last executing test programs: 6.785648022s ago: executing program 0 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) pipe2$9p(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.463850907s ago: executing program 2 (id=369): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) 5.323851475s ago: executing program 2 (id=359): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000068ef00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r2, 0x0, &(0x7f0000000200)=""/76}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='cachefiles_ondemand_fd_write\x00', r4}, 0x18) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f00000000c0)='system_u:object_r:logrotate_var_lib_t:s0\x00', 0x29, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r7], 0x48) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r8, 0x5608) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 4.805380534s ago: executing program 0 (id=360): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) setfsgid(0xee01) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r4], 0x50}, 0x1, 0xba01}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) stat(0x0, 0x0) 4.799352664s ago: executing program 2 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@val={0xfffffffffffffe1b}, @val={0x0, 0x99, {0x8, 0x64}}}}}, 0x1c}}, 0x0) 4.629913026s ago: executing program 1 (id=366): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2000000000000218, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 4.42539559s ago: executing program 1 (id=367): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x53, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="ad1d131a095fe463beac0088dadabfc53b49ac368167552ca2833d63f3852c0db7e52b1006be3a744ee6ff3a52c6e5abd8a94c344dca6f696e1143fe068de86c5aade8f8b989a2cf3895e9a947b725b702688264361695a34d23f9f4cd715a2a8e3cc617cb7cb356556a3906d8d0a0d6ad49e9d79286aaab6f826ec7adbe97478a", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.834891515s ago: executing program 3 (id=376): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c8, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xa8, 0x110, 0x0, {0x700}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r3, 0x0, 0x3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x1ff) socket$inet_sctp(0x2, 0x5, 0x84) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)={0x64, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) 2.773718826s ago: executing program 0 (id=377): syz_open_procfs(0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) prctl$PR_SET_NAME(0xf, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, 0x0, &(0x7f0000000780), 0x8, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x26, 0x7fffffff, 0x8, 0x1, 0xce66, 0x2, 0x9, 0x7ff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x4000009}, {0xa, 0x4e20, 0x1ff, @local, 0x2}, r4, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r4}}, 0x18) 2.757524076s ago: executing program 2 (id=378): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x7}, {0x3c, 0x0, 0x0, 0x80}, {0x6}]}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x348, 0x3d8, 0x3d8, 0x348, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x1, 0x9, 0x1, 0x8}, 0x0, 0xd0, 0x138, 0x0, {0x700}, [@common=@inet=@socket2={{0x28}, 0x2}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 2.699060637s ago: executing program 0 (id=379): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TPNhU3WjVi+0YKSI8SsfTYkNFlTw0ivrC6xJWqLbxjYr2JILBbEPoD6AeFkfwQvxThC8KV57pxSKJLmWldnMbsbNbszXMtr9/eDAOTM7nPOfmd1zcs4hAQysiYj4NCJGIuKDiKjkx5M8xZvbKfvc1sb6YpaSaDQu/Zk0z29urC9G4ZrMqbwwmUaknyfxTJd6127e+rBaqy3fyMvT9asfTa/dvPXqytXqleUry9fmZhYWZuYuzC/MH1usv8ft3y7efbvy5c9nf/3x/Xfns/a+mJ8rxnFcJmKifU86TR13ZSV7qJBPhkpsCAeSRsSJiBhqfv8rcSJ2Hl4lvq+U2jgAoC8ajTc6ygDAgy/R5wPAgGn93b+5sb7YSmXMQ5Tl/lvbi1eb+drmVjv+ofZKyHDH+tZxmoiI775+7dksRZ/WIQEAin7Ixj8Xuo3/0jhT+NzJiBjL93Y9HBGPRMSjhf1ihzXRUd49/knvHbGKPWXjv4uFvW1bhfhz4yfyUhbzeAwnl1dqyzN5/JMxPJqVZ/eo48ylp/7qda44/stSVn9rLJi3497Q6D+vWarWq0eJuej+ZxFPD3WLP2mPf5Nm3If3+vU7T/Y69+/x91fjm4gXuj7/nZ17yd77E6eb78N0663Y7fZLz1/vVX/Z8WfPf2zv+MeT4n7NtYPX8dP5lV96nTvs+z+SvNfMj+THPqnW6zdmI0aSd3YfP7dzbavc+nwW/+TZ7t//07FzJx6LiMcj4omI5vGeL3QXr9S+fe7w8fdXFv/SgZ7/wTNjX9y526v+/T3/883cZH5kP79/+23gUe4dAAAA/F+kzfncJJ1q59N0amp7nvd0jKW11bX6y5dXP762tD3vOx7DaWumq1KYD53N5whb5XMd5bl8DuWr0ZPN8tTiam2p7OABYECd6tH/Z/4YLbt1AEDf9GtzOwDw36X/B4DBo/8HgMGj/weAwaP/B4DBo/8HgIFylP/rJyMj86Bmyv5lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo198BAAD//+f91Vw=") unshare(0x28000600) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000300), &(0x7f00000003c0)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) semget(0x0, 0x1, 0x20) clock_gettime(0x0, &(0x7f0000000140)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x7, 0xfffffffa, 0x1, 0xb3a}, 0xb6, 0x0, 0xffff, 0x2, 0x50a, 0x14, 0x1e, 0x1d, 0x5, 0xfe, {0x6, 0x9c22, 0x9, 0x10, 0x4, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40008d1}, 0x22040044) 2.672145178s ago: executing program 1 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) 2.671443268s ago: executing program 0 (id=380): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x40187013, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, 0x0, 0x20040010) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x90) 2.5493883s ago: executing program 3 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0xc1a6b541dee152c1, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) lchown(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000fe0004000000faff", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.454550741s ago: executing program 4 (id=383): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x6a020000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.665605994s ago: executing program 2 (id=384): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x7, 0x4, 0x5}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001100010000000000000000002000000001"], 0x30}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.534190186s ago: executing program 4 (id=385): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r4, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 1.532933296s ago: executing program 3 (id=386): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x9001, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x176, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x314c, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0xfbff}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1.180592751s ago: executing program 3 (id=387): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LIST_PHY(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20000004) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) inotify_init1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) keyctl$revoke(0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={@mcast2, @local, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x2, 0x1, 0x2, 0x0, 0x8000000000000000, 0x802a0, r5}) 670.69542ms ago: executing program 3 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 549.571322ms ago: executing program 3 (id=390): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080), 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x1e, 0x53, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYBLOB="ad1d131a095fe463beac0088dadabfc53b49ac368167552ca2833d63f3852c0db7e52b1006be3a744ee6ff3a52c6e5abd8a94c344dca6f696e1143fe068de86c5aade8f8b989a2cf3895e9a947b725b702688264361695a34d23f9f4cd715a2a8e3cc617cb7cb356556a3906d8d0a0d6ad49e9d79286aaab6f826ec7adbe97478a", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 549.220202ms ago: executing program 4 (id=391): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 547.345412ms ago: executing program 2 (id=400): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() unshare(0x40000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00"/12], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000004c0)={0x7, 0x0, "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"}) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f00000000c0)={0xb}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 546.121102ms ago: executing program 1 (id=392): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, r1, 0x680822d7e3b5f37d, 0xffffffff, 0x25dfdbfd}, 0x14}}, 0x4008000) prctl$PR_SET_NAME(0xf, &(0x7f0000001980)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8fv\x9f\x05\xd1\x984\xc8\x14\xaaa\xe9\x91\x8e\xf9\xc8\xa4e\x00u\xef\xc2\xa5\xe27\xb4\xcds\xf4*I\x8f\x00\x00\x00\x00\x00\x00\x10\xac5\x1a\v\n\xca\x18\xfc\xd3G\xbd\'\xad<\x19O\xa6#\x82\xff \x03\xccA\x9f\x0e@\r\x1cD\x80nbWR\\\xfb\xc0a\xc5\x95P\xe7\xf4fPA\xc8\x03\xaeN\x12u\x91\x18\x17\xab\xc9\xf2\x1d\x96D\xc8\x0ft\x88\xb6{\xf6p\xfaU\x9a\x8f\xb1\xaf\x90\xb2u\'\xdc\x81\f\xe1\\89d\xe9\x06\xb1\xd9\x90\xb4\x9f\x11\'\xac\x14r\xfa\x88\xc9p#~E\x1c\xab\x96\b\xad\f\xe6\xc9\xad\xc9\xa0\f\x83\xb94\x0e[\xcd\xd6\xc9O\xba\xac\xc5\'\xdb\xce\xb4\xa4\xa3\x9a\x1eXk\x92g\x81\x7f\xfdBr\x84\xaf:O\xcf}N\xe1\x91\xaf\xd1\xb7\xd6=\xaf\xc1gf\x9d\x0fl;y\x05\xc0\xd7\xef\x05\xd3\xa0U\x12\xf4\xe2>\xad\x1df\xcf\xaaL,#\x82:\xb6\x8d\x89\xd9i\xcd\x88\x9a\x83Ig\x15m\x15\x1d\xd7m\xa48\xb3\x06\xec\xbe\xa2\xb8\xb6\xc8\xbec\x968\xa3\x00;\x85\x90-\x12\x16\xfa\x86jf\x9c\x17h\fIaUK\xf8\xc3\xf2\xe9\xaa\xb4=H\x8bF\xdb\x18\xcfM\xf8\x93\xb2\xb2F\x017k\xbe\xadr\x8b\xf0T^m0\xe2\xec\x9f\xddi\x82}\xa1\x85\xc1\xb9\x8b\xd9\x12(\xd5\xb3\xa7\xe8\xfen\xf8\xf5\xe4z\x02uC\x8f\x18\xe4D\x90\xfa1\x0e\x1c\xa7\xe0)Z\x86;V\x03\x84\x9b\x97\xe1\x97\xc3\x8bSc\xb4\xc7\xafk\xda\xb6\a\x1d\v\x00\x00\x00\x00\x00\x00\x00\xffbz:\x04\xfa\xb0\xbc\x15b\x1b\x1f\xbc\x17c5 p\x0f\xbb2\xc7k\x1b\xe8\xe3G\xba\x8d\x9e\xf3s\xd7\x13-\x0ec++B\x96\x98\r\x03\x88\xd6b)m\x80h/?i\x82t\xad\x91\xe7\x8b\x10\xed\x02\xd7wmt\x18\x12g\xbcL@\x9f\x98=\xc4\x9d2\xb9\xb5\xd0\x0f\xfc9\xac!\xd7\xb3\xe3n\xfe\xc0S\xa3\xc1\xe3\xd4\xa4kN\xba\xd4F\x97C \x1ckK,T\x03\xb6\x19\x9a\xeb\x11=\x8b\xd6\x86\x10oR\x8d\xcf\xa3\x8a\x01\x92T\x05bE\n{\xf8\xbac\x10\x9a\xee{,\xb4?