last executing test programs: 44.990188341s ago: executing program 2 (id=4969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 44.983225182s ago: executing program 2 (id=4972): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) 44.912820067s ago: executing program 2 (id=4975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 44.885971009s ago: executing program 2 (id=4980): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2, 0x0) 44.826753474s ago: executing program 2 (id=4981): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x88) 44.715444243s ago: executing program 2 (id=4987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 44.715293703s ago: executing program 32 (id=4987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) 15.71467798s ago: executing program 1 (id=5921): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet(0x2, 0x1, 0x0) lsm_get_self_attr(0x67, &(0x7f0000000400)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) 15.71420568s ago: executing program 1 (id=5922): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x505b8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x586e, 0x2, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x5, 0x0, 0x1, 0x2, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r2 = socket(0x1e, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15.6996204s ago: executing program 1 (id=5923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000d000000000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 15.516246635s ago: executing program 1 (id=5925): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 15.499832857s ago: executing program 1 (id=5926): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f0", 0x1}], 0x1}}], 0x2, 0x20000010) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff}, 0x8) 15.357978898s ago: executing program 1 (id=5927): link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$eJzs3U9rHGUcB/DfM9mkf9KaVAStPRgo2IKaNGlFEcEW682DfwqeBGOSltJtG5oItlZsob4DfQGCNy/isYgU9eLVm+ALkGKRNhdvkdnMpNt2N82fTadmPh/YZJ55MjzPZPnuM/vszGwAtTWS/8gi9kbEbIoYaqtrRFE5svR3d25fnlq4fXkqxeLi+/+kSMW68u9T8Xuw2Hh7RPz+c4on+x5sd+7ipTOTzebMhaI8Nn92dmzu4qWXTp+dPDVzaubcxPgr4y8fOTxx5FBP9nN3RPw6erxx7eSb+76f+nbPFz9+dz3F0dhV1LfvR6+MxMjy/6Rd/n99tdeNVaSv2J/2pzg1KuwQa1I+f/0R8XQMRV/cffKG4st3K+0csKkWU8QiUFNJ/qGmyuOA/P1v+aj2iAR4VG4dW5oAuJOW5vYWlvPfWJobjO2tuYGdCynap3VSRPRiZi5vY/b5NJQ/YpPm4YDOrlyNiGc6jf+plc3h1ix+nv/snvxnEfFO8Ttf/9462x+5ryz/8OhsJP8fteX/43W2L/8AAAAAAADQOzeORcSLnT7/y5bP/4kO5/8MRsTRHrT/8M//sps9aAbo4NaxiNcjojz3b6Et/4XhvqK0u3U+QH86ebo5cyginoiIg9G/LS+Pr9DGyL7f+rvWtZ3/lz/y9stzAYt+3Gxsu3eb6cn5yY3sM7Dk1tWIZxud8p+Wx//UYfzPXw9mV9nG4vE3fulW9/D8A5tl8ZuIAx3H/7t3rkgr359jrHU8MFYeFTzosw+v/9CtffmH6uTj/86V8z+c2u/XM7f2Nj7/+88N5L/z8f9AOtG65cxAse7Tyfn5C+MRA+ntB9dPrL3PsBWVeSjzkuf/4P7O7/9XOv7fERFXVtnmiZ/eutatzvgP1cnzP72m8X/tC/s/+Prfbu2vbvw/0hrTDxZrzP/BylYb0Kr7CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R1lE7IqUjS4vZ9noaMRgRDwVO7Pm+bn5F06e/+TcdF7X+v7/rPym36Glciq//3+4rTxxX/lwROyJiK/6drTKo1Pnm9NV7zwAAAAAAAAAAAAAAAAAAAA8Jga7XP+f+6uv6t4Bm65RdQeAysg/1Jf8Q33JP9SX/EN9yT/Ul/xDfck/1Jf8Q33JPwAAAAAAbCl7nrvxR4qIK6/taD1yA0Vdf6U9AzZbVnUHgMq4xQ/Ul1N/oL5S1R0AKvew14Ht694SAAAAAAAAAAAAAOiVA3td/w915fp/qK/u1/+7MwBsda7/h/ryHh9w/T8AAAAAAAAAAAAAPP7mLl46M9lszlxY78K2jW1uwUJ9FiL1IHGPaKHqVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD0XwAAAP//dt72Ng==") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) write(r1, &(0x7f0000000800)="cf52a6", 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0x21, @mcast1, @local, 0x80, 0x7800, 0x8, 0x5}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000940)={r6, 0x1, 0x6, @local}, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, r9, 0x0, 0x46) close(r9) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) 15.357642558s ago: executing program 33 (id=5927): link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x582, &(0x7f0000009ec0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) write(r1, &(0x7f0000000800)="cf52a6", 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x0, 0x2, 0x21, @mcast1, @local, 0x80, 0x7800, 0x8, 0x5}}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000940)={r6, 0x1, 0x6, @local}, 0x10) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, 0x0, r9, 0x0, 0x46) close(r9) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) 2.921515136s ago: executing program 3 (id=6311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2c0, &(0x7f0000001a80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80881, 0x82) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) 2.100670922s ago: executing program 6 (id=6327): getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'xfrm0\x00', &(0x7f0000000140)=@ethtool_gstrings={0x1b, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a20fef8ffffff71a400fe00000000711010000000000040300200000000004704000001ed00000f030000000000001d44000000000000730a06fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef77997e344e61482808c02b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$eJzs3U1vG1sZAODXzpeTm97kXu4CENBSCgVVdRK3jaouoKwQQpUQXYLUhsSNothxFDulCV2k/wGJSqxgyQ9g3RV7Ngh2bMoCiY8I1FRiYTTjSeomdpOSNI7i55FGM+eMM+85ieec+nXtE0DfuhQRWxExHBEPI2Iiq89lW9xtbcnjXm0/nd/Zfjqfi2bz/j9z6fmkLtp+JvFRds1CRPzoexE/zR2MW9/YXJ6rVMprWXmqUV2dqm9sXl+qzi2WF8srpdLszOz07Ru3SifW14vV4ezoyy//sPWtnyfNGs9q2vtxklpdH9qLE9nv/AcfIlgPDETEYPb8yVzoZXt4P/mI+DQiLqf3/0QMpH9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXD+yzG8pVavXHtUW19ZaGVK5uMofyjpUp5OssVTsZQLinPpMdvyqV95RsR8UlE/GJkNC0X52uVhV7+wwcA+thH++b//4y05n8A4Jwr9LoBAMCpM/8DQP8x/wNA/zH/A0D/Mf8DQP8x/wNA/zH/A0Bf+eG9e8nW3Mm+/3rh8cb6cu3x9YVyfblYXZ8vztfWVouLtdpi+p091cOuV6nVVmduxvqTyW+v1htT9Y3NB9Xa+krjQfq93g/KQ6fSKwDgXT65+OLPuYjYujOabtG2loO5Gs63fK8bAPTMQK8bAPSM1b6gfx3jNb70AJwTHZbofUshIkb3VzabzeaHaxLwgV39gvw/9Ku2/L//BQx9Rv4f+lfX/P+BF/vAedNs5o665n8c9YEAwNkmxw90ef//02z/2+zNgZ8s7H/E8/0VPlEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/9hd/7eYrdwxHvl8sRhxISImYyj3aKlSno6IjyPiTyNDI0l5psdtBgCOK/+3XLb+19WJK+P7zw7nXo+k+4j42a/u//LJXKOx9sek/l979Y3nWX2pF+0HAA6zO0+n+7YX8q+2n87vbqfZnr9/NyIKrfg728Oxsxd/MAbTfSGGImLs37ms3JJry10cx9aziPh8p/7nYjzNgbRWPt0fP4l94VTj59+Kn0/PtfbJ7+JzJ9AW6DcvkvHnbqf7Lx+X0n3n+7+QjlDHl41/yaXmd9Ix8E383fFvoMv4d+moMW7+/vuto9GD555FfHEwYjf2Ttv4sxs/1yX+lYOX6+gvX/rK5W7nmr+OuBqd47fHmmpUV6fqG5vXl6pzi+XF8kqpNDszO337xq3SVJqjnuo+G/zjzrWPu51L+j/WJX7hkP5//Wjdj9/89+GPv/qO+N/8Wqf4+fjsHfGTOfEbR4w/N/a7QrdzSfyFLv0/7O9/7YjxX/5188Cy4QBA79Q3NpfnKpXymgMHZ/8gecqegWZ0PPjOacUajvf6qWbz/4rVbcQ4iawbcBbs3fQR8brXjQEAAAAAAAAAAAAAADo6jU8s9bqPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CwAA//8wuNJ1") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) prctl$PR_MCE_KILL_GET(0x22) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) socket(0x10, 0x803, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) sendfile(r3, r3, 0x0, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x3) 2.026170348s ago: executing program 3 (id=6329): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.025883168s ago: executing program 3 (id=6330): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r3}, 0x18) 1.984438201s ago: executing program 3 (id=6335): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) 1.955096113s ago: executing program 3 (id=6336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={0x0, r2}}, 0x20) 1.927439216s ago: executing program 3 (id=6338): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc8040) sendmmsg(r5, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000740)}], 0x1, &(0x7f0000000c00)=ANY=[], 0xe0}}], 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0xb9, 0x10, 0x800, 0x0, 0x25dfdc00, {0x0, 0x0, 0x74, 0x0, 0x200, 0x45021}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @ipoib={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY, @IFLA_IPOIB_PKEY={0x0, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008801}, 0x24008804) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x1f, 0x1a, 0xdc, &(0x7f0000001440)="586ae217b5f3e358b5de1695ba51050edc1049c99a58ee7fa67e22eb850d4c51936f1188f1f9f1da8ca32a5aad855e1444598847b753333c050873fcddc12b40e7086008946da4e2aef26258c78092456c2eb010019d9f91a08d7dd3fdbfefb49d132a60a7bfc568024c2b97fb59e574763a5f4aa7ebb9af4cca89a9dd853020b77fcacae46754a461e3d6feb339edadbbeb7ad4aa93e13d4394b407dcaf9e337b1e867376371b1980c0c1ef7a2615eebb2935424e63affe87e8643a05b1c1858eb4973e4f887660eaa13ffcefbee3e86de620c72556f2ac8ce6e20f564a3c17b94a1253b663666f7ce439e0bea6edccbc19ccc6b59a4d7ef01a04bc8c2d4a0e4dc36dfaf8d48e882220ffb2a6a2ed09075bbd724c04db70344a2a7f5a49bd9d8d1c983c40708aefb58daaf1e83bf6caa0a7d6fc560b21a90a47849ee8e31b140e56783b0585feb61f64be7cc5dd060bc7e6ed48dfd78cada6fe863891c9329aa604d6adc1e6d7ce3fffb79e7498eda927c45d352a3e4ce2d373353e860f9460d9af10c498213226fe502490f1b8d33ef4bbe6a3fd1509761dc0e2dcb05ed9c72724ac99ce1c27380abc2d59ae5bd082426b3766ddfca91cf288c9ff564f33aabc80889931ff3096ac39d3be67eda82768c1fb7d3717072fe3034b4a49b3b40a3b754a7204853c7e07cee49878e6f33fb02f19894fe8e8f94679997538305ffcd73db6382905d31a3d44f32eaed76b1d616871b686d2727deebc97edd2482c39b19a716824afcd317f9b65e0460568d9ce3b465c2c5e223d8da50ad0ca8046b9436a964e1e2683df4b888b4ad9f4f9f5101941cf2ef40f0e036c1f0259babd5f76aafea33bc22f418cbc94418997d80eabf0ce7105b0667e4c61eb3cabc1ea8018384c4e2f1c19d985fdcee3c4e524d9ba61f6c818cc5e382e724d02521cf8bb4654c37b10a1f8b7688019a95c43a445f6d735ae376daec7c6888f2a199d0f6d956cccde26a265ac681e1fc5583bc3aae51ccb3085eaaf7c6135e3b043980d5fa6328cdfe48bbb6912b901fe8336616ff5b549f406e5c28013bbd6c14817196e5d37a38fc16b0168ba0769139b4d1f1b260d7f049bd8035a03a27ef9e06f5cf9d1f8a7c03ffd325d1f2eb986abb5319a1fd16197be175c591862abbb2b821d2223e08ffdc093cd9e21c686c877b74d02d20f304ce86ca574fa4f451778240247b87e1339a3bd7c312e031fc5a446c3c4bb331d4ba81732638cb73cee8a4634662b442c0ee190a01b0cf752d477a28c8a28ef35a35950c52420099bb6c7dff9322f339dfc4d17837d9cecef13df5928c0a2349da2529c4f9fb6efb8aa738fdd4b4acc85f7940f3cedc77e2604c306473731f2a2f71d738538209e5ca6d5ed9b9c59f6e16451b810adcd86c6d46917d7021a8dd689f5ee01d92af595b25d5cfd88"}) splice(r5, 0x0, r1, 0x0, 0x7ffff000, 0x6) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e2200000600"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000007060101000000000000000002000002080006400000009105000100070000000900020073790031000000000800064000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffff, 0x2}, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) write$RDMA_USER_CM_CMD_QUERY(r7, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r8, 0x1}}, 0x18) 1.208189674s ago: executing program 6 (id=6341): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 1.159276377s ago: executing program 6 (id=6342): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) 1.086830513s ago: executing program 4 (id=6343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x88640, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) 1.060550585s ago: executing program 4 (id=6345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.00416977s ago: executing program 4 (id=6347): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x603f) 1.00381731s ago: executing program 4 (id=6348): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 988.106001ms ago: executing program 0 (id=6349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r2, 0x4, 0x0) 947.286785ms ago: executing program 0 (id=6350): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 942.850795ms ago: executing program 4 (id=6351): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r7, {0x10, 0xf}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00007723f210b793200000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 822.973754ms ago: executing program 5 (id=6354): mkdirat(0xffffffffffffff9c, 0x0, 0x80) timer_create(0xfffffffffffffffd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) utimes(0x0, 0x0) 802.812206ms ago: executing program 4 (id=6355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) 796.748777ms ago: executing program 5 (id=6356): io_uring_setup(0x3d30, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x1, 0x48800) 796.139776ms ago: executing program 0 (id=6357): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 730.836342ms ago: executing program 0 (id=6358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r4 = dup(r3) sendfile(r4, r2, 0x0, 0x8000fffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) 730.405702ms ago: executing program 5 (id=6359): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaa8aab9b3f1e52e42485"], 0x0) 691.317235ms ago: executing program 5 (id=6360): socket$inet6(0xa, 0x1, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000280), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) close(r0) 661.146177ms ago: executing program 5 (id=6361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) 628.72538ms ago: executing program 5 (id=6362): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83d7e50b1c2fa3648c90cb8f66d93f40df5ac3fdd206a3997a5efb0a2cab9c07e00165c2b1cb2c2baf1b06493c4809d1d5dd5c7e6dbc22f1385482f54d4fb96e9e8aec587fe68b7d2d033c7efe622918e0d8661c89582f50db39a3376c1684b9dcfb10ef6cca665c75e2b7e468e7cb3a15604b759b0d949f459b982181f5f423f5dfc8b209665c9763ed0545f9ebf77661559312b4c2fc9518434530f75bf17d1ab39be227845a1d1c9982f2e27601009c36c9ce9cf11da012532e09d23ef2a749a5ca8df867", 0x62c}, {0x0, 0xe}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 286.340707ms ago: executing program 6 (id=6363): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) close(r0) 157.510598ms ago: executing program 6 (id=6364): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) dup2(0xffffffffffffffff, r2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000006, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nodioread_nolock}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x563, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 51.033396ms ago: executing program 0 (id=6365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0xffc0, 0x0, 0x2, 0x8, 0x80000001}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4850) 424.27µs ago: executing program 6 (id=6366): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xf}, {}, {0x5, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00007723f210b793200000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 0s ago: executing program 0 (id=6367): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) removexattr(&(0x7f0000000000)='./file0/file1\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') kernel