056.517:4220): avc: denied { setopt } for pid=3767 comm="syz.1.9741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1361.548964][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1361.695713][ T28] audit: type=1400 audit(2000004056.687:4221): avc: denied { remount } for pid=3781 comm="syz.7.9747" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1361.864262][ T3798] syzkaller0: entered allmulticast mode [ 1361.873086][ T3798] syzkaller0: entered promiscuous mode [ 1362.616749][ T3812] sock: sock_set_timeout: `syz.4.9759' (pid 3812) tries to set negative timeout [ 1362.716536][ T3818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3818 comm=syz.1.9762 [ 1362.781155][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1362.781174][ T28] audit: type=1400 audit(2000004057.767:4229): avc: denied { setopt } for pid=3822 comm="syz.0.9764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1362.810520][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9764'. [ 1362.820021][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9764'. [ 1362.863203][ T3831] only policy match revision 0 supported [ 1362.863218][ T3831] unable to load match [ 1362.902323][ T3834] lo speed is unknown, defaulting to 1000 [ 1362.974730][ T28] audit: type=1400 audit(2000004057.967:4230): avc: denied { mount } for pid=3844 comm="syz.1.9774" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1363.899727][ T3871] syzkaller0: entered promiscuous mode [ 1363.906236][ T3871] syzkaller0: entered allmulticast mode [ 1364.000811][ T28] audit: type=1400 audit(2000004058.987:4231): avc: denied { listen } for pid=3880 comm="syz.5.9784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1364.412519][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 1364.433458][ T28] audit: type=1400 audit(2000004059.417:4232): avc: denied { bind } for pid=3897 comm="syz.7.9790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1364.911809][ T3903] 9p: Bad value for 'wfdno' [ 1364.969064][ T3907] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9793'. [ 1365.033346][ T28] audit: type=1400 audit(2000004060.027:4233): avc: denied { lock } for pid=3912 comm="syz.0.9798" path="socket:[130262]" dev="sockfs" ino=130262 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1365.109208][ T3923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9796'. [ 1365.120905][ T3923] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1365.255583][ T3923] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1365.326111][ T3923] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1365.376483][ T3923] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1365.434591][ T12] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.444117][ T12] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.464014][ T12] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.474449][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1365.535168][ T28] audit: type=1400 audit(2000004060.497:4234): avc: denied { bind } for pid=3930 comm="syz.1.9802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1366.494579][ T3556] Bluetooth: hci0: command 0x1003 tx timeout [ 1366.500684][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1366.926096][ T3945] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.9804'. [ 1366.938253][ T3945] netlink: zone id is out of range [ 1366.945094][ T3945] netlink: zone id is out of range [ 1367.049117][ T3945] netlink: set zone limit has 8 unknown bytes [ 1367.227128][ T3952] lo speed is unknown, defaulting to 1000 [ 1367.386336][ T28] audit: type=1400 audit(2000004318.377:4235): avc: denied { bind } for pid=3964 comm="syz.4.9813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1367.421487][ T28] audit: type=1400 audit(2000004318.407:4236): avc: denied { listen } for pid=3964 comm="syz.4.9813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1367.442040][ T28] audit: type=1400 audit(2000004318.437:4237): avc: denied { read } for pid=3964 comm="syz.4.9813" path="socket:[130316]" dev="sockfs" ino=130316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1367.506039][ T3972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.528175][ T3972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.552096][ T28] audit: type=1400 audit(2000004318.537:4238): avc: denied { read } for pid=3974 comm="syz.0.9818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1368.077781][ T3998] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9822'. [ 1368.092671][ T3998] netlink: zone id is out of range [ 1368.098462][ T3998] netlink: zone id is out of range [ 1369.070426][ T3998] netlink: set zone limit has 8 unknown bytes [ 1369.715359][ T4001] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9823'. [ 1369.727115][ T4001] netlink: zone id is out of range [ 1369.733810][ T4001] netlink: zone id is out of range [ 1369.844206][ T4001] netlink: set zone limit has 8 unknown bytes [ 1370.334196][ T28] audit: type=1400 audit(2000004321.327:4239): avc: denied { mount } for pid=4025 comm="syz.7.9836" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1370.367858][ T28] audit: type=1400 audit(2000004321.327:4240): avc: denied { search } for pid=4025 comm="syz.7.9836" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1370.398359][ T28] audit: type=1400 audit(2000004321.327:4241): avc: denied { search } for pid=4025 comm="syz.7.9836" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1370.428971][ T28] audit: type=1400 audit(2000004321.327:4242): avc: denied { read open } for pid=4025 comm="syz.7.9836" path="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1370.787222][ T4046] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.9841'. [ 1370.800397][ T4046] netlink: zone id is out of range [ 1371.241115][ T4056] xt_hashlimit: size too large, truncated to 1048576 [ 1371.795438][ T4082] loop5: detected capacity change from 0 to 128 [ 1371.904763][ T2476] kernel read not supported for file /vcs (pid: 2476 comm: kworker/1:1) [ 1371.927430][ T2476] kernel read not supported for file /vcs (pid: 2476 comm: kworker/1:1) [ 1372.445715][ T4125] batadv_slave_1: entered promiscuous mode [ 1372.462484][ T4125] batadv_slave_0: entered promiscuous mode [ 1372.472409][ T4124] batadv_slave_0: left promiscuous mode [ 1372.485410][ T4124] batadv_slave_1: left promiscuous mode [ 1372.569564][ T28] audit: type=1400 audit(2000004323.557:4243): avc: denied { mount } for pid=4131 comm="syz.4.9876" name="/" dev="autofs" ino=129828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1372.867250][ T4143] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9879'. [ 1372.893917][ T4143] net_ratelimit: 2 callbacks suppressed [ 1372.894109][ T4143] netlink: zone id is out of range [ 1372.923435][ T4143] netlink: zone id is out of range [ 1372.931758][ T4143] netlink: zone id is out of range [ 1373.179023][ T4143] netlink: set zone limit has 8 unknown bytes [ 1373.318898][ T4155] loop5: detected capacity change from 0 to 512 [ 1373.330657][ T4155] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1373.347595][ T4155] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #11: block 1: comm syz.5.9884: lblock 0 mapped to illegal pblock 1 (length 1) [ 1373.363656][ T4155] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1373.363861][ T4155] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1373.373109][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1373.373126][ C1] EXT4-fs (loop5): initial error at time 2000004324: ext4_map_blocks:776: inode 11: block 1 [ 1373.373159][ C1] EXT4-fs (loop5): last error at time 2000004324: ext4_map_blocks:776: inode 11: block 1 [ 1373.412873][ T4155] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.5.9884: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1373.428039][ T4155] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1373.429071][ T4155] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.5.9884: ea_inode dec ref err=-117 [ 1373.451645][ T4155] EXT4-fs (loop5): 1 orphan inode deleted [ 1373.457956][ T4155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1373.562741][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.633977][ T28] audit: type=1400 audit(2000004324.627:4244): avc: denied { bind } for pid=4165 comm="syz.7.9890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1373.694358][ T28] audit: type=1400 audit(2000004324.687:4245): avc: denied { watch_reads } for pid=4175 comm="syz.4.9892" path="/1450" dev="tmpfs" ino=7559 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1373.729201][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9891'. [ 1373.817394][ T4181] xt_hashlimit: size too large, truncated to 1048576 [ 1374.133162][ T4195] Falling back ldisc for ptm1. [ 1374.165601][ T4199] batadv1: entered promiscuous mode [ 1374.186185][ T4201] gretap1: entered promiscuous mode [ 1374.689629][ T28] audit: type=1400 audit(2000004325.677:4246): avc: denied { accept } for pid=4235 comm="syz.5.9918" path="socket:[130707]" dev="sockfs" ino=130707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1375.411724][ T4280] loop5: detected capacity change from 0 to 512 [ 1375.418478][ T4280] EXT4-fs: Ignoring removed i_version option [ 1375.425069][ T4280] EXT4-fs: Ignoring removed bh option [ 1375.435996][ T4280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1375.448841][ T4280] ext4 filesystem being mounted at /1531/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1375.464104][ T28] audit: type=1400 audit(2000004326.447:4247): avc: denied { append } for pid=4279 comm="syz.5.9937" path="/1531/bus/memory.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1375.573511][ T28] audit: type=1400 audit(2000004326.547:4248): avc: denied { map } for pid=4279 comm="syz.5.9937" path="/1531/bus/memory.