last executing test programs: 1m35.577351557s ago: executing program 3 (id=432): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xffffff92, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 1m35.548138078s ago: executing program 3 (id=425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000160000000000000071123300000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_usbip_server_init(0x4) 1m35.349089251s ago: executing program 2 (id=434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x1, 0x4) write(r3, 0x0, 0x0) 1m35.200985093s ago: executing program 2 (id=438): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x8000000) 1m34.913156437s ago: executing program 3 (id=440): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x1fffffffffffffcc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m34.437197205s ago: executing program 3 (id=446): prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10c42, &(0x7f0000000d80)=ANY=[], 0x1, 0x28b, &(0x7f0000001d80)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 1m34.289290487s ago: executing program 2 (id=449): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m33.895456603s ago: executing program 2 (id=454): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m33.801618284s ago: executing program 2 (id=456): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="10", 0xfffff, r0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x667, &(0x7f00000002c0)="$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") sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1017, 0x4004000, &(0x7f0000000140), 0x14) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) 1m33.766561765s ago: executing program 3 (id=458): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010001000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1m33.625080806s ago: executing program 2 (id=462): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) 1m33.598892577s ago: executing program 32 (id=462): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601"], 0x4) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) 1m33.461302349s ago: executing program 3 (id=466): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/95, 0x5f) stat(&(0x7f00000008c0)='\x00', 0x0) 1m33.441870669s ago: executing program 33 (id=466): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000640)=0x100000001, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000004c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/95, 0x5f) stat(&(0x7f00000008c0)='\x00', 0x0) 10.055898298s ago: executing program 4 (id=1609): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="5610536c97256c53f7d900da93d810109164701ee706a2d63cf1439076ec51d984d778a75f9f62df9c56673972a0863a26d9a23582e113057e543a239858561689417df243ba36f3d5656485ece595d2d1e29bcc764fd77e2ce0916098f9ca74753da75dbb0372b2b93fb079132cb56b90c4b4b9c9238fba6ed8b60699749f274187b72f74a236a9ce31ff546a4edeace9458f655dd87117fd6a40db42f1c175549006964b183675d5", @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESOCT=r1, @ANYBLOB="016dd81b1b639a3acca1a420ac8d19f174583d3cdeff0bab62e365024621021929ebcab8cd37768977c68fdf8dbe9247cf86438035a250fd6fb00c3f8ebffc3c78a65df88703422b8d98ac5fd7f5018d90a93b0b2f81ec98e9c47a0bd6458c2740f0e067c2d51a2ac16c7fc08eca68e1af8b19a102b7e3220f1e175bc57ec3300a044469a92a3a04999e9d7e082cf166bf8b844ab01798fe607195752c3b2e078557508fbd0467"], 0x0, 0x7fffffff, 0x2b, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x4}]}]}]}, 0xa4}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0xfffffffffffffffd) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x9, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, [0x0, 0x4]}}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) 7.520965866s ago: executing program 6 (id=1639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6e37cff5b582", 0x6}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x6, 0x4) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) r4 = syz_open_pts(r2, 0x0) r5 = dup3(r4, r2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x122) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000"], 0x80}}, 0x0) 7.450064697s ago: executing program 6 (id=1640): socket(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000c80)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5NH\xfb\xfb\xd0\x90\xb5E\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KVu\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\xf0l/\xca~UG\x89\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[c\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xb3J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00ot\xce\xc0\xac\xc9\x9c\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xe2-\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8rU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xffT8 f\xcf\xc6\xc1\xabi\\\xe1P\v\x00X9\xcd\xb2\xfaF\xb9\xaf\x88X\xbc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01@C1\xea/#\xf8m\xb9\xd1Z+\xdaC\xf5?\xb7\x06\xa3\x80\x1c\xe6N\x12\xd3\xff,\x00\xf9j\xc7\x7f\x95\xe7\x1dB\x0f\xe8\xd6\x1a~L\x04o\xf8(\x96_\xd9\xd7\xd5W\xdd\xe7\x1c\x1bu\xbb\xb0J\xfc\x88\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7~\t\xf3\xaa\n\x19\xa79\x99\xa2\x98$\x98zv\xe9\xbe2\x88D\xe2\xb4\x17\x03\xc2\x1b*X)\x13k\x8bG\x82n\xed\xba+;0\x91\x128\xe9\xbfW\xd4\x1b\x83y\xa8w\xf2\xeaE\x8eV\x16\xe0\xf1\x9f\xd40gq\xe6\x10\xcd\t\xc8&\xfaRO\xa2I\v\xd7\x9d\xa1#\xad\x1aq\x84\x11\xac\xac;\xec\x8c\xd8\xa6n\t\xfb\xc1', 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create(0x7ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) creat(&(0x7f0000000040)='./bus\x00', 0x0) getpid() r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r1], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) 7.449025047s ago: executing program 6 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) splice(r0, 0x0, r1, 0x0, 0xf3a, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000001000010027bd7800fbdbdfa500000000", @ANYRES32, @ANYBLOB="892e0a001162050044001280110001006272696467655f736c617665000000002c00058006001f00010000000500200001000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x8c041}, 0x2) socket$inet6(0xa, 0x4, 0x4) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = epoll_create1(0x80000) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x2) 5.803302912s ago: executing program 0 (id=1654): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 5.417266698s ago: executing program 0 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x34020840) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) readv(r3, &(0x7f0000000240), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = open(0x0, 0x143142, 0x80) ftruncate(r4, 0x2007ffb) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) 5.347856159s ago: executing program 1 (id=1649): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f0000000800)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 5.29719153s ago: executing program 0 (id=1650): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000780), 0x4, r4}, 