console output (not intermixed with test programs): 70][T15175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3546'. [ 424.992714][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3548'. [ 426.762834][T15210] netlink: 'syz.2.3554': attribute type 10 has an invalid length. [ 426.777010][T15210] netlink: 'syz.2.3554': attribute type 10 has an invalid length. [ 426.799334][T15210] dummy0: entered promiscuous mode [ 426.821016][T15210] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 427.013797][T15221] netlink: 'syz.2.3558': attribute type 3 has an invalid length. [ 427.241068][T15225] serio: Serial port ttyS3 [ 427.540981][T15232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15232 comm=syz.1.3561 [ 427.577723][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3561'. [ 427.648244][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 427.648258][ T29] audit: type=1326 audit(1755473096.850:29937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.685008][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3561'. [ 427.701245][T15232] netlink: 'syz.1.3561': attribute type 1 has an invalid length. [ 427.709076][T15232] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3561'. [ 427.718195][ T29] audit: type=1326 audit(1755473096.890:29938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.741826][ T29] audit: type=1326 audit(1755473096.890:29939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.765447][ T29] audit: type=1326 audit(1755473096.890:29940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.789078][ T29] audit: type=1326 audit(1755473096.890:29941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.812718][ T29] audit: type=1326 audit(1755473096.890:29942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.836284][ T29] audit: type=1326 audit(1755473096.890:29943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.859878][ T29] audit: type=1326 audit(1755473096.890:29944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.883605][ T29] audit: type=1326 audit(1755473096.890:29945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 427.907269][ T29] audit: type=1326 audit(1755473096.890:29946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15231 comm="syz.1.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 428.014563][T15238] IPVS: Error connecting to the multicast addr [ 429.132661][T15266] netlink: 'syz.0.3569': attribute type 10 has an invalid length. [ 429.171335][T15266] : (slave dummy0): Releasing backup interface [ 429.177632][T15266] : (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 429.201453][T15273] netlink: 'syz.0.3569': attribute type 10 has an invalid length. [ 429.237949][T15266] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 429.270755][T15266] team0: Failed to send options change via netlink (err -105) [ 429.278322][T15266] team0: Port device dummy0 added [ 429.304949][T15273] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 429.354372][T15273] team0: Failed to send options change via netlink (err -105) [ 429.370612][T15273] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 429.392203][T15273] team0: Port device dummy0 removed [ 429.406027][T15273] : (slave dummy0): Enslaving as an active interface with an up link [ 429.941732][T15284] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3575'. [ 430.071658][T15294] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 430.182044][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3578'. [ 430.373943][T15306] lo speed is unknown, defaulting to 1000 [ 430.380135][T15306] lo speed is unknown, defaulting to 1000 [ 430.386441][T15306] lo speed is unknown, defaulting to 1000 [ 430.425729][T15306] infiniband sz1: set down [ 430.430343][T15306] infiniband sz1: added lo [ 430.434986][ T4960] lo speed is unknown, defaulting to 1000 [ 430.465046][T15306] RDS/IB: sz1: added [ 430.469056][T15306] smc: adding ib device sz1 with port count 1 [ 430.477999][T15306] smc: ib device sz1 port 1 has pnetid [ 430.484036][ T4960] lo speed is unknown, defaulting to 1000 [ 430.490077][T15306] lo speed is unknown, defaulting to 1000 [ 430.534654][T15306] lo speed is unknown, defaulting to 1000 [ 430.536580][T15318] netlink: 'syz.4.3584': attribute type 10 has an invalid length. [ 430.549998][T15318] team0: Port device dummy0 added [ 430.561339][T15318] netlink: 'syz.4.3584': attribute type 10 has an invalid length. [ 430.569581][T15318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 430.581221][T15318] team0: Failed to send options change via netlink (err -105) [ 430.594279][T15318] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 430.603486][T15318] team0: Port device dummy0 removed [ 430.611880][T15318] : (slave dummy0): Enslaving as an active interface with an up link [ 430.620300][T15306] lo speed is unknown, defaulting to 1000 [ 430.653507][T15306] lo speed is unknown, defaulting to 1000 [ 430.698398][T15306] lo speed is unknown, defaulting to 1000 [ 431.124322][T15333] lo speed is unknown, defaulting to 1000 [ 431.216542][T15333] lo speed is unknown, defaulting to 1000 [ 431.224747][T15333] lo speed is unknown, defaulting to 1000 [ 431.315036][T15334] lo speed is unknown, defaulting to 1000 [ 431.404242][T15334] lo speed is unknown, defaulting to 1000 [ 431.482398][T15334] lo speed is unknown, defaulting to 1000 [ 431.900121][T15338] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3589'. [ 431.909138][T15338] netem: unknown loss type 12 [ 431.979974][T15338] netlink: 320 bytes leftover after parsing attributes in process `syz.4.3589'. [ 432.057330][T15343] syzkaller0: entered promiscuous mode [ 432.062882][T15343] syzkaller0: entered allmulticast mode [ 432.093644][T15340] IPVS: Error connecting to the multicast addr [ 432.122715][T15345] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3592'. [ 432.381691][T15359] syz_tun: entered allmulticast mode [ 432.391749][T15356] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3597'. [ 432.515817][T15364] netlink: 'syz.2.3598': attribute type 4 has an invalid length. [ 432.655528][T15376] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3603'. [ 432.766320][T15391] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3606'. [ 432.803870][T15393] lo speed is unknown, defaulting to 1000 [ 432.862863][T15393] lo speed is unknown, defaulting to 1000 [ 432.868918][T15393] lo speed is unknown, defaulting to 1000 [ 433.144787][ T29] kauditd_printk_skb: 435 callbacks suppressed [ 433.144800][ T29] audit: type=1326 audit(1755473102.350:30382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.207541][ T29] audit: type=1326 audit(1755473102.380:30383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.231136][ T29] audit: type=1326 audit(1755473102.380:30384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.254796][ T29] audit: type=1326 audit(1755473102.380:30385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.278379][ T29] audit: type=1326 audit(1755473102.380:30386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.301955][ T29] audit: type=1326 audit(1755473102.380:30387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.325530][ T29] audit: type=1326 audit(1755473102.380:30388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.349254][ T29] audit: type=1326 audit(1755473102.380:30389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.372834][ T29] audit: type=1326 audit(1755473102.380:30390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.396611][ T29] audit: type=1326 audit(1755473102.380:30391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15416 comm="syz.0.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 433.440158][T15357] syz_tun: left allmulticast mode [ 433.675252][T15448] netlink: 'syz.4.3634': attribute type 4 has an invalid length. [ 433.683957][T15451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3642'. [ 433.832103][T15460] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 434.915378][T15483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3643'. [ 435.010230][T15488] lo speed is unknown, defaulting to 1000 [ 435.047228][T15417] syz.0.3621 (15417) used greatest stack depth: 6144 bytes left [ 435.066422][T15492] netlink: 'syz.2.3652': attribute type 21 has an invalid length. [ 435.075076][T15492] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3652'. [ 435.084214][T15492] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 435.091984][T15488] lo speed is unknown, defaulting to 1000 [ 435.098890][T15488] lo speed is unknown, defaulting to 1000 [ 435.175455][T15506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3657'. [ 435.243304][T15512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3660'. [ 435.265734][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3660'. [ 435.574013][T15527] usb usb7: usbfs: process 15527 (syz.1.3665) did not claim interface 0 before use [ 435.917847][ T3302] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 435.928833][ T3302] CPU: 1 UID: 0 PID: 3302 Comm: syz-executor Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 435.928933][ T3302] Tainted: [W]=WARN [ 435.928939][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.928951][ T3302] Call Trace: [ 435.929071][ T3302] [ 435.929078][ T3302] __dump_stack+0x1d/0x30 [ 435.929100][ T3302] dump_stack_lvl+0xe8/0x140 [ 435.929121][ T3302] dump_stack+0x15/0x1b [ 435.929139][ T3302] dump_header+0x81/0x220 [ 435.929219][ T3302] oom_kill_process+0x342/0x400 [ 435.929253][ T3302] out_of_memory+0x979/0xb80 [ 435.929283][ T3302] try_charge_memcg+0x5e6/0x9e0 [ 435.929332][ T3302] charge_memcg+0x51/0xc0 [ 435.929349][ T3302] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 435.929369][ T3302] __read_swap_cache_async+0x1df/0x350 [ 435.929403][ T3302] swap_cluster_readahead+0x277/0x3e0 [ 435.929499][ T3302] swapin_readahead+0xde/0x6f0 [ 435.929527][ T3302] ? __filemap_get_folio+0x4f7/0x6b0 [ 435.929612][ T3302] ? swap_cache_get_folio+0x77/0x200 [ 435.929700][ T3302] do_swap_page+0x301/0x2430 [ 435.929755][ T3302] ? finish_task_switch+0xad/0x2b0 [ 435.929777][ T3302] ? __pfx_default_wake_function+0x10/0x10 [ 435.929853][ T3302] handle_mm_fault+0x9a5/0x2c20 [ 435.929887][ T3302] do_user_addr_fault+0x636/0x1090 [ 435.929930][ T3302] ? fpregs_restore_userregs+0xe2/0x1d0 [ 435.929960][ T3302] ? switch_fpu_return+0xe/0x20 [ 435.930014][ T3302] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.930043][ T3302] exc_page_fault+0x62/0xa0 [ 435.930067][ T3302] asm_exc_page_fault+0x26/0x30 [ 435.930086][ T3302] RIP: 0033:0x7f0b86841465 [ 435.930142][ T3302] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 435.930161][ T3302] RSP: 002b:00007ffeeb9aa6f8 EFLAGS: 00010246 [ 435.930200][ T3302] RAX: 0000000000000000 RBX: 000000000000088a RCX: 00007f0b86841463 [ 435.930211][ T3302] RDX: 00007ffeeb9aa710 RSI: 0000000000000000 RDI: 0000000000000000 [ 435.930222][ T3302] RBP: 00007ffeeb9aa77c R08: 0000000033066d55 R09: 0000000000000000 [ 435.930245][ T3302] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 435.930255][ T3302] R13: 00000000000927c0 R14: 000000000006a468 R15: 00007ffeeb9aa7d0 [ 435.930271][ T3302] [ 435.930278][ T3302] memory: usage 307200kB, limit 307200kB, failcnt 744 [ 436.168243][ T3302] memory+swap: usage 307708kB, limit 9007199254740988kB, failcnt 0 [ 436.176189][ T3302] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 436.183632][ T3302] Memory cgroup stats for /syz2: [ 436.184430][ T3302] cache 0 [ 436.192304][ T3302] rss 0 [ 436.195059][ T3302] shmem 0 [ 436.197992][ T3302] mapped_file 0 [ 436.201458][ T3302] dirty 0 [ 436.204383][ T3302] writeback 0 [ 436.207714][ T3302] workingset_refault_anon 1507 [ 436.212515][ T3302] workingset_refault_file 5848 [ 436.217371][ T3302] swap 520192 [ 436.220648][ T3302] swapcached 8192 [ 436.224305][ T3302] pgpgin 690056 [ 436.227762][ T3302] pgpgout 690053 [ 436.231319][ T3302] pgfault 572118 [ 436.234862][ T3302] pgmajfault 287 [ 436.238530][ T3302] inactive_anon 4096 [ 436.242439][ T3302] active_anon 4096 [ 436.246173][ T3302] inactive_file 0 [ 436.249792][ T3302] active_file 4096 [ 436.253517][ T3302] unevictable 0 [ 436.257028][ T3302] hierarchical_memory_limit 314572800 [ 436.262477][ T3302] hierarchical_memsw_limit 9223372036854771712 [ 436.268688][ T3302] total_cache 0 [ 436.272158][ T3302] total_rss 0 [ 436.275427][ T3302] total_shmem 0 [ 436.278871][ T3302] total_mapped_file 0 [ 436.282896][ T3302] total_dirty 0 [ 436.286365][ T3302] total_writeback 0 [ 436.290174][ T3302] total_workingset_refault_anon 1507 [ 436.295477][ T3302] total_workingset_refault_file 5848 [ 436.300770][ T3302] total_swap 520192 [ 436.304563][ T3302] total_swapcached 8192 [ 436.308710][ T3302] total_pgpgin 690056 [ 436.312705][ T3302] total_pgpgout 690053 [ 436.316757][ T3302] total_pgfault 572118 [ 436.320827][ T3302] total_pgmajfault 287 [ 436.324881][ T3302] total_inactive_anon 4096 [ 436.329328][ T3302] total_active_anon 4096 [ 436.333580][ T3302] total_inactive_file 0 [ 436.337779][ T3302] total_active_file 4096 [ 436.342027][ T3302] total_unevictable 0 [ 436.346001][ T3302] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3662,pid=15517,uid=0 [ 436.360708][ T3302] Memory cgroup out of memory: Killed process 15517 (syz.2.3662) total-vm:95680kB, anon-rss:940kB, file-rss:22444kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 436.656578][T15576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3686'. [ 436.820620][T15584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3690'. [ 437.212122][T15615] netlink: 'syz.1.3703': attribute type 10 has an invalid length. [ 437.672232][T15653] lo: entered promiscuous mode [ 437.728293][T15661] bridge0: port 1(gretap0) entered blocking state [ 437.735035][T15661] bridge0: port 1(gretap0) entered disabled state [ 437.744847][T15661] gretap0: entered allmulticast mode [ 437.750934][T15661] gretap0: entered promiscuous mode [ 437.814161][T15671] __nla_validate_parse: 5 callbacks suppressed [ 437.814177][T15671] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3731'. [ 437.851385][T15674] sd 0:0:1:0: device reset [ 437.878276][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3731'. [ 437.944038][T15691] SELinux: policydb version -299076691 does not match my version range 15-35 [ 437.959848][T15691] SELinux: failed