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1375.601027][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.069108][ T4293] loop7: detected capacity change from 0 to 512 [ 1376.150512][ T4293] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1376.158666][ T4293] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #11: block 1: comm syz.7.9939: lblock 0 mapped to illegal pblock 1 (length 1) [ 1376.174052][ T4293] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1376.174311][ T4293] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.9939: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 1376.183528][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1376.183549][ C0] EXT4-fs (loop7): initial error at time 2000004327: ext4_map_blocks:776: inode 11: block 1 [ 1376.183604][ C0] EXT4-fs (loop7): last error at time 2000004327: ext4_map_blocks:776: inode 11: block 1 [ 1376.230857][ T4293] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1376.231124][ T4293] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.7.9939: ea_inode dec ref err=-117 [ 1376.255493][ T4293] EXT4-fs (loop7): 1 orphan inode deleted [ 1376.261936][ T4293] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1376.292363][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1376.572842][ T4308] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.9944'. [ 1376.622023][ T4308] netlink: zone id is out of range [ 1376.643481][ T4308] netlink: zone id is out of range [ 1376.651345][ T4308] netlink: zone id is out of range [ 1376.878019][ T4308] netlink: set zone limit has 8 unknown bytes [ 1377.100950][ T4306] loop7: detected capacity change from 0 to 1024 [ 1377.326140][ T4306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1377.388010][ T4303] EXT4-fs (loop7): shut down requested (0) [ 1377.412371][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.458994][ T28] audit: type=1400 audit(2000004328.447:4249): avc: denied { write } for pid=4337 comm="syz.7.9956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1377.530427][ T28] audit: type=1400 audit(2000004328.517:4250): avc: denied { write } for pid=4340 comm="syz.5.9958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1377.551430][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9958'. [ 1377.616387][ T4343] loop7: detected capacity change from 0 to 4096 [ 1377.635870][ T4343] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1377.903570][ T4362] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.9963'. [ 1377.931977][ T4362] netlink: zone id is out of range [ 1377.940588][ T4362] netlink: zone id is out of range [ 1377.948958][ T4362] netlink: zone id is out of range [ 1378.478569][ T4362] netlink: set zone limit has 8 unknown bytes [ 1378.590165][ T4364] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9964'. [ 1378.737949][ T4364] netlink: zone id is out of range [ 1378.761339][ T4364] netlink: zone id is out of range [ 1378.821215][ T4364] netlink: zone id is out of range [ 1379.690586][ T4364] netlink: set zone limit has 8 unknown bytes [ 1379.785200][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1379.797922][ T28] audit: type=1400 audit(2000004330.747:4251): avc: denied { write } for pid=4368 comm="syz.4.9966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1379.944728][ T4377] tipc: Failed to remove unknown binding: 66,1,1/0:896151768/896151770 [ 1379.954561][ T28] audit: type=1400 audit(2000004330.947:4252): avc: denied { name_connect } for pid=4380 comm="syz.0.9969" dest=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1380.011403][ T28] audit: type=1400 audit(2000004330.997:4253): avc: denied { name_connect } for pid=4380 comm="syz.0.9969" dest=1023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=sctp_socket permissive=1 [ 1380.075273][ T28] audit: type=1400 audit(2000004331.057:4254): avc: denied { read write } for pid=4399 comm="syz.7.9973" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1380.101881][ T28] audit: type=1400 audit(2000004331.057:4255): avc: denied { open } for pid=4399 comm="syz.7.9973" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1380.326373][ T4434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9977'. [ 1380.344769][ T4441] netlink: 44 bytes leftover after parsing attributes in process `syz.7.9978'. [ 1380.665036][ T4487] xt_hashlimit: size too large, truncated to 1048576 [ 1380.726988][ T28] audit: type=1400 audit(2000004331.717:4256): avc: denied { write } for pid=4493 comm="syz.1.9986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1380.911719][ T4508] loop5: detected capacity change from 0 to 512 [ 1380.961468][ T4508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.974305][ T4508] ext4 filesystem being mounted at /1544/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.007893][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1381.100438][ T4518] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9992'. [ 1381.130422][ T4518] netlink: zone id is out of range [ 1381.152392][ T4518] netlink: zone id is out of range [ 1381.650808][ T4530] geneve2: entered promiscuous mode [ 1381.664133][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.693247][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.704788][ T4531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1381.724208][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.747942][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.096285][ T4548] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10001'. [ 1382.968950][ T28] audit: type=1326 audit(2000004333.957:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.1.10010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f374992bf79 code=0x0 [ 1383.287366][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10022'. [ 1383.309523][ T4588] loop5: detected capacity change from 0 to 1024 [ 1383.327890][ T4588] EXT4-fs: Ignoring removed bh option [ 1383.371860][ T4588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1383.398645][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1384.320982][ T4608] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10027'. [ 1384.373662][ T4608] net_ratelimit: 5 callbacks suppressed [ 1384.373744][ T4608] netlink: zone id is out of range [ 1384.387175][ T4608] netlink: zone id is out of range [ 1384.394335][ T4608] netlink: zone id is out of range [ 1384.403008][ T4607] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.10024'. [ 1384.412374][ T4607] netlink: zone id is out of range [ 1384.417567][ T4607] netlink: zone id is out of range [ 1384.432487][ T4607] netlink: set zone limit has 8 unknown bytes [ 1384.582426][ T4608] netlink: set zone limit has 8 unknown bytes [ 1384.906671][ T4642] loop7: detected capacity change from 0 to 1024 [ 1384.941570][ T4642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1384.997871][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1385.385457][ T4660] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.10041'. [ 1385.395727][ T4660] netlink: zone id is out of range [ 1385.401298][ T4660] netlink: zone id is out of range [ 1385.453368][ T4660] netlink: set zone limit has 8 unknown bytes [ 1386.024114][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10051'. [ 1386.322942][ T4696] 9p: Bad value for 'rfdno' [ 1386.330347][ T4696] 9p: Bad value for 'rfdno' [ 1386.796514][ T28] audit: type=1400 audit(2000004337.787:4258): avc: denied { listen } for pid=4711 comm="syz.4.10059" lport=57961 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1386.847752][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10070'. [ 1386.858282][ T4722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10070'. [ 1387.006437][ T28] audit: type=1400 audit(2000004337.987:4259): avc: denied { mount } for pid=4731 comm="syz.7.10075" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1387.080666][ T4735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10076'. [ 1387.083041][ T28] audit: type=1400 audit(2000004337.997:4260): avc: denied { search } for pid=4731 comm="syz.7.10075" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1387.130728][ T28] audit: type=1400 audit(2000004337.997:4261): avc: denied { search } for pid=4731 comm="syz.7.10075" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1387.203142][ T28] audit: type=1400 audit(2000004337.997:4262): avc: denied { read open } for pid=4731 comm="syz.7.10075" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1387.284564][ T28] audit: type=1400 audit(2000004338.157:4263): avc: denied { firmware_load } for pid=4736 comm="syz.7.10077" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1387.716583][ T4755] loop5: detected capacity change from 0 to 128 [ 1387.739431][ T28] audit: type=1400 audit(2000004338.727:4264): avc: denied { mounton } for pid=4753 comm="syz.5.10084" path="/1571/file1" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1387.739491][ T4755] SELinux: security_context_str_to_sid (8ÝßÓ ´CW—ÜyP ìõA`ù¥aˆiþ¿vÕa„šGápºk—çjaÐܳâde•ñÈ´WÙO÷µã^­ [ 1387.739491][ T4755] 8) failed with errno=-22 [ 1388.215049][ T28] audit: type=1400 audit(2000004339.207:4265): avc: denied { create } for pid=4776 comm="syz.1.10093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1388.244309][ T28] audit: type=1400 audit(2000004339.227:4266): avc: denied { bind } for pid=4776 comm="syz.1.10093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1388.281176][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x30 [ 1388.433549][ T28] audit: type=1400 audit(2000004339.417:4267): avc: denied { cmd } for pid=4781 comm="syz.5.10095" path="socket:[131693]" dev="sockfs" ino=131693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1390.995198][ T4872] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.10118'. [ 1391.005388][ T4872] netlink: zone id is out of range [ 1391.010816][ T4872] netlink: zone id is out of range [ 1391.018165][ T4872] netlink: zone id is out of range [ 1391.073897][ T4872] netlink: set zone limit has 8 unknown bytes [ 1391.645937][ T4902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10143'. [ 1391.902245][ T4917] 9pnet_fd: p9_fd_create_tcp (4917): problem connecting socket to 127.0.0.1 [ 1391.928468][ T4919] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.10146'. [ 1391.957669][ T4919] netlink: zone id is out of range [ 1391.980035][ T4919] netlink: zone id is out of range [ 1392.007824][ T4919] netlink: zone id is out of range [ 1392.171299][ T4919] netlink: set zone limit has 8 unknown bytes [ 1393.322297][ T4929] loop7: detected capacity change from 0 to 512 [ 1393.351240][ T4929] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1393.381542][ T4929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 1393.400929][ T4929] System zones: 1-12 [ 1393.411296][ T4929] EXT4-fs (loop7): 1 truncate cleaned up [ 1393.418019][ T4929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1393.463856][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.528725][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1393.528844][ T28] audit: type=1400 audit(2000004344.517:4274): avc: denied { mount } for pid=4940 comm="syz.7.10156" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1393.742313][ T4951] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10153'. [ 1393.802430][ T4951] netlink: zone id is out of range [ 1393.852040][ T4951] netlink: zone id is out of range [ 1393.971477][ T4956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10161'. [ 1394.717379][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1394.729442][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 1394.729532][ T3316] Tainted: [W]=WARN [ 1394.729542][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1394.729555][ T3316] Call Trace: [ 1394.729562][ T3316] [ 1394.729569][ T3316] __dump_stack+0x1d/0x30 [ 1394.729603][ T3316] dump_stack_lvl+0x95/0xd0 [ 1394.729633][ T3316] dump_stack+0x15/0x1b [ 1394.729661][ T3316] dump_header+0x80/0x240 [ 1394.729686][ T3316] oom_kill_process+0x295/0x350 [ 1394.729720][ T3316] out_of_memory+0x97d/0xb80 [ 1394.729768][ T3316] try_charge_memcg+0x62e/0xa10 [ 1394.729815][ T3316] __mem_cgroup_charge+0x65/0x150 [ 1394.729848][ T3316] filemap_add_folio+0x110/0x350 [ 1394.729885][ T3316] __filemap_get_folio_mpol+0x326/0x680 [ 1394.729934][ T3316] filemap_fault+0x486/0xb90 [ 1394.730047][ T3316] __do_fault+0xbc/0x200 [ 1394.730085][ T3316] handle_mm_fault+0x11d7/0x3020 [ 1394.730166][ T3316] ? vma_start_read+0x1c7/0x2c0 [ 1394.730257][ T3316] do_user_addr_fault+0x62f/0x1050 [ 1394.730296][ T3316] ? trace_page_fault_user+0x1f/0xe0 [ 1394.730343][ T3316] exc_page_fault+0x62/0xa0 [ 1394.730374][ T3316] asm_exc_page_fault+0x26/0x30 [ 1394.730441][ T3316] RIP: 0033:0x7f98a7a1a074 [ 1394.730460][ T3316] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 b7 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 b6 ed 00 48 01 d1 [ 1394.730552][ T3316] RSP: 002b:00007ffcb4076400 EFLAGS: 00010206 [ 1394.730573][ T3316] RAX: 0000001b33724000 RBX: 000000000000193b RCX: 0000000000154550 [ 1394.730589][ T3316] RDX: 000000000d4aa48c RSI: 00007ffcb4076490 RDI: 0000000000000001 [ 1394.730607][ T3316] RBP: 00007ffcb407643c R08: 0000000032b40d53 R09: 7fffffffffffffff [ 1394.730626][ T3316] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 1394.730643][ T3316] R13: 00000000000927c0 R14: 0000000000154709 R15: 00007ffcb4076490 [ 1394.730664][ T3316] [ 1394.730764][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 9813 [ 1394.929024][ T3316] memory+swap: usage 384244kB, limit 9007199254740988kB, failcnt 0 [ 1394.937080][ T3316] kmem: usage 275864kB, limit 9007199254740988kB, failcnt 0 [ 1394.944524][ T3316] Memory cgroup stats for /syz0: [ 1394.944767][ T3316] cache 28049408 [ 1394.953328][ T3316] rss 3919872 [ 1394.956651][ T3316] shmem 28049408 [ 1394.960235][ T3316] mapped_file 4214784 [ 1394.964630][ T3316] dirty 0 [ 1394.967591][ T3316] writeback 0 [ 1394.970940][ T3316] workingset_refault_anon 723 [ 1394.975906][ T3316] workingset_refault_file 5754 [ 1394.980702][ T3316] swap 78893056 [ 1394.984455][ T3316] swapcached 147660800 [ 1394.988655][ T3316] pgpgin 1729832 [ 1394.992215][ T3316] pgpgout 1721998 [ 1394.996119][ T3316] pgfault 1676525 [ 1394.999818][ T3316] pgmajfault 185 [ 1395.003580][ T3316] inactive_anon 2392064 [ 1395.007806][ T3316] active_anon 29696000 [ 1395.011930][ T3316] inactive_file 0 [ 1395.015815][ T3316] active_file 0 [ 1395.019296][ T3316] unevictable 0 [ 1395.022844][ T3316] hierarchical_memory_limit 314572800 [ 1395.043246][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 1395.049529][ T3316] total_cache 28049408 [ 1395.069209][ T3316] total_rss 3919872 [ 1395.083082][ T3316] total_shmem 28049408 [ 1395.087256][ T3316] total_mapped_file 4214784 [ 1395.103076][ T3316] total_dirty 0 [ 1395.106670][ T3316] total_writeback 0 [ 1395.110474][ T3316] total_workingset_refault_anon 723 [ 1395.122962][ T3316] total_workingset_refault_file 5754 [ 1395.128361][ T3316] total_swap 78893056 [ 1395.132417][ T3316] total_swapcached 147660800 [ 1395.152932][ T3316] total_pgpgin 1729832 [ 1395.157057][ T3316] total_pgpgout 1721998 [ 1395.161240][ T3316] total_pgfault 1676525 [ 1395.183212][ T3316] total_pgmajfault 185 [ 1395.187397][ T3316] total_inactive_anon 2392064 [ 1395.192091][ T3316] total_active_anon 29696000 [ 1395.213015][ T3316] total_inactive_file 0 [ 1395.217433][ T3316] total_active_file 0 [ 1395.221572][ T3316] total_unevictable 0 [ 1395.221970][ T28] audit: type=1400 audit(2000004346.207:4275): avc: denied { ioctl } for pid=4965 comm="syz.5.10164" path="socket:[131976]" dev="sockfs" ino=131976 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1395.233066][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.722,pid=5485,uid=0 [ 1395.311944][ T4968] loop5: detected capacity change from 0 to 4096 [ 1395.313292][ T3316] Memory cgroup out of memory: Killed process 5485 (syz.0.722) total-vm:96072kB, anon-rss:1224kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 1395.364435][ T4968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.364555][ T4955] syz.0.10161 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1395.420434][ T4955] CPU: 0 UID: 0 PID: 4955 Comm: syz.0.10161 Tainted: G W syzkaller #0 PREEMPT(full) [ 1395.420523][ T4955] Tainted: [W]=WARN [ 1395.420533][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1395.420550][ T4955] Call Trace: [ 1395.420560][ T4955] [ 1395.420571][ T4955] __dump_stack+0x1d/0x30 [ 1395.420651][ T4955] dump_stack_lvl+0x95/0xd0 [ 1395.420710][ T4955] dump_stack+0x15/0x1b [ 1395.420739][ T4955] dump_header+0x80/0x240 [ 1395.420770][ T4955] oom_kill_process+0x295/0x350 [ 1395.420874][ T4955] out_of_memory+0x97d/0xb80 [ 1395.420921][ T4955] try_charge_memcg+0x62e/0xa10 [ 1395.421048][ T4955] obj_cgroup_charge_pages+0x23/0xc0 [ 1395.421080][ T4955] __memcg_kmem_charge_page+0x9e/0x170 [ 1395.421106][ T4955] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1395.421136][ T4955] alloc_pages_mpol+0xb3/0x260 [ 1395.421210][ T4955] alloc_pages_noprof+0x8f/0x130 [ 1395.421241][ T4955] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1395.421281][ T4955] __kvmalloc_node_noprof+0x3d4/0x650 [ 1395.421304][ T4955] ? ip_set_alloc+0x24/0x30 [ 1395.421367][ T4955] ? ip_set_alloc+0x24/0x30 [ 1395.421392][ T4955] ? __kmalloc_cache_noprof+0x18a/0x410 [ 1395.421452][ T4955] ip_set_alloc+0x24/0x30 [ 1395.421481][ T4955] hash_netiface_create+0x282/0x740 [ 1395.421545][ T4955] ? __pfx_hash_netiface_create+0x10/0x10 [ 1395.421652][ T4955] ip_set_create+0x3cf/0x970 [ 1395.421694][ T4955] ? __nla_parse+0x40/0x60 [ 1395.421763][ T4955] nfnetlink_rcv_msg+0x509/0x5d0 [ 1395.421883][ T4955] netlink_rcv_skb+0x123/0x220 [ 1395.421981][ T4955] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1395.422013][ T4955] nfnetlink_rcv+0x167/0x1720 [ 1395.422055][ T4955] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1395.422129][ T4955] ? __rmqueue_pcplist+0x9b0/0xb70 [ 1395.422159][ T4955] ? _raw_spin_lock_bh+0x56/0xb0 [ 1395.422184][ T4955] ? strlen+0x19/0x40 [ 1395.422219][ T4955] ? selinux_nlmsg_lookup+0x99/0x890 [ 1395.422329][ T4955] ? __rcu_read_unlock+0x33/0x70 [ 1395.422429][ T4955] ? __netlink_lookup+0x276/0x2b0 [ 1395.422464][ T4955] netlink_unicast+0x5c0/0x690 [ 1395.422492][ T4955] netlink_sendmsg+0x5c8/0x6f0 [ 1395.422602][ T4955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1395.422632][ T4955] ____sys_sendmsg+0x5af/0x600 [ 1395.422764][ T4955] ___sys_sendmsg+0x195/0x1e0 [ 1395.422814][ T4955] __x64_sys_sendmsg+0xd4/0x160 [ 1395.422932][ T4955] x64_sys_call+0x194c/0x3020 [ 1395.422962][ T4955] do_syscall_64+0x12c/0x370 [ 1395.423004][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.423035][ T4955] RIP: 0033:0x7f98a7b4bf79 [ 1395.423068][ T4955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.423088][ T4955] RSP: 002b:00007f98a659f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1395.423110][ T4955] RAX: ffffffffffffffda RBX: 00007f98a7dc5fa0 RCX: 00007f98a7b4bf79 [ 1395.423125][ T4955] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1395.423139][ T4955] RBP: 00007f98a7be27e0 R08: 0000000000000000 R09: 0000000000000000 [ 1395.423152][ T4955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1395.423166][ T4955] R13: 00007f98a7dc6038 R14: 00007f98a7dc5fa0 R15: 00007ffcb4076098 [ 1395.423235][ T4955] [ 1395.758520][ T4955] memory: usage 307200kB, limit 307200kB, failcnt 9852 [ 1395.765629][ T4955] memory+swap: usage 384068kB, limit 9007199254740988kB, failcnt 0 [ 1395.773708][ T4955] kmem: usage 275712kB, limit 9007199254740988kB, failcnt 0 [ 1395.781090][ T4955] Memory cgroup stats for /syz0: [ 1395.781319][ T4955] cache 28049408 [ 1395.810348][ T4955] rss 3919872 [ 1395.815016][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1395.825536][ T4955] shmem 28049408 [ 1395.855564][ T4955] mapped_file 4214784 [ 1395.860692][ T4955] dirty 0 [ 1395.868453][ T4955] writeback 0 [ 1395.871931][ T4955] workingset_refault_anon 723 [ 1395.877031][ T4955] workingset_refault_file 5754 [ 1395.882283][ T4955] swap 78893056 [ 1395.886064][ T4955] swapcached 147660800 [ 1395.890394][ T4955] pgpgin 1729832 [ 1395.894235][ T4955] pgpgout 1721998 [ 1395.897994][ T4955] pgfault 1676525 [ 1395.911216][ T4955] pgmajfault 185 [ 1395.915406][ T4955] inactive_anon 2392064 [ 1395.919925][ T4955] active_anon 29696000 [ 1395.924206][ T4955] inactive_file 0 [ 1395.928180][ T4955] active_file 0 [ 1395.932135][ T4955] unevictable 0 [ 1395.938685][ T4955] hierarchical_memory_limit 314572800 [ 1395.944807][ T4955] hierarchical_memsw_limit 9223372036854771712 [ 1395.951190][ T4955] total_cache 28049408 [ 1395.955738][ T4955] total_rss 3919872 [ 1395.961787][ T4955] total_shmem 28049408 [ 1395.967314][ T4955] total_mapped_file 4214784 [ 1395.971990][ T4955] total_dirty 0 [ 1395.976575][ T4955] total_writeback 0 [ 1395.980510][ T4955] total_workingset_refault_anon 723 [ 1395.986011][ T4955] total_workingset_refault_file 5754 [ 1395.991379][ T4955] total_swap 78893056 [ 1395.995680][ T4955] total_swapcached 147660800 [ 1396.000811][ T4955] total_pgpgin 1729832 [ 1396.005136][ T4955] total_pgpgout 1721998 [ 1396.009451][ T4955] total_pgfault 1676525 [ 1396.019479][ T4955] total_pgmajfault 185 [ 1396.023783][ T4955] total_inactive_anon 