0x38) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r5}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0xd, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu~0-\t&&') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8040) 4.545885322s ago: executing program 5 (id=1655): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x24, 0xd, 0x14, 0x5, 0xb7, 0x1, 0xf5, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x2, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x6, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1c91e0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 4.456923333s ago: executing program 1 (id=1656): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x80000006}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000200)=ANY=[], 0x3}}], 0x1, 0x0) syz_io_uring_setup(0x1114, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x21e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffe, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x9, 0x2000, @fd_index=0x7, 0xd, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2, 0x10, 0x1, {0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r7, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) 4.385107604s ago: executing program 1 (id=1657): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)) 4.384688104s ago: executing program 6 (id=1658): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'macvtap0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x2}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[], 0x158}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000004c0)={'sit0\x00', r7, 0x8000, 0x40, 0x5, 0x86, {{0x17, 0x4, 0x3, 0x3, 0x5c, 0x65, 0x0, 0xfc, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x10, 0x84, 0x0, 0x0, [0x40, 0x2, 0x6]}, @timestamp_addr={0x44, 0x14, 0xc7, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd}, {@remote}]}, @ssrr={0x89, 0xf, 0x68, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp={0x44, 0x8, 0xe, 0x0, 0xb, [0x6]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x7a, [@dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x10}, {0xf}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x44044}, 0x0) 4.344741515s ago: executing program 0 (id=1659): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x3eee, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000040)={0xf97cff8c, 0x8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) ioctl$FICLONE(r2, 0x40049409, 0xffffffffffffffff) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') syz_usbip_server_init(0x3) 4.154579207s ago: executing program 4 (id=1660): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 4.022069409s ago: executing program 4 (id=1661): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x60000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 3.690375735s ago: executing program 5 (id=1662): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e170000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) lstat(0x0, &(0x7f00000000c0)) bind(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f00000000c0), 0x2c8, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x8000) close(0x3) 3.673384754s ago: executing program 5 (id=1663): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) 3.549061906s ago: executing program 6 (id=1664): close(0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001600)={{0x1, 0x1, 0x18, r1, {r1}}, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$nl_route(r2, 0x0, 0x4004004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) chmod(&(0x7f000001a240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x5) r4 = socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0x400, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40004) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x8}, 0x8) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.527371867s ago: executing program 1 (id=1665): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 2.293495495s ago: executing program 6 (id=1666): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000280), 0x10, 0x4dc, &(0x7f0000000d80)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 2.241153266s ago: executing program 5 (id=1667): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21921eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084275ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) recvmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)=""/4096, 0x1000}], 0x1}, 0xffffffff}], 0x1, 0x12001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write$cgroup_int(r2, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) 1.99868256s ago: executing program 4 (id=1668): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {&(0x7f0000001140)}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000600)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x3, @loopback, 0x1}, {0xa, 0x0, 0x5, @mcast2}, r6}}, 0x48) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) 1.846738592s ago: executing program 0 (id=1678): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.620734825s ago: executing program 4 (id=1669): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) syz_clone(0x2045280, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r0, 0x24, 0x1, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, &(0x7f0000000340)}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x13) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)='\f7', 0x2}], 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0xff08, 0x0) 1.087399793s ago: executing program 5 (id=1670): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$nl_route(0x10, 0x3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206030000000000fffff000000000000900020073797a32000100000500040000000000050005000200000010000300686173683a69702c6d61630005000100070000001400078008001340000000000800124009"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000b80)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.083026073s ago: executing program 4 (id=1671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x9) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x5e, &(0x7f0000000040)=ANY=[], 0x0) 908.572946ms ago: executing program 0 (id=1672): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="611550000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b06795445f79b1f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket(0x40000000015, 0x5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) creat(&(0x7f0000002240)='./file1\x00', 0x114) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 292.462796ms ago: executing program 1 (id=1673): socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioperm(0x0, 0x4, 0xa) rt_sigaction(0xb3, 0x0, 0x0, 0x8, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="84032000", @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf2504000000bc0008802400078008000600460000000800060040000000080006005d00000008000600990000000c00078008000600470000002c000780080006009500000008000500120e1f61080006004c00000008000600b800000008000600210000001c000780080005004256a57b08000600360000000800060074000000340007800800050091a0e72e080006002d000000080005008ddf67050800050006236826080006"], 0x384}}, 