to load policy [ 437.982370][T15696] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3742'. [ 438.011346][T15700] netlink: 'syz.3.3744': attribute type 1 has an invalid length. [ 438.061356][T15706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3747'. [ 438.112818][T15713] vhci_hcd: invalid port number 23 [ 438.217167][ T29] kauditd_printk_skb: 167 callbacks suppressed [ 438.217180][ T29] audit: type=1400 audit(1755473107.420:30559): avc: denied { getopt } for pid=15727 comm="syz.2.3758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 438.247782][T15730] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3760'. [ 438.265043][ T29] audit: type=1326 audit(1755473107.470:30560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.288732][ T29] audit: type=1326 audit(1755473107.470:30561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.305014][T15736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3762'. [ 438.316127][ T29] audit: type=1326 audit(1755473107.470:30562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.344977][ T29] audit: type=1326 audit(1755473107.470:30563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.368604][ T29] audit: type=1326 audit(1755473107.470:30564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.392589][ T29] audit: type=1326 audit(1755473107.530:30565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.416167][ T29] audit: type=1326 audit(1755473107.530:30566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.423600][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 438.439858][ T29] audit: type=1326 audit(1755473107.530:30567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.448736][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 438.448911][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 438.472298][ T29] audit: type=1326 audit(1755473107.550:30568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15731 comm="syz.1.3759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 438.523181][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 439.019376][T15867] netlink: 'syz.4.3817': attribute type 8 has an invalid length. [ 439.153921][T15879] bond0: option all_slaves_active: invalid value (250) [ 439.201280][T15886] random: crng reseeded on system resumption [ 439.770830][T15963] netlink: 'syz.1.3863': attribute type 4 has an invalid length. [ 439.778607][T15963] netlink: 'syz.1.3863': attribute type 5 has an invalid length. [ 440.034227][T15982] sd 0:0:1:0: device reset [ 440.216268][T15986] netlink: 'syz.3.3872': attribute type 10 has an invalid length. [ 440.629306][T16023] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 441.051086][T16066] net_ratelimit: 12 callbacks suppressed [ 441.051102][T16066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.191186][T16083] sd 0:0:1:0: device reset [ 442.062278][T16145] program syz.1.3947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.192794][T16160] sd 0:0:1:0: device reset [ 442.219743][T16164] dvmrp1: left allmulticast mode [ 442.261857][T16170] usb usb1: usbfs: process 16170 (syz.0.3959) did not claim interface 0 before use [ 442.873261][T16216] __nla_validate_parse: 19 callbacks suppressed [ 442.873292][T16216] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3980'. [ 443.135836][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3989'. [ 443.160257][T16237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3990'. [ 443.413176][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 443.413190][ T29] audit: type=1326 audit(1755473112.620:30724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.452178][T16249] sd 0:0:1:0: device reset [ 443.477982][ T29] audit: type=1326 audit(1755473112.660:30725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c1e4d550 code=0x7ffc0000 [ 443.501807][ T29] audit: type=1326 audit(1755473112.660:30726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.525404][ T29] audit: type=1326 audit(1755473112.660:30727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.549029][ T29] audit: type=1326 audit(1755473112.660:30728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.572636][ T29] audit: type=1326 audit(1755473112.660:30729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.596218][ T29] audit: type=1326 audit(1755473112.660:30730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.619952][ T29] audit: type=1326 audit(1755473112.660:30731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.643601][ T29] audit: type=1326 audit(1755473112.660:30732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.667211][ T29] audit: type=1326 audit(1755473112.660:30733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16247 comm="syz.1.3994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 443.931087][T16275] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4007'. [ 443.952011][T16277] tipc: New replicast peer: 255.255.255.83 [ 443.957974][T16277] tipc: Enabled bearer , priority 10 [ 444.080038][T16301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4020'. [ 444.107744][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4020'. [ 444.276634][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4037'. [ 444.406165][T16353] SELinux: Context system_u:object_r:ssh_keygen_exec_t:s0 is not valid (left unmapped). [ 444.641132][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4059'. [ 444.779943][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4067'. [ 445.071136][ T4965] tipc: Node number set to 3388165057 [ 445.307214][T16445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4089'. [ 445.394859][T16453] netlink: 'syz.2.4093': attribute type 1 has an invalid length. [ 446.768919][T16555] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 446.776357][T16555] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 446.798707][T16555] vhci_hcd: invalid port number 14 [ 446.803944][T16555] vhci_hcd: default hub control req: 000e v000e i000e l0 [ 447.111591][T16613] nfs4: Bad value for 'source' [ 447.195261][T16622] pim6reg: entered allmulticast mode [ 447.225260][T16627] sd 0:0:1:0: device reset [ 447.363807][T16635] Unsupported ieee802154 address type: 0 [ 447.429830][T16655] SELinux: security policydb version 17 (MLS) not backwards compatible [ 447.438846][T16655] SELinux: failed to load policy [ 447.581633][T16674] atomic_op ffff88810230d528 conn xmit_atomic 0000000000000000 [ 447.630953][T16676] lo speed is unknown, defaulting to 1000 [ 447.684594][T16689] netlink: 'syz.3.4204': attribute type 1 has an invalid length. [ 447.764804][T16676] lo speed is unknown, defaulting to 1000 [ 447.782959][T16676] lo speed is unknown, defaulting to 1000 [ 447.792661][T16696] tipc: Bearer : already 2 bearers with priority 10 [ 447.800142][T16696] tipc: Bearer : trying with adjusted priority [ 447.807259][T16696] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 448.017188][T16724] __nla_validate_parse: 9 callbacks suppressed [ 448.017203][T16724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4220'. [ 448.078082][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4220'. [ 448.099842][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4217'. [ 448.971950][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 448.971963][ T29] audit: type=1326 audit(1755473118.180:31085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.0.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 448.980974][T16802] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4247'. [ 449.033253][ T29] audit: type=1326 audit(1755473118.220:31086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.0.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 449.056876][ T29] audit: type=1326 audit(1755473118.220:31087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.0.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 449.080514][ T29] audit: type=1326 audit(1755473118.220:31088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16805 comm="syz.0.4254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 449.144321][ T4960] hid_parser_main: 33 callbacks suppressed [ 449.144337][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.157614][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.165105][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.172538][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.179965][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.187394][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.194890][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.202424][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.209825][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.217306][ T4960] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 449.238570][ T4960] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz1] on syz0 [ 449.252694][T16835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4265'. [ 449.277363][T16837] fido_id[16837]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 449.342270][ T29] audit: type=1400 audit(1755473118.550:31089): avc: denied { mount } for pid=16850 comm="syz.3.4272" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 449.376213][T16854] sd 0:0:1:0: device reset [ 449.404805][ T29] audit: type=1326 audit(1755473118.580:31090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.1.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 449.428456][ T29] audit: type=1326 audit(1755473118.580:31091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.1.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 449.452192][ T29] audit: type=1326 audit(1755473118.580:31092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.1.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c1e4d550 code=0x7ffc0000 [ 449.476128][ T29] audit: type=1326 audit(1755473118.580:31093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.1.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 449.500070][ T29] audit: type=1326 audit(1755473118.580:31094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16852 comm="syz.1.4273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c1e4ebe9 code=0x7ffc0000 [ 449.688549][T16891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4291'. [ 449.732575][T16891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4291'. [ 449.810874][T16918] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4303'. [ 449.883931][T16933] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4311'. [ 449.887330][T16929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4309'. [ 450.984659][T17029] netlink: 'syz.1.4355': attribute type 6 has an invalid length. [ 452.405779][T17105] Set syz1 is full, maxelem 65536 reached [ 453.199290][T17191] __nla_validate_parse: 8 callbacks suppressed [ 453.199306][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4427'. [ 453.267030][T17202] program syz.0.4432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.285619][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 453.296043][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 453.423258][T17228] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4445'. [ 453.598281][T17244] atomic_op ffff88811a6bad28 conn xmit_atomic 0000000000000000 [ 453.830547][T17269] sd 0:0:1:0: device reset [ 453.995234][T17293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4472'. [ 454.005246][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 454.005261][ T29] audit: type=1326 audit(1755473123.210:31441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.035368][ T29] audit: type=1326 audit(1755473123.220:31442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11a9c4d550 code=0x7ffc0000 [ 454.059086][ T29] audit: type=1326 audit(1755473123.220:31443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.082703][ T29] audit: type=1326 audit(1755473123.220:31444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.089072][T17294] sd 0:0:1:0: device reset [ 454.106259][ T29] audit: type=1326 audit(1755473123.220:31445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.106291][ T29] audit: type=1326 audit(1755473123.220:31446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.106365][ T29] audit: type=1326 audit(1755473123.220:31447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.181865][ T29] audit: type=1326 audit(1755473123.290:31448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.208291][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4475'. [ 454.208348][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4475'. [ 454.227013][ T29] audit: type=1326 audit(1755473123.290:31449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.250648][ T29] audit: type=1326 audit(1755473123.290:31450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17284 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 454.313445][T17308] 9pnet_fd: Insufficient options for proto=fd [ 454.344761][T17314] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4482'. [ 454.642703][T17334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4491'. [ 454.668081][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4491'. [ 455.392085][T17373] netlink: 'syz.3.4507': attribute type 21 has an invalid length. [ 455.436570][T17373] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6) [ 456.827895][T17462] serio: Serial port ptm0 [ 457.606482][T17507] sd 0:0:1:0: device reset [ 457.826589][T17519] sd 0:0:1:0: device reset [ 457.909127][T17531] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 458.594358][T17569] __nla_validate_parse: 16 callbacks suppressed [ 458.594373][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4589'. [ 458.637675][T17569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4589'. [ 458.728821][T17592] block device autoloading is deprecated and will be removed. [ 458.747788][T17596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4602'. [ 458.779057][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4602'. [ 459.058887][T17642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4622'. [ 459.100203][T17650] loop2: detected capacity change from 0 to 512 [ 459.118652][T17650] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 459.143041][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 459.143056][ T29] audit: type=1400 audit(1755473128.350:31602): avc: denied { mount } for pid=17648 comm="syz.2.4625" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 459.189254][ T29] audit: type=1400 audit(1755473128.390:31603): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 459.231957][ T29] audit: type=1326 audit(1755473128.430:31604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8680ebe9 code=0x7ffc0000 [ 459.255769][ T29] audit: type=1326 audit(1755473128.430:31605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b8680ebe9 code=0x7ffc0000 [ 459.283140][ T29] audit: type=1400 audit(1755473128.470:31606): avc: denied { write } for pid=17670 comm="syz.1.4636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 459.302794][ T29] audit: type=1326 audit(1755473128.490:31607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17668 comm="syz.2.