last executing test programs: 7m14.823547912s ago: executing program 32 (id=428): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_bond\x00', 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5m52.407478785s ago: executing program 33 (id=2736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_usbip_server_init(0x4) 5m44.011998059s ago: executing program 34 (id=3210): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) 5m40.170337324s ago: executing program 35 (id=3344): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000001}) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0xc8d4, 0x0, 0x0) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 5m36.918601253s ago: executing program 36 (id=3443): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = inotify_init1(0x0) read(r0, 0x0, 0x0) 5m31.734456001s ago: executing program 37 (id=3591): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) openat$cgroup_int(r0, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x1, &(0x7f0000000280)=ANY=[], 0x1, 0x2ad, &(0x7f0000000500)="$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") 5m30.358542276s ago: executing program 38 (id=3622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x48}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 5m8.957403178s ago: executing program 39 (id=4530): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r0, &(0x7f00000006c0)=ANY=[], 0x755c00) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/13], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) 4m31.408488898s ago: executing program 40 (id=6528): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc41e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 4m17.135798373s ago: executing program 41 (id=7141): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4m1.104392073s ago: executing program 42 (id=7668): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) 2m43.034367152s ago: executing program 2 (id=10777): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 2m43.002775555s ago: executing program 2 (id=10778): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 2m42.892408083s ago: executing program 2 (id=10782): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601040000000000000000000000001400078005"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m41.953501045s ago: executing program 2 (id=10837): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0xfffd, 0x0) 2m41.89871964s ago: executing program 2 (id=10840): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2m41.543173676s ago: executing program 2 (id=10858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 2m41.543005927s ago: executing program 43 (id=10858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1000000, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 2m30.453164437s ago: executing program 3 (id=11312): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="15", 0x1, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x8004}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2m30.391985552s ago: executing program 3 (id=11315): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) 2m30.244229224s ago: executing program 3 (id=11318): fcntl$lock(0xffffffffffffffff, 0x6, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") bpf$OBJ_GET_PROG(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0x10}, 0x18) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) 2m30.163717939s ago: executing program 3 (id=11319): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a40)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m30.056279958s ago: executing program 3 (id=11321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80403, 0x200000002006, 0x20000000007fc}) 2m29.463538093s ago: executing program 3 (id=11327): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x800455c9, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2m29.463020683s ago: executing program 44 (id=11327): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x800455c9, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r1, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2m24.867474116s ago: executing program 1 (id=11449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m24.82272359s ago: executing program 1 (id=11452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x3c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb8}, @TCA_ROUTE4_FROM={0x3, 0x3, 0xb0}, @TCA_ROUTE4_TO={0x8, 0x2, 0x22}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb0}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x3}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xee}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m24.705140058s ago: executing program 1 (id=11454): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 2m24.68582745s ago: executing program 1 (id=11457): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a40)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m24.658099192s ago: executing program 1 (id=11459): prctl$PR_SET_NAME(0xf, &(0x7f0000000580)='+}[K\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) 2m23.922798408s ago: executing program 0 (id=11472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x3c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb8}, @TCA_ROUTE4_FROM={0x3, 0x3, 0xb0}, @TCA_ROUTE4_TO={0x8, 0x2, 0x22}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb0}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x9, 0x3}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xee}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 2m23.861997603s ago: executing program 0 (id=11473): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x22b0, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x2284, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x227c, 0x4, [@m_police={0x1268, 0x3, 0x0, 0x0, {{0xb}, {0x11a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x1, 0x9, 0xa4ea, 0x200, 0x2, 0x9, 0x7, 0x1, 0x7, 0x10000, 0xfff, 0x5, 0x8000, 0x4, 0x8, 0x1, 0x4e14194b, 0x9, 0xfffffffa, 0x3, 0x4, 0xfffffffc, 0x6, 0x4, 0x5, 0x8, 0x4, 0x95b, 0x2, 0x0, 0x3, 0x9, 0x8, 0x5, 0x194f, 0xbf6, 0xe6c5, 0x5, 0xf, 0xffffff81, 0x5, 0x2, 0xd, 0x7ff, 0x7, 0xfff, 0x2, 0xfffffffa, 0x81, 0x54c, 0x8, 0x91, 0x8, 0x7, 0x1, 0x101, 0x7, 0xa9, 0x5, 0x7, 0x4, 0x3, 0x10001, 0x16c00000, 0x1, 0x3, 0x8, 0xc, 0xb, 0x81, 0x4, 0x3, 0x0, 0x10001, 0x7, 0x5, 0x80000000, 0x101, 0x5, 0xb, 0x380, 0x6, 0x1, 0xea6, 0x400, 0x4, 0x1, 0xe, 0x7, 0xfff, 0x9, 0x5, 0x2, 0x8, 0x89df, 0x9, 0x7, 0x56, 0x6, 0x65b, 0x8, 0x7ff, 0x9, 0x100, 0x1ff, 0x1ff, 0x7, 0x5, 0x8001, 0x0, 0x7, 0x0, 0x1e, 0x800, 0x2, 0x10, 0x2, 0x8f, 0x8, 0x6, 0x1, 0x9, 0x34, 0x6, 0x3, 0x400, 0xf22, 0xa, 0x7ff, 0x5, 0xfffffff7, 0x22, 0x2, 0x10, 0x8, 0x9, 0x6, 0x4, 0x9, 0xf, 0xfffff800, 0x4, 0x10, 0x9, 0x0, 0x1ff, 0x9, 0x7, 0x8, 0x7, 0x92, 0x200, 0x4, 0xc, 0x6, 0x2, 0x4, 0x2a9, 0x7, 0x8, 0x3, 0x101, 0x10000, 0x3, 0xe, 0x3, 0x6, 0x6, 0x1, 0x0, 0x7, 0x0, 0x3, 0x32a2, 0x4, 0xfb8, 0x1be0, 0xd, 0x916, 0x24, 0xfffffffa, 0x1, 0x200, 0x101, 0x7, 0x6, 0xfffffffb, 0x1, 0x6, 0x6, 0x0, 0x10000, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x8, 0x1, 0x9, 0x72f, 0x7, 0x1, 0xb, 0x1, 0xcab, 0x800, 0x10, 0x10000, 0x6, 0x8, 0xda0, 0x2, 0x4, 0x7, 0x6, 0x1, 0x8, 0x2, 0x81, 0x81, 0x4, 0x2f9, 0xf46, 0x800, 0x80000000, 0x80f0, 0x4, 0x8, 0x3, 0x10001, 0x371, 0x5, 0xfd, 0xa, 0xe217, 0x6, 0x7fffffff, 0x9, 0x6, 0x3, 0x80, 0x4, 0x7, 0x6, 0xa, 0x7, 0x2, 0x6, 0x3ae8, 0x1, 0xea, 0x3, 0x0, 0x3ff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x7, 0x7, 0x38d7, {0x71, 0x2, 0x2, 0x9, 0xc3a0, 0xd32f}, {0xb, 0x1, 0x4, 0x46, 0x1000, 0xfffffffe}, 0xb, 0xa0c5, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x9, 0xff, 0x0, {0x7, 0x1, 0x8fa, 0xbd, 0x9, 0x3}, {0x8, 0x0, 0x9533, 0x3, 0x64f5, 0x3}, 0x7, 0x5, 0x1}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x6, 0x6, 0x8, {0x5, 0x2, 0x8, 0x7fff, 0x7, 0x273}, {0x8, 0x0, 0x7, 0x13, 0x7, 0x8}, 0x5fa, 0x5, 0x3}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffc}, @TCA_POLICE_RATE={0x404, 0x2, [0x5db1, 0x5, 0xe7a9, 0x0, 0x1ff, 0xe, 0x1, 0x9, 0x700000, 0x2, 0xfc1d, 0x400, 0x9, 0x6, 0x1, 0x979, 0x3, 0x7, 0x502, 0x1, 0x9, 0x9, 0x0, 0x8000, 0x3, 0x50d, 0x3, 0x7, 0x1000, 0x3, 0x42, 0x6, 0x7fff, 0xd7, 0x2, 0x0, 0xe137, 0x9, 0x0, 0xffffc5de, 0xff, 0x5, 0x7, 0x9, 0xf, 0x1000, 0x7, 0xfd04, 0x7, 0x7d5, 0x1, 0x4, 0x2, 0x5, 0x9c0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x3ff, 0x4, 0x0, 0xd84a, 0x87, 0xfffffff9, 0x1, 0x4, 0x6, 0x6, 0x9, 0xc, 0xffff13b1, 0x5, 0x10000, 0x4, 0x8, 0x3f, 0x2, 0xfffffc00, 0xfffffbff, 0xf56a, 0x1ff, 0x0, 0x0, 0x5, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0xfffff0fb, 0xe, 0x7, 0x2, 0x8, 0xb16, 0x2, 0x3, 0xc54, 0x4, 0x6, 0x2, 0x9804, 0xfffffffd, 0x9, 0x7fff, 0x5, 0x5, 0xa, 0x5, 0xfffffffd, 0x8000, 0x24000, 0x3, 0x0, 0x8001, 0x7f, 0x5, 0x4, 0x3, 0x9, 0x3, 0xd7, 0x3, 0x0, 0x3, 0x0, 0x8001, 0x2, 0x4, 0x5, 0x1c, 0xffffff00, 0x7, 0x3, 0x2, 0x5, 0x5, 0xfffff762, 0xffffc01f, 0x3, 0x401, 0x6, 0x10001, 0x200, 0x2, 0x8, 0xfffffff8, 0x4, 0xff, 0x5de, 0x5, 0x0, 0x4, 0xefde, 0xc5, 0x9, 0x1ff, 0xb6, 0x3, 0xd8d, 0xaa, 0x7eb530e4, 0x0, 0x3f05d376, 0x8, 0x4, 0x86fe, 0x6, 0xa, 0x2, 0x3, 0x5, 0x7, 0x1, 0xbad7, 0xa9, 0xc9e, 0x6, 0xfd, 0xc, 0x8001, 0x10000, 0x7, 0xfffffffb, 0x4, 0x7, 0x8000, 0xfffffffb, 0x1d19, 0x8, 0xffff, 0xfffff622, 0x8, 0x9042, 0x5, 0x4, 0xd, 0x647c, 0x4, 0x2, 0x17, 0x8, 0x9, 0x101, 0x4, 0x5ba7, 0x0, 0x2, 0x1, 0xffffffff, 0x200, 0x2, 0x8, 0x4, 0x2, 0x2, 0x148b, 0x2, 0x0, 0x2f, 0x5, 0x401, 0xed, 0x9, 0x3, 0x0, 0xc, 0x1, 0x7, 0x800, 0xfffffff9, 0x5, 0x7f, 0x5, 0xffffff28, 0x2, 0x1ff, 0x800, 0x1ff, 0x15, 0x4, 0x5, 0x77, 0x9a3f, 0x7406a8a6, 0x1a44825d, 0xd719, 0x101, 0x10000, 0x5, 0x1, 0x3, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd, 0x3, 0x9, 0xb5, 0x45, {0x6, 0x0, 0x9, 0x9, 0x8, 0x6}, {0x6, 0x0, 0xfff8, 0x400, 0x4, 0xc}, 0x7, 0x800, 0x4c}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x12000, 0x6, 0x5b68, 0x4, 0x7f, 0x4, 0x5, 0xd0e, 0x15, 0x4c, 0x0, 0x7ff, 0xffffffff, 0x7fffffff, 0x81, 0x4, 0x1, 0xf, 0x8000, 0x727, 0x80000000, 0x4, 0x5fb, 0x0, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x400, 0x1, 0x7fffffff, 0x1, 0x1052, 0x7ff, 0x3, 0xbfe, 0x4, 0x3, 0x5, 0x159, 0x1, 0x7, 0x3, 0x7, 0x3, 0x7, 0x1, 0x4, 0x4, 0xffff0000, 0x8001, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0xd, 0x6, 0x8001, 0xc7, 0x6, 0x6, 0x8, 0x3, 0x661, 0x7fffffff, 0x40, 0x4, 0xd, 0x7f, 0x4c7, 0xec50, 0x80000000, 0x9, 0x1, 0x7, 0x25, 0x7, 0x3, 0x8000, 0xc, 0x400, 0x1, 0x8, 0x2, 0x4, 0xce0, 0x4, 0x7, 0x64, 0x9, 0x3, 0x1, 0xd9e, 0x2, 0x5, 0x5, 0x7, 0x0, 0x3, 0x4, 0x3, 0x5, 0x1, 0x3, 0x10, 0xfffffffb, 0x8, 0xffffffff, 0x5, 0x8, 0x3, 0x27d1, 0x3, 0xfffffffc, 0x9, 0x3, 0x5, 0x63c, 0xfffffe01, 0xc, 0x4, 0x3, 0xb2c, 0x42d3fd28, 0x0, 0x2, 0xfffffffe, 0x45, 0x200, 0xa, 0x52, 0xffffffff, 0x1ff, 0x7, 0x1, 0x5, 0xc4cd, 0x10000, 0x7fff, 0x0, 0xac4e, 0x7, 0xfffffc01, 0x4, 0x9707, 0x0, 0x1, 0x1, 0x1ff, 0x7, 0x3, 0x4, 0x6, 0x40, 0x10000009, 0x5, 0xa782, 0x10000000, 0x80, 0x800, 0x1, 0x7, 0x3, 0x3, 0xa, 0x60, 0x5188, 0xc5, 0x7, 0x2, 0x7fff, 0xb, 0x9af2, 0x7, 0x6e3, 0x3, 0x0, 0x5, 0x7, 0x9, 0x1, 0x8, 0x4, 0x6, 0x1ff, 0x9, 0x4e83, 0x2, 0x31d, 0x6, 0x8, 0x9, 0x9, 0x7, 0x6, 0xc7f5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x3ff, 0x5, 0x1, 0x3, 0x6687, 0xc41, 0x4, 0x63d1, 0x96, 0x2, 0x0, 0xa77, 0xd, 0x4, 0x4, 0x9, 0x930, 0x10001, 0x9, 0x8, 0x5, 0x2, 0x3cb6, 0x5, 0x4, 0x1, 0x8, 0x5, 0x7ff, 0x7, 0x4, 0x5, 0xaa3, 0x9, 0x8001, 0xe90, 0x3ff, 0xfffffffa, 0x8, 0x2800000, 0x2, 0x9, 0x9, 0x8, 0x7, 0x2, 0x9cf, 0x719, 0xfffffff4, 0x4, 0x56, 0x8000, 0x2]}]]}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x130, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0xc1, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d29d4426544a0954a83455c69df54a86f88e23bdfc955eff64c7fb93320b3d431c93a09c51b007f50b01eda77a1d9eecd6c666f112264ca0082163908544f2055aff6b63df294e668556bd859c2aeeed83a0033d335fa628e8c8f83687fc15f992"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_simple={0x60, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x21, 0x6, "d6337fc71344d621b3f41a408848462f2be26f838c2124f3ed97095d70"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0xdf4, 0x12, 0x0, 0x0, {{0xb}, {0xdc8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4ee5a755}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x101, 0x81, 0x70a2, {0x0, 0x0, 0x7, 0x5, 0xef, 0x8001}, {0x9, 0x2, 0x8, 0xf6, 0xfffc, 0x8001}, 0xae8, 0x2, 0x9c}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff4, 0x1, 0xcc, 0x6, 0x4e11, 0x7, 0x62d, 0x80000001, 0x3, 0x401, 0x5, 0x6, 0x1, 0x5, 0x7fff, 0x0, 0x97, 0x5, 0x3, 0x301ea6fc, 0x80000000, 0x200, 0x7, 0x10, 0x4, 0x3, 0x8, 0x9, 0x100, 0xc, 0x56, 0x8, 0x8, 0xa, 0x4eee6086, 0x1, 0x5, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x122e, 0x4, 0x1000, 0x2, 0x80000000, 0x9, 0x8001, 0x10001, 0x200, 0x1b, 0x8, 0x7, 0xc000000, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x2, 0x7, 0x101, 0x0, 0x10, 0x260, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6450, 0x1ff, 0xb2, 0x5, 0x0, 0x0, 0x380000, 0x8000, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0x7, 0x6, 0x40, 0x813, 0x1, 0x7ff, 0xb, 0x6, 0x9, 0x6, 0x8b, 0x6, 0x0, 0xa06, 0xc33, 0xfffffff9, 0x3, 0xb, 0x3, 0x6, 0x9, 0x0, 0x4, 0x25a, 0x3000000, 0x101, 0xfffffff8, 0x0, 0xfea, 0x20000000, 0x6, 0xd, 0x6, 0x8dd4, 0x7, 0xd, 0xffffffff, 0x163f856e, 0xd6, 0xbb68, 0x9, 0x101, 0x14000, 0x9, 0x7, 0x200, 0x5, 0x1, 0x3, 0x6, 0xdb, 0x71c, 0x7, 0x1000, 0x6, 0xb8, 0x54fa07ca, 0x5, 0x5, 0x4, 0xb, 0x8, 0x6, 0x9, 0x2, 0xa, 0x9f, 0x1000, 0x5, 0xba, 0x3b5, 0x1ff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x5, 0xb479, 0xfffffffd, 0x8, 0x3, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x101, 0x800, 0x2, 0x7fffffff, 0xbb5c, 0x4e, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x3d6, 0x4, 0x4, 0x2, 0x7, 0x3, 0x60000000, 0x1, 0x40, 0xa6, 0x7, 0x6, 0x6, 0x803, 0x0, 0x8, 0x0, 0x8, 0x90, 0x6, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x9, 0xa4fb, 0x7f, 0x7f0, 0xffffff80, 0x9, 0xa, 0x40000000, 0x19, 0x6, 0x6428, 0x6, 0x7, 0x1, 0x6, 0x9, 0x5, 0xc2a, 0x80000001, 0x2, 0x0, 0x6, 0x6, 0x7, 0x200, 0x2, 0x400, 0x3, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x373, 0x7f, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x0, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x22b0}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2m23.828601435s ago: executing program 0 (id=11474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m23.803575467s ago: executing program 0 (id=11475): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a40)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 2m23.76730427s ago: executing program 0 (id=11477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_clone(0x64087000, 0x0, 0xffffff59, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) poll(&(0x7f0000002a80)=[{0xffffffffffffffff, 0x1212}], 0x1, 0x56) 2m23.476259652s ago: executing program 1 (id=11481): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2m23.476036283s ago: executing program 45 (id=11481): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r0, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2m23.236220841s ago: executing program 0 (id=11492): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x50}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m23.233387871s ago: executing program 46 (id=11492): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}]}, 0x50}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.219152069s ago: executing program 7 (id=14661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r2) 13.045042433s ago: executing program 7 (id=14669): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) 12.95642107s ago: executing program 7 (id=14673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 12.915251983s ago: executing program 7 (id=14676): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121c, &(0x7f0000001840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121080, 0x70) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 12.791037363s ago: executing program 7 (id=14682): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x8205, &(0x7f0000000080)={[{@user_xattr}]}, 0x81, 0x633, &(0x7f0000000600)="$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") open(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 12.332047938s ago: executing program 7 (id=14698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000740)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 1.117057413s ago: executing program 8 (id=15040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 1.099270624s ago: executing program 6 (id=15041): sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 1.084453695s ago: executing program 4 (id=15042): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200000000000000000200000009000200b19acbbed073eaa70900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x2000c840) close_range(r1, 0xffffffffffffffff, 0x0) 1.069952677s ago: executing program 6 (id=15043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.044514668s ago: executing program 4 (id=15045): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000600)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x8000004) 1.038373829s ago: executing program 8 (id=15047): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgrcv(0x0, 0x0, 0x0, 0x2, 0x4800) 984.062483ms ago: executing program 4 (id=15049): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES64], 0xb4}}, 0x8880) 967.517255ms ago: executing program 8 (id=15051): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 936.878647ms ago: executing program 9 (id=15052): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085006d28b5a4bba683bb0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa3) 914.143069ms ago: executing program 8 (id=15053): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc0712", 0x23}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 843.432534ms ago: executing program 9 (id=15055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 841.733814ms ago: executing program 4 (id=15065): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 841.283844ms ago: executing program 8 (id=15066): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288c", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 804.699497ms ago: executing program 9 (id=15058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 756.044661ms ago: executing program 6 (id=15059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x0, 0xfffffffe}, 0x1c) 754.360811ms ago: executing program 9 (id=15060): syz_usb_connect$cdc_ncm(0x1, 0x7e, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x9, 0x20, 0x44, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0x7299, 0x9}, {0x6, 0x24, 0x1a, 0x97, 0x4}, [@acm={0x4, 0x24, 0x2, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x9e, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xc, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x77, 0x12, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x5, 0x3a, 0x2}}}}}}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0x9, 0x3, 0x20, 0x7}, 0x5a, &(0x7f0000000500)={0x5, 0xf, 0x5a, 0x3, [@generic={0x47, 0x10, 0x4, "c650bd4c685070355738da18be28d6029060ab9fd43440b3fccb67f9f871f6143e39b4a49cba8672dca08be2b881555085b0ab2d2a30597a5677b91bf701be9710f1d3de"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x1, 0x2, 0x9e04, 0x9}]}, 0x6, [{0x0, 0x0}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x860}}, {0xe7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]}, {0x5c, &(0x7f0000000700)=@string={0x5c, 0x3, "54a572d34e6db6260114fa40129ab4620f28f8391cef67b597fc7eb79bddcd346f3914717633e625560d3539b02a0466c93bef2a9bfc2b5a7d9bebbf7233cc523c893f6eef93d6d958dab5726e7b0759907995bae034e50f8523"}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x0, 0xf8d3, 0x0, 0x0, 0x41000, 0x80, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000200000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000f00002cbd7000003500000200000050000000000000006000120003c84f9e4f7eae2ea4f7a5cbbc69ce833cdef40e70e8da7d999b83823ef29ab4875ac6b10a3fcd4afc7b7063e2f214f443170643f64ae5ea26667fd7f68d45e65e83776291c347"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 659.507818ms ago: executing program 6 (id=15061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 626.068871ms ago: executing program 6 (id=15062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_io_uring_setup(0x10b, &(0x7f00000004c0)={0x0, 0x8b7e, 0x800, 0x1, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) 580.465275ms ago: executing program 5 (id=15063): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x1000000000000}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x5f4b, &(0x7f0000000100)={0x0, 0x1568, 0x10000, 0x2, 0x285}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r2, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 222.109723ms ago: executing program 5 (id=15064): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x5, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 148.342818ms ago: executing program 5 (id=15067): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 147.926749ms ago: executing program 9 (id=15068): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x19) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 146.003719ms ago: executing program 5 (id=15069): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="aa", 0xfdc1, 0x4008881, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2, 0x3}, 0x1c) shutdown(r2, 0x1) 122.093391ms ago: executing program 9 (id=15070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='percpu_free_percpu\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x4}, {0xd, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x8040) 66.006015ms ago: executing program 5 (id=15071): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1}, 0x3}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f00000004c0)=""/60, 0x3c, 0x40, 0x0, 0x0) 0s ago: executing program 5 (id=15072): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="af4fcbc69fc8236193a5db71d82ff30ad092e969dff4bc0b0fa752cf3ed6e756c7f331f97aed1b89911d0cec7550f213e6a9196fcdcefd4c562141ef3cefe4b0f75f8586d98f8edc0113a54b4d2983bd7ef97f6478d2dd4921d5438d9517c2452ae54dc4d3e07310769420b1565fab3f29d44d7a667689cbbd2a119dba5b9ea31708fbaf5bb1c7d35ebf2c32f2cef0d0d63b45b8441da5d3754ceae1c80779ffae1f6085bdcd9f2554a00a86cd2d03ffba1fbdacd09527f06ab8fac7145c0f6d9cdf7a736ffd50f0a86cfdc1602a5cfdafd18dc54380539784745369c5e0c80047bd4ebe944bf2cdb103866ec73a264c", 0xf0}, {&(0x7f0000000540)="ba1519b7ae0145070a9522721a395841720fd5481bc2cbd8f13aaa9066a24214af82ba1466de0a1b52bceecaaa882b66f916a85af471", 0x36}, {&(0x7f0000000180)="1e9bdb919930b63490b5092febd4ff5a7fdfebce145cf8edd142d88e92908746fe920060d936ca0b89f1a56fa4b26d0657c57a665369d2ce8909af5d00d8d7eb6407c762ebac337367d400cc47fd1d9a15533e4958ec0d45bd6ce376ace04c0b5cb07312b1cae72e32fdcaf7e6aa26737e748d2a83009703ef0a756140a832d841fdec50624cddcbe8a4a7baaf2a2b5a5831156a1ab7b6dfe6ef3c81fd2975cabfd8923d3156e4a3a6c3de6e", 0xac}, {&(0x7f0000000380)="bde2785bc84609e6ec57fb47c3533b5c7f7ab0d236c1b5647c5f6845807852b339d7a58fea22c44e1015ae4aadb8f9496ea23549840a61ca3b5bf369e258378ff9948ee40cb1db13c760978b63e767bd24e6166dcf1f22f5870ed549aa30d3bd3ffac3009cf5e02dc8a7ba06a5a335effab9207e5805b8c93335e0d55eec33e2210e8cdbfe51f62c8e1110621462a11ba092179c6f54df266a06bf7e42c4158404", 0xa1}, {&(0x7f0000000080)="ce99285406e6033d8778d1f6d3961a06f4a20fba00e05f40f25a755c85dfb0d13c2aba6bb5e74360c0e6b41fc449848c86fa8ab5ac8d8723a0c5", 0x3a}], 0x5}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000a00)="327c9c22be8088c1fa09d0c9daa9f276299cc47854d20d13659f96129608de176bd23acac8c26797a5ceb8576985c9fe6f39111975687eb244af68b4f0f8669b9514d8f575738a761b10c84f533b89156601a692f386f42b2b7976d53365cfa0d5e6e6d680362d7f6b2456ff14d80ff2e859964fbeaa5891e41d241cf6ec13391ea73c56644c82d82729600e1857f923aa9bbe0623cdd37b87c8d18dd3c8f5765c33fb008e51e2f36605f59b04a82d955ecd7929d8287066353c4e01ecf2faaeed7243", 0xc3}, {&(0x7f0000000900)="3a822d6f0306bc598a25d9f98ce3df61857b8863db2274a7b8cc10389f81f436e16239cb3b05bb224865dadc4b1088ed0ce5c9ede116bbde6ce136dbc720c81f4ddefa4d131949410763c93a8329413526b61ec377c0f28319ae320ead44c2256a14c3c29f6fea826ce6df", 0x6b}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc42e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced", 0xc1}, {&(0x7f0000000b00)="29f675ffa18cba1f080ba7cd8d254832b44b1ed22625d4802a6f30400852734d069e9048ce651a4d92c0abebcc5bd8923b07f246b696b4951f2e0fdb69b6d1785b29a4ace7d72f095974e3bc9f86e39b061d514f4f9e05729a89f4a7b13b1c254ffbb24eefc41900b92861d05c7e930f965711ef90d2c27936dfbc689520880ec48d3849c6a86e69f19ef7af7f56b1d7ad3a87a250c939c1bf3647bd9daf27ed663594c44cda9f", 0xa7}, {&(0x7f00000000c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d0d4ba1cf8c4fdde03e83abbdf7d3cc5f165346a78d8d45aaed874a4f6328bca29d3a1df87952d1e19dfb2f00bb046dfdae07b9bf4d577a711c1ebb896b22cfbbcfd3c837ab2eddad43812c65cc64e74ee88f6f4640f74b83c1861ef5000dd6ab8f25af7c71e9d1ce7fb85a53262e93f10799cfd732e45d3c19932e0b2a765a451cd4", 0x9d}, {&(0x7f0000000c00)="7b46e46eb2c6ae4d7dd8c492d688b3033c53c84cbe501602594847e03766", 0x1e}], 0x6}}], 0x3, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x14, 0x0, 0x0) kernel console output (not intermixed with test programs): ave been left with an inconsistent configuration, please check. [ 414.757793][T19492] loop8: detected capacity change from 0 to 4096 [ 414.766627][T19492] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.070690][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.149473][T19505] loop9: detected capacity change from 0 to 4096 [ 415.156399][T19509] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 415.181035][T19480] Set syz1 is full, maxelem 65536 reached [ 415.185669][T19505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.489933][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.149621][T19541] Set syz1 is full, maxelem 65536 reached [ 416.239899][T19598] __nla_validate_parse: 9 callbacks suppressed [ 416.239946][T19598] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13250'. [ 416.465011][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13266'. [ 416.551827][T19636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13279'. [ 416.618664][T19631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13266'. [ 416.687883][T19643] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13269'. [ 416.860628][T19657] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 417.035369][T19622] Set syz1 is full, maxelem 65536 reached [ 417.101084][T19676] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13284'. [ 417.150238][T19682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13288'. [ 417.238325][T19698] netlink: 'syz.8.13298': attribute type 12 has an invalid length. [ 417.355760][T19713] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13304'. [ 417.444435][T19718] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 417.455379][T19718] vhci_hcd vhci_hcd.2: invalid port number 96 [ 417.461531][T19718] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 417.476916][T19723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13309'. [ 417.534046][T19729] loop9: detected capacity change from 0 to 256 [ 417.553259][T19729] FAT-fs (loop9): error, fat_free_clusters: deleting FAT entry beyond EOF [ 417.561915][T19729] FAT-fs (loop9): Filesystem has been set read-only [ 417.690575][T19748] ipip0: entered promiscuous mode [ 417.695775][T19754] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13322'. [ 417.896337][T19780] loop8: detected capacity change from 0 to 512 [ 417.903518][T19780] EXT4-fs: dax option not supported [ 417.919629][T19777] netlink: 'syz.6.13333': attribute type 21 has an invalid length. [ 417.928053][T19777] netlink: 'syz.6.13333': attribute type 1 has an invalid length. [ 418.007346][T19797] serio: Serial port ptm0 [ 418.151024][T19822] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.222617][T19822] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.264709][T19838] xt_l2tp: invalid flags combination: 4 [ 418.283563][T19822] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.343278][T19822] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.428651][ T4495] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.443346][ T4495] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.464096][ T4495] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.480971][ T4495] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.698325][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 418.698416][ T29] audit: type=1400 audit(418.677:19446): avc: denied { create } for pid=19888 comm="syz.6.13370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 418.735723][ T29] audit: type=1400 audit(418.707:19447): avc: denied { connect } for pid=19888 comm="syz.6.13370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 418.755214][ T29] audit: type=1400 audit(418.707:19448): avc: denied { getopt } for pid=19888 comm="syz.6.13370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 419.105907][ T29] audit: type=1400 audit(419.087:19449): avc: denied { sqpoll } for pid=19912 comm="syz.5.13378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 419.223382][ T29] audit: type=1326 audit(419.207:19450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19932 comm="syz.7.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5dd2f749 code=0x7ffc0000 [ 419.250180][ T29] audit: type=1326 audit(419.207:19451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19932 comm="syz.7.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d5dd2f749 code=0x7ffc0000 [ 419.273337][ T29] audit: type=1326 audit(419.207:19452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19932 comm="syz.7.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5dd2f749 code=0x7ffc0000 [ 419.296594][ T29] audit: type=1326 audit(419.207:19453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19932 comm="syz.7.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f5d5dd2f749 code=0x7ffc0000 [ 419.319581][ T29] audit: type=1326 audit(419.207:19454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19932 comm="syz.7.