0x24000000) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r2, @ANYBLOB="cd3e0000000000000000010000000800020005000000ce0001"], 0x114}}, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1df70b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x18a1, 0x3fd, 0x14, 0x8, 0x4, 0x0, 0x8}, 0x0, 0xfff0000000000001, 0xffffffffffffffff, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) close(0xffffffffffffffff) shmdt(0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2800004, 0x28011, r3, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f00000002c0)=ANY=[], 0x8) sendto$inet6(r4, 0x0, 0x0, 0x4000000, &(0x7f0000000000)={0xa, 0xd9, 0xfffffffc, @empty, 0x100000}, 0x1c) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x2000800, &(0x7f0000000180)=ANY=[], 0x1, 0x378, &(0x7f00000006c0)="$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") r5 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) write$P9_RGETLOCK(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000370200010c080000000000000f00000000000000", @ANYRES32, @ANYBLOB="02023ba55dfe48"], 0x20) 41.24453ms ago: executing program 1 (id=1674): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x157}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x20) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth1_to_bridge\x00'}}, 0x1e) connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="7c9ab5135269", 'pim6reg0\x00'}}, 0x1e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000300)={0xa, r1, 0x8, {0x25dea63c800, 0xffffffff}, 0x9}, 0x1) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = syz_io_uring_complete(r3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f00000001c0)="c29fd16db4fcb75cae5944814c2ff91e", 0x10) sendmsg$can_raw(r7, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2}, 0x4000000) 0s ago: executing program 5 (id=1675): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000002c0)=ANY=[@ANYRES16], 0x0, 0x40, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x307, &(0x7f00000006c0)="$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") socket(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) uname(&(0x7f0000000180)=""/224) syz_clone(0x45128480, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 60.262690][ T5335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.613'. [ 60.271838][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.613'. [ 60.271822][ T5311] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.280815][ T5335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.613'. [ 60.301582][ T5335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.613'. [ 60.462765][ T5357] loop1: detected capacity change from 0 to 2048 [ 60.525257][ T5357] loop1: p1 < > p4 [ 60.530559][ T5357] loop1: p4 size 8388608 extends beyond EOD, truncated [ 60.676887][ T5370] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.700473][ T5372] loop5: detected capacity change from 0 to 128 [ 60.710073][ T5372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 60.718223][ T5372] System zones: 1-3, 19-19, 35-36 [ 60.725537][ T5372] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.788692][ T5370] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.827508][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.835098][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.842545][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.850036][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.857525][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.865128][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.872570][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.879993][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.887512][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.894917][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.902289][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.909751][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.917237][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.924734][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.932124][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.939573][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.947042][ T3379] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 60.955222][ T3379] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 60.971405][ T5370] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.986242][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.638'. [ 61.016590][ T5382] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.031303][ T5370] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.071306][ T5382] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.101032][ T5370] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.112626][ T5370] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.121101][ T5386] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 61.128535][ T5386] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 61.136407][ T5382] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.151433][ T5370] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.163921][ T5370] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.196382][ T5382] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.260137][ T5397] loop4: detected capacity change from 0 to 256 [ 61.261907][ T5382] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.286160][ T5382] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.311657][ T5382] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.339531][ T5401] loop4: detected capacity change from 0 to 1024 [ 61.354059][ T5382] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.363138][ T5401] EXT4-fs: Ignoring removed nobh option [ 61.368790][ T5401] EXT4-fs: Ignoring removed bh option [ 61.398878][ T5401] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.636: Allocating blocks 385-513 which overlap fs metadata [ 61.450867][ T5399] loop1: detected capacity change from 0 to 2048 [ 61.456685][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.464732][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.472190][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.479626][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.487120][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.488411][ T5401] EXT4-fs (loop4): pa ffff888106908700: logic 16, phys. 129, len 24 [ 61.494592][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.502493][ T5401] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, [ 61.509903][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.509965][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.518374][ T5401] free 0, pa_free 8 [ 61.535645][ T5401] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 61.537076][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.549200][ T5401] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.549200][ T5401] [ 61.549217][ T5401] EXT4-fs (loop4): Total free blocks count 0 [ 61.556661][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.566305][ T5401] EXT4-fs (loop4): Free/Dirty block details [ 61.572279][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.572335][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.579698][ T5401] EXT4-fs (loop4): free_blocks=128 [ 61.579716][ T5401] EXT4-fs (loop4): dirty_blocks=0 [ 61.585610][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.585637][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.592981][ T5401] EXT4-fs (loop4): Block reservation details [ 61.600356][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.605451][ T5401] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 61.644705][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.652130][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 61.661589][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 61.753214][ T5420] vlan2: entered allmulticast mode [ 61.965981][ T5442] loop1: detected capacity change from 0 to 2048 [ 62.189802][ T5459] loop5: detected capacity change from 0 to 512 [ 62.196975][ T5459] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 62.214157][ T5459] EXT4-fs (loop5): 1 truncate cleaned up [ 62.269988][ T5466] loop5: detected capacity change from 0 to 764 [ 62.278031][ T5468] netlink: 'syz.6.660': attribute type 7 has an invalid length. [ 62.285774][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz.6.660'. [ 62.420620][ T5474] infiniband syz!: set active [ 62.425414][ T5474] infiniband syz!: added team_slave_0 [ 62.452933][ T5474] RDS/IB: syz!: added [ 62.464792][ T5474] smc: adding ib device syz! with port count 1 [ 62.470973][ T5474] smc: ib device syz! port 1 has pnetid [ 62.507680][ T5489] ip6gre1: entered allmulticast mode [ 62.519242][ T5487] hub 2-0:1.0: USB hub found [ 62.530773][ T5487] hub 2-0:1.0: 8 ports detected [ 62.578753][ T5491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.587497][ T5491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.613191][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 62.613276][ T29] audit: type=1400 audit(1744612773.877:999): avc: denied { write } for pid=5490 comm="syz.1.669" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.628277][ T5490] delete_channel: no stack [ 62.645280][ T29] audit: type=1400 audit(1744612773.877:1000): avc: denied { relabelfrom } for pid=5492 comm="syz.6.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.666544][ T29] audit: type=1400 audit(1744612773.887:1001): avc: denied { relabelto } for pid=5492 comm="syz.6.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 62.686112][ T29] audit: type=1400 audit(1744612773.897:1002): avc: denied { open } for pid=5490 comm="syz.1.669" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.709395][ T29] audit: type=1400 audit(1744612773.897:1003): avc: denied { ioctl } for pid=5490 comm="syz.1.669" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.735538][ T29] audit: type=1400 audit(1744612774.007:1004): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 62.757599][ T29] audit: type=1400 audit(1744612774.007:1005): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.779212][ T29] audit: type=1400 audit(1744612774.007:1006): avc: denied { open } for pid=2985 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.801734][ T29] audit: type=1400 audit(1744612774.007:1007): avc: denied { getattr } for pid=2985 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 62.906583][ T29] audit: type=1400 audit(1744612774.177:1008): avc: denied { create } for pid=5499 comm="syz.6.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 62.936927][ T5500] loop6: detected capacity change from 0 to 1024 [ 62.947242][ T5500] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 62.975555][ T5502] pim6reg1: entered promiscuous mode [ 62.980935][ T5502] pim6reg1: entered allmulticast mode [ 63.113080][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x4 [ 63.120833][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x2 [ 63.129653][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.137391][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.145088][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.152761][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.160454][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.168191][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.175854][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.183596][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.191291][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.199052][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.206820][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.214495][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.214519][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.214541][ T3366] hid-generic 0000:3000000:0000.000E: unknown main item tag 0x0 [ 63.220239][ T5510] SELinux: failed to load policy [ 63.227895][ T3366] hid-generic 0000:3000000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 63.377538][ T5528] loop1: detected capacity change from 0 to 1024 [ 63.386642][ T5528] EXT4-fs: Ignoring removed bh option [ 63.426700][ T5532] loop6: detected capacity change from 0 to 512 [ 63.439748][ T5532] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 63.459043][ T5528] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.684: Abort forced by user [ 63.463967][ T5534] loop4: detected capacity change from 0 to 736 [ 63.475443][ T5532] EXT4-fs (loop6): invalid journal inode [ 63.481163][ T5532] EXT4-fs (loop6): can't get journal size [ 63.492584][ T5528] EXT4-fs (loop1): Remounting filesystem read-only [ 63.499225][ T5528] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.570198][ T5532] EXT4-fs (loop6): 1 truncate cleaned up [ 63.743211][ T5554] loop5: detected capacity change from 0 to 128 [ 63.783699][ T5554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 63.791651][ T5554] System zones: 1-3, 19-19, 35-36 [ 63.804373][ T5561] loop4: detected capacity change from 0 to 164 [ 63.810867][ T5554] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.862826][ T5561] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 63.985521][ T5574] syz_tun: entered allmulticast mode [ 63.992552][ T5573] syz_tun: left allmulticast mode [ 64.079488][ T5579] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 64.161271][ T5581] loop1: detected capacity change from 0 to 512 [ 64.196999][ T5583] tipc: Started in network mode [ 64.201918][ T5583] tipc: Node identity d6c2547256c3, cluster identity 4711 [ 64.209151][ T5583] tipc: Enabled bearer , priority 0 [ 64.225486][ T5581] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.703: Failed to acquire dquot type 1 [ 64.291481][ T5581] EXT4-fs (loop1): 1 truncate cleaned up [ 64.293274][ T5572] syzkaller0: MTU too low for tipc bearer [ 64.303155][ T5572] tipc: Disabling bearer [ 64.305845][ T5581] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.346543][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.705'. [ 64.441928][ T5601] pim6reg1: entered promiscuous mode [ 64.447304][ T5601] pim6reg1: entered allmulticast mode [ 64.863158][ T5625] tipc: Started in network mode [ 64.868148][ T5625] tipc: Node identity 4ad76e20421a, cluster identity 4711 [ 64.875384][ T5625] tipc: Enabled bearer , priority 0 [ 64.902478][ T5627] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.951308][ T5621] tipc: Resetting bearer [ 64.957810][ T5635] netlink: 'syz.0.715': attribute type 10 has an invalid length. [ 64.965612][ T5635] netlink: 40 bytes leftover after parsing attributes in process `syz.0.715'. [ 65.018557][ T5621] tipc: Disabling bearer [ 65.036393][ T5640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5640 comm=syz.6.719 [ 65.059187][ T5635] team0: Port device geneve1 added [ 65.069752][ T5627] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.154267][ T5652] 9pnet_fd: Insufficient options for proto=fd [ 65.165459][ T5648] syzkaller0: entered promiscuous mode [ 65.170963][ T5648] syzkaller0: entered allmulticast mode [ 65.190260][ T5627] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.245742][ T5627] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.311879][ T5627] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.357267][ T5627] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.382512][ T5627] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.401199][ T5627] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.472771][ T5683] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.565464][ T5683] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.655324][ T5683] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.715287][ T5683] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.888950][ T5708] netlink: 44 bytes leftover after parsing attributes in process `syz.6.725'. [ 66.029351][ T5719] loop1: detected capacity change from 0 to 2048 [ 66.046445][ T5719] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.057481][ T5721] loop6: detected capacity change from 0 to 512 [ 66.076182][ T5721] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.729: bg 0: block 248: padding at end of block bitmap is not set [ 66.092563][ T5721] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.729: Failed to acquire dquot type 1 [ 66.105895][ T5721] EXT4-fs (loop6): 1 truncate cleaned up [ 66.112231][ T5721] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.172256][ T5733] loop6: detected capacity change from 0 to 1024 [ 66.180125][ T5733] EXT4-fs: Ignoring removed bh option [ 66.190512][ T5733] EXT4-fs: inline encryption not supported [ 66.196447][ T5733] EXT4-fs: Ignoring removed i_version option [ 66.205585][ T5733] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.221470][ T5733] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 2: comm syz.6.731: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.237143][ T5733] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 48: comm syz.6.731: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.254926][ T5733] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.731: Failed to acquire dquot type 0 [ 66.267233][ T5733] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 66.283219][ T5733] EXT4-fs error (device loop6): ext4_evict_inode:259: inode #11: comm syz.6.731: mark_inode_dirty error [ 66.301840][ T5733] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 66.312882][ T5733] EXT4-fs (loop6): 1 orphan inode deleted [ 66.320138][ T5733] EXT4-fs mount: 28 callbacks suppressed [ 66.320152][ T5733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.338477][ T3329] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.353477][ T3329] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 66.369296][ T5733] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.381355][ T5733] EXT4-fs error (device loop6): __ext4_get_inode_loc:4450: comm syz.6.731: Invalid inode table block 1 in block_group 0 [ 66.394375][ T5733] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 66.404426][ T5733] EXT4-fs error (device loop6): ext4_quota_off:7219: inode #3: comm syz.6.731: mark_inode_dirty error [ 66.813401][ T5761] tipc: Started in network mode [ 66.818333][ T5761] tipc: Node identity ca4272ae52fb, cluster identity 4711 [ 66.825913][ T5761] tipc: Enabled bearer , priority 0 [ 66.834181][ T5761] €Â: renamed from syzkaller0 [ 66.840108][ T5761] tipc: Disabling bearer [ 67.067563][ T5782] netlink: 'syz.1.740': attribute type 13 has an invalid length. [ 67.141703][ T5787] netlink: 'syz.5.742': attribute type 7 has an invalid length. [ 67.149500][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.742'. [ 67.183082][ T5791] netlink: 108 bytes leftover after parsing attributes in process `syz.4.744'. [ 67.192170][ T5791] netlink: 108 bytes leftover after parsing attributes in process `syz.4.744'. [ 67.201165][ T5791] netlink: 108 bytes leftover after parsing attributes in process `syz.4.744'. [ 67.297519][ T5801] loop1: detected capacity change from 0 to 2048 [ 67.310777][ T5803] netlink: 'syz.6.750': attribute type 13 has an invalid length. [ 67.324904][ T5801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.371131][ T5803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.441988][ T5811] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.484294][ T5811] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 9 with error 28 [ 67.496514][ T5811] EXT4-fs (loop1): This should not happen!! Data will be lost [ 67.496514][ T5811] [ 67.506205][ T5811] EXT4-fs (loop1): Total free blocks count 0 [ 67.512241][ T5811] EXT4-fs (loop1): Free/Dirty block details [ 67.518163][ T5811] EXT4-fs (loop1): free_blocks=2415919104 [ 67.523985][ T5811] EXT4-fs (loop1): dirty_blocks=16 [ 67.529334][ T5811] EXT4-fs (loop1): Block reservation details [ 67.535536][ T5811] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 67.576515][ T5833] loop5: detected capacity change from 0 to 764 [ 67.592169][ T5833] Symlink component flag not implemented [ 67.608389][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.623614][ T5833] Symlink component flag not implemented (7) [ 67.709481][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 67.709508][ T29] audit: type=1400 audit(1744612778.977:1196): avc: denied { bind } for pid=5848 comm="syz.1.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.773599][ T5861] loop1: detected capacity change from 0 to 512 [ 67.781702][ T5861] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.798374][ T5861] EXT4-fs (loop1): 1 truncate cleaned up [ 67.804423][ T5861] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.823788][ T29] audit: type=1400 audit(1744612779.087:1197): avc: denied { create } for pid=5860 comm="syz.1.762" name=2E02 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.824724][ T5861] EXT4-fs error (device loop1): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.1.762: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 67.864360][ T5861] EXT4-fs error (device loop1) in ext4_delete_entry:2741: Corrupt filesystem [ 67.873291][ T5861] EXT4-fs warning (device loop1): ext4_rename_delete:3728: inode #2: comm syz.1.762: Deleting old file: nlink 5, error=-117 [ 67.886581][ T29] audit: type=1400 audit(1744612779.097:1198): avc: denied { remove_name } for pid=5860 comm="syz.1.762" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.909288][ T29] audit: type=1400 audit(1744612779.097:1199): avc: denied { rename } for pid=5860 comm="syz.1.762" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.931517][ T29] audit: type=1400 