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f0b8680ebe9 code=0x7ffc0000 [ 459.340167][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4637'. [ 459.511462][T17697] ref_ctr_offset mismatch. inode: 0x1275 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 459.681368][ T29] audit: type=1326 audit(1755473128.890:31608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 459.705705][ T29] audit: type=1326 audit(1755473128.890:31609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 459.729480][ T29] audit: type=1326 audit(1755473128.920:31610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f139d550 code=0x7ffc0000 [ 459.753118][ T29] audit: type=1326 audit(1755473128.920:31611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17703 comm="syz.3.4650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 459.938130][T17733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4663'. [ 460.115285][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4667'. [ 460.676868][T17765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4676'. [ 460.809618][T17777] openvswitch: netlink: Message has 6 unknown bytes. [ 460.822538][T17779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4682'. [ 460.854680][T17779] wireguard0: entered promiscuous mode [ 460.860183][T17779] wireguard0: entered allmulticast mode [ 460.901586][T17782] SELinux: policydb version 0 does not match my version range 15-35 [ 460.942997][T17782] SELinux: failed to load policy [ 460.965332][T17750] syz.2.4670 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 460.979640][T17750] CPU: 1 UID: 0 PID: 17750 Comm: syz.2.4670 Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 460.979752][T17750] Tainted: [W]=WARN [ 460.979758][T17750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.979769][T17750] Call Trace: [ 460.979776][T17750] [ 460.979809][T17750] __dump_stack+0x1d/0x30 [ 460.979921][T17750] dump_stack_lvl+0xe8/0x140 [ 460.979941][T17750] dump_stack+0x15/0x1b [ 460.979958][T17750] dump_header+0x81/0x220 [ 460.980025][T17750] oom_kill_process+0x342/0x400 [ 460.980095][T17750] out_of_memory+0x979/0xb80 [ 460.980129][T17750] try_charge_memcg+0x5e6/0x9e0 [ 460.980173][T17750] obj_cgroup_charge_pages+0xa6/0x150 [ 460.980206][T17750] __memcg_kmem_charge_page+0x9f/0x170 [ 460.980238][T17750] __alloc_frozen_pages_noprof+0x188/0x360 [ 460.980353][T17750] alloc_pages_mpol+0xb3/0x250 [ 460.980387][T17750] alloc_pages_noprof+0x90/0x130 [ 460.980421][T17750] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 460.980495][T17750] __kvmalloc_node_noprof+0x30f/0x4e0 [ 460.980554][T17750] ? ip_set_alloc+0x1f/0x30 [ 460.980585][T17750] ? ip_set_alloc+0x1f/0x30 [ 460.980613][T17750] ip_set_alloc+0x1f/0x30 [ 460.980644][T17750] hash_netiface_create+0x282/0x740 [ 460.980699][T17750] ? __pfx_hash_netiface_create+0x10/0x10 [ 460.980792][T17750] ip_set_create+0x3cc/0x960 [ 460.980820][T17750] ? __nla_parse+0x40/0x60 [ 460.980846][T17750] nfnetlink_rcv_msg+0x4c3/0x590 [ 460.980998][T17750] netlink_rcv_skb+0x123/0x220 [ 460.981015][T17750] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 460.981088][T17750] nfnetlink_rcv+0x16b/0x1690 [ 460.981128][T17750] ? __list_del_entry_valid_or_report+0x65/0x130 [ 460.981160][T17750] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 460.981231][T17750] ? strnchr+0x1e/0x40 [ 460.981259][T17750] ? should_fail_ex+0x30/0x280 [ 460.981281][T17750] ? selinux_nlmsg_lookup+0x99/0x890 [ 460.981346][T17750] ? __rcu_read_unlock+0x34/0x70 [ 460.981368][T17750] ? __netlink_lookup+0x266/0x2a0 [ 460.981394][T17750] netlink_unicast+0x5bd/0x690 [ 460.981448][T17750] netlink_sendmsg+0x58b/0x6b0 [ 460.981469][T17750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.981488][T17750] __sock_sendmsg+0x142/0x180 [ 460.981562][T17750] ____sys_sendmsg+0x31e/0x4e0 [ 460.981586][T17750] ___sys_sendmsg+0x17b/0x1d0 [ 460.981624][T17750] __x64_sys_sendmsg+0xd4/0x160 [ 460.981681][T17750] x64_sys_call+0x191e/0x2ff0 [ 460.981702][T17750] do_syscall_64+0xd2/0x200 [ 460.981726][T17750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 460.981808][T17750] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 460.981830][T17750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.981853][T17750] RIP: 0033:0x7f0b8680ebe9 [ 460.981869][T17750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.981963][T17750] RSP: 002b:00007f0b85277038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.981983][T17750] RAX: ffffffffffffffda RBX: 00007f0b86a35fa0 RCX: 00007f0b8680ebe9 [ 460.981998][T17750] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 460.982011][T17750] RBP: 00007f0b86891e19 R08: 0000000000000000 R09: 0000000000000000 [ 460.982024][T17750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.982035][T17750] R13: 00007f0b86a36038 R14: 00007f0b86a35fa0 R15: 00007ffeeb9aa3b8 [ 460.982057][T17750] [ 461.312654][T17750] memory: usage 307200kB, limit 307200kB, failcnt 1084 [ 461.319529][T17750] memory+swap: usage 307788kB, limit 9007199254740988kB, failcnt 0 [ 461.327434][T17750] kmem: usage 304304kB, limit 9007199254740988kB, failcnt 0 [ 461.332802][T17791] sd 0:0:1:0: device reset [ 461.334728][T17750] Memory cgroup stats for /syz2: [ 461.339331][T17750] cache 0 [ 461.347284][T17750] rss 2961408 [ 461.350567][T17750] shmem 0 [ 461.353609][T17750] mapped_file 0 [ 461.357126][T17750] dirty 0 [ 461.360045][T17750] writeback 0 [ 461.363445][T17750] workingset_refault_anon 1593 [ 461.368268][T17750] workingset_refault_file 8800 [ 461.373075][T17750] swap 602112 [ 461.376415][T17750] swapcached 0 [ 461.379771][T17750] pgpgin 741569 [ 461.383324][T17750] pgpgout 740845 [ 461.386852][T17750] pgfault 618782 [ 461.390393][T17750] pgmajfault 346 [ 461.393972][T17750] inactive_anon 0 [ 461.397623][T17750] active_anon 0 [ 461.401110][T17750] inactive_file 2961408 [ 461.405249][T17750] active_file 4096 [ 461.408955][T17750] unevictable 0 [ 461.412457][T17750] hierarchical_memory_limit 314572800 [ 461.417854][T17750] hierarchical_memsw_limit 9223372036854771712 [ 461.424064][T17750] total_cache 0 [ 461.427654][T17750] total_rss 2961408 [ 461.431493][T17750] total_shmem 0 [ 461.434969][T17750] total_mapped_file 0 [ 461.439069][T17750] total_dirty 0 [ 461.442675][T17750] total_writeback 0 [ 461.446473][T17750] total_workingset_refault_anon 1593 [ 461.451839][T17750] total_workingset_refault_file 8800 [ 461.457360][T17750] total_swap 602112 [ 461.461222][T17750] total_swapcached 0 [ 461.465254][T17750] total_pgpgin 741569 [ 461.469217][T17750] total_pgpgout 740845 [ 461.473277][T17750] total_pgfault 618782 [ 461.477315][T17750] total_pgmajfault 346 [ 461.481431][T17750] total_inactive_anon 0 [ 461.485556][T17750] total_active_anon 0 [ 461.489506][T17750] total_inactive_file 2961408 [ 461.494186][T17750] total_active_file 4096 [ 461.498436][T17750] total_unevictable 0 [ 461.502429][T17750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4670,pid=17749,uid=0 [ 461.517174][T17750] Memory cgroup out of memory: Killed process 17749 (syz.2.4670) total-vm:95944kB, anon-rss:3884kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 462.388743][T17841] random: crng reseeded on system resumption [ 462.733394][T17897] program syz.1.4737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 462.852462][T17910] usb usb8: usbfs: process 17910 (syz.1.4741) did not claim interface 0 before use [ 462.862668][T17910] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4741' resets device [ 463.044454][T17938] lo speed is unknown, defaulting to 1000 [ 463.138684][T17938] lo speed is unknown, defaulting to 1000 [ 463.147806][T17938] lo speed is unknown, defaulting to 1000 [ 463.329071][T17982] loop2: detected capacity change from 0 to 512 [ 463.346962][T17982] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.376566][T17982] EXT4-fs (loop2): 1 truncate cleaned up [ 463.399828][T17982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.534829][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.638703][T18025] __nla_validate_parse: 16 callbacks suppressed [ 463.638784][T18025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4792'. [ 463.667538][T18033] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4796'. [ 463.703507][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4796'. [ 463.726738][T18047] loop2: detected capacity change from 0 to 512 [ 463.735274][T18047] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.761467][T18047] EXT4-fs (loop2): 1 orphan inode deleted [ 463.767225][T18047] EXT4-fs (loop2): 1 truncate cleaned up [ 463.773568][T18047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.797931][T18047] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 463.827271][T18047] EXT4-fs (loop2): Remounting filesystem read-only [ 463.838463][T18047] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 463.863219][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.951577][T18086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4819'. [ 463.967521][T18083] loop2: detected capacity change from 0 to 512 [ 463.996103][T18083] EXT4-fs (loop2): too many log groups per flexible block group [ 464.003854][T18083] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 464.011513][T18083] EXT4-fs (loop2): mount failed [ 464.036386][T18083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4818'. [ 464.214258][T18116] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4832'. [ 464.279497][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 464.279529][ T29] audit: type=1326 audit(1755473133.480:31688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.311181][ T29] audit: type=1326 audit(1755473133.480:31689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.334985][ T29] audit: type=1326 audit(1755473133.480:31690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.358617][ T29] audit: type=1326 audit(1755473133.480:31691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.371740][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4838'. [ 464.382354][ T29] audit: type=1326 audit(1755473133.480:31692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.414850][ T29] audit: type=1326 audit(1755473133.480:31693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.438459][ T29] audit: type=1326 audit(1755473133.501:31694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.462082][ T29] audit: type=1326 audit(1755473133.501:31695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.485907][ T29] audit: type=1326 audit(1755473133.501:31696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.491603][T18134] sd 0:0:1:0: device reset [ 464.509656][ T29] audit: type=1326 audit(1755473133.501:31697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18125 comm="syz.3.4836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 464.606579][T18144] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4844'. [ 464.823522][T18152] loop2: detected capacity change from 0 to 512 [ 464.830956][T18152] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 464.843960][T18152] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 464.951240][T18165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4851'. [ 465.777192][T18202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4869'. [ 466.044541][T18209] loop2: detected capacity change from 0 to 128 [ 467.240182][T18275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=18275 comm=syz.4.4900 [ 467.360561][T18295] loop2: detected capacity change from 0 to 512 [ 467.401630][T18295] EXT4-fs (loop2): too many log groups per flexible block group [ 467.409346][T18295] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 467.442382][T18295] EXT4-fs (loop2): mount failed [ 469.093359][T18381] __nla_validate_parse: 11 callbacks suppressed [ 469.093371][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4943'. [ 469.108723][T18381] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4943'. [ 469.118386][T18381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4943'. [ 469.127735][T18381] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4943'. [ 469.136865][T18381] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4943'. [ 469.168162][T18385] tmpfs: Unknown parameter 'fsname' [ 469.255086][T18400] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 469.323611][T18408] nfs4: Bad value for 'source' [ 469.432986][T18426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4965'. [ 469.505815][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 469.505858][ T29] audit: type=1400 audit(1755473138.711:31800): avc: denied { write } for pid=18439 comm="syz.0.4973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 469.562691][ T29] audit: type=1400 audit(1755473138.771:31801): avc: denied { map } for pid=18444 comm="syz.2.4975" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 469.599786][ T29] audit: type=1400 audit(1755473138.801:31802): avc: denied { mounton } for pid=18453 comm="syz.2.4980" path="/995/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 469.637679][T18458] random: crng reseeded on system resumption [ 469.687386][T18464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4984'. [ 469.776345][ T29] audit: type=1400 audit(1755473138.981:31803): avc: denied { mounton } for pid=18473 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 469.819020][T18474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4986'. [ 469.868996][T18473] lo speed is unknown, defaulting to 1000 [ 469.918564][T18473] lo speed is unknown, defaulting to 1000 [ 469.924718][T18473] lo speed is unknown, defaulting to 1000 [ 469.995557][T18473] chnl_net:caif_netlink_parms(): no params data found [ 470.016571][ T29] audit: type=1326 audit(1755473139.221:31804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18488 comm="syz.3.