2392064 [ 1396.028524][ T4955] total_active_anon 29696000 [ 1396.033436][ T4955] total_inactive_file 0 [ 1396.037842][ T4955] total_active_file 0 [ 1396.041897][ T4955] total_unevictable 0 [ 1396.046173][ T4955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3851,pid=16702,uid=0 [ 1396.062038][ T4955] Memory cgroup out of memory: Killed process 16702 (syz.0.3851) total-vm:96336kB, anon-rss:4676kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 1396.345163][ T4981] gretap0: left allmulticast mode [ 1396.350292][ T4981] gretap0: left promiscuous mode [ 1396.363053][ T4981] Ÿë: port 1(gretap0) entered disabled state [ 1396.416098][ T4955] syz.0.10161 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 1396.430279][ T4955] CPU: 1 UID: 0 PID: 4955 Comm: syz.0.10161 Tainted: G W syzkaller #0 PREEMPT(full) [ 1396.430381][ T4955] Tainted: [W]=WARN [ 1396.430412][ T4955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1396.430429][ T4955] Call Trace: [ 1396.430439][ T4955] [ 1396.430451][ T4955] __dump_stack+0x1d/0x30 [ 1396.430479][ T4955] dump_stack_lvl+0x95/0xd0 [ 1396.430505][ T4955] dump_stack+0x15/0x1b [ 1396.430607][ T4955] dump_header+0x80/0x240 [ 1396.430638][ T4955] oom_kill_process+0x295/0x350 [ 1396.430673][ T4955] out_of_memory+0x97d/0xb80 [ 1396.430722][ T4955] try_charge_memcg+0x62e/0xa10 [ 1396.430811][ T4955] obj_cgroup_charge_pages+0x23/0xc0 [ 1396.430837][ T4955] __memcg_kmem_charge_page+0x9e/0x170 [ 1396.430863][ T4955] __alloc_frozen_pages_noprof+0x18a/0x360 [ 1396.430930][ T4955] alloc_pages_mpol+0xb3/0x260 [ 1396.431025][ T4955] alloc_pages_noprof+0x8f/0x130 [ 1396.431053][ T4955] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 1396.431096][ T4955] __kvmalloc_node_noprof+0x3d4/0x650 [ 1396.431179][ T4955] ? ip_set_alloc+0x24/0x30 [ 1396.431205][ T4955] ? ip_set_alloc+0x24/0x30 [ 1396.431237][ T4955] ? __kmalloc_cache_noprof+0x18a/0x410 [ 1396.431347][ T4955] ip_set_alloc+0x24/0x30 [ 1396.431372][ T4955] hash_netiface_create+0x282/0x740 [ 1396.431403][ T4955] ? __pfx_hash_netiface_create+0x10/0x10 [ 1396.431488][ T4955] ip_set_create+0x3cf/0x970 [ 1396.431536][ T4955] ? __nla_parse+0x40/0x60 [ 1396.431677][ T4955] nfnetlink_rcv_msg+0x509/0x5d0 [ 1396.431730][ T4955] netlink_rcv_skb+0x123/0x220 [ 1396.431835][ T4955] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1396.431866][ T4955] nfnetlink_rcv+0x167/0x1720 [ 1396.431904][ T4955] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1396.431998][ T4955] ? __rmqueue_pcplist+0x9b0/0xb70 [ 1396.432075][ T4955] ? _raw_spin_lock_bh+0x56/0xb0 [ 1396.432096][ T4955] ? strlen+0x19/0x40 [ 1396.432149][ T4955] ? selinux_nlmsg_lookup+0x99/0x890 [ 1396.432186][ T4955] ? __rcu_read_unlock+0x33/0x70 [ 1396.432213][ T4955] ? __netlink_lookup+0x276/0x2b0 [ 1396.432271][ T4955] netlink_unicast+0x5c0/0x690 [ 1396.432308][ T4955] netlink_sendmsg+0x5c8/0x6f0 [ 1396.432381][ T4955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1396.432416][ T4955] ____sys_sendmsg+0x5af/0x600 [ 1396.432527][ T4955] ___sys_sendmsg+0x195/0x1e0 [ 1396.432591][ T4955] __x64_sys_sendmsg+0xd4/0x160 [ 1396.432703][ T4955] x64_sys_call+0x194c/0x3020 [ 1396.432779][ T4955] do_syscall_64+0x12c/0x370 [ 1396.432821][ T4955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.432851][ T4955] RIP: 0033:0x7f98a7b4bf79 [ 1396.432941][ T4955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.432973][ T4955] RSP: 002b:00007f98a659f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1396.432999][ T4955] RAX: ffffffffffffffda RBX: 00007f98a7dc5fa0 RCX: 00007f98a7b4bf79 [ 1396.433089][ T4955] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1396.433106][ T4955] RBP: 00007f98a7be27e0 R08: 0000000000000000 R09: 0000000000000000 [ 1396.433123][ T4955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1396.433137][ T4955] R13: 00007f98a7dc6038 R14: 00007f98a7dc5fa0 R15: 00007ffcb4076098 [ 1396.433162][ T4955] [ 1396.756406][ T4955] memory: usage 307200kB, limit 307200kB, failcnt 14369 [ 1396.764547][ T4955] memory+swap: usage 384176kB, limit 9007199254740988kB, failcnt 0 [ 1396.772530][ T4955] kmem: usage 299112kB, limit 9007199254740988kB, failcnt 0 [ 1396.774710][ T4981] team0: Port device dummy0 removed [ 1396.783272][ T4955] Memory cgroup stats for /syz0: [ 1396.785422][ T4955] cache 8237056 [ 1396.794539][ T4981] bridge_slave_0: left allmulticast mode [ 1396.794558][ T4981] bridge_slave_0: left promiscuous mode [ 1396.794734][ T4981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.813868][ T4955] rss 20480 [ 1396.817081][ T4955] shmem 8237056 [ 1396.820644][ T4955] mapped_file 0 [ 1396.824225][ T4955] dirty 0 [ 1396.827259][ T4955] writeback 0 [ 1396.830639][ T4955] workingset_refault_anon 723 [ 1396.833728][ T4981] bond0: (slave bridge_slave_1): Releasing active interface [ 1396.838098][ T4955] workingset_refault_file 5934 [ 1396.848606][ T4955] swap 78823424 [ 1396.850795][ T4981] veth0_to_team: left allmulticast mode [ 1396.852380][ T4955] swapcached 156090368 [ 1396.862207][ T4955] pgpgin 1730012 [ 1396.867702][ T4955] pgpgout 1727994 [ 1396.868171][ T4981] veth0_to_team: left promiscuous mode [ 1396.871479][ T4955] pgfault 1676541 [ 1396.881535][ T4955] pgmajfault 190 [ 1396.886124][ T4955] inactive_anon 6258688 [ 1396.886395][ T4981] Ÿë: port 2(veth0_to_team) entered disabled state [ 1396.890337][ T4955] active_anon 2007040 [ 1396.890346][ T4955] inactive_file 0 [ 1396.906803][ T4955] active_file 0 [ 1396.908299][ T4981] team0: Port device team_slave_0 removed [ 1396.919287][ T4955] unevictable 0 [ 1396.919520][ T4981] team0: Port device team_slave_1 removed [ 1396.937330][ T4981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.945604][ T4955] hierarchical_memory_limit 314572800 [ 1396.951071][ T4955] hierarchical_memsw_limit 9223372036854771712 [ 1396.951507][ T4981] net_ratelimit: 2 callbacks suppressed [ 1396.951519][ T4981] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1396.981453][ T4955] total_cache 8237056 [ 1396.986406][ T4955] total_rss 20480 [ 1396.996460][ T4955] total_shmem 8237056 [ 1397.004013][ T4955] total_mapped_file 0 [ 1397.008285][ T4955] total_dirty 0 [ 1397.021924][ T4955] total_writeback 0 [ 1397.041514][ T4955] total_workingset_refault_anon 723 [ 1397.048076][ T4955] total_workingset_refault_file 5934 [ 1397.053840][ T4955] total_swap 78823424 [ 1397.058533][ T4955] total_swapcached 156090368 [ 1397.063485][ T4955] total_pgpgin 1730012 [ 1397.069372][ T4955] total_pgpgout 1727994 [ 1397.074468][ T4955] total_pgfault 1676541 [ 1397.079155][ T4955] total_pgmajfault 190 [ 1397.084021][ T4955] total_inactive_anon 6258688 [ 1397.088773][ T4955] total_active_anon 2007040 [ 1397.093659][ T4955] total_inactive_file 0 [ 1397.097894][ T4955] total_active_file 0 [ 1397.101936][ T4955] total_unevictable 0 [ 1397.106482][ T4955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10161,pid=4954,uid=0 [ 1397.122085][ T4955] Memory cgroup out of memory: Killed process 4954 (syz.0.10161) total-vm:96336kB, anon-rss:1236kB, file-rss:22296kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:0 [ 1397.405893][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10180'. [ 1397.752208][ T5024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1397.785378][ T5024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1397.798065][ T5024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1397.812410][ T5024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1397.822200][ T5024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1397.832079][ T5024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1397.841688][ T5024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1397.851874][ T5024] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(17) [ 1397.858502][ T5024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1397.867473][ T5024] vhci_hcd vhci_hcd.0: Device attached [ 1397.875570][ T5030] vhci_hcd: connection closed [ 1397.875842][T13830] vhci_hcd vhci_hcd.5: stop threads [ 1397.899467][T13830] vhci_hcd vhci_hcd.5: release socket [ 1397.905495][T13830] vhci_hcd vhci_hcd.5: disconnect device [ 1397.987466][ T5040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10190'. [ 1398.156845][ T5046] loop7: detected capacity change from 0 to 128 [ 1398.208917][ T5046] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1398.242106][ T5046] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.315606][ T2994] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1399.462681][ T5088] loop5: detected capacity change from 0 to 1024 [ 1399.489942][ T5088] EXT4-fs: Ignoring removed oldalloc option [ 1399.503170][ T5088] EXT4-fs: Ignoring removed bh option [ 1399.551169][ T5093] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.10207'. [ 1399.581583][ T5093] netlink: zone id is out of range [ 1399.604030][ T5093] netlink: zone id is out of range [ 1399.611754][ T5093] netlink: zone id is out of range [ 1399.913312][ T5092] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10210'. [ 1399.928576][ T5093] netlink: set zone limit has 8 unknown bytes [ 1399.964855][ T5088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1400.035840][ T5090] lo speed is unknown, defaulting to 1000 [ 1400.475408][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.486413][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1400.531856][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10216'. [ 1400.689920][ T5125] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1400.762392][ T5126] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.10217'. [ 1400.772563][ T5126] netlink: zone id is out of range [ 1400.800384][ T5126] netlink: zone id is out of range [ 1400.840712][ T5126] netlink: zone id is out of range [ 1401.302677][ T5126] netlink: set zone limit has 8 unknown bytes [ 1401.788634][ T5135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10223'. [ 1402.074497][ T28] audit: type=1400 audit(2000004353.067:4276): avc: denied { unmount } for pid=5149 comm="syz.0.10228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1402.583276][ T5162] netlink: 'syz.0.10232': attribute type 4 has an invalid length. [ 1403.032073][ T5165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10233'. [ 1403.247108][ T28] audit: type=1400 audit(2000004354.237:4277): avc: denied { setopt } for pid=5173 comm="syz.0.10237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1403.365925][ T28] audit: type=1400 audit(2000004354.357:4278): avc: denied { create } for pid=5177 comm="syz.7.10239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1403.424041][ T28] audit: type=1400 audit(2000004354.387:4279): avc: denied { getopt } for pid=5177 comm="syz.7.10239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1403.697598][ T5195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10247'. [ 1403.769520][ T5190] ip6tnl0: Caught tx_queue_len zero misconfig [ 1404.038950][ T5207] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1404.064603][ T5207] netem: incorrect ge model size [ 1404.082187][ T5207] netem: change failed [ 1404.140052][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10253'. [ 1404.187356][ T5212] netlink: 'syz.0.10253': attribute type 1 has an invalid length. [ 1404.597427][ T5245] loop7: detected capacity change from 0 to 512 [ 1404.605373][ T5245] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1404.618936][ T5245] EXT4-fs (loop7): 1 truncate cleaned up [ 1404.626403][ T5245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.660079][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.125940][ T28] audit: type=1326 audit(2000004356.117:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5224 comm="syz.0.