audit(1744612779.097:1200): avc: denied { rmdir } for pid=5860 comm="syz.1.762" name=2E02 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 67.966547][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.986217][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 67.993735][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.001135][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.008596][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.015999][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.023409][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.030944][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.038489][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.045981][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.053418][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.060921][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.070834][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.078341][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.085844][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.093332][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.100855][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.108828][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.116555][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.123972][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.131360][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.138794][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.146261][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.153784][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.161171][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.168650][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.176049][ T5011] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 68.176922][ T5872] syzkaller0: entered promiscuous mode [ 68.184324][ T5011] hid-generic 0000:0000:0000.000F: hidraw0: HID v10.00 Device [syz1] on syz1 [ 68.188924][ T5872] syzkaller0: entered allmulticast mode [ 68.247050][ T5875] loop4: detected capacity change from 0 to 1024 [ 68.253873][ T5875] EXT4-fs: Ignoring removed nobh option [ 68.268236][ T5875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.288896][ T5875] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.767: Allocating blocks 385-513 which overlap fs metadata [ 68.322239][ T5875] EXT4-fs (loop4): pa ffff8881068b3150: logic 16, phys. 129, len 24 [ 68.330311][ T5875] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 68.340768][ T5875] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 68.353049][ T5875] EXT4-fs (loop4): This should not happen!! Data will be lost [ 68.353049][ T5875] [ 68.362756][ T5875] EXT4-fs (loop4): Total free blocks count 0 [ 68.368837][ T5875] EXT4-fs (loop4): Free/Dirty block details [ 68.374794][ T5875] EXT4-fs (loop4): free_blocks=128 [ 68.380000][ T5875] EXT4-fs (loop4): dirty_blocks=0 [ 68.385161][ T5875] EXT4-fs (loop4): Block reservation details [ 68.391144][ T5875] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 68.450586][ T29] audit: type=1400 audit(1744612779.717:1201): avc: denied { block_suspend } for pid=5884 comm="syz.5.771" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 68.472974][ T29] audit: type=1400 audit(1744612779.717:1202): avc: denied { module_load } for pid=5884 comm="syz.5.771" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 68.521145][ T5897] loop1: detected capacity change from 0 to 512 [ 68.546416][ T29] audit: type=1400 audit(1744612779.817:1203): avc: denied { mounton } for pid=5896 comm="syz.1.772" path="/172/file0" dev="tmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.546527][ T5897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.595911][ T5897] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 68.603872][ T5897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 68.612210][ T5897] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 68.621786][ T5897] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 68.632144][ T5897] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 68.636012][ T29] audit: type=1400 audit(1744612779.877:1204): avc: denied { mount } for pid=5908 comm="syz.5.776" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.645443][ T5897] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.707678][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.777'. [ 68.716874][ T29] audit: type=1400 audit(1744612779.957:1205): avc: denied { unmount } for pid=4746 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.031978][ T5944] loop6: detected capacity change from 0 to 164 [ 69.050637][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.785'. [ 69.059501][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.5.785'. [ 69.100593][ T5683] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.137755][ T5683] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.153325][ T5683] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.167309][ T5683] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.220059][ T5961] loop0: detected capacity change from 0 to 1764 [ 69.711595][ T5977] loop4: detected capacity change from 0 to 2048 [ 69.736696][ T5977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.800067][ T5956] syz.6.789 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 69.814268][ T5956] CPU: 0 UID: 0 PID: 5956 Comm: syz.6.789 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 69.814297][ T5956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.814315][ T5956] Call Trace: [ 69.814323][ T5956] [ 69.814330][ T5956] dump_stack_lvl+0xf6/0x150 [ 69.814356][ T5956] dump_stack+0x15/0x1a [ 69.814375][ T5956] dump_header+0x83/0x2d0 [ 69.814409][ T5956] oom_kill_process+0x341/0x4c0 [ 69.814442][ T5956] out_of_memory+0x9d1/0xc20 [ 69.814479][ T5956] mem_cgroup_out_of_memory+0x13f/0x190 [ 69.814531][ T5956] try_charge_memcg+0x59f/0x820 [ 69.814582][ T5956] obj_cgroup_charge_pages+0xc0/0x1a0 [ 69.814609][ T5956] __memcg_kmem_charge_page+0x9d/0x170 [ 69.814642][ T5956] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 69.814741][ T5956] alloc_pages_mpol+0xb6/0x260 [ 69.814794][ T5956] alloc_pages_noprof+0xe8/0x130 [ 69.814817][ T5956] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 69.814896][ T5956] __kvmalloc_node_noprof+0x311/0x520 [ 69.814918][ T5956] ? ip_set_alloc+0x1f/0x30 [ 69.814935][ T5956] ? ip_set_alloc+0x1f/0x30 [ 69.814955][ T5956] ip_set_alloc+0x1f/0x30 [ 69.814972][ T5956] hash_netiface_create+0x273/0x730 [ 69.814992][ T5956] ? __nla_parse+0x40/0x60 [ 69.815085][ T5956] ? __pfx_hash_netiface_create+0x10/0x10 [ 69.815102][ T5956] ip_set_create+0x3b6/0x970 [ 69.815135][ T5956] ? __nla_parse+0x40/0x60 [ 69.815165][ T5956] nfnetlink_rcv_msg+0x4ba/0x580 [ 69.815219][ T5956] netlink_rcv_skb+0x12f/0x230 [ 69.815252][ T5956] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 69.815392][ T5956] nfnetlink_rcv+0x187/0x1610 [ 69.815464][ T5956] ? __kfree_skb+0x102/0x150 [ 69.815491][ T5956] ? nlmon_xmit+0x51/0x60 [ 69.815587][ T5956] ? __kfree_skb+0x102/0x150 [ 69.815613][ T5956] ? consume_skb+0x49/0x160 [ 69.815638][ T5956] ? nlmon_xmit+0x51/0x60 [ 69.815669][ T5956] ? dev_hard_start_xmit+0x3d1/0x400 [ 69.815735][ T5956] ? __dev_queue_xmit+0xb76/0x20b0 [ 69.815764][ T5956] ? should_fail_ex+0x31/0x270 [ 69.815788][ T5956] ? ref_tracker_free+0x3b8/0x420 [ 69.815820][ T5956] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 69.815881][ T5956] netlink_unicast+0x605/0x6c0 [ 69.815906][ T5956] netlink_sendmsg+0x609/0x720 [ 69.815936][ T5956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.815965][ T5956] __sock_sendmsg+0x140/0x180 [ 69.815984][ T5956] ____sys_sendmsg+0x350/0x4e0 [ 69.816056][ T5956] __sys_sendmsg+0x1a0/0x240 [ 69.816095][ T5956] __x64_sys_sendmsg+0x46/0x50 [ 69.816120][ T5956] x64_sys_call+0x26f3/0x2e10 [ 69.816222][ T5956] do_syscall_64+0xc9/0x1c0 [ 69.816248][ T5956] ? clear_bhb_loop+0x25/0x80 [ 69.816272][ T5956] ? clear_bhb_loop+0x25/0x80 [ 69.816323][ T5956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.816349][ T5956] RIP: 0033:0x7f79f443d169 [ 69.816362][ T5956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.816379][ T5956] RSP: 002b:00007f79f2a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.816394][ T5956] RAX: ffffffffffffffda RBX: 00007f79f4655fa0 RCX: 00007f79f443d169 [ 69.816405][ T5956] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 69.816417][ T5956] RBP: 00007f79f44be990 R08: 0000000000000000 R09: 0000000000000000 [ 69.816430][ T5956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.816442][ T5956] R13: 0000000000000000 R14: 00007f79f4655fa0 R15: 00007ffe6b5ca238 [ 69.816461][ T5956] [ 69.816468][ T5956] memory: usage 307200kB, limit 307200kB, failcnt 95 [ 69.972862][ T5977] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 69.976595][ T5956] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 69.976611][ T5956] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 69.976624][ T5956] Memory cgroup stats for /syz6: [ 69.978909][ T5956] cache 0 [ 69.981041][ T5977] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.985622][ T5956] rss 0 [ 69.985631][ T5956] shmem 0 [ 69.999887][ T5977] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 9 with error 28 [ 70.004900][ T5956] mapped_file 0 [ 70.004908][ T5956] dirty 0 [ 70.004915][ T5956] writeback 0 [ 70.004921][ T5956] workingset_refault_anon 171 [ 70.004930][ T5956] workingset_refault_file 0 [ 70.004936][ T5956] swap 196608 [ 70.004942][ T5956] swapcached 4096 [ 70.009696][ T5977] EXT4-fs (loop4): This should not happen!! Data will be lost [ 70.009696][ T5977] [ 70.014722][ T5956] pgpgin 9922 [ 70.020163][ T5977] EXT4-fs (loop4): Total free blocks count 0 [ 70.025019][ T5956] pgpgout 9920 [ 70.029734][ T5977] EXT4-fs (loop4): Free/Dirty block details [ 70.035106][ T5956] pgfault 14747 [ 70.039718][ T5977] EXT4-fs (loop4): free_blocks=2415919104 [ 70.044473][ T5956] pgmajfault 76 [ 70.044484][ T5956] inactive_anon 0 [ 70.049049][ T5977] EXT4-fs (loop4): dirty_blocks=16 [ 70.053847][ T5956] active_anon 4096 [ 70.053856][ T5956] inactive_file 0 [ 70.053863][ T5956] active_file 4096 [ 70.058515][ T5977] EXT4-fs (loop4): Block reservation details [ 70.062994][ T5956] unevictable 0 [ 70.063005][ T5956] hierarchical_memory_limit 314572800 [ 70.067690][ T5977] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 70.265033][ T5990] tipc: Started in network mode [ 70.267087][ T5956] hierarchical_memsw_limit 9223372036854771712 [ 70.267099][ T5956] total_cache 0 [ 70.267122][ T5956] total_rss 0 [ 70.267128][ T5956] total_shmem 0 [ 70.267134][ T5956] total_mapped_file 0 [ 70.267140][ T5956] total_dirty 0 [ 70.267146][ T5956] total_writeback 0 [ 70.267152][ T5956] total_workingset_refault_anon 171 [ 70.267160][ T5956] total_workingset_refault_file 0 [ 70.273048][ T5990] tipc: Node identity 8e5dac53e48, cluster identity 4711 [ 70.276506][ T5956] total_swap 196608 [ 70.276517][ T5956] total_swapcached 4096 [ 70.282271][ T5990] tipc: Enabled bearer , priority 0 [ 70.285682][ T5956] total_pgpgin 9922 [ 70.285692][ T5956] total_pgpgout 9920 [ 70.285700][ T5956] total_pgfault 14747 [ 70.285707][ T5956] total_pgmajfault 76 [ 70.285713][ T5956] total_inactive_anon 0 [ 70.285721][ T5956] total_active_anon 4096 [ 70.298537][ T5990] syzkaller0: MTU too low for tipc bearer [ 70.301777][ T5956] total_inactive_file 0 [ 70.301788][ T5956] total_active_file 4096 [ 70.301797][ T5956] total_unevictable 0 [ 70.305564][ T5990] tipc: Disabling bearer [ 70.311505][ T5956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.789,pid=5955,uid=0 [ 70.453343][ T5956] Memory cgroup out of memory: Killed process 5955 (syz.6.789) total-vm:95772kB, anon-rss:920kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 70.471791][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.838923][ T5956] syz.6.789 (5956) used greatest stack depth: 6968 bytes left [ 70.869251][ T6012] bridge0: port 2(gretap0) entered blocking state [ 70.875776][ T6012] bridge0: port 2(gretap0) entered disabled state [ 70.883624][ T6012] gretap0: entered allmulticast mode [ 70.889716][ T6012] gretap0: entered promiscuous mode [ 70.895186][ T6012] bridge0: port 2(gretap0) entered blocking state [ 70.901764][ T6012] bridge0: port 2(gretap0) entered forwarding state [ 71.127441][ T6025] tipc: Started in network mode [ 71.132361][ T6025] tipc: Node identity 7a2af135be3c, cluster identity 4711 [ 71.139649][ T6025] tipc: Enabled bearer , priority 0 [ 71.150197][ T6025] €Â: renamed from syzkaller0 [ 71.157028][ T6025] tipc: Disabling bearer [ 71.689210][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 71.743322][ T6053] loop1: detected capacity change from 0 to 1024 [ 71.751208][ T6053] EXT4-fs: Ignoring removed oldalloc option [ 71.762509][ T6053] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 71.777104][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.838292][ T6062] loop4: detected capacity change from 0 to 512 [ 71.845590][ T6062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.856830][ T6062] EXT4-fs (loop4): 1 truncate cleaned up [ 71.862900][ T6062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.935141][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.969630][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 71.977183][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 71.984615][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 71.992079][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 71.999503][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.006981][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.014402][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.021811][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.029315][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.036768][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.044278][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.052032][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.059472][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.067110][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.074579][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.081964][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.089463][ T3379] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 