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 470.040486][ T29] audit: type=1326 audit(1755473139.221:31805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18488 comm="syz.3.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 470.067402][ T29] audit: type=1326 audit(1755473139.221:31806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18488 comm="syz.3.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 470.091169][ T29] audit: type=1326 audit(1755473139.221:31807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18488 comm="syz.3.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 470.114881][ T29] audit: type=1326 audit(1755473139.221:31808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18488 comm="syz.3.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 470.138640][ T29] audit: type=1326 audit(1755473139.221:31809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18488 comm="syz.3.4989" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 470.176363][T18473] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.183558][T18473] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.191188][T18473] bridge_slave_0: entered allmulticast mode [ 470.197862][T18473] bridge_slave_0: entered promiscuous mode [ 470.208206][T18473] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.215386][T18473] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.222545][T18473] bridge_slave_1: entered allmulticast mode [ 470.229280][T18473] bridge_slave_1: entered promiscuous mode [ 470.263535][T18473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.277499][T18473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.287509][ T4781] erspan0: left allmulticast mode [ 470.292593][ T4781] erspan0: left promiscuous mode [ 470.297738][ T4781] GPL: port 1(erspan0) entered disabled state [ 470.451978][T18520] 9pnet: Could not find request transport: 0xffffffffffffffff [ 470.472689][ T4781] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 470.481286][ T4781] dummy0: left promiscuous mode [ 470.486914][ T4781] $Hÿ (unregistering): Released all slaves [ 470.495652][ T4781] bond0 (unregistering): Released all slaves [ 470.533910][T18473] team0: Port device team_slave_0 added [ 470.546197][T18473] team0: Port device team_slave_1 added [ 470.555824][ T4781] tipc: Disabling bearer [ 470.560914][ T4781] tipc: Left network mode [ 470.586963][T18473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.593961][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.619932][T18473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.632329][T18473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.639416][T18473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.665334][T18473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.763901][T18473] hsr_slave_0: entered promiscuous mode [ 470.777743][T18473] hsr_slave_1: entered promiscuous mode [ 470.816339][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5012'. [ 470.837207][T18541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5012'. [ 470.941127][ T4764] smc: removing ib device sz1 [ 471.104652][T18473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.121245][T18473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.130119][T18473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.139223][T18473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 471.179911][T18473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.193611][T18473] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.203121][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.210198][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.222344][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.229400][ T4764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.247125][ T4781] IPVS: stop unused estimator thread 0... [ 471.263178][T18473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.311149][T18473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.476198][T18473] veth0_vlan: entered promiscuous mode [ 471.485226][T18473] veth1_vlan: entered promiscuous mode [ 471.509662][T18473] veth0_macvtap: entered promiscuous mode [ 471.520468][T18473] veth1_macvtap: entered promiscuous mode [ 471.543603][T18473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.563894][T18473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.576111][ T4764] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.591024][ T4740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.599849][ T4740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.615290][ T4740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.678641][T18639] loop5: detected capacity change from 0 to 2364 [ 472.642380][T18711] loop5: detected capacity change from 0 to 512 [ 472.650351][T18711] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.712553][T18714] loop5: detected capacity change from 0 to 512 [ 472.733065][T18714] EXT4-fs (loop5): too many log groups per flexible block group [ 472.740903][T18714] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 472.752923][T18714] EXT4-fs (loop5): mount failed [ 473.899925][T18769] loop5: detected capacity change from 0 to 2048 [ 473.948475][T18769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.028030][T18769] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.166141][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.203089][T18787] hub 9-0:1.0: USB hub found [ 474.213004][T18787] hub 9-0:1.0: 8 ports detected [ 474.217992][T18789] loop5: detected capacity change from 0 to 1024 [ 474.244877][T18789] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5103: Failed to acquire dquot type 0 [ 474.264194][T18789] EXT4-fs (loop5): 1 truncate cleaned up [ 474.270995][T18789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.298779][T18797] syz2: rxe_newlink: already configured on bond0 [ 474.331410][T18789] __nla_validate_parse: 14 callbacks suppressed [ 474.331426][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5103'. [ 474.347081][T18803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5111'. [ 474.372529][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.377714][T18803] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5111'. [ 474.436484][T18813] loop5: detected capacity change from 0 to 512 [ 474.475767][T18813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.489860][T18813] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 474.503923][T18813] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.5113: corrupted inode contents [ 474.515967][T18813] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.5113: mark_inode_dirty error [ 474.527503][T18813] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.5113: corrupted inode contents [ 474.541872][T18813] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.5113: mark_inode_dirty error [ 474.580784][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 474.580800][ T29] audit: type=1400 audit(1755473143.781:31925): avc: denied { create } for pid=18811 comm="syz.5.5113" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 474.607959][ T29] audit: type=1400 audit(1755473143.781:31926): avc: denied { remove_name } for pid=18811 comm="syz.5.5113" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.630701][ T29] audit: type=1400 audit(1755473143.781:31927): avc: denied { rename } for pid=18811 comm="syz.5.5113" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 474.652690][ T29] audit: type=1400 audit(1755473143.781:31928): avc: denied { unlink } for pid=18811 comm="syz.5.5113" name="file0" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 474.694269][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.720207][T18835] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5124'. [ 474.833558][T18846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5124'. [ 475.449534][ T29] audit: type=1326 audit(1755473144.651:31929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.0.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 475.473277][ T29] audit: type=1326 audit(1755473144.651:31930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.0.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11a9c4d550 code=0x7ffc0000 [ 475.496898][ T29] audit: type=1326 audit(1755473144.651:31931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.0.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 475.520630][ T29] audit: type=1326 audit(1755473144.651:31932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.0.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 475.560999][T18857] sch_fq: defrate 4294967295 ignored. [ 475.570973][T18854] sd 0:0:1:0: device reset [ 475.611064][ T29] audit: type=1326 audit(1755473144.691:31933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.0.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 475.635022][ T29] audit: type=1326 audit(1755473144.691:31934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18836 comm="syz.0.5125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a9c4ebe9 code=0x7ffc0000 [ 475.933962][T18902] sd 0:0:1:0: device reset [ 475.960241][T18904] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5152'. [ 475.986487][T18904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5152'. [ 476.159226][T18937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5165'. [ 476.692632][T18979] lo speed is unknown, defaulting to 1000 [ 476.841144][T18988] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 476.847684][T18988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.855206][T18988] vhci_hcd vhci_hcd.0: Device attached [ 476.912863][T18991] vhci_hcd: connection closed [ 477.120772][ T4982] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 477.157980][T18994] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 477.328599][ T4780] vhci_hcd: stop threads [ 477.332992][ T4780] vhci_hcd: release socket [ 477.337479][ T4780] vhci_hcd: disconnect device [ 477.582819][T19016] loop5: detected capacity change from 0 to 512 [ 477.600143][T19016] EXT4-fs: Ignoring removed nobh option [ 477.638727][T19016] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.5200: corrupted inode contents [ 477.666870][T19016] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.5200: mark_inode_dirty error [ 477.678620][T19016] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.5200: corrupted inode contents [ 477.690987][T19016] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.5200: mark_inode_dirty error [ 477.702518][T19016] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5200: Failed to acquire dquot type 0 [ 477.714826][T19016] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5200: corrupted inode contents [ 477.727239][T19016] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.5200: mark_inode_dirty error [ 477.752267][T19016] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5200: corrupted inode contents [ 477.765003][T19016] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.5200: mark_inode_dirty error [ 477.776659][T19016] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5200: corrupted inode contents [ 477.783776][T19043] blktrace: Concurrent blktraces are not allowed on sg0 [ 477.789141][T19016] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 477.835793][T19045] binfmt_misc: register: failed to install interpreter file ./file2 [ 477.877320][T19048] netlink: 'syz.1.5210': attribute type 16 has an invalid length. [ 477.961191][T19016] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.5200: corrupted inode contents [ 477.977467][T19016] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.5200: mark_inode_dirty error [ 477.989866][T19016] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 478.000723][T19016] EXT4-fs (loop5): 1 truncate cleaned up [ 478.007253][T19016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.051883][T19016] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.065599][T19054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5213'. [ 478.183458][T19016] EXT4-fs error (device loop5): ext4_empty_dir:3124: inode #12: block 13: comm syz.5.5200: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 478.225261][T19058] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 478.270024][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.456666][T19067] loop5: detected capacity change from 0 to 512 [ 478.476267][T19067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.489038][T19067] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.514823][T19067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.5219: corrupted inode contents [ 478.530529][T19067] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.5219: mark_inode_dirty error [ 478.542659][T19067] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.5219: corrupted inode contents [ 478.581229][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.657057][T19076] ALSA: seq fatal error: cannot create timer (-19) [ 478.956962][T19094] syzkaller1: entered promiscuous mode [ 478.962500][T19094] syzkaller1: entered allmulticast mode [ 479.062383][T19098] can0: slcan on ttyS3. [ 479.231443][T19098] can0 (unregistered): slcan off ttyS3. [ 479.237394][T19098] Falling back ldisc for ttyS3. [ 479.374594][T19109] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 479.597660][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 479.597683][ T29] audit: type=1400 audit(1755473148.801:32223): avc: denied { allowed } for pid=19130 comm="syz.4.5245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 479.624338][ T29] audit: type=1400 audit(1755473148.801:32224): avc: denied { create } for pid=19130 comm="syz.4.5245" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 479.648229][ T29] audit: type=1400 audit(1755473148.861:32225): avc: denied { ioctl } for pid=19134 comm="syz.3.5247" path="socket:[63988]" dev="sockfs" ino=63988 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 479.725365][ T29] audit: type=1326 audit(1755473148.931:32226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 479.749046][ T29] audit: type=1326 audit(1755473148.931:32227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 479.772727][ T29] audit: type=1326 audit(1755473148.931:32228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 