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5dd2f749 code=0x7ffc0000 [ 419.342660][ T29] audit: type=1326 audit(419.207:19455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19932 comm="syz.7.13388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5dd2f749 code=0x7ffc0000 [ 419.371820][T19935] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 419.635930][T19962] lo speed is unknown, defaulting to 1000 [ 419.685185][T19975] netlink: 'syz.6.13403': attribute type 3 has an invalid length. [ 420.047145][T20033] netlink: 'syz.9.13416': attribute type 2 has an invalid length. [ 420.357567][T20063] netlink: 'syz.9.13428': attribute type 1 has an invalid length. [ 420.365481][T20063] netlink: 'syz.9.13428': attribute type 4 has an invalid length. [ 420.540434][T20075] netlink: 'syz.7.13441': attribute type 1 has an invalid length. [ 420.548530][T20075] netlink: 'syz.7.13441': attribute type 4 has an invalid length. [ 421.269116][T20157] __nla_validate_parse: 6 callbacks suppressed [ 421.269135][T20157] netlink: 96 bytes leftover after parsing attributes in process `syz.8.13463'. [ 421.300676][T20161] netlink: 'syz.6.13475': attribute type 9 has an invalid length. [ 421.308738][T20161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13475'. [ 421.336085][T20161] macvlan2: entered promiscuous mode [ 421.341629][T20161] hsr0: entered promiscuous mode [ 421.346705][T20161] macvlan2: entered allmulticast mode [ 421.352095][T20161] hsr0: entered allmulticast mode [ 421.357115][T20161] hsr_slave_0: entered allmulticast mode [ 422.066780][T20178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13482'. [ 422.102964][T20178] macvlan2: entered promiscuous mode [ 422.108333][T20178] hsr0: entered promiscuous mode [ 422.113490][T20178] macvlan2: entered allmulticast mode [ 422.118874][T20178] hsr0: entered allmulticast mode [ 422.123991][T20178] hsr_slave_0: entered allmulticast mode [ 422.183619][T20198] loop8: detected capacity change from 0 to 1024 [ 422.211866][T20198] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 422.224632][T20206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20206 comm=syz.5.13478 [ 422.255785][T20198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.309064][T20198] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.13474: missing EA_INODE flag [ 422.354892][T20198] EXT4-fs (loop8): Remounting filesystem read-only [ 422.380483][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.583192][T20252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20252 comm=syz.9.13494 [ 422.795653][T20281] tipc: Enabling of bearer rejected, failed to enable media [ 423.133406][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13519'. [ 423.195249][T20298] loop8: detected capacity change from 0 to 2048 [ 423.213438][T20298] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.229493][T20298] Direct I/O collision with buffered writes! File: /file1 Comm: syz.8.13512 [ 423.263992][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.398510][T20323] tipc: Enabling of bearer rejected, failed to enable media [ 423.407029][T20324] loop9: detected capacity change from 0 to 1024 [ 423.419524][T20324] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 423.452114][T20324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.498164][T20324] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.13514: missing EA_INODE flag [ 423.554224][T20324] EXT4-fs (loop9): Remounting filesystem read-only [ 423.590286][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.742287][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 423.742301][ T29] audit: type=1400 audit(423.727:19712): avc: denied { create } for pid=20350 comm="syz.8.13540" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_selinux_socket permissive=1 [ 423.774681][ T29] audit: type=1400 audit(423.747:19713): avc: denied { setopt } for pid=20348 comm="syz.5.13525" lport=52659 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 423.777138][T20353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13524'. [ 423.930843][ T29] audit: type=1400 audit(423.907:19714): avc: denied { watch } for pid=20360 comm="syz.9.13531" path="/syzcgroup/cpu/syz9/cgroup.procs" dev="cgroup" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 423.955755][ T29] audit: type=1400 audit(423.917:19715): avc: denied { relabelto } for pid=20360 comm="syz.9.13531" name="cgroup.procs" dev="cgroup" ino=886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 423.983186][ T29] audit: type=1400 audit(423.917:19716): avc: denied { associate } for pid=20360 comm="syz.9.13531" name="cgroup.procs" dev="cgroup" ino=886 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 424.013017][T20367] loop8: detected capacity change from 0 to 128 [ 424.020194][T20367] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 424.047805][T20372] loop9: detected capacity change from 0 to 512 [ 424.083667][T20372] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.159683][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.174422][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13545'. [ 424.217046][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13543'. [ 424.286623][T20402] lo speed is unknown, defaulting to 1000 [ 424.292755][ T29] audit: type=1400 audit(424.267:19717): avc: denied { write } for pid=20404 comm="syz.6.13551" lport=54401 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 424.356733][ T29] audit: type=1326 audit(424.297:19718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20401 comm="syz.9.13549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c04adf749 code=0x7ffc0000 [ 424.379889][ T29] audit: type=1326 audit(424.297:19719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20401 comm="syz.9.13549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c04adf749 code=0x7ffc0000 [ 424.403064][ T29] audit: type=1326 audit(424.297:19720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20401 comm="syz.9.13549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8c04adf749 code=0x7ffc0000 [ 424.426223][ T29] audit: type=1326 audit(424.297:19721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20401 comm="syz.9.13549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c04adf749 code=0x7ffc0000 [ 425.071783][T20438] loop8: detected capacity change from 0 to 1024 [ 425.088915][T20438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 425.110210][T20438] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.13556: lblock 0 mapped to illegal pblock 0 (length 1) [ 425.138234][T20438] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 425.150755][T20438] EXT4-fs (loop8): This should not happen!! Data will be lost [ 425.150755][T20438] [ 425.175468][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 425.223746][T20452] lo speed is unknown, defaulting to 1000 [ 425.272083][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13559'. [ 425.578422][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13562'. [ 425.587559][T20490] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13562'. [ 425.724331][T20498] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 425.761545][T20503] lo speed is unknown, defaulting to 1000 [ 425.890825][T20540] loop9: detected capacity change from 0 to 512 [ 425.905772][T20540] EXT4-fs: Ignoring removed i_version option [ 425.914474][T20540] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 425.935991][T20540] EXT4-fs (loop9): 1 truncate cleaned up [ 425.942458][T20544] loop7: detected capacity change from 0 to 512 [ 425.943473][T20540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.953259][T20544] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 425.980730][T20544] EXT4-fs (loop7): invalid journal inode [ 425.987606][T20544] EXT4-fs (loop7): can't get journal size [ 425.994286][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.994614][T20544] EXT4-fs (loop7): 1 truncate cleaned up [ 426.009578][T20544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.052061][T20556] loop8: detected capacity change from 0 to 512 [ 426.079248][T20556] EXT4-fs: Ignoring removed i_version option [ 426.105855][T20556] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 426.119579][T20556] EXT4-fs (loop8): 1 truncate cleaned up [ 426.129941][T13088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.151795][T20566] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 426.174858][T20556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.209788][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.229220][T20574] lo speed is unknown, defaulting to 1000 [ 426.429636][T20621] lo speed is unknown, defaulting to 1000 [ 426.451153][T20622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.483878][T20631] lo speed is unknown, defaulting to 1000 [ 427.321861][T20684] __nla_validate_parse: 4 callbacks suppressed [ 427.321875][T20684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13595'. [ 427.337395][T20684] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13595'. [ 427.358181][T20687] loop9: detected capacity change from 0 to 512 [ 427.373432][T20687] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 427.384036][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13615'. [ 427.408638][T20687] EXT4-fs (loop9): invalid journal inode [ 427.416331][T20687] EXT4-fs (loop9): can't get journal size [ 427.428193][T20694] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 427.441933][T20687] EXT4-fs (loop9): 1 truncate cleaned up [ 427.455158][T20687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.493512][T20700] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 427.519905][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.580223][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13625'. [ 427.589340][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13625'. [ 427.607303][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13625'. [ 427.616322][T20721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13625'. [ 427.691972][T20736] lo speed is unknown, defaulting to 1000 [ 427.976354][T20784] vlan2: entered allmulticast mode [ 427.999608][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13636'. [ 428.125732][T20810] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13643'. [ 428.135014][T20810] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 428.202343][T20829] rdma_op ffff88817229fd80 conn xmit_rdma 0000000000000000 [ 428.228323][T20835] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13653'. [ 428.763000][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 428.763018][ T29] audit: type=1326 audit(428.747:19906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20844 comm="syz.5.13656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 428.823109][ T29] audit: type=1400 audit(428.747:19907): avc: denied { read } for pid=20906 comm="syz.9.13678" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 428.845872][ T29] audit: type=1400 audit(428.747:19908): avc: denied { open } for pid=20906 comm="syz.9.13678" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 428.869066][ T29] audit: type=1400 audit(428.787:19909): avc: denied { read write } for pid=20908 comm="syz.7.13680" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 428.891961][ T29] audit: type=1400 audit(428.787:19910): avc: denied { open } for pid=20908 comm="syz.7.13680" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 428.914890][ T29] audit: type=1400 audit(428.797:19911): avc: denied { ioctl } for pid=20908 comm="syz.7.13680" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 428.941421][ T29] audit: type=1400 audit(428.927:19912): avc: denied { block_suspend } for pid=20891 comm="syz.6.13672" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.977544][T20924] loop9: detected capacity change from 0 to 1024 [ 428.993418][T20924] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 429.016427][T20924] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13683: bg 0: block 112: padding at end of block bitmap is not set [ 429.043226][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 429.062922][ T29] audit: type=1400 audit(429.047:19913): avc: denied { create } for pid=20935 comm="syz.9.13686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 429.083554][T20938] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=20938 comm=syz.7.13685 [ 429.101710][ T29] audit: type=1400 audit(429.087:19914): avc: denied { sys_admin } for pid=20935 comm="syz.9.13686" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 429.153210][T20946] validate_nla: 1 callbacks suppressed [ 429.153221][T20946] netlink: 'syz.5.13689': attribute type 1 has an invalid length. [ 429.171002][ T29] audit: type=1400 audit(429.147:19915): avc: denied { read } for pid=20942 comm="syz.8.13688" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 429.707395][T20994] SELinux: failed to load policy [ 429.788017][T20998] netlink: 'syz.8.13706': attribute type 1 has an invalid length. [ 430.443713][T21081] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 430.471695][T21087] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 430.516609][T21093] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 430.556193][T21096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21096 comm=syz.8.13745 [ 430.569964][T21097] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 430.925713][T21123] geneve2: entered promiscuous mode [ 430.943266][ T4510] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.952088][ T4510] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.966224][ T4510] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.980330][ T4510] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.130744][T21146] sd 0:0:1:0: device reset [ 431.183709][T21149] hub 2-0:1.0: USB hub found [ 431.193858][T21149] hub 2-0:1.0: 8 ports detected [ 431.419315][T21198] bridge: RTM_NEWNEIGH with invalid ether address [ 431.451841][T21203] ip6gre0: entered promiscuous mode [ 431.484945][T21203] team0: Device ip6gre0 is of different type [ 431.524666][T21207] erspan0: entered promiscuous mode [ 431.818563][T21239] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 431.934606][T21249] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 431.947219][T21249] SELinux: failed to load policy [ 431.970075][T21251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.979512][T21251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.113364][T21257] lo speed is unknown, defaulting to 1000 [ 432.511647][T21323] netlink: 'syz.8.13827': attribute type 2 has an invalid length. [ 432.519510][T21323] __nla_validate_parse: 7 callbacks suppressed [ 432.519525][T21323] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13827'. [ 433.607186][T21399] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 433.841696][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 433.841708][ T29] audit: type=1326 audit(433.827:20104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 433.896543][ T29] audit: type=1326 audit(433.857:20105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 433.919709][ T29] audit: type=1326 audit(433.857:20106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 433.942875][ T29] audit: type=1326 audit(433.857:20107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 433.965951][ T29] audit: type=1400 audit(433.857:20108): avc: denied { mount } for pid=21416 comm="syz.5.13861" name="/" dev="configfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 433.988381][ T29] audit: type=1326 audit(433.857:20109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 434.011684][ T29] audit: type=1326 audit(433.857:20110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 434.034819][ T29] audit: type=1326 audit(433.857:20111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 434.057939][ T29] audit: type=1326 audit(433.857:20112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21416 comm="syz.5.13861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 434.080988][ T29] audit: type=1400 audit(433.857:20113): avc: denied { search } for pid=21416 comm="syz.5.13861" name="/" dev="configfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 434.122092][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13863'. [ 434.131166][T21423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13863'. [ 434.223562][T21426] team0: Device ip6gre0 is of different type [ 434.550659][T21451] loop9: detected capacity change from 0 to 512 [ 434.577877][T21451] EXT4-fs: Ignoring removed i_version option [ 434.615068][T21451] EXT4-fs (loop9): orphan cleanup on readonly fs [ 434.634055][T21451] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.13877: EA inode hash validation failed [ 434.669812][T21451] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 434.697418][T21451] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.9.13877: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 434.724216][T21461] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 434.737992][T21464] team0: Device ip6gre0 is of different type [ 434.744501][T21451] EXT4-fs (loop9): Remounting filesystem read-only [ 434.751350][T21451] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.9.13877: ea_inode dec ref err=-117 [ 434.765772][T21461] SELinux: failed to load policy [ 434.778151][T21451] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 434.787359][T21451] EXT4-fs (loop9): 1 orphan inode deleted [ 434.794321][T21451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.859038][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.905707][T21478] team0: Device ip6gre0 is of different type [ 435.206368][T21505] loop8: detected capacity change from 0 to 512 [ 435.216132][T21505] EXT4-fs: Ignoring removed i_version option [ 435.228021][T21511] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 435.237921][T21505] EXT4-fs (loop8): orphan cleanup on readonly fs [ 435.245297][T21511] SELinux: failed to load policy [ 435.250784][T21505] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.13894: EA inode hash validation failed [ 435.263672][T21505] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.13894: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 435.278937][T21505] EXT4-fs (loop8): Remounting filesystem read-only [ 435.285547][T21505] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.8.13894: ea_inode dec ref err=-117 [ 435.298590][T21505] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 435.307764][T21505] EXT4-fs (loop8): 1 orphan inode deleted [ 435.315946][T21505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 435.333499][T21519] ip6gre0: entered promiscuous mode [ 435.341634][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.345415][T21519] team0: Device ip6gre0 is of different type [ 435.450235][T21543] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 435.459512][T21541] netlink: 'syz.6.13910': attribute type 2 has an invalid length. [ 435.467506][T21541] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13910'. [ 435.735778][T21553] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 435.787533][T21561] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13928'. [ 435.796672][T21561] netlink: 108 bytes leftover after parsing attributes in process `syz.9.13928'. [ 435.816136][T21561] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13928'. [ 435.825804][T21561] netlink: 108 bytes leftover after parsing attributes in process `syz.9.13928'. [ 435.835047][T21561] netlink: 84 bytes leftover after parsing attributes in process `syz.9.13928'. [ 435.893454][T21569] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 435.902001][T21569] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 436.168366][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13932'. [ 436.551109][T21602] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 436.564242][T21603] loop7: detected capacity change from 0 to 512 [ 436.571390][T21603] EXT4-fs: Ignoring removed i_version option [ 436.578812][T21603] EXT4-fs (loop7): orphan cleanup on readonly fs [ 436.585582][T21602] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 436.591591][T21603] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.13936: EA inode hash validation failed [ 436.614069][T21603] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.13936: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 436.629600][T21603] EXT4-fs (loop7): Remounting filesystem read-only [ 436.636309][T21603] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.7.13936: ea_inode dec ref err=-117 [ 436.638388][T21610] netlink: 'syz.8.13938': attribute type 1 has an invalid length. [ 436.649489][T21603] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 436.666324][T21603] EXT4-fs (loop7): 1 orphan inode deleted [ 436.672490][T21603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 436.700650][T13088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.829035][T21624] loop9: detected capacity change from 0 to 164 [ 436.978709][T21632] lo speed is unknown, defaulting to 1000 [ 437.047139][T21644] erspan0: entered promiscuous mode [ 437.157925][T21668] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 437.201253][T21648] lo speed is unknown, defaulting to 1000 [ 437.213385][T21668] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 437.308153][T21687] geneve2: entered promiscuous mode [ 437.377146][T21699] loop9: detected capacity change from 0 to 512 [ 437.384411][T21699] EXT4-fs: Ignoring removed i_version option [ 437.397750][T21699] EXT4-fs (loop9): orphan cleanup on readonly fs [ 437.411595][T21699] EXT4-fs warning (device loop9): ext4_xattr_inode_get:560: inode #11: comm syz.9.13954: EA inode hash validation failed [ 437.430754][T21703] hub 2-0:1.0: USB hub found [ 437.435674][T21703] hub 2-0:1.0: 8 ports detected [ 437.470438][T21699] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.9.13954: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 437.525042][T21699] EXT4-fs (loop9): Remounting filesystem read-only [ 437.531809][T21699] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.9.13954: ea_inode dec ref err=-117 [ 437.544880][T21699] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 437.554353][T21699] EXT4-fs (loop9): 1 orphan inode deleted [ 437.568058][T21715] loop8: detected capacity change from 0 to 164 [ 437.570848][T21699] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 437.656092][T21725] erspan0: entered promiscuous mode [ 437.662024][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.692379][T21725] __nla_validate_parse: 1 callbacks suppressed [ 437.692395][T21725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13963'. [ 437.750871][T21733] lo speed is unknown, defaulting to 1000 [ 437.810475][T21742] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 437.882458][T21742] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 437.981099][T21763] geneve2: entered promiscuous mode [ 438.132040][T21774] netlink: 'syz.5.13974': attribute type 39 has an invalid length. [ 438.159159][T21772] hub 2-0:1.0: USB hub found [ 438.168673][T21772] hub 2-0:1.0: 8 ports detected [ 438.223483][T21782] SELinux: failed to load policy [ 438.343254][T21800] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 438.369642][T21805] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13983'. [ 438.381773][T21802] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 438.389086][T21802] vhci_hcd vhci_hcd.2: invalid port number 96 [ 438.395243][T21802] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 438.461076][T21811] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13986'. [ 438.525168][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13988'. [ 438.534176][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13988'. [ 438.565116][T21819] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13988'. [ 438.574355][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13988'. [ 438.625289][T21829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13995'. [ 438.651334][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 438.927991][T21863] lo speed is unknown, defaulting to 1000 [ 439.013058][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 439.013128][ T29] audit: type=1326 audit(438.997:20226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.5.14011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 439.091572][ T29] audit: type=1326 audit(439.047:20227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.5.14011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 439.114675][ T29] audit: type=1326 audit(439.047:20228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.5.14011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 439.137922][ T29] audit: type=1326 audit(439.047:20229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.5.14011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 439.160939][ T29] audit: type=1326 audit(439.047:20230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.5.14011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 439.371366][ T29] audit: type=1400 audit(439.347:20231): avc: denied { read } for pid=21915 comm="syz.5.14022" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 439.394119][ T29] audit: type=1400 audit(439.347:20232): avc: denied { open } for pid=21915 comm="syz.5.14022" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 439.408400][T21917] loop8: detected capacity change from 0 to 1024 [ 439.432915][T21919] loop9: detected capacity change from 0 to 512 [ 439.441280][T21917] EXT4-fs: Ignoring removed bh option [ 439.464696][T21919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 439.473622][ T29] audit: type=1400 audit(439.417:20233): avc: denied { ioctl } for pid=21915 comm="syz.5.14022" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 439.499499][T21919] EXT4-fs (loop9): orphan cleanup on readonly fs [ 439.509277][T21919] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.14023: bg 0: block 248: padding at end of block bitmap is not set [ 439.539103][T21919] Quota error (device loop9): write_blk: dquota write failed [ 439.546550][T21919] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 439.556554][T21919] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.14023: Failed to acquire dquot type 1 [ 439.579402][T21917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.612074][T21919] EXT4-fs (loop9): 1 truncate cleaned up [ 439.618688][T21919] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.704527][T21917] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 439.733413][T21917] EXT4-fs (loop8): Remounting filesystem read-only [ 439.739953][T21917] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 439.784571][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.795449][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.813698][T21936] netlink: 'syz.7.14027': attribute type 21 has an invalid length. [ 439.830912][T21936] netlink: 'syz.7.14027': attribute type 1 has an invalid length. [ 439.838746][T21936] netlink: 144 bytes leftover after parsing attributes in process `syz.7.14027'. [ 440.076506][T21976] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14044'. [ 440.113610][T21982] loop8: detected capacity change from 0 to 164 [ 440.139172][T21982] syz.8.14046: attempt to access beyond end of device [ 440.139172][T21982] loop8: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 440.161052][T21982] syz.8.14046: attempt to access beyond end of device [ 440.161052][T21982] loop8: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 440.339205][T22015] netlink: 'syz.5.14061': attribute type 1 has an invalid length. [ 440.375183][T22015] bond1: (slave geneve2): making interface the new active one [ 440.383469][T22015] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 440.392204][ T4495] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 440.400903][ T4495] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 440.409333][ T4495] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 440.438585][ T4495] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 440.522280][T22076] vhci_hcd vhci_hcd.3: invalid port number 9 [ 440.528375][T22076] vhci_hcd vhci_hcd.3: invalid port number 9 [ 440.531334][T22086] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.588536][T22094] Invalid argument reading file caps for ./file0 [ 440.615703][T22098] loop9: detected capacity change from 0 to 512 [ 440.631353][T22098] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 440.645007][T22098] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 440.658752][T22098] EXT4-fs (loop9): 1 truncate cleaned up [ 440.664928][T22098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.708392][ T3939] Process accounting resumed [ 440.716630][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.771792][T22120] serio: Serial port ptm0 [ 440.857203][T22140] lo speed is unknown, defaulting to 1000 [ 441.251945][T22227] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 441.509945][T22239] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 441.523590][T22239] SELinux: failed to load policy [ 441.564356][T22246] netlink: 'syz.6.14129': attribute type 3 has an invalid length. [ 441.700505][T22268] netlink: 'syz.6.14139': attribute type 10 has an invalid length. [ 441.767989][T22275] loop8: detected capacity change from 0 to 512 [ 441.809940][T22275] ------------[ cut here ]------------ [ 441.815483][T22275] EA inode 11 i_nlink=2 [ 441.815504][T22275] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#0: syz.8.14143/22275 [ 441.827440][T22275] Modules linked in: [ 441.831390][T22275] CPU: 0 UID: 0 PID: 22275 Comm: syz.8.14143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 441.840854][T22284] IPVS: Error connecting to the multicast addr [ 441.841481][T22275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.857826][T22275] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 441.864465][T22275] Code: 51 cf 9c ff 4c 8d 2d da bc 20 05 49 8d 7e 40 e8 d1 61 b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 5c b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 fc eb ba 03 66 66 66 2e 0f 1f 84 [ 441.884276][T22275] RSP: 0018:ffffc90006f875a0 EFLAGS: 00010246 [ 441.890454][T22275] RAX: ffff88812ae72b90 RBX: ffff88812e88b688 RCX: ffffffff81bb4f2b [ 441.898459][T22275] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bf0 [ 441.906600][T22275] RBP: 000000000000000b R08: 000188812e88b63b R09: 0000000000000000 [ 441.914744][T22275] R10: ffffc90006f874d0 R11: 0001c90006f874d0 R12: ffff88812e88b638 [ 441.922831][T22275] R13: ffffffff86dc0bf0 R14: ffff88812e88b5f0 R15: 0000000000000001 [ 441.930908][T22275] FS: 00007f8a302a76c0(0000) GS:ffff8882aedc2000(0000) knlGS:0000000000000000 [ 441.939879][T22275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.946577][T22275] CR2: 00007f5d5eab56c0 CR3: 0000000130f9c000 CR4: 00000000003506f0 [ 441.954565][T22275] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 441.962596][T22275] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 441.970602][T22275] Call Trace: [ 441.973920][T22275] [ 441.976865][T22275] ext4_xattr_set_entry+0x77f/0x1020 [ 441.982264][T22275] ext4_xattr_ibody_set+0x184/0x3c0 [ 441.987526][T22275] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 441.993409][T22275] __ext4_expand_extra_isize+0x246/0x280 [ 441.999140][T22275] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 442.004669][T22275] ext4_evict_inode+0x7c4/0xd40 [ 442.009725][T22275] ? __pfx_ext4_evict_inode+0x10/0x10 [ 442.015165][T22275] evict+0x2af/0x510 [ 442.019150][T22275] ? __dquot_initialize+0x146/0x7c0 [ 442.024673][T22275] iput+0x4bd/0x650 [ 442.028505][T22275] ext4_process_orphan+0x1a9/0x1c0 [ 442.033660][T22275] ext4_orphan_cleanup+0x6a8/0xa00 [ 442.038797][T22275] ext4_fill_super+0x3411/0x37a0 [ 442.043773][T22275] ? set_blocksize+0x1a8/0x310 [ 442.048553][T22275] ? sb_set_blocksize+0xfc/0x170 [ 442.053514][T22275] ? setup_bdev_super+0x30e/0x370 [ 442.058719][T22275] ? __pfx_ext4_fill_super+0x10/0x10 [ 442.064118][T22275] get_tree_bdev_flags+0x291/0x300 [ 442.069248][T22275] ? __pfx_ext4_fill_super+0x10/0x10 [ 442.074737][T22275] get_tree_bdev+0x1f/0x30 [ 442.079365][T22275] ext4_get_tree+0x1c/0x30 [ 442.083829][T22275] vfs_get_tree+0x57/0x1d0 [ 442.088308][T22275] do_new_mount+0x24d/0x6a0 [ 442.092972][T22275] path_mount+0x4ab/0xb80 [ 442.097309][T22275] ? user_path_at+0xbf/0x130 [ 442.102020][T22275] __se_sys_mount+0x28c/0x2e0 [ 442.106725][T22275] __x64_sys_mount+0x67/0x80 [ 442.111349][T22275] x64_sys_call+0x2cca/0x3000 [ 442.116057][T22275] do_syscall_64+0xd8/0x2a0 [ 442.120705][T22275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.126643][T22275] RIP: 0033:0x7f8a31840eea [ 442.131115][T22275] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.150765][T22275] RSP: 002b:00007f8a302a6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 442.159214][T22275] RAX: ffffffffffffffda RBX: 00007f8a302a6ef0 RCX: 00007f8a31840eea [ 442.167323][T22275] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f8a302a6eb0 [ 442.175356][T22275] RBP: 0000200000000180 R08: 00007f8a302a6ef0 R09: 0000000000800700 [ 442.183507][T22275] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 442.191534][T22275] R13: 00007f8a302a6eb0 R14: 000000000000046f R15: 000000000000002c [ 442.199522][T22275] [ 442.202557][T22275] ---[ end trace 0000000000000000 ]--- [ 442.208402][T22275] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.14143: iget: bad extra_isize 90 (inode size 256) [ 442.222194][T22275] EXT4-fs (loop8): Remounting filesystem read-only [ 442.234079][T22275] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 442.250971][T22275] EXT4-fs (loop8): 1 orphan inode deleted [ 442.257348][T22275] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.321586][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.745150][T22361] loop8: detected capacity change from 0 to 512 [ 442.781911][T22361] EXT4-fs: Ignoring removed i_version option [ 442.802771][T22361] EXT4-fs (loop8): orphan cleanup on readonly fs [ 442.821437][T22361] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.14173: EA inode hash validation