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a7b4bf79 code=0x7fc00000 [ 1405.699519][ T5280] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10277'. [ 1405.730953][ T5280] netlink: zone id is out of range [ 1405.755254][ T5280] netlink: zone id is out of range [ 1405.805598][ T5280] netlink: zone id is out of range [ 1406.080813][ T5280] netlink: set zone limit has 8 unknown bytes [ 1406.100982][ T5286] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10278'. [ 1406.488659][ T28] audit: type=1400 audit(2000004357.477:4281): avc: denied { associate } for pid=5298 comm="syz.7.10282" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1407.524790][ T28] audit: type=1400 audit(2000004358.507:4282): avc: denied { execute } for pid=5334 comm="syz.5.10300" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=133389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1407.626698][ T28] audit: type=1400 audit(2000004358.617:4283): avc: denied { read } for pid=5339 comm="syz.1.10301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1407.660999][ T28] audit: type=1400 audit(2000004358.647:4284): avc: denied { override_creds } for pid=5341 comm="syz.0.10302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1407.704296][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10304'. [ 1408.016611][ T5372] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10307'. [ 1408.027094][ T5372] netlink: zone id is out of range [ 1408.032264][ T5372] netlink: zone id is out of range [ 1408.038841][ T5372] netlink: zone id is out of range [ 1408.064462][ T5372] netlink: set zone limit has 8 unknown bytes [ 1408.439368][ T28] audit: type=1400 audit(2000004359.427:4285): avc: denied { mounton } for pid=5374 comm="syz.7.10314" path="/file0" dev="ramfs" ino=133440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1408.736100][ T5384] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.10315'. [ 1408.784033][ T5384] netlink: zone id is out of range [ 1408.789883][ T5384] netlink: zone id is out of range [ 1409.139982][ T28] audit: type=1326 audit(2000004360.127:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.0.10317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98a7b4bf79 code=0x0 [ 1409.454856][ T5400] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10319'. [ 1409.824351][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10322'. [ 1409.858887][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10322'. [ 1409.989549][ T5410] loop7: detected capacity change from 0 to 256 [ 1411.807772][ T5469] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.10334'. [ 1411.954604][ T5475] netlink: 204 bytes leftover after parsing attributes in process `syz.5.10335'. [ 1412.092312][ T5481] netlink: 'syz.5.10336': attribute type 10 has an invalid length. [ 1412.128941][ T5481] netlink: 'syz.5.10336': attribute type 11 has an invalid length. [ 1412.157721][ T5481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10336'. [ 1412.604849][ T5504] tipc: Enabled bearer , priority 0 [ 1412.635619][ T5504] syzkaller0: MTU too low for tipc bearer [ 1412.661316][ T5504] tipc: Disabling bearer [ 1412.788599][ T5489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10331'. [ 1412.946240][ T5519] loop5: detected capacity change from 0 to 4096 [ 1413.006324][ T5519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.051476][ T28] audit: type=1400 audit(2000004364.037:4287): avc: denied { create } for pid=5516 comm="syz.5.10343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 1413.102162][ T28] audit: type=1400 audit(2000004364.037:4288): avc: denied { shutdown } for pid=5516 comm="syz.5.10343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 1413.146186][ T28] audit: type=1400 audit(2000004364.037:4289): avc: denied { getopt } for pid=5516 comm="syz.5.10343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 1413.173523][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.207920][ T28] audit: type=1400 audit(2000004364.037:4290): avc: denied { connect } for pid=5516 comm="syz.5.10343" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 1413.243973][ T28] audit: type=1400 audit(2000004364.037:4291): avc: denied { name_connect } for pid=5516 comm="syz.5.10343" dest=20000 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1413.280903][ T28] audit: type=1400 audit(2000004364.067:4292): avc: denied { mount } for pid=5530 comm="syz.0.10345" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1413.334601][ T5550] loop7: detected capacity change from 0 to 128 [ 1413.358698][ T5550] FAT-fs (loop7): bogus number of reserved sectors [ 1413.375111][ T5550] FAT-fs (loop7): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 1413.390954][ T5550] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1413.481480][ T5561] xt_hashlimit: max too large, truncated to 1048576 [ 1413.600742][ T5581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10354'. [ 1413.615222][ T28] audit: type=1400 audit(2000004364.597:4293): avc: denied { write } for pid=5584 comm="syz.7.10356" name="/" dev="configfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1413.712735][ T28] audit: type=1400 audit(2000004364.697:4294): avc: denied { watch } for pid=5591 comm="syz.7.10358" path="/bus" dev="sysfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1413.804386][ T28] audit: type=1400 audit(2000004364.797:4295): avc: denied { watch watch_reads } for pid=5601 comm="syz.5.10360" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1414.115679][ T5646] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10370'. [ 1414.144536][ T5646] netlink: 52 bytes leftover after parsing attributes in process `syz.1.10370'. [ 1416.585557][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10384'. [ 1417.008635][ T28] audit: type=1326 audit(2000004367.997:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5711 comm="syz.7.10393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c1ddfbf79 code=0x0 [ 1417.099806][ T5717] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10389'. [ 1417.127616][ T5717] net_ratelimit: 6 callbacks suppressed [ 1417.127732][ T5717] netlink: zone id is out of range [ 1417.173838][ T5717] netlink: zone id is out of range [ 1417.181494][ T5717] netlink: zone id is out of range [ 1417.495744][ T5717] netlink: set zone limit has 8 unknown bytes [ 1417.567978][ T5726] ref_ctr increment failed for inode: 0x1eaa offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88813e3aa880 [ 1417.580020][ T5724] uprobe: syz.4.10397:5724 failed to unregister, leaking uprobe [ 1417.939216][ T5754] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10402'. [ 1417.952643][ T5754] netlink: zone id is out of range [ 1417.958226][ T5754] netlink: zone id is out of range [ 1417.966909][ T5754] netlink: zone id is out of range [ 1418.247504][ T5754] netlink: set zone limit has 8 unknown bytes [ 1418.847166][ T5779] loop7: detected capacity change from 0 to 128 [ 1418.932327][ T5780] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10408'. [ 1418.942427][ T5780] netlink: zone id is out of range [ 1418.969806][ T5780] netlink: zone id is out of range [ 1419.002392][ T5779] EXT4-fs: test_dummy_encryption option not supported [ 1419.029018][ T28] audit: type=1400 audit(2000004369.997:4297): avc: denied { append } for pid=5778 comm="syz.7.10413" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1419.149609][ T5784] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.10412'. [ 1420.322658][ T5800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10419'. [ 1420.398680][ T5802] loop5: detected capacity change from 0 to 1024 [ 1420.434662][ T5802] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 1420.819045][ T5817] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.10423'. [ 1421.594978][ T5825] loop5: detected capacity change from 0 to 8192 [ 1421.635460][ T28] audit: type=1400 audit(2000004372.627:4298): avc: denied { kexec_image_load } for pid=5829 comm="syz.7.10431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1422.172205][ T28] audit: type=1326 audit(2000004373.157:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5844 comm="syz.0.10437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a7b4bf79 code=0x7fc00000 [ 1422.311992][ T5856] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.10438'. [ 1422.335469][ T5856] net_ratelimit: 9 callbacks suppressed [ 1422.335649][ T5856] netlink: zone id is out of range [ 1422.347147][ T5856] netlink: zone id is out of range [ 1422.503683][ T5856] netlink: set zone limit has 8 unknown bytes [ 1422.831578][ T28] audit: type=1326 audit(2000004373.817:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5844 comm="syz.0.10437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98a7aed399 code=0x7fc00000 [ 1422.912522][ T5831] kexec: Could not allocate control_code_buffer [ 1423.209495][ T28] audit: type=1400 audit(2000004374.197:4301): avc: denied { write } for pid=5880 comm="syz.5.10448" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1423.241546][ T28] audit: type=1400 audit(2000004374.197:4302): avc: denied { open } for pid=5880 comm="syz.5.10448" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1423.267064][ T28] audit: type=1400 audit(2000004374.197:4303): avc: denied { ioctl } for pid=5880 comm="syz.5.10448" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1423.356148][ T5884] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.10441'. [ 1423.389598][ T5884] netlink: zone id is out of range [ 1423.402103][ T5884] netlink: zone id is out of range [ 1423.409969][ T5884] netlink: zone id is out of range [ 1423.646900][ T5884] netlink: set zone limit has 8 unknown bytes [ 1424.960983][ T5924] netlink: 'syz.1.10465': attribute type 39 has an invalid length. [ 1425.285224][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10468'. [ 1425.371482][ T5934] loop5: detected capacity change from 0 to 8192 [ 1425.396791][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10468'. [ 1425.608941][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10470'. [ 1426.094670][ T5961] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10476'. [ 1426.127607][ T5961] netlink: zone id is out of range [ 1426.152966][ T5961] netlink: zone id is out of range [ 1426.160046][ T5961] netlink: zone id is out of range [ 1427.198798][ T5973] netlink: 'syz.5.10483': attribute type 4 has an invalid length. [ 1428.097711][ T28] audit: type=1400 audit(2000004379.087:4304): avc: denied { map } for pid=6005 comm="syz.0.10495" path="socket:[137449]" dev="sockfs" ino=137449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1428.182713][ T28] audit: type=1400 audit(2000004379.167:4305): avc: denied { mounton } for pid=6010 comm="syz.1.10497" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1428.490667][ T6026] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.10500'. [ 1428.500867][ T6026] net_ratelimit: 1 callbacks suppressed [ 1428.500919][ T6026] netlink: zone id is out of range [ 1428.512368][ T6026] netlink: zone id is out of range [ 1428.529738][ T6026] netlink: zone id is out of range [ 1428.600837][ T6026] netlink: set zone limit has 8 unknown bytes [ 1431.251134][ T5995] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1433.609443][ T28] audit: type=1400 audit(2000004384.597:4306): avc: denied { accept } for pid=6134 comm="syz.5.10541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1433.758619][ T6145] loop5: detected capacity change from 0 to 1024 [ 1433.765680][ T6145] EXT4-fs: Ignoring removed orlov option [ 1433.794574][ T6145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.888391][T10300] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1433.969255][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10553'. [ 1434.014455][ T6173] netlink: 'syz.1.10555': attribute type 1 has an invalid length. [ 1434.023712][ T6173] netlink: 'syz.1.10555': attribute type 2 has an invalid length. [ 1434.031863][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10555'. [ 1434.057146][ T6173] lo speed is unknown, defaulting to 1000 [ 1434.191881][ T6179] ref_ctr increment failed for inode: 0x2f3f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88813e3ae540 [ 1434.204784][ T6178] uprobe: syz.1.10557:6178 failed to unregister, leaking uprobe [ 1434.790511][ T6197] uprobe: syz.1.10564:6197 failed to unregister, leaking uprobe [ 1434.926406][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10569'. [ 1434.932250][ T28] audit: type=1400 audit(2000004385.917:4307): avc: denied { create } for pid=6209 comm="syz.5.10570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1434.935796][ T6207] netlink: 'syz.4.10569': attribute type 7 has an invalid length. [ 1434.935843][ T6207] netlink: 'syz.4.10569': attribute type 8 has an invalid length. [ 1434.935859][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10569'. [ 1434.987474][ T28] audit: type=1400 audit(2000004385.977:4308): avc: denied { bind } for pid=6209 comm="syz.5.10570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1435.031148][ T28] audit: type=1400 audit(2000004386.017:4309): avc: denied { write } for pid=6209 comm="syz.5.10570" path="socket:[137741]" dev="sockfs" ino=137741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1435.082590][ T28] audit: type=1400 audit(2000004386.067:4310): avc: denied { connect } for pid=6209 comm="syz.5.10570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1435.218871][ T6208] team0: Port device team_slave_0 removed [ 1435.336693][ T6201] debugfs: 'netdev@ffff8881213be560' already exists in 'ref_tracker' [ 1435.369589][ T6229] siw: device registration error -23 [ 1435.957693][T23301] kernel write not supported for file bpf-prog (pid: 23301 comm: kworker/0:0) [ 1436.341991][ T28] audit: type=1400 audit(2000004387.327:4311): avc: denied { sys_nice } for pid=6270 comm="syz.0.10591" capability=23 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1436.488022][ T6280] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.10589'. [ 1436.498352][ T6280] netlink: zone id is out of range [ 1436.542909][ T6280] netlink: zone id is out of range [ 1436.569872][ T6280] netlink: zone id is out of range [ 1436.681161][ T6280] netlink: set zone limit has 8 unknown bytes [ 1436.885960][ T6290] loop5: detected capacity change from 0 to 128 [ 1436.896552][ T28] audit: type=1400 audit(2000004387.877:4312): avc: denied { create } for pid=6289 comm="syz.5.10597" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1436.918601][ T28] audit: type=1400 audit(2000004387.887:4313): avc: denied { shutdown } for pid=6285 comm="syz.0.10595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1436.992194][ T28] audit: type=1400 audit(2000004387.977:4314): avc: denied { unlink } for pid=10300 comm="syz-executor" name="file0" dev="tmpfs" ino=8849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1437.112301][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10601'. [ 1437.153992][ T28] audit: type=1400 audit(2000004388.137:4315): avc: denied { read } for pid=6302 comm="syz.5.10602" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1437.462176][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10616'. [ 1437.484935][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10616'. [ 1438.495928][T16753] kernel write not supported for file bpf-prog (pid: 16753 comm: kworker/0:10) [ 1438.568276][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10644'. [ 1438.748216][ T6405] 9p: Could not find request transport: fd0x00000000000000030x0000000000000003 [ 1438.860359][ T6414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10651'. [ 1441.178845][ T6457] bridge0: entered promiscuous mode [ 1441.212164][ T6457] macvtap2: entered promiscuous mode [ 1442.439949][ T6457] macvtap2: entered allmulticast mode [ 1442.468468][ T6457] bridge0: entered allmulticast mode [ 1442.515741][ T6457] bridge0: port 2(macvtap2) entered blocking state [ 1442.592217][ T6457] bridge0: port 2(macvtap2) entered disabled state [ 1442.684356][ T6494] __nla_validate_parse: 1 callbacks suppressed [ 1442.684376][ T6494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10677'. [ 1443.145916][ T6457] bridge0: left allmulticast mode [ 1443.157089][ T6457] bridge0: left promiscuous mode [ 1443.890279][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1443.890295][ T28] audit: type=1400 audit(2000004394.877:4322): avc: denied { execute } for pid=6519 comm="syz.4.10688" path="/file1" dev="ramfs" ino=138131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1444.395663][ T6533] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10693'. [ 1444.778429][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10701'. [ 1445.107470][ T6556] bond38: entered promiscuous mode [ 1445.114437][ T6556] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1445.133627][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10707'. [ 1445.143990][ T28] audit: type=1400 audit(2000004396.137:4323): avc: denied { map } for pid=6567 comm="syz.7.10706" path="socket:[138169]" dev="sockfs" ino=138169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1445.194501][ T28] audit: type=1400 audit(2000004396.137:4324): avc: denied { read } for pid=6567 comm="syz.7.10706" path="socket:[138169]" dev="sockfs" ino=138169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1445.238972][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10709'. [ 1445.248472][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10709'. [ 1445.268713][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10710'. [ 1445.331011][ T6578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10710'. [ 1445.345266][ T28] audit: type=1400 audit(2000004396.337:4325): avc: denied { ioctl } for pid=6579 comm="syz.7.10711" path="socket:[138175]" dev="sockfs" ino=138175 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1446.176848][ T6606] loop5: detected capacity change from 0 to 256 [ 1446.372438][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10722'. [ 1446.394607][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10725'. [ 1446.747802][ T6629] 9p: Bad value for 'rfdno' [ 1448.546213][ T6690] uprobe: syz.7.10754:6690 failed to unregister, leaking uprobe [ 1448.561682][ T6690] uprobe: syz.7.10754:6690 failed to unregister, leaking uprobe [ 1448.615180][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10755'. [ 1449.490645][ T28] audit: type=1400 audit(2000004400.477:4326): avc: denied { watch watch_reads } for pid=6739 comm="syz.5.10772" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1449.725226][ T6747] xt_hashlimit: size too large, truncated to 1048576 [ 1450.937451][ T28] audit: type=1326 audit(2000004401.927:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.0.10797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f98a7b45d97 code=0x0 [ 1451.107874][ T6782] loop5: detected capacity change from 0 to 2048 [ 1451.754863][ T28] audit: type=1400 audit(2000004402.747:4328): avc: denied { read } for pid=6786 comm="syz.7.10788" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1451.872132][ T28] audit: type=1400 audit(2000004402.747:4329): avc: denied { open } for pid=6786 comm="syz.7.10788" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1452.065813][ T6805] loop5: detected capacity change from 0 to 256 [ 1452.087401][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10795'. [ 