479.796538][ T29] audit: type=1326 audit(1755473148.931:32229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 479.820330][ T29] audit: type=1326 audit(1755473148.931:32230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 479.844152][ T29] audit: type=1326 audit(1755473148.931:32231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 479.867794][ T29] audit: type=1326 audit(1755473148.931:32232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19147 comm="syz.3.5252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 479.917598][T19156] loop5: detected capacity change from 0 to 512 [ 479.924848][T19156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.931556][T19156] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.952273][T19156] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 479.967086][T19156] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 479.982165][T19156] EXT4-fs (loop5): 1 truncate cleaned up [ 479.988346][T19156] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.061653][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.408078][T19179] sock: sock_timestamping_bind_phc: sock not bind to device [ 480.436690][T19177] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5264'. [ 480.447034][T19181] hub 9-0:1.0: USB hub found [ 480.452004][T19181] hub 9-0:1.0: 8 ports detected [ 480.525392][T19187] SELinux: failed to load policy [ 480.533121][T19189] loop5: detected capacity change from 0 to 256 [ 480.564060][T19189] FAT-fs (loop5): Directory bread(block 1285) failed [ 480.809119][T19223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5285'. [ 480.834975][T19223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5285'. [ 481.179627][T19274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5309'. [ 481.219675][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5309'. [ 481.608817][T19308] serio: Serial port ptm1 [ 482.131760][T19355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5345'. [ 482.200814][ T4982] usb 11-1: enqueue for inactive port 0 [ 482.215058][ T4982] usb 11-1: enqueue for inactive port 0 [ 482.246717][T19362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 482.310685][ T4982] vhci_hcd: vhci_device speed not set [ 482.457689][T19370] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5351'. [ 482.520790][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5351'. [ 482.529664][T19371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.537079][T19371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.547885][T19371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.555344][T19371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.640255][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5354'. [ 482.741159][T19384] Falling back ldisc for ttyS3. [ 483.130053][T19394] wireguard0: entered promiscuous mode [ 483.135770][T19394] wireguard0: entered allmulticast mode [ 483.186300][T19406] netlink: 'syz.1.5365': attribute type 6 has an invalid length. [ 483.234559][T19412] vhci_hcd: default hub control req: 050b vfffd i0000 l0 [ 483.257393][T19414] netlink: 'syz.5.5369': attribute type 10 has an invalid length. [ 483.267466][T19414] team0: Device hsr_slave_0 failed to register rx_handler [ 483.358670][T19427] sd 0:0:1:0: device reset [ 483.358887][T19426] loop5: detected capacity change from 0 to 2048 [ 483.380208][T19426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.403984][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.536755][T19436] loop5: detected capacity change from 0 to 2048 [ 483.568367][T19436] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.764592][T19464] sd 0:0:1:0: device reset [ 484.163914][T19491] netlink: 'syz.1.5401': attribute type 21 has an invalid length. [ 484.171891][T19491] IPv6: NLM_F_CREATE should be specified when creating new route [ 484.234325][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.578564][T19528] loop5: detected capacity change from 0 to 2048 [ 484.591969][T19528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.604720][T19528] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.5415: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 484.621301][T19528] EXT4-fs (loop5): Remounting filesystem read-only [ 484.635304][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.653721][ T29] kauditd_printk_skb: 332 callbacks suppressed [ 484.653736][ T29] audit: type=1400 audit(1755473153.861:32565): avc: denied { mounton } for pid=19531 comm="syz.5.5416" path="/proc/147/task" dev="proc" ino=64478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 484.685677][ T29] audit: type=1400 audit(1755473153.861:32566): avc: denied { mount } for pid=19531 comm="syz.5.5416" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 484.707816][ T29] audit: type=1400 audit(1755473153.861:32567): avc: denied { associate } for pid=19533 comm="syz.5.5416" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 484.729162][ T29] audit: type=1400 audit(1755473153.921:32568): avc: denied { read } for pid=19534 comm="syz.5.5417" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 484.752333][ T29] audit: type=1400 audit(1755473153.921:32569): avc: denied { open } for pid=19534 comm="syz.5.5417" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 484.998357][ T29] audit: type=1400 audit(1755473154.201:32570): avc: denied { ioctl } for pid=19541 comm="syz.3.5420" path="socket:[65160]" dev="sockfs" ino=65160 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 485.054823][ T29] audit: type=1326 audit(1755473154.261:32571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19547 comm="syz.3.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 485.079564][ T29] audit: type=1326 audit(1755473154.261:32572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19547 comm="syz.3.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 485.103191][ T29] audit: type=1326 audit(1755473154.291:32573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19547 comm="syz.3.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 485.130384][ T29] audit: type=1326 audit(1755473154.291:32574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19547 comm="syz.3.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 485.190612][T19560] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 485.665556][T19572] __nla_validate_parse: 8 callbacks suppressed [ 485.665566][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5430'. [ 485.751232][T19574] Restarting kernel threads ... [ 485.756248][T19574] Done restarting kernel threads. [ 485.780775][T19576] loop5: detected capacity change from 0 to 2048 [ 485.804619][T19576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.831635][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.983581][T19583] loop5: detected capacity change from 0 to 2048 [ 486.002781][T19583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.015567][T19583] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.037890][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.194319][T19609] sd 0:0:1:0: device reset [ 486.217370][T19612] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5441'. [ 486.365837][T19638] bond1: entered promiscuous mode [ 486.370951][T19638] bond1: entered allmulticast mode [ 486.376394][T19638] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.385183][T19638] bond1 (unregistering): Released all slaves [ 486.480994][ T4960] usb usb4-port1: attempt power cycle [ 486.545171][T19647] wireguard1: entered promiscuous mode [ 486.550684][T19647] wireguard1: entered allmulticast mode [ 486.802039][T19657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5466'. [ 486.983742][T19664] rdma_op ffff8881042dc580 conn xmit_rdma 0000000000000000 [ 487.027095][T19668] bond6: entered promiscuous mode [ 487.032318][T19668] bond6: entered allmulticast mode [ 487.037799][T19668] 8021q: adding VLAN 0 to HW filter on device bond6 [ 487.052561][T19668] bond6 (unregistering): Released all slaves [ 487.068017][T19675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5473'. [ 487.077077][T19675] netem: unknown loss type 13 [ 487.081897][T19675] netem: change failed [ 487.329436][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5491'. [ 487.495799][T19726] atomic_op ffff888122d42528 conn xmit_atomic 0000000000000000 [ 487.689274][T19738] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 487.763183][T19751] loop5: detected capacity change from 0 to 1024 [ 487.781458][T19751] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5506: Failed to acquire dquot type 0 [ 487.800450][T19751] EXT4-fs (loop5): 1 truncate cleaned up [ 487.807309][T19751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.826595][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5506'. [ 487.844086][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.858452][T19759] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5509'. [ 488.024779][T19767] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 488.032157][T19767] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 488.092561][T19774] netlink: 'syz.3.5514': attribute type 21 has an invalid length. [ 488.100630][T19774] netlink: 'syz.3.5514': attribute type 1 has an invalid length. [ 488.108520][T19774] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5514'. [ 488.227587][T19785] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5519'. [ 488.238118][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5519'. [ 488.616943][ T4960] usb usb4-port1: unable to enumerate USB device [ 488.623638][T19524] usb usb4: usbfs: interface 0 claimed by hub while 'syz.0.5412' sets config #0 [ 488.737465][T19813] SELinux: failed to load policy [ 489.071676][T19873] usb usb8: usbfs: process 19873 (syz.5.5561) did not claim interface 0 before use [ 489.724193][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 489.724208][ T29] audit: type=1400 audit(1755473158.931:32834): avc: denied { setopt } for pid=19903 comm="syz.4.5571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 489.923327][ T29] audit: type=1400 audit(1755473159.131:32835): avc: denied { mounton } for pid=19917 comm="syz.1.5577" path="/1087/file0" dev="tmpfs" ino=5817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 490.070436][ T29] audit: type=1326 audit(1755473159.271:32836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.094132][ T29] audit: type=1326 audit(1755473159.271:32837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.196312][ T29] audit: type=1326 audit(1755473159.301:32838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.220492][ T29] audit: type=1326 audit(1755473159.301:32839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.244222][ T29] audit: type=1326 audit(1755473159.301:32840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.267978][ T29] audit: type=1326 audit(1755473159.301:32841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.291651][ T29] audit: type=1326 audit(1755473159.301:32842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.315646][ T29] audit: type=1326 audit(1755473159.301:32843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19929 comm="syz.3.5581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 490.400500][T19968] SELinux: security_context_str_to_sid () failed with errno=-22 [ 490.439024][T19975] sd 0:0:1:0: device reset [ 490.751294][T20017] Set syz1 is full, maxelem 65536 reached [ 490.867419][T20023] __nla_validate_parse: 7 callbacks suppressed [ 490.867433][T20023] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5623'. [ 490.900247][T20027] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20027 comm=syz.5.5625 [ 490.924409][ T2991] udevd[2991]: worker [17593] terminated by signal 33 (Unknown signal 33) [ 490.933079][ T2991] udevd[2991]: worker [17593] failed while handling '/devices/virtual/block/loop5' [ 491.107807][T20054] loop5: detected capacity change from 0 to 512 [ 491.116728][T20054] EXT4-fs: Ignoring removed bh option [ 491.129529][T20054] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 491.138720][T20054] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 491.147628][T20054] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 491.159275][T20054] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 491.169860][T20054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.199729][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.231344][T20069] hub 6-0:1.0: USB hub found [ 491.247510][T20069] hub 6-0:1.0: 8 ports detected [ 491.271721][T20080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5649'. [ 491.423350][T20108] sd 0:0:1:0: device reset [ 491.438184][T20112] sd 0:0:1:0: device reset [ 491.622074][T20149] sd 0:0:1:0: device reset [ 491.716376][T20166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5689'. [ 491.799494][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5695'. [ 492.088748][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5703'. [ 492.097911][T20198] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5703'. [ 492.108812][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5703'. [ 492.117984][T20198] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5703'. [ 492.127299][T20198] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5703'. [ 492.182734][T20211] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5709'. [ 492.264198][T20217] SELinux: unknown common r [ 492.273160][T20217] SELinux: failed to load policy [ 493.550830][T20327] loop5: detected capacity change from 0 to 256 [ 493.558236][T20320] lo speed is unknown, defaulting to 1000 [ 493.565391][T20327] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 493.591547][T20327] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 494.245383][T20408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20408 comm=syz.4.5797 [ 494.261683][T20410] loop5: detected capacity change from 0 to 128 [ 494.286170][T20410] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 494.302456][T20410] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 494.359955][T18473] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.643174][T20443] netlink: 'syz.3.5812': attribute type 1 has an invalid length. [ 494.770493][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 494.770535][ T29] audit: type=1400 audit(1755473163.971:33366): avc: denied { create } for pid=20456 comm="syz.1.