\x92#{\xe4Mv\xab\x1d\x957\f\xd1') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x1, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) 510.141103ms ago: executing program 0 (id=394): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x800, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltclass={0x30, 0x29, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0xffff, 0xfff3}, {0x6, 0x8}}, [@tclass_kind_options=@c_taprio={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x41, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) getpeername$netlink(r1, &(0x7f0000000400), &(0x7f0000000600)=0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 447.490723ms ago: executing program 1 (id=395): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x4b) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) setresuid(0xee00, 0xee00, 0x0) setfsgid(0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) 140.940238ms ago: executing program 1 (id=396): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff0b8}, 0x94) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 43.93721ms ago: executing program 4 (id=397): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0) unshare(0xa000200) 0s ago: executing program 4 (id=398): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000380)='GPL\x00', 0xae0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a00", @ANYRES32], 0x58}}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x5, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, @in=@rand_addr=0x64010100, @in6=@mcast1, 0x33, 0x3, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. [ 27.929735][ T29] audit: type=1400 audit(1753148680.092:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.930912][ T3291] cgroup: Unknown subsys name 'net' [ 27.952558][ T29] audit: type=1400 audit(1753148680.092:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.979913][ T29] audit: type=1400 audit(1753148680.122:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.113089][ T3291] cgroup: Unknown subsys name 'cpuset' [ 28.119329][ T3291] cgroup: Unknown subsys name 'rlimit' [ 28.290227][ T29] audit: type=1400 audit(1753148680.452:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.313525][ T29] audit: type=1400 audit(1753148680.452:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.334074][ T29] audit: type=1400 audit(1753148680.452:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.354504][ T29] audit: type=1400 audit(1753148680.452:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.374858][ T29] audit: type=1400 audit(1753148680.472:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.383865][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.399772][ T29] audit: type=1400 audit(1753148680.472:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.431694][ T29] audit: type=1400 audit(1753148680.582:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.479566][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.629342][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.676574][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.758119][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.766755][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.782000][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.789190][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.796596][ T3302] bridge_slave_0: entered allmulticast mode [ 29.803030][ T3302] bridge_slave_0: entered promiscuous mode [ 29.822556][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.829674][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.836908][ T3302] bridge_slave_1: entered allmulticast mode [ 29.843420][ T3302] bridge_slave_1: entered promiscuous mode [ 29.884171][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.896365][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.903471][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.910583][ T3304] bridge_slave_0: entered allmulticast mode [ 29.917152][ T3304] bridge_slave_0: entered promiscuous mode [ 29.926225][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.938609][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.954918][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.962046][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.969209][ T3304] bridge_slave_1: entered allmulticast mode [ 29.975612][ T3304] bridge_slave_1: entered promiscuous mode [ 30.024889][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.032020][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.039300][ T3308] bridge_slave_0: entered allmulticast mode [ 30.045809][ T3308] bridge_slave_0: entered promiscuous mode [ 30.052955][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.060066][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.067534][ T3308] bridge_slave_1: entered allmulticast mode [ 30.074108][ T3308] bridge_slave_1: entered promiscuous mode [ 30.081524][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.092406][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.108894][ T3302] team0: Port device team_slave_0 added [ 30.126537][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.133648][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.140802][ T3303] bridge_slave_0: entered allmulticast mode [ 30.147485][ T3303] bridge_slave_0: entered promiscuous mode [ 30.154435][ T3302] team0: Port device team_slave_1 added [ 30.174953][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.182149][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.189539][ T3303] bridge_slave_1: entered allmulticast mode [ 30.196066][ T3303] bridge_slave_1: entered promiscuous mode [ 30.213659][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.223206][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.230164][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.256311][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.267779][ T3304] team0: Port device team_slave_0 added [ 30.274523][ T3304] team0: Port device team_slave_1 added [ 30.290621][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.305046][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.312006][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.337980][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.353966][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.361071][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.368358][ T3306] bridge_slave_0: entered allmulticast mode [ 30.374788][ T3306] bridge_slave_0: entered promiscuous mode [ 30.387216][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.410042][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.417131][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.443270][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.454097][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.461257][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.468656][ T3306] bridge_slave_1: entered allmulticast mode [ 30.475444][ T3306] bridge_slave_1: entered promiscuous mode [ 30.482857][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.492811][ T3308] team0: Port device team_slave_0 added [ 30.499896][ T3308] team0: Port device team_slave_1 added [ 30.506220][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.513230][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.539181][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.582280][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.601997][ T3303] team0: Port device team_slave_0 added [ 30.608765][ T3303] team0: Port device team_slave_1 added [ 30.616311][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.623322][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.649305][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.661195][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.672851][ T3302] hsr_slave_0: entered promiscuous mode [ 30.679077][ T3302] hsr_slave_1: entered promiscuous mode [ 30.702569][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.709597][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.735616][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.765315][ T3304] hsr_slave_0: entered promiscuous mode [ 30.771329][ T3304] hsr_slave_1: entered promiscuous mode [ 30.777382][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.785019][ T3304] Cannot create hsr debugfs directory [ 30.796655][ T3306] team0: Port device team_slave_0 added [ 30.803036][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.810010][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.836174][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.848035][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.855086][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.881076][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.900040][ T3306] team0: Port device team_slave_1 added [ 30.938630][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.945733][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.971709][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.983087][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.990063][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.016065][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.033890][ T3308] hsr_slave_0: entered promiscuous mode [ 31.039943][ T3308] hsr_slave_1: entered promiscuous mode [ 31.045996][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.053591][ T3308] Cannot create hsr debugfs directory [ 31.078465][ T3303] hsr_slave_0: entered promiscuous mode [ 31.084520][ T3303] hsr_slave_1: entered promiscuous mode [ 31.090273][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.097862][ T3303] Cannot create hsr debugfs directory [ 31.164330][ T3306] hsr_slave_0: entered promiscuous mode [ 31.170336][ T3306] hsr_slave_1: entered promiscuous mode [ 31.176552][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.184194][ T3306] Cannot create hsr debugfs directory [ 31.309551][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.323542][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.339392][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.348554][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.373978][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.384630][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.393948][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.403250][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.435358][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.447458][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.463223][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.484149][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.503287][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.512172][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.521459][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.539396][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.559242][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.571908][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.582053][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.591060][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.620116][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.649150][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.666312][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.675986][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.690435][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.697606][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.706331][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.713460][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.729640][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.736779][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.745683][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.752943][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.790441][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.801018][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.826831][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.837262][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.858340][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.878437][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.893994][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.908900][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.920957][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.935823][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.960830][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.967950][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.981810][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.994787][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.002012][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.012118][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.020823][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.028010][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.043296][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.050430][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.077675][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.084803][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.105164][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.112382][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.129194][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.139722][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.154552][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.165105][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.195740][ T3302] veth0_vlan: entered promiscuous mode [ 32.231155][ T3302] veth1_vlan: entered promiscuous mode [ 32.249278][ T3308] veth0_vlan: entered promiscuous mode [ 32.281066][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.290963][ T3308] veth1_vlan: entered promiscuous mode [ 32.317249][ T3302] veth0_macvtap: entered promiscuous mode [ 32.328001][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.343025][ T3302] veth1_macvtap: entered promiscuous mode [ 32.357901][ T3308] veth0_macvtap: entered promiscuous mode [ 32.369438][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.379670][ T3308] veth1_macvtap: entered promiscuous mode [ 32.389624][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.403586][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.417873][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.428802][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.437741][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.446521][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.455419][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473914][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.484384][ T3308] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493260][ T3308] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.501982][ T3308] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.510783][ T3308] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.559061][ T3304] veth0_vlan: entered promiscuous mode [ 32.588592][ T3304] veth1_vlan: entered promiscuous mode [ 32.629836][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.635374][ T3304] veth0_macvtap: entered promiscuous mode [ 32.663420][ T3303] veth0_vlan: entered promiscuous mode [ 32.669472][ T3304] veth1_macvtap: entered promiscuous mode [ 32.710705][ T3476] loop2: detected capacity change from 0 to 1024 [ 32.711117][ T3476] ======================================================= [ 32.711117][ T3476] WARNING: The mand mount option has been deprecated and [ 32.711117][ T3476] and is ignored by this kernel. Remove the mand [ 32.711117][ T3476] option from the mount to silence this warning. [ 32.711117][ T3476] ======================================================= [ 32.758724][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.760101][ T3476] EXT4-fs: Ignoring removed oldalloc option [ 32.768311][ T3306] veth0_vlan: entered promiscuous mode [ 32.774228][ T3476] EXT4-fs: Ignoring removed orlov option [ 32.782403][ T3303] veth1_vlan: entered promiscuous mode [ 32.794091][ T3476] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 32.797910][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.820341][ T3306] veth1_vlan: entered promiscuous mode [ 32.836956][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.836992][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.837020][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.837101][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.838596][ T3476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.843850][ T3306] veth0_macvtap: entered promiscuous mode [ 32.915102][ T3303] veth0_macvtap: entered promiscuous mode [ 32.924474][ T3303] veth1_macvtap: entered promiscuous mode [ 32.929418][ T3306] veth1_macvtap: entered promiscuous mode [ 32.950343][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.951191][ T3476] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3: Allocating blocks 497-513 which overlap fs metadata [ 32.966738][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.983690][ T3484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.992659][ T3484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.003664][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.011935][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.020834][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.028767][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 33.028786][ T29] audit: type=1400 audit(1753148685.192:104): avc: denied { read write } for pid=3485 comm="syz.0.1" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.029608][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035673][ T29] audit: type=1400 audit(1753148685.192:105): avc: denied { open } for pid=3485 comm="syz.0.1" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 33.059503][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.074058][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.113233][ T29] audit: type=1400 audit(1753148685.272:106): avc: denied { prog_run } for pid=3487 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.132063][ T29] audit: type=1400 audit(1753148685.282:107): avc: denied { create } for pid=3487 comm="syz.3.6" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.133674][ T29] audit: type=1400 audit(1753148685.282:108): avc: denied { write } for pid=3487 comm="syz.3.6" name="secretmem" dev="secretmem" ino=3809 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.175898][ T29] audit: type=1400 audit(1753148685.282:109): avc: denied { block_suspend } for pid=3485 comm="syz.0.1" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.175929][ T29] audit: type=1400 audit(1753148685.282:110): avc: denied { create } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.175958][ T29] audit: type=1400 audit(1753148685.282:111): avc: denied { write } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.175982][ T29] audit: type=1400 audit(1753148685.282:112): avc: denied { read } for pid=3485 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.177388][ T29] audit: type=1400 audit(1753148685.322:113): avc: denied { create } for pid=3487 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 33.210658][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.210763][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.210799][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.210905][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.321238][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.418973][ T3498] loop2: detected capacity change from 0 to 164 [ 33.528562][ T3498] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.348859][ T3505] veth1_macvtap: left promiscuous mode [ 34.385349][ T3505] macsec0: entered allmulticast mode [ 34.393425][ T3509] random: crng reseeded on system resumption [ 34.535653][ T3516] loop1: detected capacity change from 0 to 128 [ 34.614593][ T3516] hsr0: entered promiscuous mode [ 34.620014][ T3516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 34.638956][ T3516] hsr_slave_0: left promiscuous mode [ 34.667033][ T3516] hsr_slave_1: left promiscuous mode [ 34.677647][ T3516] hsr0 (unregistering): left promiscuous mode [ 34.689278][ T3528] $Hÿ: renamed from bond0 (while UP) [ 34.714927][ T3528] $Hÿ: entered promiscuous mode [ 34.720025][ T3528] bond_slave_0: entered promiscuous mode [ 34.725942][ T3528] bond_slave_1: entered promiscuous mode [ 34.862039][ T3536] loop0: detected capacity change from 0 to 512 [ 35.022908][ T3536] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.17: bg 0: block 248: padding at end of block bitmap is not set [ 35.057637][ T3536] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.17: Failed to acquire dquot type 1 [ 35.076430][ T3536] EXT4-fs (loop0): 1 truncate cleaned up [ 35.091884][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.104794][ T3536] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.202971][ T3536] syz.0.17 (3536) used greatest stack depth: 9096 bytes left [ 35.223897][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.549268][ T3546] loop4: detected capacity change from 0 to 2048 [ 35.577448][ T3546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.583785][ T3546] Zero length message leads to an empty skb [ 35.600804][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.609759][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.620835][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.641242][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.650084][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.661046][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.707311][ T3546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 35.733054][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.766278][ T3560] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 35.857972][ T3566] loop2: detected capacity change from 0 to 512 [ 35.858394][ T3566] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 36.487875][ T3583] loop0: detected capacity change from 0 to 512 [ 36.514657][ T3583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.536428][ T3583] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.598048][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.647707][ T3578] netlink: 'syz.3.28': attribute type 3 has an invalid length. [ 36.706961][ T3596] loop2: detected capacity change from 0 to 1024 [ 36.716672][ T3596] EXT4-fs: Ignoring removed bh option [ 36.722239][ T3596] EXT4-fs: inline encryption not supported [ 36.731367][ T3596] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.741856][ T3599] tipc: Started in network mode [ 36.746865][ T3599] tipc: Node identity d25345c7961a, cluster identity 4711 [ 36.754138][ T3599] tipc: Enabled bearer , priority 0 [ 36.755712][ T3596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 36.770335][ T3599] syzkaller0: entered promiscuous mode [ 36.775975][ T3599] syzkaller0: entered allmulticast mode [ 36.782217][ T3596] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.34: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.797807][ T3596] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.34: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.813012][ T3604] tipc: Started in network mode [ 36.818096][ T3604] tipc: Node identity 4ef283bf3e17, cluster identity 4711 [ 36.825401][ T3604] tipc: Enabled bearer , priority 0 [ 36.834902][ T3599] tipc: Resetting bearer [ 36.842184][ T3596] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.34: Failed to acquire dquot type 0 [ 36.844713][ T3604] syzkaller0: entered promiscuous mode [ 36.858823][ T3604] syzkaller0: entered allmulticast mode [ 36.869046][ T3598] tipc: Resetting bearer [ 36.875600][ T3596] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 36.886087][ T3598] tipc: Disabling bearer [ 36.892158][ T3596] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.34: mark_inode_dirty error [ 36.906660][ T3596] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 36.920026][ T3596] EXT4-fs (loop2): 1 orphan inode deleted [ 36.928683][ T3604] tipc: Resetting bearer [ 36.934929][ T37] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.953209][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.961262][ T3603] tipc: Resetting bearer [ 36.975476][ T3603] tipc: Disabling bearer [ 36.989063][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 37.018649][ T3596] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.065044][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 37.071574][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.079468][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.087356][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.095239][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.103242][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.111111][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.119029][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.126896][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.134800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.142685][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.150575][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.158461][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.166339][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.174249][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.182147][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.190027][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.197919][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.205791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.213677][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.221533][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.229464][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.237339][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.245239][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.253115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.260967][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.268861][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.276771][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.284680][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.292579][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 37.300433][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 37.308831][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.377606][ C0] hrtimer: interrupt took 27368 ns [ 37.410847][ T3610] tipc: Started in network mode [ 37.415857][ T3610] tipc: Node identity eae1329bd37b, cluster identity 4711 [ 37.423098][ T3610] tipc: Enabled bearer , priority 0 [ 37.435457][ T3610] syzkaller0: entered promiscuous mode [ 37.441059][ T3610] syzkaller0: entered allmulticast mode [ 37.457207][ T3610] tipc: Resetting bearer [ 37.466327][ T3608] tipc: Resetting bearer [ 37.475214][ T3608] tipc: Disabling bearer [ 37.514567][ T3609] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 37.754048][ T3621] loop2: detected capacity change from 0 to 128 [ 37.771987][ T3621] FAT-fs (loop2): Directory bread(block 32) failed [ 37.837519][ T3621] FAT-fs (loop2): Directory bread(block 33) failed [ 37.901168][ T3621] FAT-fs (loop2): Directory bread(block 34) failed [ 37.956143][ T3626] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.967374][ T3621] FAT-fs (loop2): Directory bread(block 35) failed [ 38.005384][ T3626] bond_slave_0: left promiscuous mode [ 38.051713][ T3621] FAT-fs (loop2): Directory bread(block 36) failed [ 38.074631][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 38.074644][ T29] audit: type=1400 audit(1753148690.242:246): avc: denied { lock } for pid=3623 comm="syz.0.44" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=4737 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.114542][ T3626] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.149166][ T3621] FAT-fs (loop2): Directory bread(block 37) failed [ 38.175975][ T29] audit: type=1400 audit(1753148690.292:247): avc: denied { create } for pid=3627 comm="syz.4.46" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.196503][ T29] audit: type=1400 audit(1753148690.292:248): avc: denied { write } for pid=3627 comm="syz.4.46" name="file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.219117][ T29] audit: type=1400 audit(1753148690.292:249): avc: denied { open } for pid=3627 comm="syz.4.46" path="/6/file0" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.241410][ T29] audit: type=1400 audit(1753148690.302:250): avc: denied { ioctl } for pid=3627 comm="syz.4.46" path="/6/file0" dev="tmpfs" ino=50 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 38.265388][ T3621] FAT-fs (loop2): Directory bread(block 38) failed [ 38.272017][ T3621] FAT-fs (loop2): Directory bread(block 39) failed [ 38.292585][ T3621] FAT-fs (loop2): Directory bread(block 40) failed [ 38.292850][ T3626] bond_slave_1: left promiscuous mode [ 38.299310][ T3621] FAT-fs (loop2): Directory bread(block 41) failed [ 38.320135][ T3626] $Hÿ (unregistering): Released all slaves [ 38.367795][ T29] audit: type=1400 audit(1753148690.502:251): avc: denied { sqpoll } for pid=3627 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.409155][ T3625] __nla_validate_parse: 6 callbacks suppressed [ 38.409173][ T3625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 38.558850][ T29] audit: type=1400 audit(1753148690.722:252): avc: denied { firmware_load } for pid=3624 comm="syz.3.45" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 38.646702][ T29] audit: type=1400 audit(1753148690.752:253): avc: denied { create } for pid=3656 comm="syz.2.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.749931][ T3661] loop1: detected capacity change from 0 to 512 [ 38.802906][ T3661] EXT4-fs: Ignoring removed bh option [ 38.827990][ T3661] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.841192][ T3661] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.235589][ T3695] loop0: detected capacity change from 0 to 1024 [ 39.242405][ T3695] EXT4-fs: Ignoring removed nobh option [ 39.252572][ T3695] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.263627][ T3695] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.280760][ T3695] JBD2: no valid journal superblock found [ 39.286592][ T3695] EXT4-fs (loop0): Could not load journal inode [ 39.358736][ T3661] EXT4-fs (loop1): 1 truncate cleaned up [ 39.439590][ T3661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.524373][ T3703] loop2: detected capacity change from 0 to 128 [ 39.545390][ T29] audit: type=1400 audit(1753148691.672:254): avc: denied { mounton } for pid=3701 comm="syz.3.51" path="/9/file0" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.750934][ T29] audit: type=1400 audit(1753148691.842:255): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 40.028558][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.175108][ T3713] loop1: detected capacity change from 0 to 128 [ 40.216835][ T3713] FAT-fs (loop1): Directory bread(block 162) failed [ 40.244378][ T3713] FAT-fs (loop1): Directory bread(block 163) failed [ 40.265798][ T3713] FAT-fs (loop1): Directory bread(block 164) failed [ 40.279419][ T3715] loop4: detected capacity change from 0 to 512 [ 40.289728][ T3713] FAT-fs (loop1): Directory bread(block 165) failed [ 40.315689][ T3713] FAT-fs (loop1): Directory bread(block 166) failed [ 40.338840][ T3711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.377104][ T3706] syz.2.52: attempt to access beyond end of device [ 40.377104][ T3706] loop2: rw=2049, sector=273, nr_sectors = 480 limit=128 [ 40.401432][ T3713] FAT-fs (loop1): Directory bread(block 167) failed [ 40.426432][ T3713] FAT-fs (loop1): Directory bread(block 168) failed [ 40.442717][ T3713] FAT-fs (loop1): Directory bread(block 169) failed [ 40.455442][ T3711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.530540][ T3711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.736039][ T3711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.206575][ T3737] syz.2.62 uses obsolete (PF_INET,SOCK_PACKET) [ 41.219639][ T3711] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.243723][ T3711] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.256368][ T3711] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.281028][ T3711] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.514641][ T3758] wireguard0: entered promiscuous mode [ 41.618040][ T3766] loop2: detected capacity change from 0 to 1024 [ 41.635864][ T3766] EXT4-fs: Ignoring removed nobh option [ 41.641579][ T3766] EXT4-fs: Ignoring removed bh option [ 41.696137][ T3766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.715641][ T3766] mmap: syz.2.74 (3766) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.731029][ T3766] EXT4-fs (loop2): shut down requested (0) [ 41.952235][ T3766] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 42.005470][ T3766] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 42.096132][ T3766] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 42.214880][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.267910][ T3789] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.538864][ T3789] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.634408][ T3798] lo speed is unknown, defaulting to 1000 [ 42.641513][ T3798] lo speed is unknown, defaulting to 1000 [ 42.649445][ T3798] lo speed is unknown, defaulting to 1000 [ 42.670856][ T3798] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.735633][ T3789] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.748279][ T3798] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 42.818379][ T3789] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.848010][ T3798] lo speed is unknown, defaulting to 1000 [ 42.854325][ T3798] lo speed is unknown, defaulting to 1000 [ 42.860585][ T3798] lo speed is unknown, defaulting to 1000 [ 42.866852][ T3798] lo speed is unknown, defaulting to 1000 [ 42.876039][ T3798] lo speed is unknown, defaulting to 1000 [ 42.882445][ T3798] lo speed is unknown, defaulting to 1000 [ 42.978540][ T3801] tipc: Enabled bearer , priority 0 [ 42.993440][ T3801] syzkaller0: entered promiscuous mode [ 42.999163][ T3801] syzkaller0: entered allmulticast mode [ 43.006922][ T3803] vhci_hcd: invalid port number 236 [ 43.012188][ T3803] vhci_hcd: invalid port number 236 [ 43.116862][ T3801] tipc: Resetting bearer [ 43.133743][ T3800] tipc: Resetting bearer [ 43.140689][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 43.140705][ T29] audit: type=1400 audit(1753148695.302:439): avc: denied { create } for pid=3807 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.183609][ T29] audit: type=1400 audit(1753148695.342:440): avc: denied { setopt } for pid=3807 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 43.221093][ T29] audit: type=1400 audit(1753148695.382:441): avc: denied { ioctl } for pid=3807 comm="syz.4.85" path="socket:[5261]" dev="sockfs" ino=5261 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.401950][ T3791] Set syz1 is full, maxelem 65536 reached [ 43.408812][ T3800] tipc: Disabling bearer [ 43.424286][ T3806] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.446995][ T29] audit: type=1326 audit(1753148695.612:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 43.480865][ T29] audit: type=1326 audit(1753148695.612:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 43.504173][ T29] audit: type=1326 audit(1753148695.612:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 43.527373][ T29] audit: type=1326 audit(1753148695.612:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 43.550660][ T29] audit: type=1326 audit(1753148695.612:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 43.573909][ T29] audit: type=1326 audit(1753148695.612:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 43.597177][ T29] audit: type=1326 audit(1753148695.612:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3814 comm="syz.2.