failed [ 442.912444][T22361] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 442.943800][T22361] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.8.14173: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 442.960683][T22361] EXT4-fs (loop8): Remounting filesystem read-only [ 442.967248][T22361] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.8.14173: ea_inode dec ref err=-117 [ 442.981723][T22361] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 442.991338][T22361] EXT4-fs (loop8): 1 orphan inode deleted [ 443.006766][T22385] sg_write: data in/out 178/8 bytes for SCSI command 0xfe-- guessing data in; [ 443.006766][T22385] program syz.9.14184 not setting count and/or reply_len properly [ 443.008654][T22361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 443.129818][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.235191][T22415] __nla_validate_parse: 15 callbacks suppressed [ 443.235208][T22415] netlink: 88 bytes leftover after parsing attributes in process `syz.5.14197'. [ 443.372849][T22430] loop7: detected capacity change from 0 to 512 [ 443.391514][T22430] EXT4-fs: Ignoring removed i_version option [ 443.401823][T22430] EXT4-fs (loop7): orphan cleanup on readonly fs [ 443.421383][T22430] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.14203: EA inode hash validation failed [ 443.434117][T22430] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.14203: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 443.450040][T22430] EXT4-fs (loop7): Remounting filesystem read-only [ 443.456623][T22430] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.7.14203: ea_inode dec ref err=-117 [ 443.469721][T22430] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 443.478759][T22430] EXT4-fs (loop7): 1 orphan inode deleted [ 443.484961][T22430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 443.518873][T13088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.568668][ T3563] hid_parser_main: 58 callbacks suppressed [ 443.568686][ T3563] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x4 [ 443.582293][ T3563] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x2 [ 443.591120][ T3563] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x3 [ 443.599314][ T3563] hid-generic 0000:3000000:0000.0022: hidraw0: HID v0.00 Device [sy] on syz0 [ 443.676237][T22459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14208'. [ 443.855820][T22477] loop7: detected capacity change from 0 to 512 [ 443.875882][T22477] EXT4-fs: Ignoring removed i_version option [ 443.915841][T22477] EXT4-fs (loop7): orphan cleanup on readonly fs [ 443.945200][T22477] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.14216: EA inode hash validation failed [ 443.972668][T22477] EXT4-fs error (device loop7): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.7.14216: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 443.998480][T22477] EXT4-fs (loop7): Remounting filesystem read-only [ 444.005161][T22477] EXT4-fs warning (device loop7): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.7.14216: ea_inode dec ref err=-117 [ 444.052946][T22477] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -30) [ 444.088602][T22477] EXT4-fs (loop7): 1 orphan inode deleted [ 444.112304][T22477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 444.127282][T22499] netlink: 'syz.6.14219': attribute type 1 has an invalid length. [ 444.209749][T22499] bond0: (slave geneve3): making interface the new active one [ 444.236422][T13088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.245582][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 444.245594][ T29] audit: type=1326 audit(444.217:20383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.275047][ T29] audit: type=1326 audit(444.217:20384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.298172][ T29] audit: type=1326 audit(444.217:20385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.351407][T22499] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 444.360105][ T4498] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 444.380963][ T4498] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 444.389302][ T4498] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 444.431017][ T4498] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 444.470936][ T29] audit: type=1326 audit(444.227:20386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.494131][ T29] audit: type=1326 audit(444.227:20387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.517372][ T29] audit: type=1326 audit(444.227:20388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.540439][ T29] audit: type=1326 audit(444.227:20389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.563558][ T29] audit: type=1326 audit(444.227:20390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.586745][ T29] audit: type=1326 audit(444.227:20391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.609858][ T29] audit: type=1326 audit(444.227:20392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22539 comm="syz.5.14222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 444.836290][T22573] rdma_op ffff88818b783d80 conn xmit_rdma 0000000000000000 [ 445.819565][T22610] netlink: 'syz.7.14245': attribute type 1 has an invalid length. [ 445.860831][T22612] netlink: 'syz.9.14247': attribute type 10 has an invalid length. [ 445.891694][T22612] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 445.921427][T22608] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 445.925726][T22610] bond1: (slave geneve3): making interface the new active one [ 445.964150][T22610] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 445.972807][ T4495] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.000242][ T4495] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.023734][ T4495] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.048757][ T4495] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.291254][T22674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=22674 comm=syz.5.14260 [ 446.419356][T22679] vlan2: entered allmulticast mode [ 446.802756][T22705] netlink: 'syz.8.14268': attribute type 1 has an invalid length. [ 446.826391][T22705] bond1: (slave geneve3): making interface the new active one [ 446.834350][T22705] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 446.844145][ T4458] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.854236][ T4458] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.865767][ T4458] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 446.874772][ T4458] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 447.229796][T22773] netlink: 'syz.8.14279': attribute type 10 has an invalid length. [ 447.460719][T22787] netlink: 'syz.8.14288': attribute type 1 has an invalid length. [ 447.513728][T22787] bond2: entered promiscuous mode [ 447.539313][T22790] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 447.550015][T22787] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.561234][ T4585] IPVS: starting estimator thread 0... [ 447.651030][T22831] IPVS: using max 2592 ests per chain, 129600 per kthread [ 447.713826][T22844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14299'. [ 448.286870][T22880] lo speed is unknown, defaulting to 1000 [ 448.405042][T22893] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14317'. [ 448.497839][T22900] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 448.580387][T22913] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.580444][T22913] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 448.633627][T22913] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.633699][T22913] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 448.683405][T22913] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.683471][T22913] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 448.708983][T22924] netlink: 'syz.7.14320': attribute type 3 has an invalid length. [ 448.723634][T22920] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 448.746859][T22913] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.756672][T22913] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 448.766718][ T3482] IPVS: starting estimator thread 0... [ 448.861064][T22926] IPVS: using max 2448 ests per chain, 122400 per kthread [ 449.032033][T22945] loop8: detected capacity change from 0 to 512 [ 449.038955][T22945] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 449.073562][T22945] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 449.088266][T22945] EXT4-fs (loop8): 1 truncate cleaned up [ 449.096581][T22945] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.184946][T22941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.195173][T22941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.208864][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.233223][ T4504] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.241642][ T4504] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.260319][ T4504] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.268688][ T4504] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.277383][ T4510] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.285755][ T4510] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.314740][ T4510] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 449.323180][ T4510] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 449.353448][T22978] lo speed is unknown, defaulting to 1000 [ 449.565292][T23015] netlink: 19 bytes leftover after parsing attributes in process `syz.5.14342'. [ 449.577712][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 449.577727][ T29] audit: type=1326 audit(449.557:20553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23016 comm="syz.8.14343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3183f749 code=0x7ffc0000 [ 449.630146][ T29] audit: type=1326 audit(449.587:20554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23016 comm="syz.8.14343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f8a3183f749 code=0x7ffc0000 [ 449.653313][ T29] audit: type=1326 audit(449.587:20555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23016 comm="syz.8.14343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3183f749 code=0x7ffc0000 [ 449.686191][T23019] IPVS: stopping backup sync thread 23020 ... [ 449.757722][T23026] netlink: 'syz.5.14346': attribute type 3 has an invalid length. [ 449.766451][T23026] netlink: 'syz.5.14346': attribute type 3 has an invalid length. [ 449.785854][T23023] netlink: 'syz.9.14345': attribute type 12 has an invalid length. [ 450.005308][T23040] lo speed is unknown, defaulting to 1000 [ 450.070825][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14356'. [ 450.091814][T23048] netlink: 'syz.7.14355': attribute type 1 has an invalid length. [ 450.099852][T23048] netlink: 224 bytes leftover after parsing attributes in process `syz.7.14355'. [ 450.111507][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14356'. [ 450.122081][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14356'. [ 450.133919][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14356'. [ 450.240213][T23089] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23089 comm=syz.9.14358 [ 450.337561][T23093] loop7: detected capacity change from 0 to 128 [ 450.361491][T23093] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 450.380528][ T29] audit: type=1400 audit(450.357:20556): avc: denied { mount } for pid=23092 comm="syz.7.14362" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 450.413181][T23099] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 450.417060][ T29] audit: type=1326 audit(450.377:20557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23039 comm="syz.6.14353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc44c44f749 code=0x0 [ 450.445285][ T29] audit: type=1400 audit(450.407:20558): avc: denied { unmount } for pid=13088 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 450.445337][ T12] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 450.499133][T23105] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 451.385329][ T29] audit: type=1326 audit(451.347:20559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23140 comm="syz.5.14376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 451.408451][ T29] audit: type=1326 audit(451.347:20560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23140 comm="syz.5.14376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 451.431673][ T29] audit: type=1326 audit(451.347:20561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23140 comm="syz.5.14376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 451.454875][ T29] audit: type=1326 audit(451.347:20562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23140 comm="syz.5.14376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 451.509192][T23150] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.519045][T23150] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.563368][T23150] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.573264][T23150] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.642899][T23150] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.652725][T23150] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.706912][T23170] loop8: detected capacity change from 0 to 8192 [ 451.724553][T23150] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.734429][T23150] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 451.802627][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.811010][ T12] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 451.829453][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.837774][ T12] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 451.860965][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.869246][ T12] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 451.893298][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 451.901701][ T12] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 452.014408][T23211] loop8: detected capacity change from 0 to 1024 [ 452.071113][T23211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 452.111539][T23211] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 8: comm syz.8.14395: lblock 8 mapped to illegal pblock 8 (length 8) [ 452.143480][T23218] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 452.205533][T23211] EXT4-fs error (device loop8): ext4_ext_remove_space:2955: inode #15: comm syz.8.14395: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 452.248350][T23211] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: comm syz.8.14395: lblock 0 mapped to illegal pblock 0 (length 1) [ 452.325760][T23244] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 452.335058][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 452.344672][T23244] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 452.450808][T23254] loop8: detected capacity change from 0 to 512 [ 452.469497][T23256] sd 0:0:1:0: device reset [ 452.500480][T23254] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 452.594798][T23269] loop7: detected capacity change from 0 to 2048 [ 452.612830][T23254] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 452.633915][T23269] Alternate GPT is invalid, using primary GPT. [ 452.640275][T23269] loop7: p2 p3 p7 [ 452.657138][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.743785][T23293] lo speed is unknown, defaulting to 1000 [ 452.774755][T23302] netlink: 28 bytes leftover after parsing attributes in process `syz.6.14421'. [ 452.784487][T23300] netlink: 256 bytes leftover after parsing attributes in process `syz.8.14417'. [ 452.798579][T23302] netem: change failed [ 452.925980][T23349] lo speed is unknown, defaulting to 1000 [ 452.985036][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14427'. [ 453.310998][ T3615] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 453.344018][T23393] netem: change failed [ 453.630276][T23404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.656911][T23407] bond0: (slave dummy0): Releasing backup interface [ 