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.799364][ T29] audit: type=1400 audit(1755473164.001:33367): avc: denied { bind } for pid=20456 comm="syz.1.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.819501][ T29] audit: type=1400 audit(1755473164.001:33368): avc: denied { setopt } for pid=20456 comm="syz.1.5819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.839651][ T29] audit: type=1400 audit(1755473164.001:33369): avc: denied { write } for pid=20456 comm="syz.1.5819" path="socket:[67467]" dev="sockfs" ino=67467 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 494.943660][ T29] audit: type=1326 audit(1755473164.151:33370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.3.5821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 494.975146][ T29] audit: type=1326 audit(1755473164.171:33371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.3.5821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f139d550 code=0x7ffc0000 [ 494.998838][ T29] audit: type=1326 audit(1755473164.171:33372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.3.5821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 495.022550][ T29] audit: type=1326 audit(1755473164.171:33373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.3.5821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 495.046179][ T29] audit: type=1326 audit(1755473164.171:33374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.3.5821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 495.070083][ T29] audit: type=1326 audit(1755473164.171:33375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20460 comm="syz.3.5821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f139ebe9 code=0x7ffc0000 [ 496.245120][T20523] loop5: detected capacity change from 0 to 512 [ 496.264983][T20523] EXT4-fs (loop5): 1 orphan inode deleted [ 496.276647][T20523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.289338][ T4764] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 1 [ 496.309597][T20523] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.380423][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.406683][ T4960] kernel write not supported for file /348/gid_map (pid: 4960 comm: kworker/1:6) [ 496.419916][T20537] syzkaller0: left promiscuous mode [ 496.425323][T20537] syzkaller0: left allmulticast mode [ 496.472324][T20539] __nla_validate_parse: 8 callbacks suppressed [ 496.472340][T20539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5851'. [ 496.498809][T20544] loop5: detected capacity change from 0 to 1024 [ 496.530962][T20544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.555959][T20544] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 496.579079][T20544] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 496.591563][T20544] EXT4-fs (loop5): This should not happen!! Data will be lost [ 496.591563][T20544] [ 496.601334][T20544] EXT4-fs (loop5): Total free blocks count 0 [ 496.607472][T20544] EXT4-fs (loop5): Free/Dirty block details [ 496.613407][T20544] EXT4-fs (loop5): free_blocks=20480 [ 496.618767][T20544] EXT4-fs (loop5): dirty_blocks=96 [ 496.623892][T20544] EXT4-fs (loop5): Block reservation details [ 496.629914][T20544] EXT4-fs (loop5): i_reserved_data_blocks=6 [ 496.663389][ T4795] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 496.813624][T20568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5865'. [ 496.920542][T20579] loop5: detected capacity change from 0 to 2048 [ 496.984366][T20579] Alternate GPT is invalid, using primary GPT. [ 496.990756][T20579] loop5: p2 p3 p7 [ 497.004528][T20587] sd 0:0:1:0: device reset [ 497.074490][T18553] udevd[18553]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 497.076025][T20592] udevd[20592]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 497.085045][T17265] udevd[17265]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 497.207543][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5885'. [ 497.437203][T20654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5899'. [ 498.266603][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5912'. [ 498.284456][T20685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5912'. [ 498.741795][T20709] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5920'. [ 498.753384][T20696] loop5: detected capacity change from 0 to 2048 [ 498.792823][T20696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.272965][ T4780] erspan0: left allmulticast mode [ 499.278029][ T4780] erspan0: left promiscuous mode [ 499.283122][ T4780] GPL: port 1(erspan0) entered disabled state [ 499.298388][ T4780] tipc: Resetting bearer [ 499.335884][ T4780] bond0 (unregistering): (slave gretap0): Releasing active interface [ 499.355764][ T4780] tipc: Disabling bearer [ 499.403945][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.569584][T20758] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5936'. [ 499.592602][ T4780]  (unregistering): (slave c1ÿ): Releasing backup interface [ 499.601761][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5936'. [ 499.611050][ T4780]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.620152][ T4780]  (unregistering): (slave dummy0): Releasing backup interface [ 499.635998][ T4780]  (unregistering): (slave bridge_slave_1): Releasing backup interface [ 499.645026][ T4780]  (unregistering): Released all slaves [ 499.654453][ T4780] bond0 (unregistering): Released all slaves [ 499.663335][T20728] lo speed is unknown, defaulting to 1000 [ 499.710876][ T4780] tipc: Disabling bearer [ 499.715881][ T4780] tipc: Left network mode [ 499.792536][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 499.792553][ T29] audit: type=1400 audit(1755473168.991:33537): avc: denied { wake_alarm } for pid=20782 comm="syz.0.5947" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 499.798832][T20728] chnl_net:caif_netlink_parms(): no params data found [ 499.855123][T20786] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5942'. [ 499.961249][T20728] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.968383][T20728] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.975689][T20728] bridge_slave_0: entered allmulticast mode [ 499.982138][T20728] bridge_slave_0: entered promiscuous mode [ 499.988920][T20728] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.996058][T20728] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.003350][T20728] bridge_slave_1: entered allmulticast mode [ 500.009625][T20728] bridge_slave_1: entered promiscuous mode [ 500.044691][T20728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.055392][T20728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.091420][T20728] team0: Port device team_slave_0 added [ 500.099454][T20728] team0: Port device team_slave_1 added [ 500.107934][ T29] audit: type=1400 audit(1755473169.311:33538): avc: denied { create } for pid=20800 comm="syz.5.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 500.130008][ T29] audit: type=1400 audit(1755473169.321:33539): avc: denied { write } for pid=20800 comm="syz.5.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 500.150183][ T29] audit: type=1400 audit(1755473169.321:33540): avc: denied { read } for pid=20800 comm="syz.5.5951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 500.171883][T20728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.178892][T20728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.204984][T20728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.216420][T20728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.223395][T20728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.249288][T20728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.264548][ T4780] IPVS: stop unused estimator thread 0... [ 500.278602][T20728] hsr_slave_0: entered promiscuous mode [ 500.284694][T20728] hsr_slave_1: entered promiscuous mode [ 500.290404][T20728] debugfs: 'hsr0' already exists in 'hsr' [ 500.296194][T20728] Cannot create hsr debugfs directory [ 500.371009][T20728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 500.379468][T20728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.388336][T20728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.397167][T20728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 500.413244][T20728] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.420440][T20728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.427757][T20728] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.434838][T20728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.463383][T20728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.475583][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.483409][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.494981][T20728] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.505282][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.512351][ T4795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.525894][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.532966][ T4780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.585979][T20818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20818 comm=syz.4.5953 [ 500.599646][ T29] audit: type=1107 audit(1755473169.811:33541): pid=20817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 500.607883][T20728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.654051][ T29] audit: type=1400 audit(1755473169.861:33542): avc: denied { mount } for pid=20821 comm="syz.4.5954" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 500.693601][ T29] audit: type=1326 audit(1755473169.901:33543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20830 comm="syz.4.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 500.717308][ T29] audit: type=1326 audit(1755473169.901:33544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20830 comm="syz.4.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 500.766003][ T29] audit: type=1326 audit(1755473169.951:33545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20830 comm="syz.4.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 500.789754][ T29] audit: type=1326 audit(1755473169.951:33546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20830 comm="syz.4.5956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 500.851545][T20728] veth0_vlan: entered promiscuous mode [ 500.864219][T20728] veth1_vlan: entered promiscuous mode [ 500.902667][T20728] veth0_macvtap: entered promiscuous mode [ 500.920137][T20728] veth1_macvtap: entered promiscuous mode [ 500.935376][T20728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.946994][T20728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.958608][ T4781] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.972385][ T4781] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.989409][T20859] loop5: detected capacity change from 0 to 512 [ 501.021860][ T4764] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.037276][ T4764] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.055305][T20859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.077587][T20859] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.182498][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.243999][T20873] 9p: Unknown uid 00000000004294967295 [ 501.326299][T20879] serio: Serial port ttyS3 [ 501.343311][T20883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20883 comm=syz.5.5974 [ 501.355890][T20883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20883 comm=syz.5.5974 [ 501.496404][T20888] SELinux: ebitmap: truncated map [ 501.517349][T20888] SELinux: failed to load policy [ 501.685111][ T3398] hid_parser_main: 33 callbacks suppressed [ 501.685134][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.698614][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.706064][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.727512][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.735084][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.742624][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.750347][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.757773][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.765175][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.772581][ T3398] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 501.792387][T20915] tipc: Started in network mode [ 501.797329][T20915] tipc: Node identity ac14140f, cluster identity 4711 [ 501.806433][T20915] tipc: New replicast peer: 255.255.255.255 [ 501.806454][ T3398] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz1] on syz0 [ 501.812596][T20915] tipc: Enabled bearer , priority 10 [ 501.861804][T20927] __nla_validate_parse: 2 callbacks suppressed [ 501.861819][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5989'. [ 501.876976][T20927] tipc: Disabling bearer [ 501.884982][T20922] fido_id[20922]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 501.963442][T20938] loop5: detected capacity change from 0 to 128 [ 501.983698][T20938] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 502.014072][T20938] ext4 filesystem being mounted at /190/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 502.097298][T18473] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 502.330073][T20966] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6010'. [ 502.419536][T20973] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6012'. [ 502.566516][T20986] smc: net device bond0 applied user defined pnetid SYZ0 [ 502.574447][T20986] smc: net device bond0 erased user defined pnetid SYZ0 [ 503.312548][T21049] loop5: detected capacity change from 0 to 512 [ 503.356820][T21049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.554227][T21060] vhci_hcd: invalid port number 96 [ 503.559395][T21060] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 503.746131][T21068] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 503.875530][T21070] wg2: entered promiscuous mode [ 503.880421][T21070] wg2: entered allmulticast mode [ 503.959414][T21049] ext4 filesystem being mounted at /197/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.006445][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.327605][T21103] netlink: 96 bytes leftover after parsing attributes in process `syz.6.6068'. [ 504.523943][T21116] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6074'. [ 504.587411][T21118] netlink: 48 bytes leftover after parsing attributes in process `gtp'. [ 505.096895][T21137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6082'. [ 505.118407][T21140] smc: net device bond0 applied user defined pnetid SYZ0 [ 505.127169][T21140] smc: net device bond0 erased user defined pnetid SYZ0 [ 505.301969][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 505.301983][ T29] audit: type=1400 audit(1755473174.511:33612): avc: denied { read } for pid=21157 comm="syz.5.6091" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.331583][ T29] audit: type=1400 audit(1755473174.511:33613): avc: denied { open } for pid=21157 comm="syz.5.6091" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 505.356610][ T29] audit: type=1400 audit(1755473174.511:33614): avc: denied { mount } for pid=21159 comm="syz.4.6092" name="/" dev="hugetlbfs" ino=70007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 505.379808][ T29] audit: type=1326 audit(1755473174.521:33615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.4.