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 43.715004][ T3821] netlink: 'syz.4.89': attribute type 10 has an invalid length. [ 43.730153][ T3821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.89'. [ 43.772748][ T3806] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.786640][ T3821] dummy0: entered promiscuous mode [ 43.798205][ T3821] bridge0: port 3(dummy0) entered blocking state [ 43.805552][ T3821] bridge0: port 3(dummy0) entered disabled state [ 43.813331][ T3821] dummy0: entered allmulticast mode [ 43.834360][ T3821] bridge0: port 3(dummy0) entered blocking state [ 43.841570][ T3821] bridge0: port 3(dummy0) entered forwarding state [ 44.212860][ T3834] hub 9-0:1.0: USB hub found [ 44.217797][ T3834] hub 9-0:1.0: 8 ports detected [ 44.279510][ T3828] lo speed is unknown, defaulting to 1000 [ 44.307879][ T3806] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.365862][ T3806] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.428874][ T3806] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.440293][ T3806] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.451866][ T3806] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.464441][ T3806] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.772488][ T3845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.963718][ T3847] process 'wÞ£ÿ' launched '/dev/fd/7' with NULL argv: empty string added [ 45.218312][ T3851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.97'. [ 45.472490][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 45.480215][ T3860] lo speed is unknown, defaulting to 1000 [ 45.510866][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 45.791624][ T3870] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.846283][ T3870] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.896164][ T3870] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.939060][ T3870] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.992244][ T3870] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.007071][ T3870] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.028201][ T3870] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.056175][ T3870] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.263575][ T3880] geneve2: entered promiscuous mode [ 46.268883][ T3880] geneve2: entered allmulticast mode [ 46.366359][ T3883] lo speed is unknown, defaulting to 1000 [ 46.790967][ T3890] hub 9-0:1.0: USB hub found [ 46.795856][ T3890] hub 9-0:1.0: 8 ports detected [ 46.891699][ T3895] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 46.950898][ T3901] netlink: 'syz.0.113': attribute type 3 has an invalid length. [ 46.959159][ T3903] tipc: Started in network mode [ 46.964140][ T3903] tipc: Node identity fa4c35c32eee, cluster identity 4711 [ 46.971371][ T3903] tipc: Enabled bearer , priority 0 [ 46.980349][ T3903] syzkaller0: entered promiscuous mode [ 46.986029][ T3903] syzkaller0: entered allmulticast mode [ 47.057390][ T3903] tipc: Resetting bearer [ 47.066738][ T3789] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.082852][ T3902] tipc: Resetting bearer [ 47.091157][ T3902] tipc: Disabling bearer [ 47.116465][ T3789] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.118195][ T3910] netlink: 'syz.0.118': attribute type 10 has an invalid length. [ 47.139148][ T3789] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.147420][ T3789] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.191065][ T3916] loop3: detected capacity change from 0 to 128 [ 47.195537][ T3916] FAT-fs (loop3): Directory bread(block 162) failed [ 47.195565][ T3916] FAT-fs (loop3): Directory bread(block 163) failed [ 47.195644][ T3916] FAT-fs (loop3): Directory bread(block 164) failed [ 47.195669][ T3916] FAT-fs (loop3): Directory bread(block 165) failed [ 47.195691][ T3916] FAT-fs (loop3): Directory bread(block 166) failed [ 47.195709][ T3916] FAT-fs (loop3): Directory bread(block 167) failed [ 47.195727][ T3916] FAT-fs (loop3): Directory bread(block 168) failed [ 47.195756][ T3916] FAT-fs (loop3): Directory bread(block 169) failed [ 47.197583][ T3916] FAT-fs (loop3): Directory bread(block 162) failed [ 47.198245][ T3916] FAT-fs (loop3): Directory bread(block 163) failed [ 47.198804][ T3916] syz.3.120: attempt to access beyond end of device [ 47.198804][ T3916] loop3: rw=3, sector=226, nr_sectors = 6 limit=128 [ 47.198836][ T3916] syz.3.120: attempt to access beyond end of device [ 47.198836][ T3916] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 47.207792][ T3916] syz.3.120: attempt to access beyond end of device [ 47.207792][ T3916] loop3: rw=3, sector=234, nr_sectors = 6 limit=128 [ 47.218468][ T3910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.118'. [ 47.225905][ T3916] syz.3.120: attempt to access beyond end of device [ 47.225905][ T3916] loop3: rw=2051, sector=240, nr_sectors = 2 limit=128 [ 47.237779][ T3910] dummy0: entered promiscuous mode [ 47.406708][ T3910] bridge0: port 3(dummy0) entered blocking state [ 47.422828][ T3910] bridge0: port 3(dummy0) entered disabled state [ 47.434668][ T3910] dummy0: entered allmulticast mode [ 47.454771][ T3910] bridge0: port 3(dummy0) entered blocking state [ 47.462454][ T3910] bridge0: port 3(dummy0) entered forwarding state [ 47.494866][ T3943] tipc: Started in network mode [ 47.499805][ T3943] tipc: Node identity 06e71d1f39d6, cluster identity 4711 [ 47.507098][ T3943] tipc: Enabled bearer , priority 0 [ 47.524862][ T3934] syzkaller0: entered promiscuous mode [ 47.530446][ T3934] syzkaller0: entered allmulticast mode [ 47.539920][ T3934] tipc: Resetting bearer [ 47.546490][ T3933] tipc: Resetting bearer [ 47.611055][ T3933] tipc: Disabling bearer [ 47.661152][ T3953] netlink: 'syz.4.126': attribute type 8 has an invalid length. [ 47.668924][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 47.693024][ T3951] tipc: Enabled bearer , priority 0 [ 47.699919][ T3953] loop4: detected capacity change from 0 to 512 [ 47.706652][ T3950] tipc: Resetting bearer [ 47.715708][ T3953] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 47.741459][ T3953] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.126: bad orphan inode 15 [ 47.753166][ T3950] tipc: Disabling bearer [ 47.766812][ T3953] ext4_test_bit(bit=14, block=18) = 1 [ 47.772831][ T3953] is_bad_inode(inode)=0 [ 47.777549][ T3953] NEXT_ORPHAN(inode)=1023 [ 47.782182][ T3953] max_ino=32 [ 47.785527][ T3953] i_nlink=0 [ 47.791576][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 47.792128][ T3953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 47.808047][ T3961] loop2: detected capacity change from 0 to 512 [ 47.814720][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.128'. [ 47.820594][ T3953] ext2 filesystem being mounted at /19/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 47.852084][ T3961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.865881][ T3961] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.882476][ T3965] tipc: Enabled bearer , priority 0 [ 47.911746][ T3965] syzkaller0: entered promiscuous mode [ 47.917344][ T3965] syzkaller0: entered allmulticast mode [ 47.949256][ T3965] tipc: Resetting bearer [ 47.968617][ T3965] tipc: Resetting bearer [ 47.979888][ T3965] tipc: Disabling bearer [ 48.032595][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.180493][ T3974] loop2: detected capacity change from 0 to 128 [ 48.187906][ T3974] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.203919][ T3974] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.213211][ T3974] FAT-fs (loop2): FAT read failed (blocknr 248) [ 48.276483][ T3976] tipc: Enabled bearer , priority 0 [ 48.284446][ T3976] syzkaller0: entered promiscuous mode [ 48.289991][ T3976] syzkaller0: entered allmulticast mode [ 48.301652][ T3976] tipc: Resetting bearer [ 48.309369][ T3975] tipc: Resetting bearer [ 48.316945][ T3975] tipc: Disabling bearer [ 48.525065][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 48.546907][ T3981] netlink: 'syz.4.136': attribute type 4 has an invalid length. [ 48.638667][ T3982] lo speed is unknown, defaulting to 1000 [ 48.708728][ T3985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 48.727536][ T3985] bond0: (slave bond_slave_0): Releasing backup interface [ 48.973435][ T3989] tipc: Enabled bearer , priority 0 [ 48.980752][ T3989] syzkaller0: entered promiscuous mode [ 48.986348][ T3989] syzkaller0: entered allmulticast mode [ 48.998573][ T3989] tipc: Resetting bearer [ 49.005888][ T3988] tipc: Resetting bearer [ 49.018328][ T3988] tipc: Disabling bearer [ 49.092171][ T3991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 49.191170][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 49.191189][ T29] audit: type=1400 audit(1753148701.352:483): avc: denied { create } for pid=3996 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.221370][ T3997] capability: warning: `syz.4.140' uses deprecated v2 capabilities in a way that may be insecure [ 49.223331][ T29] audit: type=1400 audit(1753148701.392:484): avc: denied { read } for pid=3996 comm="syz.4.140" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.232785][ T3997] program syz.4.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.255530][ T29] audit: type=1400 audit(1753148701.392:485): avc: denied { open } for pid=3996 comm="syz.4.140" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 49.381199][ T4002] loop2: detected capacity change from 0 to 512 [ 49.389580][ T4002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.407717][ T4002] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.142: invalid indirect mapped block 4294967295 (level 1) [ 49.423058][ T4002] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.142: invalid indirect mapped block 4294967295 (level 1) [ 49.437598][ T4002] EXT4-fs (loop2): 2 truncates cleaned up [ 49.443722][ T4002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.470353][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.572430][ T29] audit: type=1400 audit(1753148701.712:486): avc: denied { create } for pid=4004 comm="syz.4.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.592017][ T29] audit: type=1400 audit(1753148701.712:487): avc: denied { ioctl } for pid=4004 comm="syz.4.143" path="socket:[5730]" dev="sockfs" ino=5730 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 49.866089][ T29] audit: type=1400 audit(1753148701.962:488): avc: denied { create } for pid=4012 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 49.886425][ T29] audit: type=1400 audit(1753148702.012:489): avc: denied { create } for pid=4012 comm="syz.1.