453.671483][T23404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.011215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.104379][T23438] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 454.176425][T23447] __nla_validate_parse: 7 callbacks suppressed [ 454.176502][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14455'. [ 454.310424][T23460] loop8: detected capacity change from 0 to 512 [ 454.325192][T23460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.341252][T23460] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 454.350386][T23466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14460'. [ 454.379309][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.403217][T23466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14460'. [ 454.781490][T23479] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.791325][T23479] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.792620][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 454.792636][ T29] audit: type=1326 audit(454.777:20648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23471 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 454.801260][T23479] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 454.807491][ T29] audit: type=1326 audit(454.787:20649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23471 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 454.867079][ T29] audit: type=1326 audit(454.817:20650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23471 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 454.890230][ T29] audit: type=1326 audit(454.817:20651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23471 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ae5ff749 code=0x7ffc0000 [ 454.919871][ T29] audit: type=1400 audit(454.897:20652): avc: denied { connect } for pid=23487 comm="syz.5.14467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 454.939971][ T29] audit: type=1400 audit(454.927:20653): avc: denied { read } for pid=23487 comm="syz.5.14467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 454.961159][T23479] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.971314][T23479] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.981240][T23479] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 454.991792][ T29] audit: type=1400 audit(454.977:20654): avc: denied { write } for pid=23487 comm="syz.5.14467" path="socket:[135235]" dev="sockfs" ino=135235 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 455.034713][T23494] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14468'. [ 455.055897][T23479] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.065744][T23479] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.075637][T23479] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.094793][T23500] loop8: detected capacity change from 0 to 1024 [ 455.106243][T23500] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 455.116001][T23500] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 455.129663][T23500] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 455.138750][T23500] EXT4-fs (loop8): orphan cleanup on readonly fs [ 455.139705][T23479] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 455.154963][T23479] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.164725][T23479] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 455.170680][T23500] EXT4-fs error (device loop8): ext4_read_inode_bitmap:167: comm syz.8.14469: Inode bitmap for bg 0 marked uninitialized [ 455.189042][T23500] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.208136][T23500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.210656][ T29] audit: type=1400 audit(455.187:20655): avc: denied { mount } for pid=23497 comm="syz.8.14469" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 455.236739][ T29] audit: type=1400 audit(455.187:20656): avc: denied { read write } for pid=23497 comm="syz.8.14469" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.260493][ T29] audit: type=1400 audit(455.187:20657): avc: denied { open } for pid=23497 comm="syz.8.14469" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 455.284882][T23500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.319959][T23522] netlink: 332 bytes leftover after parsing attributes in process `syz.9.14476'. [ 455.339460][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.347709][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.356142][ T12] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.368230][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.376684][ T12] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.385044][ T12] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.409949][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.418297][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.426619][ T12] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.446351][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.454791][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 455.463102][ T12] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 455.508116][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.656954][T23558] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14489'. [ 455.713019][T23568] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.723169][T23568] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.782987][T23568] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.793013][T23568] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.854242][T23568] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.864155][T23568] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.913495][T23568] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 455.923451][T23568] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 456.018741][T23616] loop9: detected capacity change from 0 to 2048 [ 456.050270][T23623] syz_tun: entered allmulticast mode [ 456.054383][T23616] Alternate GPT is invalid, using primary GPT. [ 456.056487][T23622] syz_tun: left allmulticast mode [ 456.062242][T23616] loop9: p2 p3 p7 [ 456.133977][T23642] loop9: detected capacity change from 0 to 1024 [ 456.152608][T23642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 456.169927][T23642] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.14516: lblock 3 mapped to illegal pblock 3 (length 3) [ 456.184618][T23642] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 456.197027][T23642] EXT4-fs (loop9): This should not happen!! Data will be lost [ 456.197027][T23642] [ 456.209327][T23642] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.14516: Freeing blocks not in datazone - block = 3, count = 3 [ 456.222982][T23642] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.14516: Freeing blocks not in datazone - block = 0, count = 16 [ 456.242244][T23653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14520'. [ 456.252160][ T4504] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:56: bg 0: block 112: padding at end of block bitmap is not set [ 456.267327][ T4504] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 117 [ 456.279905][ T4504] EXT4-fs (loop9): This should not happen!! Data will be lost [ 456.279905][ T4504] [ 456.291988][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 456.313068][T23661] loop9: detected capacity change from 0 to 512 [ 456.320281][T23661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 456.333151][T23661] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.362775][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.893717][T23692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.903089][T23692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.980689][T23710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14536'. [ 456.989730][T23710] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14536'. [ 457.003388][ T4510] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.012181][ T4510] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.020584][ T4510] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.029074][ T4510] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 457.059316][T23714] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 457.098416][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14539'. [ 457.183164][ T4510] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.191588][ T4510] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.203790][ T4473] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.212218][ T4473] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.223906][ T4498] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.232335][ T4498] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.243743][ T4498] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 457.252048][ T4498] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 457.289378][T23737] loop8: detected capacity change from 0 to 512 [ 457.299529][T23739] lo speed is unknown, defaulting to 1000 [ 457.314283][T23737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.357374][T23737] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.14542: corrupted inode contents [ 457.379784][T23737] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #2: comm syz.8.14542: mark_inode_dirty error [ 457.391779][T23737] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #2: comm syz.8.14542: corrupted inode contents [ 457.403910][T23737] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.14542: mark_inode_dirty error [ 457.457304][T23769] team0 (unregistering): Port device team_slave_0 removed [ 457.476035][T23769] team0 (unregistering): Port device team_slave_1 removed [ 457.487698][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.507585][T23773] loop7: detected capacity change from 0 to 512 [ 457.534983][T23773] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 457.558801][T23773] EXT4-fs (loop7): mount failed [ 457.687611][ T23] Process accounting resumed [ 457.798829][T23830] loop8: detected capacity change from 0 to 32768 [ 457.841337][T23830] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 457.846743][T23830] loop8: p1 start 460800 is beyond EOD, truncated [ 457.853239][T23830] loop8: p2 size 83886080 extends beyond EOD, truncated [ 457.864088][T23830] loop8: p5 start 460800 is beyond EOD, truncated [ 457.870557][T23830] loop8: p6 size 83886080 extends beyond EOD, truncated [ 458.640100][T23878] sd 0:0:1:0: device reset [ 458.952584][T23899] macvtap0: refused to change device tx_queue_len [ 459.155209][T23911] serio: Serial port ptm0 [ 459.240438][T23919] netlink: 'syz.6.14581': attribute type 10 has an invalid length. [ 459.248483][T23919] netlink: 'syz.6.14581': attribute type 19 has an invalid length. [ 459.256473][T23919] __nla_validate_parse: 2 callbacks suppressed [ 459.256485][T23919] netlink: 156 bytes leftover after parsing attributes in process `syz.6.14581'. [ 459.292090][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14582'. [ 459.308095][T23911] serio: Serial port ptm0 [ 459.568819][T23934] loop7: detected capacity change from 0 to 512 [ 459.653811][T23934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.680188][T23946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23946 comm=syz.8.14591 [ 459.709577][T23948] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.732967][T23934] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.14588: corrupted xattr block 6: invalid header [ 459.769746][T23934] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 459.778798][T23934] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #12: comm syz.7.14588: corrupted xattr block 6: invalid header [ 459.792649][T23934] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=12 [ 459.802018][ T29] kauditd_printk_skb: 845 callbacks suppressed [ 459.802108][ T29] audit: type=1400 audit(459.787:21502): avc: denied { mounton } for pid=23933 comm="syz.7.14588" path="/566/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 459.857012][T23948] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.871188][T23959] netlink: 300 bytes leftover after parsing attributes in process `syz.8.14596'. [ 459.881632][T13088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.924395][T23963] openvswitch: netlink: Missing key (keys=40, expected=80) [ 459.952060][T23948] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.975846][ T29] audit: type=1400 audit(459.957:21503): avc: denied { ioctl } for pid=23971 comm="syz.7.14600" path="socket:[135809]" dev="sockfs" ino=135809 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 459.976156][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14600'. [ 460.078193][ T29] audit: type=1400 audit(460.057:21504): avc: denied { setopt } for pid=23977 comm="syz.6.14602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 460.151915][T23973] team0 (unregistering): Port device team_slave_0 removed [ 460.184903][T23973] team0 (unregistering): Port device team_slave_1 removed [ 460.214877][T23948] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.327794][ T4510] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.340039][ T4510] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.362357][ T4510] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.386617][ T4510] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.416508][T13137] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 460.427632][T13137] CPU: 0 UID: 0 PID: 13137 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 460.427663][T13137] Tainted: [W]=WARN [ 460.427671][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.427687][T13137] Call Trace: [ 460.427695][T13137] [ 460.427704][T13137] __dump_stack+0x1d/0x30 [ 460.427731][T13137] dump_stack_lvl+0xe8/0x140 [ 460.427764][T13137] dump_stack+0x15/0x1b [ 460.427781][T13137] dump_header+0x81/0x240 [ 460.427805][T13137] oom_kill_process+0x295/0x350 [ 460.427833][T13137] out_of_memory+0x97b/0xb80 [ 460.427919][T13137] try_charge_memcg+0x610/0xa10 [ 460.427955][T13137] charge_memcg+0x51/0xc0 [ 460.427988][T13137] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 460.428075][T13137] __read_swap_cache_async+0x17b/0x2d0 [ 460.428143][T13137] swap_cluster_readahead+0x262/0x3c0 [ 460.428238][T13137] swapin_readahead+0xde/0x820 [ 460.428267][T13137] ? update_load_avg+0x1da/0x820 [ 460.428372][T13137] ? __list_add_valid_or_report+0x38/0xe0 [ 460.428401][T13137] ? __rcu_read_unlock+0x4f/0x70 [ 460.428497][T13137] ? swap_cache_get_folio+0x277/0x280 [ 460.428530][T13137] do_swap_page+0x2b4/0x21e0 [ 460.428562][T13137] ? _raw_spin_unlock+0x26/0x50 [ 460.428586][T13137] ? __schedule+0x85f/0xcd0 [ 460.428619][T13137] ? __pfx_default_wake_function+0x10/0x10 [ 460.428658][T13137] handle_mm_fault+0x9d8/0x2c60 [ 460.428694][T13137] do_user_addr_fault+0x630/0x1080 [ 460.428722][T13137] exc_page_fault+0x62/0xa0 [ 460.428792][T13137] asm_exc_page_fault+0x26/0x30 [ 460.428812][T13137] RIP: 0033:0x7fd1ae631fc5 [ 460.428825][T13137] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 460.428840][T13137] RSP: 002b:00007ffc281b4b48 EFLAGS: 00010246 [ 460.428895][T13137] RAX: 0000000000000000 RBX: 00000000000005c9 RCX: 00007fd1ae631fc3 [ 460.428907][T13137] RDX: 00007ffc281b4b60 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.428917][T13137] RBP: 00007ffc281b4bcc R08: 0000000012e1d773 R09: 0000000000000000 [ 460.428927][T13137] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 460.428938][T13137] R13: 00000000000927c0 R14: 000000000007050b R15: 00007ffc281b4c20 [ 460.428956][T13137] [ 460.428973][T13137] memory: usage 307200kB, limit 307200kB, failcnt 5414 [ 460.452620][T24048] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 460.454756][T13137] memory+swap: usage 287528kB, limit 9007199254740988kB, failcnt 0 [ 460.676684][T13137] kmem: usage 207460kB, limit 9007199254740988kB, failcnt 0 [ 460.684065][T13137] Memory cgroup stats for /syz5: [ 460.685383][T13137] cache 0 [ 460.688186][T24054] netlink: 300 bytes leftover after parsing attributes in process `syz.9.14609'. [ 460.690365][T13137] rss 114688 [ 460.690376][T13137] shmem 0 [ 460.690387][T13137] mapped_file 0 [ 460.712152][T13137] dirty 0 [ 460.715102][T13137] writeback 8192 [ 460.718642][T13137] workingset_refault_anon 4704 [ 460.723435][T13137] workingset_refault_file 0 [ 460.727972][T13137] swap 245760 [ 460.731291][T13137] swapcached 28672 [ 460.735009][T13137] pgpgin 428034 [ 460.738564][T13137] pgpgout 428000 [ 460.742187][T13137] pgfault 435479 [ 460.745737][T13137] pgmajfault 708 [ 460.749283][T13137] inactive_anon 12288 [ 460.753416][T13137] active_anon 122880 [ 460.757334][T13137] inactive_file 4096 [ 460.761260][T13137] active_file 0 [ 460.764808][T13137] unevictable 0 [ 460.768332][T13137] hierarchical_memory_limit 314572800 [ 460.773813][T13137] hierarchical_memsw_limit 9223372036854771712 [ 460.780116][T13137] total_cache 0 [ 460.783670][T13137] total_rss 114688 [ 460.787397][T13137] total_shmem 0 [ 460.790954][T13137] total_mapped_file 0 [ 460.794931][T13137] total_dirty 0 [ 460.798406][T13137] total_writeback 8192 [ 460.802498][T13137] total_workingset_refault_anon 4704 [ 460.807775][T13137] total_workingset_refault_file 0 [ 460.812845][T13137] total_swap 245760 [ 460.816652][T13137] total_swapcached 28672 [ 460.820914][T13137] total_pgpgin 444910 [ 460.824901][T13137] total_pgpgout 444876 [ 460.828961][T13137] total_pgfault 436198 [ 460.833044][T13137] total_pgmajfault 708 [ 460.837111][T13137] total_inactive_anon 12288 [ 460.841698][T13137] total_active_anon 122880 [ 460.846153][T13137] total_inactive_file 4096 [ 460.850685][T13137] total_active_file 0 [ 460.854677][T13137] total_unevictable 0 [ 460.858658][T13137] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.14601,pid=23972,uid=0 [ 460.873558][T13137] Memory cgroup out of memory: Killed process 23972 (syz.5.14601) total-vm:95884kB, anon-rss:1136kB, file-rss:22056kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 460.891698][ T29] audit: type=1400 audit(460.877:21505): avc: denied { sqpoll } for pid=24057 comm="syz.6.14611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 460.938460][ T29] audit: type=1400 audit(460.907:21506): avc: denied { ioctl } for pid=24061 comm="syz.9.14613" path="socket:[135972]" dev="sockfs" ino=135972 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 461.040959][ T29] audit: type=1400 audit(460.977:21507): avc: denied { write } for pid=24068 comm="syz.8.14617" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 461.064055][ T29] audit: type=1400 audit(460.977:21508): avc: denied { open } for pid=24068 comm="syz.8.14617" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 461.087344][ T29] audit: type=1400 audit(460.977:21509): avc: denied { ioctl } for pid=24068 comm="syz.8.14617" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 461.112193][ T29] audit: type=1400 audit(461.007:21510): avc: denied { unmount } for pid=31878 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 461.262806][T24095] netlink: 300 bytes leftover after parsing attributes in process `syz.5.14624'. [ 461.338348][ T29] audit: type=1400 audit(461.317:21511): avc: denied { bind } for pid=24098 comm="syz.9.14626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 461.430583][T24111] xt_HMARK: spi-set and port-set can't be combined [ 461.500574][T24118] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14635'. [ 462.478003][T24129] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.482453][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14641'. [ 462.487934][T24129] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.507868][T24134] netlink: 300 bytes leftover after parsing attributes in process `syz.7.14639'. [ 462.525504][T24127] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14641'. [ 462.565148][T24129] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.575246][T24129] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.601673][ T1038] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 462.609494][ T1038] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 462.632671][ T1038] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x3 [ 462.633393][T24129] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.642356][ T1038] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 462.650264][T24129] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.693302][T24172] loop7: detected capacity change from 0 to 1024 [ 462.700416][T24172] EXT4-fs: Ignoring removed orlov option [ 462.706302][T24172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 462.736970][T24172] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.784101][T24129] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 462.794044][T24129] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 462.828898][T13088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.865589][ T4470] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.873959][ T4470] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.911755][ T4470] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.920181][ T4470] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 462.941969][ T4470] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 462.950603][ T4470] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.003157][ T4470] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 463.011525][ T4470] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 463.101467][T24243] loop8: detected capacity change from 0 to 1024 [ 463.108316][T24243] EXT4-fs: Ignoring removed orlov option [ 463.114060][T24243] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.155300][T24256] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 463.166235][T24243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.190597][T24257] loop7: detected capacity change from 0 to 8192 [ 463.200208][T24257] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 463.241893][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.263815][T24270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.587616][T24307] vlan2: entered allmulticast mode [ 463.745727][T24320] vxcan1: tx address claim with different name [ 463.781294][T24328] veth6: entered promiscuous mode [ 463.786494][T24328] veth6: entered allmulticast mode [ 463.808893][T24328] lo speed is unknown, defaulting to 1000 [ 463.852962][T24319] lo speed is unknown, defaulting to 1000 [ 463.947879][T24319] chnl_net:caif_netlink_parms(): no params data found [ 463.988548][T24319] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.995777][T24319] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.003004][T24319] bridge_slave_0: entered allmulticast mode [ 464.009464][T24319] bridge_slave_0: entered promiscuous mode [ 464.016424][T24319] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.023703][T24319] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.031025][T24319] bridge_slave_1: entered allmulticast mode [ 464.037623][T24319] bridge_slave_1: entered promiscuous mode [ 464.058243][T24319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.069520][T24319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.093485][T24561] netlink: zone id is out of range [ 464.098637][T24561] netlink: zone id is out of range [ 464.105687][T24319] team0: Port device team_slave_0 added [ 464.107597][T24561] netlink: zone id is out of range [ 464.113040][T24319] team0: Port device team_slave_1 added [ 464.116717][T24561] netlink: zone id is out of range [ 464.139774][T24561] netlink: set zone limit has 8 unknown bytes [ 464.155161][T24319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.162270][T24319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.188317][T24319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.200641][T24319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.207634][T24319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.233658][T24319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.276591][T24319] hsr_slave_0: entered promiscuous mode [ 464.282710][T24319] hsr_slave_1: entered promiscuous mode [ 464.288490][T24319] debugfs: 'hsr0' already exists in 'hsr' [ 464.294279][T24319] Cannot create hsr debugfs directory [ 464.576423][T24319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 464.585552][T24319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 464.593809][T24319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 464.602867][T24319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 464.618906][T24319] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.625969][T24319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.633362][T24319] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.640390][T24319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.668628][T24319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.679733][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.688058][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.700068][T24319] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.710166][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.717207][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.727379][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.734444][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.794416][T24319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.887422][T24319] veth0_vlan: entered promiscuous mode [ 464.895355][T24319] veth1_vlan: entered promiscuous mode [ 464.910726][T24319] veth0_macvtap: entered promiscuous mode [ 464.917965][T24319] veth1_macvtap: entered promiscuous mode [ 464.930023][T24319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.941804][T24319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.952893][ T4463] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.962254][ T4463] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.973098][ T4463] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.982089][ T4463] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.998365][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 464.998379][ T29] audit: type=1400 audit(464.977:21738): avc: denied { mounton } for pid=24319 comm="syz-executor" path="/root/syzkaller.bcFsHq/syz-tmp" dev="sda1" ino=2081 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 465.029059][ T29] audit: type=1400 audit(464.977:21739): avc: denied { mounton } for pid=24319 comm="syz-executor" path="/root/syzkaller.bcFsHq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 465.055464][ T29] audit: type=1400 audit(464.977:21740): avc: denied { mounton } for pid=24319 comm="syz-executor" path="/root/syzkaller.bcFsHq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=137556 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 465.082958][ T29] audit: type=1400 audit(465.007:21741): avc: denied { mounton } for pid=24319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 465.105424][ T29] audit: type=1400 audit(465.007:21742): avc: denied { mount } for pid=24319 comm="syz-executor" name="/" dev="gadgetfs" ino=4049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 465.110702][T24728] loop4: detected capacity change from 0 to 512 [ 465.128043][ T29] audit: type=1400 audit(465.067:21743): avc: denied { write } for pid=24319 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 465.158982][ T29] audit: type=1400 audit(465.067:21744): avc: denied { open } for pid=24319 comm="syz-executor" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 465.161530][T24728] EXT4-fs: quotafile must be on filesystem root [ 465.185703][ T29] audit: type=1400 audit(465.067:21745): avc: denied { read write } for pid=24319 comm="syz-executor" name="loop4" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.214732][ T29] audit: type=1400 audit(465.067:21746): avc: denied { open } for pid=24319 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.237574][ T29] audit: type=1400 audit(465.067:21747): avc: denied { ioctl } for pid=24319 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=815 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 465.284423][T24737] __nla_validate_parse: 4 callbacks suppressed [ 465.284437][T24737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14716'. [ 465.299715][T24737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14716'. [ 465.332753][T24741] netlink: 300 bytes leftover after parsing attributes in process `syz.4.14704'. [ 465.340004][T24737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14716'. [ 465.351166][T24737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14716'. [ 465.378018][T24737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14716'. [ 465.387184][T24737] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14716'. [ 465.403472][T24746] lo speed is unknown, defaulting to 1000 [ 465.580942][T24776] syz.5.14721 (24776) used obsolete PPPIOCDETACH ioctl [ 465.718306][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14723'. [ 465.727455][T24804] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14723'. [ 465.802746][T24816] loop9: detected capacity change from 0 to 512 [ 465.838648][T24816] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.854396][T24816] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.14727: corrupted inode contents [ 465.867882][T24816] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #2: comm syz.9.14727: mark_inode_dirty error [ 465.879785][T24816] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #2: comm syz.9.14727: corrupted inode contents [ 465.904325][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.938934][T24841] netlink: 131740 bytes leftover after parsing attributes in process `syz.9.14736'. [ 465.962355][T24841] netlink: zone id is out of range [ 465.967484][T24841] netlink: zone id is out of range [ 465.991031][T24841] netlink: zone id is out of range [ 465.996255][T24841] netlink: del zone limit has 8 unknown bytes [ 466.065478][T24841] loop9: detected capacity change from 0 to 8192 [ 466.141548][T24841] loop9: p4 < > [ 466.773355][T24909] lo speed is unknown, defaulting to 1000 [ 466.865640][T24917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.873406][T24917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.930771][T24917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.938428][T24917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.423541][T24962] lo speed is unknown, defaulting to 1000 [ 467.892233][T25009] netlink: 'syz.4.14778': attribute type 21 has an invalid length. [ 467.900333][T25009] netlink: 'syz.4.14778': attribute type 1 has an invalid length. [ 468.067161][T25030] SELinux: failed to load policy [ 468.082820][T25034] lo speed is unknown, defaulting to 1000 [ 468.167926][T25053] netlink: 'syz.4.14794': attribute type 11 has an invalid length. [ 468.180462][T25053] netlink: 'syz.4.14794': attribute type 11 has an invalid length. [ 468.185213][ T4493] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.203082][ T4493] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.217309][ T4493] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.236314][ T4493] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.292196][T25080] sd 0:0:1:0: device reset [ 468.343989][T25084] pim6reg1: entered promiscuous mode [ 468.349340][T25084] pim6reg1: entered allmulticast mode [ 468.497473][T25110] loop8: detected capacity change from 0 to 512 [ 468.504996][T25110] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.530509][T25115] netlink: 'syz.9.14812': attribute type 1 has an invalid length. [ 468.562888][T25115] gretap1: entered allmulticast mode [ 468.570457][T25115] bond1: (slave gretap1): making interface the new active one [ 468.578650][T25115] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 468.723549][T25110] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.011993][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.233338][T25195] loop9: detected capacity change from 0 to 512 [ 469.257041][T25195] journal_path: Non-blockdev passed as './bus' [ 469.263353][T25195] EXT4-fs: error: could not find journal device path [ 469.365990][T25220] loop4: detected capacity change from 0 to 512 [ 469.380583][T25220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 469.392753][T25220] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.14838: invalid block [ 