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 505.403745][ T29] audit: type=1326 audit(1755473174.521:33616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.4.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 505.427399][ T29] audit: type=1326 audit(1755473174.531:33617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.4.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 505.451242][ T29] audit: type=1326 audit(1755473174.531:33618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.4.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 505.474896][ T29] audit: type=1326 audit(1755473174.531:33619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.4.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 505.498560][ T29] audit: type=1326 audit(1755473174.531:33620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.4.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 505.522136][ T29] audit: type=1326 audit(1755473174.531:33621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21161 comm="syz.4.6093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 505.576893][T21171] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6097'. [ 505.878537][T21191] bridge_slave_0: default FDB implementation only supports local addresses [ 505.893808][T21191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6106'. [ 505.902745][T21191] bridge_slave_0: default FDB implementation only supports local addresses [ 505.973192][T21179] loop5: detected capacity change from 0 to 2048 [ 505.974112][T21198] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6110'. [ 505.995303][T21202] sd 0:0:1:0: device reset [ 506.075120][T21179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.261629][T21225] bridge_slave_0: default FDB implementation only supports local addresses [ 506.304187][T21225] bridge_slave_0: default FDB implementation only supports local addresses [ 506.586007][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.895105][T21258] hub 9-0:1.0: USB hub found [ 506.899889][T21258] hub 9-0:1.0: 8 ports detected [ 507.294065][T21303] __nla_validate_parse: 3 callbacks suppressed [ 507.294080][T21303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6152'. [ 507.336304][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6152'. [ 507.447796][T21319] smc: net device bond0 applied user defined pnetid SYZ0 [ 507.469596][T21321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6157'. [ 507.491191][T21319] smc: net device bond0 erased user defined pnetid SYZ0 [ 507.711083][T21356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6178'. [ 507.781185][T21372] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6185'. [ 507.792631][T21375] tipc: Enabled bearer , priority 0 [ 507.799956][T21359] tipc: Resetting bearer [ 507.807200][T21377] loop6: detected capacity change from 0 to 512 [ 507.826145][T21359] tipc: Disabling bearer [ 507.826752][T21377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.845037][T21377] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 507.853642][T21372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6185'. [ 507.880278][T20728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.142056][ T4795] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 508.692769][T21487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6224'. [ 508.836593][T21496] lo speed is unknown, defaulting to 1000 [ 509.521876][T21558] loop6: detected capacity change from 0 to 128 [ 509.547606][T21558] syz.6.6254: attempt to access beyond end of device [ 509.547606][T21558] loop6: rw=0, sector=121, nr_sectors = 8 limit=128 [ 509.665943][T21560] C: renamed from team_slave_0 (while UP) [ 509.673370][T21560] netlink: 'syz.6.6255': attribute type 1 has an invalid length. [ 509.681170][T21560] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6255'. [ 509.690376][T21560] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 509.766914][T21566] loop6: detected capacity change from 0 to 512 [ 509.774124][T21566] EXT4-fs: inline encryption not supported [ 509.783230][T21566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.796804][T21566] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 509.807797][T21566] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.908501][T21574] 9pnet_fd: Insufficient options for proto=fd [ 509.926594][T21576] loop6: detected capacity change from 0 to 512 [ 509.943834][T21576] EXT4-fs (loop6): too many log groups per flexible block group [ 509.951661][T21576] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 509.959267][T21576] EXT4-fs (loop6): mount failed [ 509.968534][T21576] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6262'. [ 510.019417][T21586] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6266'. [ 510.368708][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 510.368729][ T29] audit: type=1400 audit(1755473179.571:33779): avc: denied { setopt } for pid=21619 comm="syz.4.6278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.394963][ T29] audit: type=1400 audit(1755473179.571:33780): avc: denied { write } for pid=21619 comm="syz.4.6278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 510.419657][ T29] audit: type=1326 audit(1755473179.621:33781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.447506][ T29] audit: type=1326 audit(1755473179.621:33782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.471279][ T29] audit: type=1326 audit(1755473179.621:33783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.494948][ T29] audit: type=1326 audit(1755473179.621:33784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.518803][ T29] audit: type=1326 audit(1755473179.621:33785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.542584][ T29] audit: type=1326 audit(1755473179.621:33786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.566245][ T29] audit: type=1326 audit(1755473179.621:33787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.589865][ T29] audit: type=1326 audit(1755473179.621:33788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21621 comm="syz.4.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd30218ebe9 code=0x7ffc0000 [ 510.782503][T21629] SELinux: failed to load policy [ 510.910508][T21639] loop6: detected capacity change from 0 to 128 [ 510.914269][T21641] netlink: 'syz.3.6288': attribute type 10 has an invalid length. [ 510.931014][T21639] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 510.938996][T21639] FAT-fs (loop6): Filesystem has been set read-only [ 510.945823][T21639] syz.6.6287: attempt to access beyond end of device [ 510.945823][T21639] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 510.945856][T21641] lo: left promiscuous mode [ 510.964089][T21639] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 510.971988][T21639] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 510.980045][T21639] syz.6.6287: attempt to access beyond end of device [ 510.980045][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 510.994268][T21639] syz.6.6287: attempt to access beyond end of device [ 510.994268][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.011944][T21639] syz.6.6287: attempt to access beyond end of device [ 511.011944][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.025407][T21639] syz.6.6287: attempt to access beyond end of device [ 511.025407][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.038924][T21639] syz.6.6287: attempt to access beyond end of device [ 511.038924][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.052477][T21639] syz.6.6287: attempt to access beyond end of device [ 511.052477][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.065895][T21639] syz.6.6287: attempt to access beyond end of device [ 511.065895][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.079389][T21639] syz.6.6287: attempt to access beyond end of device [ 511.079389][T21639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 511.166821][T21662] loop5: detected capacity change from 0 to 512 [ 511.191923][T21662] EXT4-fs (loop5): too many log groups per flexible block group [ 511.199911][T21662] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 511.220998][T21662] EXT4-fs (loop5): mount failed [ 511.524264][T21694] tipc: Enabling of bearer rejected, already enabled [ 512.334837][T21750] __nla_validate_parse: 7 callbacks suppressed [ 512.334866][T21750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6326'. [ 512.351151][T21750] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6326'. [ 512.433067][T21752] loop6: detected capacity change from 0 to 512 [ 512.467281][T21752] EXT4-fs (loop6): too many log groups per flexible block group [ 512.475172][T21752] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 512.490547][T21752] EXT4-fs (loop6): mount failed [ 512.518931][T21752] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6327'. [ 512.910190][T21782] loop5: detected capacity change from 0 to 1024 [ 512.926215][T21782] EXT4-fs: Ignoring removed orlov option [ 512.945033][T21782] EXT4-fs: Ignoring removed nomblk_io_submit option [ 513.143725][T21782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.214862][T18473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.350801][T21794] sd 0:0:1:0: device reset [ 513.366735][T21788] lo speed is unknown, defaulting to 1000 [ 513.476803][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6348'. [ 513.494200][T21805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6348'. [ 513.543118][T21811] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6351'. [ 513.609588][T21811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6351'. [ 513.610485][T21817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6353'. [ 514.056398][T21845] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.063841][T21845] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.398076][T21859] loop6: detected capacity change from 0 to 1024 [ 514.410980][T21859] EXT4-fs: Ignoring removed bh option [ 514.429465][T21859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.451406][ T4795] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.460585][ T4795] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.491201][T20728] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.491240][ T4795] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.491358][T20728] ================================================================== [ 514.500258][ T4795] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.509108][T20728] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 514.509149][T20728] [ 514.509154][T20728] write to 0xffffffff8686bbd0 of 8 bytes by task 4795 on cpu 0: [ 514.509170][T20728] data_alloc+0x271/0x2b0 [ 514.547178][T20728] prb_reserve+0x808/0xaf0 [ 514.551597][T20728] vprintk_store+0x56d/0x860 [ 514.556184][T20728] vprintk_emit+0x178/0x650 [ 514.560670][T20728] dev_vprintk_emit+0x242/0x2a0 [ 514.565518][T20728] dev_printk_emit+0x84/0xb0 [ 514.570112][T20728] __netdev_printk+0x35c/0x3e0 [ 514.574869][T20728] netdev_info+0x9b/0xd0 [ 514.579106][T20728] nsim_udp_tunnel_unset_port+0x18a/0x1b0 [ 514.584902][T20728] __udp_tunnel_nic_device_sync+0x564/0x9c0 [ 514.590791][T20728] udp_tunnel_nic_device_sync_work+0x5d/0x5f0 [ 514.596857][T20728] process_scheduled_works+0x4cb/0x9d0 [ 514.602319][T20728] worker_thread+0x582/0x770 [ 514.606947][T20728] kthread+0x489/0x510 [ 514.611001][T20728] ret_from_fork+0xda/0x150 [ 514.615489][T20728] ret_from_fork_asm+0x1a/0x30 [ 514.620240][T20728] [ 514.622545][T20728] read to 0xffffffff8686bbd0 of 16 bytes by task 20728 on cpu 1: [ 514.630295][T20728] _prb_read_valid+0x1bc/0x920 [ 514.635065][T20728] prb_final_commit+0x136/0x1e0 [ 514.639920][T20728] vprintk_store+0x741/0x860 [ 514.644504][T20728] vprintk_emit+0x178/0x650 [ 514.648994][T20728] vprintk_default+0x26/0x30 [ 514.653570][T20728] vprintk+0x1d/0x30 [ 514.657458][T20728] _printk+0x79/0xa0 [ 514.661346][T20728] __ext4_msg+0x18f/0x1a0 [ 514.665673][T20728] ext4_put_super+0x90/0x7d0 [ 514.670249][T20728] generic_shutdown_super+0xe3/0x210 [ 514.675530][T20728] kill_block_super+0x2a/0x70 [ 514.680216][T20728] ext4_kill_sb+0x42/0x80 [ 514.684541][T20728] deactivate_locked_super+0x72/0x1c0 [ 514.689912][T20728] deactivate_super+0x97/0xa0 [ 514.694681][T20728] cleanup_mnt+0x269/0x2e0 [ 514.699101][T20728] __cleanup_mnt+0x19/0x20 [ 514.703520][T20728] task_work_run+0x12e/0x1a0 [ 514.708104][T20728] exit_to_user_mode_loop+0xe4/0x100 [ 514.713377][T20728] do_syscall_64+0x1d6/0x200 [ 514.717963][T20728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.723843][T20728] [ 514.726163][T20728] Reported by Kernel Concurrency Sanitizer on: [ 514.732300][T20728] CPU: 1 UID: 0 PID: 20728 Comm: syz-executor Tainted: G W 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 514.746529][T20728] Tainted: [W]=WARN [ 514.750347][T20728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.760389][T20728] ================================================================== [ 514.847290][T21869] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6366'. [ 514.858459][T21869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6366'. [ 514.867598][T21869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.875085][T21869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.882806][T21869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.890188][T21869] batman_adv: batadv0: Removing interface: batadv_slave_1