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.925904][ T4015] loop2: detected capacity change from 0 to 512 [ 49.933520][ T4015] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 49.943268][ T4015] EXT4-fs (loop2): orphan cleanup on readonly fs [ 49.950071][ T4015] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.148: bad orphan inode 15 [ 49.955806][ T4017] tipc: Enabled bearer , priority 0 [ 49.961071][ T4015] ext4_test_bit(bit=14, block=18) = 1 [ 49.969539][ T4017] syzkaller0: entered promiscuous mode [ 49.972171][ T4015] is_bad_inode(inode)=0 [ 49.977725][ T4017] syzkaller0: entered allmulticast mode [ 49.981862][ T4015] NEXT_ORPHAN(inode)=1023 [ 49.992024][ T4015] max_ino=32 [ 49.995287][ T4015] i_nlink=0 [ 49.998914][ T4015] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.148: corrupted xattr block 19: e_value size too large [ 50.000943][ T4017] tipc: Resetting bearer [ 50.020649][ T4015] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 50.029958][ T4016] tipc: Resetting bearer [ 50.030499][ T4015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.049862][ T4016] tipc: Disabling bearer [ 50.124403][ T4020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.162137][ T29] audit: type=1400 audit(1753148702.322:490): avc: denied { create } for pid=4022 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 50.227469][ T29] audit: type=1400 audit(1753148702.392:491): avc: denied { bind } for pid=4025 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.254123][ T29] audit: type=1400 audit(1753148702.392:492): avc: denied { listen } for pid=4025 comm="syz.1.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.509588][ T4038] vlan2: entered promiscuous mode [ 50.805332][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.054415][ T4060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.081028][ T4061] netlink: 14 bytes leftover after parsing attributes in process `syz.1.164'. [ 51.131051][ T4061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.159806][ T4061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.171986][ T4061] bond0 (unregistering): Released all slaves [ 51.192077][ T4060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.260299][ T4060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.346628][ T4060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.411314][ T4060] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.424683][ T4060] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.437752][ T4060] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.449988][ T4060] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.619338][ T4069] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.734180][ T4069] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.784398][ T4069] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.811717][ T4079] tipc: Enabled bearer , priority 0 [ 51.819066][ T4079] syzkaller0: entered promiscuous mode [ 51.824683][ T4079] syzkaller0: entered allmulticast mode [ 51.842208][ T4079] tipc: Resetting bearer [ 51.849099][ T4077] tipc: Resetting bearer [ 51.918296][ T4077] tipc: Disabling bearer [ 51.943273][ T4081] lo speed is unknown, defaulting to 1000 [ 52.080294][ T4069] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.495372][ T4084] loop4: detected capacity change from 0 to 2048 [ 52.531786][ T4086] lo speed is unknown, defaulting to 1000 [ 52.546971][ T4084] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.172: iget: bad extended attribute block 281474976710655 [ 52.573140][ T4084] EXT4-fs (loop4): get root inode failed [ 52.578879][ T4084] EXT4-fs (loop4): mount failed [ 52.606387][ T4064] syz.1.165 (4064) used greatest stack depth: 6952 bytes left [ 52.630254][ T4090] tipc: Enabled bearer , priority 0 [ 52.692897][ T4090] syzkaller0: entered promiscuous mode [ 52.698461][ T4090] syzkaller0: entered allmulticast mode [ 52.716582][ T4090] tipc: Resetting bearer [ 52.725094][ T4089] tipc: Resetting bearer [ 52.752442][ T4089] tipc: Disabling bearer [ 52.783119][ T4105] vlan2: entered promiscuous mode [ 52.788246][ T4105] hsr_slave_1: entered promiscuous mode [ 52.793972][ T4105] vlan2: entered allmulticast mode [ 52.799126][ T4105] hsr_slave_1: entered allmulticast mode [ 52.840320][ T4105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 52.876683][ T4110] lo speed is unknown, defaulting to 1000 [ 52.957612][ T4107] lo speed is unknown, defaulting to 1000 [ 53.077535][ T4114] tipc: Enabled bearer , priority 0 [ 53.111372][ T4114] syzkaller0: entered promiscuous mode [ 53.116970][ T4114] syzkaller0: entered allmulticast mode [ 53.145371][ T4114] tipc: Resetting bearer [ 53.153002][ T4113] tipc: Resetting bearer [ 53.161008][ T4113] tipc: Disabling bearer [ 53.181100][ T4119] lo speed is unknown, defaulting to 1000 [ 53.263848][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 53.269773][ T4116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 53.272787][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 53.291909][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 53.476256][ T4129] lo speed is unknown, defaulting to 1000 [ 53.642985][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 53.651896][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 53.666350][ T4119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 53.903005][ T4146] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.914153][ T4141] dummy0: left allmulticast mode [ 53.919441][ T4141] bridge0: port 3(dummy0) entered disabled state [ 53.927006][ T4141] batman_adv: batadv0: Adding interface: dummy0 [ 53.933451][ T4141] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.958915][ T4141] batman_adv: batadv0: Interface activated: dummy0 [ 53.970064][ T4149] batadv0: mtu less than device minimum [ 53.976288][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.987145][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 53.997999][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.008663][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.019506][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.030216][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.040892][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.051544][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.062399][ T4149] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 54.078365][ T4146] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.145344][ T4146] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.166274][ T4151] program syz.1.193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.229242][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 54.229260][ T29] audit: type=1326 audit(1753148706.392:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.260719][ T4146] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.277015][ T29] audit: type=1326 audit(1753148706.442:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.300490][ T29] audit: type=1326 audit(1753148706.442:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.323704][ T29] audit: type=1400 audit(1753148706.442:720): avc: denied { create } for pid=4157 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 54.344475][ T29] audit: type=1326 audit(1753148706.442:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.367852][ T29] audit: type=1326 audit(1753148706.442:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.391377][ T29] audit: type=1326 audit(1753148706.442:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.414675][ T29] audit: type=1326 audit(1753148706.442:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.437998][ T29] audit: type=1326 audit(1753148706.442:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.461302][ T29] audit: type=1326 audit(1753148706.442:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4157 comm="syz.4.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 54.531921][ T4146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.544699][ T4146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.557601][ T4146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.577876][ T4146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.704259][ T4168] __nla_validate_parse: 3 callbacks suppressed [ 54.704275][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 54.736115][ T4168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 54.805770][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.813262][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.821183][ T4175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.828739][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.841202][ T4173] tipc: Enabled bearer , priority 0 [ 54.849084][ T4176] rdma_op ffff888124c02980 conn xmit_rdma 0000000000000000 [ 54.849932][ T4173] syzkaller0: entered promiscuous mode [ 54.861909][ T4173] syzkaller0: entered allmulticast mode [ 54.874419][ T4173] tipc: Resetting bearer [ 54.881500][ T4172] tipc: Resetting bearer [ 54.889405][ T4172] tipc: Disabling bearer [ 54.957295][ T4178] tipc: Enabled bearer , priority 0 [ 54.965891][ T4178] syzkaller0: entered promiscuous mode [ 54.971460][ T4178] syzkaller0: entered allmulticast mode [ 54.984238][ T4178] tipc: Resetting bearer [ 54.991790][ T4177] tipc: Resetting bearer [ 55.000681][ T4177] tipc: Disabling bearer [ 55.086884][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 55.113734][ T4187] loop4: detected capacity change from 0 to 512 [ 55.123443][ T4189] netlink: 'syz.1.209': attribute type 13 has an invalid length. [ 55.134346][ T4187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.208: bg 0: block 16: invalid block bitmap [ 55.151568][ T4187] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 55.163796][ T4187] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.208: attempt to clear invalid blocks 1669132790 len 1 [ 55.178835][ T4187] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.208: invalid indirect mapped block 4294967295 (level 1) [ 55.200022][ T4187] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.208: invalid indirect mapped block 4294967295 (level 2) [ 55.214560][ T3370] lo speed is unknown, defaulting to 1000 [ 55.220928][ T4187] EXT4-fs (loop4): 1 truncate cleaned up [ 55.227623][ T4187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.257862][ T4201] bond_slave_1: entered promiscuous mode [ 55.283777][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.300286][ T4200] bond_slave_1: left promiscuous mode [ 55.316549][ T4203] loop4: detected capacity change from 0 to 2048 [ 55.371622][ T4185] team0 (unregistering): Port device team_slave_0 removed [ 55.381467][ T4185] team0 (unregistering): Port device team_slave_1 removed [ 55.621671][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 55.639433][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 55.735570][ T4220] tipc: Enabled bearer , priority 0 [ 55.743092][ T4220] syzkaller0: entered promiscuous mode [ 55.748864][ T4220] syzkaller0: entered allmulticast mode [ 55.759188][ T4220] tipc: Resetting bearer [ 55.766981][ T4219] tipc: Resetting bearer [ 55.774219][ T4219] tipc: Disabling bearer [ 55.999193][ T4069] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011430][ T4069] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.023520][ T4069] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.035529][ T4069] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.093776][ T4231] lo speed is unknown, defaulting to 1000 [ 56.272686][ T4234] lo speed is unknown, defaulting to 1000 [ 56.817068][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 