469.405061][T25220] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.14838: invalid indirect mapped block 4294967295 (level 1) [ 469.419459][T25220] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.14838: invalid indirect mapped block 4294967295 (level 1) [ 469.426280][T25214] loop9: detected capacity change from 0 to 512 [ 469.434249][T25220] EXT4-fs (loop4): 2 truncates cleaned up [ 469.441144][T25214] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 469.446301][T25220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.461976][T25214] EXT4-fs (loop9): 1 truncate cleaned up [ 469.474466][T25214] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.499071][T24319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.520644][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.576096][T25240] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 469.596712][T25238] SELinux: failed to load policy [ 469.704308][T25255] Falling back ldisc for ptm0. [ 469.751589][T25269] loop9: detected capacity change from 0 to 512 [ 469.762753][T25269] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.778038][T25269] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.14852: corrupted xattr block 6: invalid header [ 469.791626][T25269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 469.801086][T25269] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.14852: corrupted xattr block 6: invalid header [ 469.815191][T25269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 469.824474][T25269] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.14852: corrupted xattr block 6: invalid header [ 469.838218][T25269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 469.847301][T25269] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.14852: corrupted xattr block 6: invalid header [ 469.860874][T25269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 469.870268][T25269] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.14852: corrupted xattr block 6: invalid header [ 469.877163][T25277] loop4: detected capacity change from 0 to 128 [ 469.890080][T25269] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 469.912382][T25269] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.14852: corrupted xattr block 6: invalid header [ 469.959217][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.975707][T25286] lo speed is unknown, defaulting to 1000 [ 470.216712][T25324] loop4: detected capacity change from 0 to 512 [ 470.224555][T25324] EXT4-fs: quotafile must be on filesystem root [ 470.234756][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 470.234770][ T29] audit: type=1326 audit(470.217:21910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.264361][ T29] audit: type=1326 audit(470.217:21911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.288769][ T29] audit: type=1326 audit(470.217:21912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.311939][ T29] audit: type=1326 audit(470.217:21913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.335214][ T29] audit: type=1326 audit(470.217:21914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.358496][ T29] audit: type=1326 audit(470.217:21915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.381662][ T29] audit: type=1326 audit(470.217:21916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.404774][ T29] audit: type=1326 audit(470.217:21917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.428163][ T29] audit: type=1326 audit(470.217:21918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.451396][ T29] audit: type=1326 audit(470.217:21919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25323 comm="syz.4.14865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc55173f749 code=0x7ffc0000 [ 470.480098][T25330] loop8: detected capacity change from 0 to 1024 [ 470.503536][T25330] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.571996][T25329] EXT4-fs error (device loop8): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.8.14866: path /1502/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 470.621040][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.634062][T25347] lo speed is unknown, defaulting to 1000 [ 470.702198][T25361] loop8: detected capacity change from 0 to 1024 [ 470.729149][T25361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 470.832937][T25361] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.14873: lblock 3 mapped to illegal pblock 3 (length 3) [ 470.996560][T25361] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 471.008986][T25361] EXT4-fs (loop8): This should not happen!! Data will be lost [ 471.008986][T25361] [ 471.117776][T25423] ip6t_rpfilter: unknown options [ 471.214094][T25431] __nla_validate_parse: 17 callbacks suppressed [ 471.214107][T25431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14900'. [ 471.249962][T25432] lo speed is unknown, defaulting to 1000 [ 471.259498][ T4511] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:63: lblock 8 mapped to illegal pblock 8 (length 8) [ 471.285102][T25440] IPVS: Error connecting to the multicast addr [ 471.286744][ T4511] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 471.303736][ T4511] EXT4-fs (loop8): This should not happen!! Data will be lost [ 471.303736][ T4511] [ 471.354301][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 471.604848][T25487] netlink: 76 bytes leftover after parsing attributes in process `syz.8.14903'. [ 471.616599][T25492] netlink: 'syz.6.14904': attribute type 4 has an invalid length. [ 471.624489][T25492] netlink: 152 bytes leftover after parsing attributes in process `syz.6.14904'. [ 471.716429][T25496] vlan2: entered allmulticast mode [ 471.793370][T25502] loop8: detected capacity change from 0 to 1024 [ 471.795400][T25505] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 471.800298][T25502] EXT4-fs: Ignoring removed bh option [ 471.882297][T25502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.960609][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.977398][T25521] loop9: detected capacity change from 0 to 2048 [ 472.031161][T25521] loop9: p1 p3 [ 472.072200][T25521] loop9: p3 start 8388352 is beyond EOD, truncated [ 472.116629][T25532] lo speed is unknown, defaulting to 1000 [ 472.152332][T25543] loop8: detected capacity change from 0 to 512 [ 472.168988][T25548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 472.181769][T25543] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 472.245643][T25543] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 472.281150][T25543] EXT4-fs (loop8): 1 truncate cleaned up [ 472.287298][T25543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.374639][T25585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.383306][T25585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.451735][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.492571][T25606] loop8: detected capacity change from 0 to 512 [ 472.499209][T25606] ext3: Bad value for 'debug_want_extra_isize' [ 472.667027][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14935'. [ 472.684292][T25626] loop9: detected capacity change from 0 to 512 [ 472.692040][T25626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 472.718020][T25626] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.766202][T25639] loop8: detected capacity change from 0 to 512 [ 472.793656][T25642] xt_hashlimit: max too large, truncated to 1048576 [ 472.815505][T25639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.830454][T25639] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.14939: corrupted xattr block 6: invalid header [ 472.854643][T10567] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.864022][T25639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 472.874888][T25639] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.14939: corrupted xattr block 6: invalid header [ 472.906731][T25639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 472.930188][T25639] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.14939: corrupted xattr block 6: invalid header [ 472.946872][T25639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 472.956458][T25639] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.14939: corrupted xattr block 6: invalid header [ 472.985210][T25639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 472.994980][T25639] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.14939: corrupted xattr block 6: invalid header [ 473.047450][T25639] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 473.059269][T25639] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.14939: corrupted xattr block 6: invalid header [ 473.115930][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.197759][T25682] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14955'. [ 473.225338][T25691] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 473.225338][T25691] program syz.4.14957 not setting count and/or reply_len properly [ 473.299134][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14963'. [ 473.308255][T25702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14963'. [ 473.317412][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14963'. [ 473.335055][T25702] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14963'. [ 473.344212][T25702] netlink: 'syz.4.14963': attribute type 6 has an invalid length. [ 473.425009][T25718] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 473.475326][T25727] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.529061][T25733] netlink: 'syz.8.14977': attribute type 1 has an invalid length. [ 473.537006][T25733] netlink: 'syz.8.14977': attribute type 4 has an invalid length. [ 473.589774][T25735] lo speed is unknown, defaulting to 1000 [ 473.645951][T25754] loop8: detected capacity change from 0 to 2048 [ 473.681384][T25754] loop8: p1 p3 [ 473.698388][T25754] loop8: p3 start 8388352 is beyond EOD, truncated [ 473.763598][T25768] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 473.779036][T25768] EXT4-fs (loop4): mount failed [ 473.885203][T25806] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 473.950216][T25815] xt_hashlimit: max too large, truncated to 1048576 [ 474.021902][T25817] loop4: p1 p3 [ 474.025973][T25817] loop4: p3 start 8388352 is beyond EOD, truncated [ 474.167914][T25842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.176027][T25842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.184161][T25842] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 474.191312][T25842] batman_adv: batadv0: Removing interface: veth1_vlan [ 474.249384][T25852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25852 comm=syz.9.15012 [ 474.282776][T25858] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.362952][T25858] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.412782][T25872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 474.427291][T25858] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.443627][T25872] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.15018: lblock 3 mapped to illegal pblock 3 (length 3) [ 474.458330][T25872] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 474.470673][T25872] EXT4-fs (loop4): This should not happen!! Data will be lost [ 474.470673][T25872] [ 474.483033][T25858] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.487665][T25881] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 474.499263][T25881] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 474.507164][T25881] vhci_hcd vhci_hcd.0: Device attached [ 474.514736][T25882] vhci_hcd: cannot find the pending unlink 1023 [ 474.521561][T25882] vhci_hcd: connection closed [ 474.523613][ T4501] vhci_hcd vhci_hcd.5: stop threads [ 474.533583][ T4501] vhci_hcd vhci_hcd.5: release socket [ 474.538977][ T4501] vhci_hcd vhci_hcd.5: disconnect device [ 474.563581][ T4468] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.578463][ T4468] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.588377][ T4511] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:63: lblock 8 mapped to illegal pblock 8 (length 8) [ 474.614950][ T4468] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.623406][ T4468] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.632194][ T4511] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 474.644566][ T4511] EXT4-fs (loop4): This should not happen!! Data will be lost [ 474.644566][ T4511] [ 474.656780][T24319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 474.672937][T25901] bridge: RTM_NEWNEIGH with invalid ether address [ 474.700969][T25900] ip6gre1: entered allmulticast mode [ 474.769065][T25917] netlink: 'syz.9.15030': attribute type 6 has an invalid length. [ 474.783636][T25915] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 474.805951][T25915] EXT4-fs (loop8): 1 truncate cleaned up [ 474.812686][T25923] vlan2: entered allmulticast mode [ 474.813211][T25915] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.869658][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.930971][T25945] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 475.049358][T25964] vlan2: entered allmulticast mode [ 475.151130][T25976] program syz.8.15053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.234792][T25990] set_capacity_and_notify: 4 callbacks suppressed [ 475.234851][T25990] loop8: detected capacity change from 0 to 512 [ 475.271998][T25990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.299331][T25999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.336195][T25999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.390744][T26005] tipc: New replicast peer: 255.255.255.255 [ 475.396856][T26005] tipc: Enabled bearer , priority 10 [ 475.936598][T26024] bridge_slave_1: left allmulticast mode [ 475.942389][T26024] bridge_slave_1: left promiscuous mode [ 475.948132][T26024] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.961059][T26024] bridge_slave_0: left promiscuous mode [ 475.966913][T26024] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.060794][T26003] ================================================================== [ 476.068899][T26003] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 476.078379][T26003] [ 476.080699][T26003] read to 0xffff888161516000 of 2048 bytes by task 4501 on cpu 1: [ 476.088498][T26003] copy_folio_from_iter_atomic+0x760/0x1150 [ 476.094402][T26003] generic_perform_write+0x2c2/0x490 [ 476.099694][T26003] shmem_file_write_iter+0xc5/0xf0 [ 476.104827][T26003] lo_rw_aio+0x673/0x720 [ 476.109072][T26003] loop_process_work+0x56d/0xaa0 [ 476.114013][T26003] loop_workfn+0x31/0x40 [ 476.118263][T26003] process_scheduled_works+0x4ce/0x9d0 [ 476.123738][T26003] worker_thread+0x582/0x770 [ 476.128348][T26003] kthread+0x489/0x510 [ 476.132444][T26003] ret_from_fork+0x149/0x290 [ 476.137052][T26003] ret_from_fork_asm+0x1a/0x30 [ 476.141829][T26003] [ 476.144159][T26003] write to 0xffff888161516048 of 28 bytes by task 26003 on cpu 0: [ 476.151961][T26003] copy_folio_from_iter_atomic+0x760/0x1150 [ 476.157869][T26003] generic_perform_write+0x2c2/0x490 [ 476.163163][T26003] ext4_buffered_write_iter+0x1ee/0x3c0 [ 476.168706][T26003] ext4_file_write_iter+0x387/0xf60 [ 476.173917][T26003] iter_file_splice_write+0x66b/0xa20 [ 476.179287][T26003] direct_splice_actor+0x156/0x2a0 [ 476.184392][T26003] splice_direct_to_actor+0x312/0x680 [ 476.189762][T26003] do_splice_direct+0xda/0x150 [ 476.194519][T26003] do_sendfile+0x380/0x650 [ 476.198939][T26003] __x64_sys_sendfile64+0x105/0x150 [ 476.204142][T26003] x64_sys_call+0x2db1/0x3000 [ 476.208818][T26003] do_syscall_64+0xd8/0x2a0 [ 476.213329][T26003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.219228][T26003] [ 476.221558][T26003] Reported by Kernel Concurrency Sanitizer on: [ 476.227707][T26003] CPU: 0 UID: 0 PID: 26003 Comm: syz.8.15066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 476.239168][T26003] Tainted: [W]=WARN [ 476.242966][T26003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 476.253018][T26003] ================================================================== [ 476.316144][T31878] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.