1452.127524][ T6805] FAT-fs (loop5): Directory bread(block 64) failed [ 1452.135562][ T6805] FAT-fs (loop5): Directory bread(block 65) failed [ 1452.142512][ T6805] FAT-fs (loop5): Directory bread(block 66) failed [ 1452.149801][ T6805] FAT-fs (loop5): Directory bread(block 67) failed [ 1452.156961][ T6805] FAT-fs (loop5): Directory bread(block 68) failed [ 1452.165236][ T6805] FAT-fs (loop5): Directory bread(block 69) failed [ 1452.172056][ T6805] FAT-fs (loop5): Directory bread(block 70) failed [ 1452.179057][ T6805] FAT-fs (loop5): Directory bread(block 71) failed [ 1452.199281][ T6805] FAT-fs (loop5): Directory bread(block 72) failed [ 1452.206245][ T6805] FAT-fs (loop5): Directory bread(block 73) failed [ 1453.232210][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10809'. [ 1453.905485][ T6858] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1454.103064][ T28] audit: type=1400 audit(2000004405.087:4330): avc: denied { create } for pid=6864 comm="syz.4.10820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1454.245074][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10825'. [ 1454.255660][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10825'. [ 1454.325285][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10825'. [ 1454.347306][ T6879] sctp: [Deprecated]: syz.5.10826 (pid 6879) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1454.347306][ T6879] Use struct sctp_sack_info instead [ 1454.364863][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10825'. [ 1454.587767][ T6887] macsec0: entered promiscuous mode [ 1454.605659][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10829'. [ 1454.625409][ T6887] macsec0 (unregistering): left promiscuous mode [ 1454.708287][ T28] audit: type=1400 audit(2000004405.697:4331): avc: denied { read } for pid=6871 comm="syz.1.10823" name="file0" dev="tmpfs" ino=12434 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1454.849496][ T6901] loop7: detected capacity change from 0 to 1024 [ 1454.865439][ T6901] EXT4-fs: Ignoring removed nobh option [ 1454.997678][ T6901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1455.289726][ T6901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.506092][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.772059][ T6926] loop7: detected capacity change from 0 to 512 [ 1455.785265][ T6926] EXT4-fs: Ignoring removed bh option [ 1455.802829][ T6926] EXT4-fs: inline encryption not supported [ 1455.821037][ T6926] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 1455.862591][ T6930] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1455.875106][ T6926] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1455.897380][ T6926] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10840: bg 0: block 248: padding at end of block bitmap is not set [ 1455.912157][ T6926] loop7: lost filesystem error report for type 5 error -117 [ 1455.912880][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 1455.926700][ C1] EXT4-fs (loop7): last error at time 2000004406: ext4_validate_block_bitmap:441 [ 1455.936889][ T6926] Quota error (device loop7): write_blk: dquota write failed [ 1455.944551][ T6926] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1455.954632][ T6926] EXT4-fs error (device loop7): ext4_acquire_dquot:7003: comm syz.7.10840: Failed to acquire dquot type 1 [ 1455.967554][ T6926] loop7: lost filesystem error report for type 5 error -117 [ 1455.968298][ T6926] EXT4-fs (loop7): 1 truncate cleaned up [ 1455.982390][ T6926] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1456.115601][ T2994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1456.328739][ T6956] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10854'. [ 1456.893411][ T6963] lo speed is unknown, defaulting to 1000 [ 1457.058633][ T5625] erspan0: left allmulticast mode [ 1457.076890][ T5625] erspan0: left promiscuous mode [ 1457.082030][ T5625] GPL: port 1(erspan0) entered disabled state [ 1457.106441][ T5625] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1457.132472][ T5625] 0ªX¹¦Dö» (unregistering): left promiscuous mode [ 1457.150129][ T5625] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1457.497135][ T5625] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1457.745451][ T5625] bond1 (unregistering): Released all slaves [ 1457.755680][ T5625] bond2 (unregistering): (slave vlan2): Releasing active interface [ 1457.775548][ T5625] bond2 (unregistering): Released all slaves [ 1457.787141][ T5625] bond3 (unregistering): Released all slaves [ 1457.809738][ T5625] bond0 (unregistering): (slave veth3): Releasing active interface [ 1458.041975][ T5625] bond0 (unregistering): (slave veth5): Releasing active interface [ 1458.055457][ T5625] bond0 (unregistering): (slave bridge_slave_1): Releasing active interface [ 1458.067248][ T5625] bond0 (unregistering): Released all slaves [ 1458.084812][ T5625] bond4 (unregistering): Released all slaves [ 1458.098581][ T5625] bond5 (unregistering): Released all slaves [ 1458.116435][ T5625] bond6 (unregistering): Released all slaves [ 1458.135751][ T5625] bond7 (unregistering): Released all slaves [ 1458.149969][ T5625] bond8 (unregistering): Released all slaves [ 1458.165155][ T5625] bond9 (unregistering): Released all slaves [ 1458.199970][ T5625] bond10 (unregistering): Released all slaves [ 1458.242791][ T5625] bond11 (unregistering): Released all slaves [ 1458.254290][ T5625] bond12 (unregistering): Released all slaves [ 1458.269450][ T5625] bond13 (unregistering): Released all slaves [ 1458.280185][ T5625] bond14 (unregistering): Released all slaves [ 1458.290068][ T5625] bond15 (unregistering): Released all slaves [ 1458.300130][ T5625] bond16 (unregistering): Released all slaves [ 1458.309901][ T5625] bond17 (unregistering): Released all slaves [ 1458.320022][ T5625] bond18 (unregistering): Released all slaves [ 1458.329640][ T5625] bond19 (unregistering): Released all slaves [ 1458.338556][ T5625] bond20 (unregistering): Released all slaves [ 1458.347710][ T5625] bond21 (unregistering): Released all slaves [ 1458.357371][ T5625] bond22 (unregistering): Released all slaves [ 1458.366579][ T5625] bond23 (unregistering): Released all slaves [ 1458.375805][ T5625] bond24 (unregistering): Released all slaves [ 1458.385857][ T5625] bond25 (unregistering): Released all slaves [ 1458.394875][ T5625] bond26 (unregistering): Released all slaves [ 1458.404243][ T5625] bond27 (unregistering): Released all slaves [ 1458.414909][ T5625] bond28 (unregistering): Released all slaves [ 1458.424106][ T5625] bond29 (unregistering): Released all slaves [ 1458.433405][ T5625] bond30 (unregistering): Released all slaves [ 1458.494872][ T5625] bond31 (unregistering): Released all slaves [ 1458.510250][ T5625] bond32 (unregistering): Released all slaves [ 1458.519114][ T5625] bond33 (unregistering): Released all slaves [ 1458.530740][ T5625] bond34 (unregistering): Released all slaves [ 1458.540714][ T5625] bond35 (unregistering): Released all slaves [ 1458.549641][ T5625] bond36 (unregistering): Released all slaves [ 1458.558807][ T5625] bond37 (unregistering): Released all slaves [ 1458.569192][ T5625] bond38 (unregistering): Released all slaves [ 1458.585352][ T5625] bond39 (unregistering): Released all slaves [ 1458.603846][ T5625] bond40 (unregistering): Released all slaves [ 1458.752640][ T7011] loop5: detected capacity change from 0 to 1024 [ 1458.753646][ T5625] bond41 (unregistering): Released all slaves [ 1458.768565][ T5625] bond42 (unregistering): Released all slaves [ 1458.776780][ T7011] EXT4-fs: inline encryption not supported [ 1458.779002][ T5625] bond43 (unregistering): Released all slaves [ 1458.791759][ T5625] bond44 (unregistering): Released all slaves [ 1458.810739][ T5625] bond45 (unregistering): Released all slaves [ 1458.826534][ T7011] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1458.835762][ T5625] bond46 (unregistering): Released all slaves [ 1458.861305][ T5625] bond47 (unregistering): Released all slaves [ 1458.874476][ T7011] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1458.884880][ T5625] bond48 (unregistering): Released all slaves [ 1458.917496][ T5625] bond49 (unregistering): Released all slaves [ 1458.951558][ T5625] bond50 (unregistering): Released all slaves [ 1458.964717][ T5625] bond51 (unregistering): Released all slaves [ 1458.974648][ T5625] bond52 (unregistering): Released all slaves [ 1458.986043][ T5625] bond53 (unregistering): Released all slaves [ 1458.995311][ T5625] bond54 (unregistering): Released all slaves [ 1459.012321][ T5625] bond55 (unregistering): Released all slaves [ 1459.024784][ T5625] bond56 (unregistering): Released all slaves [ 1459.034295][ T5625] bond57 (unregistering): Released all slaves [ 1459.045686][ T5625] bond58 (unregistering): Released all slaves [ 1459.055768][ T5625] bond59 (unregistering): Released all slaves [ 1459.076397][ T5625] bond60 (unregistering): Released all slaves [ 1459.086376][ T5625] bond61 (unregistering): Released all slaves [ 1459.097378][ T5625] bond62 (unregistering): Released all slaves [ 1459.107810][ T5625] bond63 (unregistering): Released all slaves [ 1459.118478][ T5625] bond64 (unregistering): Released all slaves [ 1459.671335][ T6986] lo speed is unknown, defaulting to 1000 [ 1459.722314][ T5625] tipc: Left network mode [ 1459.816773][ T6963] chnl_net:caif_netlink_parms(): no params data found [ 1459.969087][ T5625] veth1_to_bond: left promiscuous mode [ 1460.254549][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.261935][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.270543][ T6963] bridge_slave_0: entered allmulticast mode [ 1460.278570][ T6963] bridge_slave_0: entered promiscuous mode [ 1460.286716][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.295297][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.302589][ T6963] bridge_slave_1: entered allmulticast mode [ 1460.310500][ T6963] bridge_slave_1: entered promiscuous mode [ 1460.400481][ T7035] loop5: detected capacity change from 0 to 512 [ 1460.425998][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.454480][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.516855][ T28] audit: type=1400 audit(2000004411.497:4332): avc: denied { mounton } for pid=7034 