56.849894][ T4251] tipc: Enabled bearer , priority 0 [ 56.858770][ T4251] syzkaller0: entered promiscuous mode [ 56.864419][ T4251] syzkaller0: entered allmulticast mode [ 56.878619][ T4251] tipc: Resetting bearer [ 56.924160][ T4250] tipc: Resetting bearer [ 56.934070][ T4250] tipc: Disabling bearer [ 56.970600][ T4253] netlink: 68 bytes leftover after parsing attributes in process `syz.0.228'. [ 57.019864][ T4255] tipc: Enabled bearer , priority 0 [ 57.027369][ T4255] syzkaller0: entered promiscuous mode [ 57.032968][ T4255] syzkaller0: entered allmulticast mode [ 57.050420][ T4255] tipc: Resetting bearer [ 57.060555][ T4254] tipc: Resetting bearer [ 57.068089][ T4254] tipc: Disabling bearer [ 57.119322][ T4261] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 57.143132][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.150483][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.164650][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.171880][ T4261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.179417][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.186545][ T4261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.194321][ T4264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.233'. [ 57.203799][ T4267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.232'. [ 57.215966][ T4261] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 57.233119][ T4267] bridge_slave_1: left allmulticast mode [ 57.238918][ T4267] bridge_slave_1: left promiscuous mode [ 57.244936][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.253009][ T4267] bridge_slave_0: left allmulticast mode [ 57.258713][ T4267] bridge_slave_0: left promiscuous mode [ 57.264601][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.277773][ T4267] bond0: (slave bridge0): Releasing backup interface [ 57.287766][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 57.344536][ T4273] vlan0: entered promiscuous mode [ 58.546598][ T4307] tipc: Enabled bearer , priority 0 [ 58.555330][ T4307] syzkaller0: entered promiscuous mode [ 58.560957][ T4307] syzkaller0: entered allmulticast mode [ 58.571614][ T4307] tipc: Resetting bearer [ 58.578874][ T4306] tipc: Resetting bearer [ 58.586197][ T4306] tipc: Disabling bearer [ 58.681794][ T4311] loop4: detected capacity change from 0 to 2048 [ 58.705160][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.712605][ T4309] SELinux: failed to load policy [ 58.844577][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.878445][ T4321] loop4: detected capacity change from 0 to 512 [ 58.904602][ T4321] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.917299][ T4321] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.078823][ T4330] geneve1: entered promiscuous mode [ 59.241166][ T4339] loop3: detected capacity change from 0 to 1024 [ 59.263761][ T4339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.277542][ T4339] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.291347][ T4339] netlink: 'syz.3.260': attribute type 39 has an invalid length. [ 59.600643][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.735806][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.752402][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 59.752421][ T29] audit: type=1326 audit(1753148711.872:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 59.782191][ T29] audit: type=1326 audit(1753148711.872:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027bc0e9a9 code=0x7ffc0000 [ 59.943132][ T29] audit: type=1400 audit(1753148712.102:1098): avc: denied { connect } for pid=4358 comm="syz.4.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.003943][ T4359] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.011310][ T4359] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.053882][ T4359] batman_adv: batadv0: Interface deactivated: dummy0 [ 60.165828][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.175678][ T4359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.212736][ T4359] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.221758][ T4359] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.230898][ T4359] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.240276][ T4359] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.264061][ T29] audit: type=1400 audit(1753148712.432:1099): avc: denied { ioctl } for pid=4393 comm="syz.0.265" path="socket:[8265]" dev="sockfs" ino=8265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.309876][ T4394] __nla_validate_parse: 4 callbacks suppressed [ 60.309897][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 60.338221][ T4394] bridge0: port 3(dummy0) entered disabled state [ 60.356259][ T4394] dummy0 (unregistering): left allmulticast mode [ 60.374183][ T4394] bridge0: port 3(dummy0) entered disabled state [ 60.475710][ T4420] tipc: Enabled bearer , priority 0 [ 60.492842][ T4420] syzkaller0: entered promiscuous mode [ 60.498441][ T4420] syzkaller0: entered allmulticast mode [ 60.520355][ T4420] tipc: Resetting bearer [ 60.530350][ T4418] tipc: Resetting bearer [ 60.546130][ T4418] tipc: Disabling bearer [ 60.759345][ T29] audit: type=1400 audit(1753148712.922:1100): avc: denied { name_bind } for pid=4462 comm="syz.1.270" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.075170][ T29] audit: type=1400 audit(1753148713.242:1101): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 61.223094][ T29] audit: type=1400 audit(1753148713.302:1102): avc: denied { execute } for pid=4477 comm="syz.3.275" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 61.713011][ T4483] netlink: 'syz.3.277': attribute type 1 has an invalid length. [ 61.768382][ T4483] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 61.782515][ T4483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.790809][ T3664] net_ratelimit: 11 callbacks suppressed [ 61.790827][ T3664] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.825665][ T4483] veth3: entered promiscuous mode [ 61.832820][ T4483] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 61.912425][ T56] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.925986][ T4486] loop2: detected capacity change from 0 to 512 [ 61.947389][ T4488] loop3: detected capacity change from 0 to 512 [ 61.954248][ T4486] EXT4-fs: Ignoring removed i_version option [ 61.960297][ T4486] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.003648][ T4486] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.032173][ T4486] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 62.033991][ T4488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.058105][ T4488] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.116173][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.178108][ T4497] loop3: detected capacity change from 0 to 512 [ 62.219211][ T4497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.241342][ T4497] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.267443][ T29] audit: type=1400 audit(1753148714.422:1103): avc: denied { append } for pid=4496 comm="syz.3.281" path="/39/file0/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.290596][ T29] audit: type=1400 audit(1753148714.422:1104): avc: denied { map } for pid=4496 comm="syz.3.281" path="/39/file0/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.313554][ T29] audit: type=1400 audit(1753148714.422:1105): avc: denied { execute } for pid=4496 comm="syz.3.281" path="/39/file0/cpu.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.354432][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.377820][ T4506] SELinux: failed to load policy [ 62.396342][ T4508] tipc: Enabled bearer , priority 0 [ 62.420093][ T4508] syzkaller0: entered promiscuous mode [ 62.425801][ T4508] syzkaller0: entered allmulticast mode [ 62.437940][ T4508] tipc: Resetting bearer [ 62.445653][ T4507] tipc: Resetting bearer [ 62.470948][ T4507] tipc: Disabling bearer [ 62.482806][ T4514] tipc: Enabled bearer , priority 0 [ 62.490230][ T4514] syzkaller0: entered promiscuous mode [ 62.496052][ T4514] syzkaller0: entered allmulticast mode [ 62.512497][ T4514] tipc: Resetting bearer [ 62.519915][ T4513] tipc: Resetting bearer [ 62.537639][ T4513] tipc: Disabling bearer [ 62.659616][ T4530] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.729889][ T4533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.802873][ T4533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.876562][ T4530] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.944277][ T4544] loop2: detected capacity change from 0 to 512 [ 62.958823][ T4542] SELinux: failed to load policy [ 63.146732][ T4530] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.181370][ T4544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.226903][ T4544] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.244928][ T4530] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.357698][ T4530] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.380729][ T4530] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.456398][ T4530] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.475947][ T4530] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.536505][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.734504][ T4559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 63.744855][ T4559] netlink: 32 bytes leftover after parsing attributes in process `syz.3.311'. [ 64.100209][ T4565] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 64.110721][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.117930][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.128930][ T4567] tipc: Enabled bearer , priority 0 [ 64.135435][ T4565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 64.273965][ T4567] syzkaller0: entered promiscuous mode [ 64.279512][ T4567] syzkaller0: entered allmulticast mode [ 64.318305][ T4565] bridge_slave_1: left allmulticast mode [ 64.324146][ T4565] bridge_slave_1: left promiscuous mode [ 64.329874][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.393174][ T4565] bridge_slave_0: left allmulticast mode [ 64.398958][ T4565] bridge_slave_0: left promiscuous mode [ 64.404850][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.456397][ T4566] tipc: Resetting bearer [ 64.465740][ T4566] tipc: Disabling bearer [ 64.601740][ T4575] loop3: detected capacity change from 0 to 512 [ 64.620397][ T4532] syz.4.296 (4532) used greatest stack depth: 6824 bytes left [ 64.621069][ T4575] EXT4-fs: Ignoring removed oldalloc option [ 64.671436][ T4575] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 64.681979][ T4577] tipc: New replicast peer: 0.0.255.255 [ 64.687744][ T4577] tipc: Enabled bearer , priority 10 [ 64.703343][ T4575] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 64.709840][ T4575] EXT4-fs (loop3): mount failed [ 64.764128][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 64.764151][ T29] audit: type=1326 audit(1753148716.932:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000 [ 64.794000][ T29] audit: type=1326 audit(1753148716.932:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000 [ 64.817520][ T29] audit: type=1326 audit(1753148716.932:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000 [ 64.841054][ T29] audit: type=1326 audit(1753148716.932:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000 [ 64.864470][ T29] audit: type=1326 audit(1753148716.932:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000 [ 64.888046][ T29] audit: type=1326 audit(1753148716.932:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4574 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000 [ 64.954022][ T4590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.313'. [ 64.962931][ T29] audit: type=1326 audit(1753148716.972:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 64.986437][ T29] audit: type=1326 audit(1753148716.972:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 65.009864][ T29] audit: type=1326 audit(1753148716.972:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a8bffe9a9 code=0x7ffc0000 [ 65.033254][ T29] audit: type=1400 audit(1753148717.102:1194): avc: denied { execute } for pid=4588 comm="syz.4.315" path="/61/cpu.stat" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 65.074402][ T4596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=4596 comm=syz.3.317 [ 65.159811][ T4603] netlink: 'syz.3.318': attribute type 10 has an invalid length. [ 65.167869][ T4603] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.175192][ T4603] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.208372][ T4603] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.215568][ T4603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.223001][ T4603] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.230110][ T4603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.239615][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 65.242683][ T4603] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 65.258900][ T4606] bridge_slave_1: left allmulticast mode [ 65.264717][ T4606] bridge_slave_1: left promiscuous mode [ 65.270423][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.324551][ T4606] bridge_slave_0: left allmulticast mode [ 65.330304][ T4606] bridge_slave_0: left promiscuous mode [ 65.336103][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.382073][ T4606] bond0: (slave bridge0): Releasing backup interface [ 65.495697][ T4614] loop4: detected capacity change from 0 to 2048 [ 65.514747][ T4614] EXT4-fs (loop4): failed to initialize system zone (-117) [ 65.529413][ T4614] EXT4-fs (loop4): mount failed [ 65.547949][ T4614] tipc: New replicast peer: 0.0.255.255 [ 65.553616][ T4614] tipc: Enabled bearer , priority 10 [ 65.573762][ T4620] 9pnet_fd: Insufficient options for proto=fd [ 65.620300][ T4624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.328'. [ 65.682352][ T4390] tipc: Node number set to 3567400387 [ 65.696269][ T4630] loop4: detected capacity change from 0 to 512 [ 65.709520][ T4630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.813943][ T4630] EXT4-fs (loop4): 1 truncate cleaned up [ 65.828428][ T4630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.213316][ T4643] loop3: detected capacity change from 0 to 128 [ 66.553197][ T3482] tipc: Node number set to 1145652679 [ 66.632853][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.829582][ T4657] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.839777][ T4653] netlink: 'syz.4.337': attribute type 10 has an invalid length. [ 66.863518][ T4653] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 66.883941][ T4657] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.895851][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.337'. [ 66.906260][ T4661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.340'. [ 66.915496][ T4653] bridge_slave_1: left allmulticast mode [ 66.921187][ T4653] bridge_slave_1: left promiscuous mode [ 66.927048][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.940748][ T4664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.949492][ T4653] bridge_slave_0: left allmulticast mode [ 66.950472][ T4664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.955331][ T4653] bridge_slave_0: left promiscuous mode [ 66.968844][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.995862][ T4653] bond0: (slave bridge0): Releasing backup interface [ 67.049202][ T4657] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.234306][ T4657] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.320035][ T4657] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.355151][ T4657] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.704153][ T4657] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.717032][ T4657] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.119464][ T4686] loop4: detected capacity change from 0 to 512 [ 68.128982][ T4686] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.145956][ T4686] EXT4-fs (loop4): 1 truncate cleaned up [ 68.152234][ T4686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.400267][ T4697] loop3: detected capacity change from 0 to 512 [ 68.453362][ T4697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.466114][ T4697] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.654107][ T4702] 9pnet_fd: Insufficient options for proto=fd [ 69.258705][ T4712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.355'. [ 69.414702][ T4713] wireguard0: entered promiscuous mode [ 69.641703][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.675941][ T4721] wireguard0: entered promiscuous mode [ 70.127207][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.849016][ T4739] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 70.861493][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 70.861511][ T29] audit: type=1400 audit(1753148723.032:1255): avc: denied { relabelto } for pid=4738 comm="syz.2.359" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 70.895323][ T29] audit: type=1400 audit(1753148723.032:1256): avc: denied { associate } for pid=4738 comm="syz.2.359" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:logrotate_var_lib_t:s0" [ 71.292858][ T4743] openvswitch: netlink: Message has 6 unknown bytes. [ 71.405028][ T4751] loop3: detected capacity change from 0 to 512 [ 71.411747][ T4751] EXT4-fs: Ignoring removed i_version option [ 71.417882][ T4751] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.431280][ T4752] netlink: 'syz.0.360': attribute type 10 has an invalid length. [ 71.443420][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.450960][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.452538][ T4751] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.477584][ T4751] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 71.490913][ T4752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 71.518214][ T29] audit: type=1400 audit(1753148723.672:1257): avc: denied { validate_trans } for pid=4755 comm="syz.4.364" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.547930][ T4757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 71.643697][ T4752] bridge_slave_1: left allmulticast mode [ 71.649431][ T4752] bridge_slave_1: left promiscuous mode [ 71.655219][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.741451][ T29] audit: type=1326 audit(1753148723.882:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5263fe9a9 code=0x7ffc0000 [ 71.765051][ T29] audit: type=1326 audit(1753148723.882:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5263fe9a9 code=0x7ffc0000 [ 71.788426][ T29] audit: type=1326 audit(1753148723.892:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fb5263fe9a9 code=0x7ffc0000 [ 71.812431][ T29] audit: type=1326 audit(1753148723.892:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5263fe9a9 code=0x7ffc0000 [ 71.835832][ T29] audit: type=1326 audit(1753148723.892:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5263fe9a9 code=0x7ffc0000 [ 71.859493][ T29] audit: type=1326 audit(1753148723.892:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fb5263fe9a9 code=0x7ffc0000 [ 71.882942][ T29] audit: type=1326 audit(1753148723.892:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4760 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5263fe9a9 code=0x7ffc0000 [ 72.112173][ T4752] bridge_slave_0: left allmulticast mode [ 72.117941][ T4752] bridge_slave_0: left promiscuous mode [ 72.123699][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.604230][ T4794] openvswitch: netlink: Message has 6 unknown bytes. [ 73.878584][ T4801] lo speed is unknown, defaulting to 1000 [ 74.592545][ T4808] SELinux: syz.3.386 (4808) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 74.677283][ T4807] syzkaller0: entered promiscuous mode [ 74.683007][ T4807] syzkaller0: entered allmulticast mode [ 75.510359][ T4817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 75.586936][ T4826] lo speed is unknown, defaulting to 1000 [ 75.674836][ T4834] lo speed is unknown, defaulting to 1000 [ 76.067500][ T4846] netlink: 96 bytes leftover after parsing attributes in process `syz.4.397'. [ 76.132844][ T4828] ================================================================== [ 76.140979][ T4828] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 76.147464][ T4828] [ 76.149850][ T4828] write to 0xffffc9000198bbc0 of 4 bytes by interrupt on cpu 0: [ 76.157504][ T4828] pollwake+0xb6/0x100 [ 76.161614][ T4828] __wake_up+0x66/0xb0 [ 76.165729][ T4828] bpf_ringbuf_notify+0x22/0x30 [ 76.170632][ T4828] irq_work_run+0xe2/0x2d0 [ 76.175087][ T4828] __sysvec_irq_work+0x22/0x170 [ 76.179978][ T4828] sysvec_irq_work+0x66/0x80 [ 76.184608][ T4828] asm_sysvec_irq_work+0x1a/0x20 [ 76.189682][ T4828] native_apic_msr_write+0x3d/0x60 [ 76.194896][ T4828] x2apic_send_IPI_self+0x10/0x20 [ 76.199967][ T4828] arch_irq_work_raise+0x46/0x50 [ 76.204951][ T4828] __irq_work_queue_local+0x10f/0x2c0 [ 76.210364][ T4828] irq_work_queue+0x70/0x100 [ 76.214989][ T4828] bpf_ringbuf_discard+0xd3/0xf0 [ 76.219968][ T4828] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 76.225578][ T4828] bpf_trace_run3+0x10f/0x1d0 [ 76.230292][ T4828] kmem_cache_free+0x257/0x300 [ 76.235105][ T4828] kernfs_free_rcu+0x97/0xb0 [ 76.239730][ T4828] rcu_core+0x5a5/0xc00 [ 76.243913][ T4828] rcu_core_si+0xd/0x20 [ 76.248121][ T4828] handle_softirqs+0xb7/0x290 [ 76.252817][ T4828] run_ksoftirqd+0x1c/0x30 [ 76.257252][ T4828] smpboot_thread_fn+0x328/0x530 [ 76.262216][ T4828] kthread+0x489/0x510 [ 76.266310][ T4828] ret_from_fork+0xda/0x150 [ 76.270834][ T4828] ret_from_fork_asm+0x1a/0x30 [ 76.275666][ T4828] [ 76.278002][ T4828] read to 0xffffc9000198bbc0 of 4 bytes by task 4828 on cpu 1: [ 76.285560][ T4828] do_sys_poll+0x99c/0xbd0 [ 76.289998][ T4828] __se_sys_ppoll+0x1b9/0x200 [ 76.294705][ T4828] __x64_sys_ppoll+0x67/0x80 [ 76.299329][ T4828] x64_sys_call+0x2de5/0x2fb0 [ 76.304050][ T4828] do_syscall_64+0xd2/0x200 [ 76.308573][ T4828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.314483][ T4828] [ 76.316828][ T4828] value changed: 0x00000000 -> 0x00000001 [ 76.322554][ T4828] [ 76.324891][ T4828] Reported by Kernel Concurrency Sanitizer on: [ 76.331121][ T4828] CPU: 1 UID: 0 PID: 4828 Comm: syz.0.394 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 76.341736][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.351809][ T4828] ================================================================== [ 76.462364][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 76.462379][ T29] audit: type=1326 audit(1753148728.622:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000 [ 76.492106][ T29] audit: type=1326 audit(1753148728.622:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4821 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccbfbee9a9 code=0x7ffc0000