comm="syz.5.10873" path="/1752/file0" dev="tmpfs" ino=9221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1460.566255][ T6963] team0: Port device team_slave_0 added [ 1460.576560][ T6963] team0: Port device team_slave_1 added [ 1460.601362][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.612435][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.621346][ T7035] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.5.10873: corrupted xattr block 95: invalid header [ 1460.639549][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.640503][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.640557][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.640593][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1460.669921][ T6963] hsr_slave_0: entered promiscuous mode [ 1460.732802][ T7035] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1460.734636][ T7035] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1460.744356][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1460.744387][ C1] EXT4-fs (loop5): initial error at time 2000004411: ext4_expand_extra_isize_ea:2808: inode 11 [ 1460.744658][ C1] EXT4-fs (loop5): last error at time 2000004411: ext4_expand_extra_isize_ea:2808: inode 11 [ 1460.745632][ T6963] hsr_slave_1: entered promiscuous mode [ 1460.745937][ T6963] debugfs: 'hsr0' already exists in 'hsr' [ 1460.745955][ T6963] Cannot create hsr debugfs directory [ 1460.847344][ T7035] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.10873: bg 0: block 7: invalid block bitmap [ 1460.860464][ T7035] loop5: lost filesystem error report for type 5 error -117 [ 1460.865073][ T7035] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 1460.882689][ T7035] loop5: lost filesystem error report for type 5 error -117 [ 1460.891006][ T7035] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.10873: corrupted xattr block 95: invalid header [ 1460.901649][ T7095] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10884'. [ 1460.960250][ T7035] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1460.973024][ T7035] EXT4-fs warning (device loop5): ext4_evict_inode:275: xattr delete (err -117) [ 1461.026020][ T5625] IPVS: stop unused estimator thread 0... [ 1461.065526][ T7035] EXT4-fs (loop5): 1 orphan inode deleted [ 1461.089102][ T6963] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1461.111619][ T7035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1461.148583][ T6963] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1461.218392][ T6963] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1461.238770][ T7035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1461.345990][ T6963] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1461.568617][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.718652][ T6963] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.747665][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.754858][T11883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1461.827045][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1461.834191][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1461.911803][ T7146] sch_fq: defrate 7 ignored. [ 1462.080712][ T28] audit: type=1400 audit(2000004413.067:4333): avc: denied { write } for pid=7166 comm="syz.7.10898" path="socket:[141290]" dev="sockfs" ino=141290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1462.166159][ T6963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1462.527911][ T7210] loop7: detected capacity change from 0 to 128 [ 1463.008652][ T6963] veth0_vlan: entered promiscuous mode [ 1463.018480][ T6963] veth1_vlan: entered promiscuous mode [ 1463.041309][ T6963] veth0_macvtap: entered promiscuous mode [ 1463.050802][ T6963] veth1_macvtap: entered promiscuous mode [ 1463.066949][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1463.077866][ T6963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1463.105304][ T5629] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.115401][ T5629] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.127245][ T5629] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.136985][ T5629] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1463.200859][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10857'. [ 1463.211194][ T7222] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10857'. [ 1463.694257][ T28] audit: type=1400 audit(2000004414.687:4334): avc: denied { connect } for pid=7242 comm="syz.7.10918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1464.917383][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10933'. [ 1464.930514][ T7284] loop8: detected capacity change from 0 to 128 [ 1465.034869][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.034869][ T7288] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 1465.077570][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.077570][ T7288] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 1465.119627][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.119627][ T7288] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 1465.153860][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.153860][ T7288] loop8: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 1465.182094][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.182094][ T7288] loop8: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 1465.210601][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.210601][ T7288] loop8: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 1465.237677][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.237677][ T7288] loop8: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 1465.277328][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.277328][ T7288] loop8: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 1465.296820][ T28] audit: type=1400 audit(2000004416.287:4335): avc: denied { read } for pid=7272 comm="syz.4.10929" name="file0" dev="tmpfs" ino=8147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1465.344816][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.344816][ T7288] loop8: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 1465.370926][ T28] audit: type=1400 audit(2000004416.287:4336): avc: denied { open } for pid=7272 comm="syz.4.10929" path="/1563/file0" dev="tmpfs" ino=8147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1465.402685][ T7288] syz.8.10934: attempt to access beyond end of device [ 1465.402685][ T7288] loop8: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 1465.452306][ T7293] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.473819][ T7293] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.542276][ T7293] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.559953][ T7293] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.734723][ T7293] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.756963][ T7293] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.138351][ T7293] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1466.199135][ T7293] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.301541][T11883] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1466.314710][T11883] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.332807][T11883] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1466.343902][T11883] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.352361][T11883] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1466.361924][T11883] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.380307][T11883] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1466.412703][T11883] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.637973][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10947'. [ 1466.653578][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10947'. [ 1467.482226][ T7325] team0: Device gtp0 is of different type [ 1467.698972][ T7347] tunl0: Caught tx_queue_len zero misconfig [ 1468.055350][ T7352] lo speed is unknown, defaulting to 1000 [ 1468.182612][ T28] audit: type=1400 audit(2000004419.167:4337): avc: denied { connect } for pid=7361 comm="syz.4.10960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1468.279596][ T28] audit: type=1400 audit(2000004419.267:4338): avc: denied { getopt } for pid=7365 comm="syz.8.10962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1468.384003][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10966'. [ 1468.400925][ T7374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10966'. [ 1468.460150][T32094] ================================================================== [ 1468.468311][T32094] BUG: KCSAN: data-race in wg_index_hashtable_insert / wg_index_hashtable_lookup [ 1468.477474][T32094] [ 1468.479834][T32094] write to 0xffff88811ac6ce4c of 4 bytes by task 3161 on cpu 1: [ 1468.487491][T32094] wg_index_hashtable_insert+0xe3/0x2b0 [ 1468.493079][T32094] wg_noise_handshake_create_response+0x6ed/0x790 [ 1468.499548][T32094] wg_packet_send_handshake_response+0x6d/0x120 [ 1468.505845][T32094] wg_packet_handshake_receive_worker+0x3cc/0x5d0 [ 1468.512296][T32094] process_scheduled_works+0x4de/0x9e0 [ 1468.517803][T32094] worker_thread+0x581/0x770 [ 1468.522440][T32094] kthread+0x22a/0x280 [ 1468.526575][T32094] ret_from_fork+0x150/0x360 [ 1468.531221][T32094] ret_from_fork_asm+0x1a/0x30 [ 1468.536035][T32094] [ 1468.538391][T32094] read to 0xffff88811ac6ce4c of 4 bytes by task 32094 on cpu 0: [ 1468.546049][T32094] wg_index_hashtable_lookup+0x6b/0x130 [ 1468.551627][T32094] wg_noise_handshake_consume_response+0x12a/0x910 [ 1468.558164][T32094] wg_packet_handshake_receive_worker+0x3da/0x5d0 [ 1468.564615][T32094] process_scheduled_works+0x4de/0x9e0 [ 1468.570106][T32094] worker_thread+0x581/0x770 [ 1468.574724][T32094] kthread+0x22a/0x280 [ 1468.578810][T32094] ret_from_fork+0x150/0x360 [ 1468.583433][T32094] ret_from_fork_asm+0x1a/0x30 [ 1468.588242][T32094] [ 1468.590592][T32094] value changed: 0xaa486204 -> 0x89582769 [ 1468.596321][T32094] [ 1468.598657][T32094] Reported by Kernel Concurrency Sanitizer on: [ 1468.604839][T32094] CPU: 0 UID: 0 PID: 32094 Comm: kworker/0:3 Tainted: G W syzkaller #0 PREEMPT(full) [ 1468.615908][T32094] Tainted: [W]=WARN [ 1468.619729][T32094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1468.629811][T32094] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 1468.637049][T32094] ==================================================================