72.097574][ T3379] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 72.109647][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.199598][ T6086] loop1: detected capacity change from 0 to 1024 [ 72.207820][ T6086] EXT4-fs: Ignoring removed orlov option [ 72.213543][ T6086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.226199][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.303089][ T6096] loop5: detected capacity change from 0 to 512 [ 72.310449][ T6096] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.348540][ T6096] EXT4-fs (loop5): 1 truncate cleaned up [ 72.356781][ T6096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.501357][ T4746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.614526][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.808745][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 72.808761][ T29] audit: type=1400 audit(1744612784.077:1344): avc: denied { ioctl } for pid=6137 comm="syz.4.851" path="socket:[13127]" dev="sockfs" ino=13127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.809517][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.851'. [ 72.815763][ T29] audit: type=1400 audit(1744612784.077:1345): avc: denied { connect } for pid=6137 comm="syz.4.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.871564][ T29] audit: type=1400 audit(1744612784.147:1346): avc: denied { create } for pid=6133 comm="syz.6.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.891392][ T29] audit: type=1400 audit(1744612784.147:1347): avc: denied { ioctl } for pid=6133 comm="syz.6.850" path="socket:[13130]" dev="sockfs" ino=13130 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.916318][ T29] audit: type=1400 audit(1744612784.147:1348): avc: denied { write } for pid=6133 comm="syz.6.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.071026][ T6146] syzkaller0: entered promiscuous mode [ 73.076606][ T6146] syzkaller0: entered allmulticast mode [ 73.100604][ T6148] pim6reg1: entered promiscuous mode [ 73.105970][ T6148] pim6reg1: entered allmulticast mode [ 73.157350][ T29] audit: type=1400 audit(1744612784.427:1349): avc: denied { create } for pid=6149 comm="syz.6.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 73.262931][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 73.410524][ T29] audit: type=1400 audit(1744612784.677:1350): avc: denied { create } for pid=6158 comm="syz.4.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.429975][ T29] audit: type=1400 audit(1744612784.677:1351): avc: denied { setopt } for pid=6158 comm="syz.4.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 73.467915][ T6163] loop5: detected capacity change from 0 to 2048 [ 73.499367][ T6162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.502935][ T6166] loop4: detected capacity change from 0 to 1024 [ 73.553715][ T29] audit: type=1400 audit(1744612784.727:1352): avc: denied { ioctl } for pid=6158 comm="syz.4.859" path="socket:[13170]" dev="sockfs" ino=13170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.579635][ T6166] EXT4-fs: Ignoring removed nobh option [ 73.579663][ T6166] EXT4-fs: Ignoring removed bh option [ 73.597798][ T6163] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.639862][ T6166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.665096][ T6178] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.686109][ T29] audit: type=1400 audit(1744612784.907:1353): avc: denied { create } for pid=6173 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.695413][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 73.708552][ T6174] Falling back ldisc for ttyS3. [ 73.725813][ T6166] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.860: Allocating blocks 385-513 which overlap fs metadata [ 73.739820][ T6178] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 9 with error 28 [ 73.740654][ T6166] EXT4-fs (loop4): pa ffff8881069087e0: logic 16, phys. 129, len 24 [ 73.752032][ T6178] EXT4-fs (loop5): This should not happen!! Data will be lost [ 73.752032][ T6178] [ 73.760028][ T6166] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, [ 73.769675][ T6178] EXT4-fs (loop5): Total free blocks count 0 [ 73.769714][ T6178] EXT4-fs (loop5): Free/Dirty block details [ 73.778131][ T6166] free 0, pa_free 8 [ 73.784114][ T6178] EXT4-fs (loop5): free_blocks=2415919104 [ 73.784133][ T6178] EXT4-fs (loop5): dirty_blocks=16 [ 73.804831][ T6178] EXT4-fs (loop5): Block reservation details [ 73.810898][ T6178] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 73.838963][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.917196][ T6187] serio: Serial port ptm0 [ 73.943232][ T4746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.042657][ T6185] 9pnet_fd: Insufficient options for proto=fd [ 74.056198][ T6197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.870'. [ 74.065090][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 74.074125][ T6197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.870'. [ 74.084905][ T6197] netlink: 36 bytes leftover after parsing attributes in process `syz.0.870'. [ 74.234481][ T6211] pim6reg1: entered promiscuous mode [ 74.239864][ T6211] pim6reg1: entered allmulticast mode [ 74.257591][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.879'. [ 74.961647][ T6243] netlink: 'syz.1.889': attribute type 10 has an invalid length. [ 74.969451][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.889'. [ 74.984116][ T6243] dummy0: entered promiscuous mode [ 74.995572][ T6243] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 75.144616][ T6246] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.455849][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.895'. [ 75.547358][ T6268] loop6: detected capacity change from 0 to 128 [ 75.557879][ T6268] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.587965][ T6268] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.576105][ T6311] loop1: detected capacity change from 0 to 512 [ 76.641593][ T6311] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.656879][ T6311] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.756745][ T6314] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.911: corrupted inode contents [ 76.771826][ T6314] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #19: comm syz.1.911: mark_inode_dirty error [ 76.784508][ T6314] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #19: comm syz.1.911: corrupted inode contents [ 76.897925][ T6314] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.911: mark_inode_dirty error [ 76.911317][ T6314] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.911: mark inode dirty (error -117) [ 76.953290][ T6314] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 76.956208][ T6320] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 77.035346][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.078105][ T6324] loop1: detected capacity change from 0 to 764 [ 77.093654][ T6324] iso9660: Unknown parameter '/selinux/commit_pending_bools' [ 77.145128][ T6331] random: crng reseeded on system resumption [ 77.257283][ T6333] syzkaller0: entered promiscuous mode [ 77.262872][ T6333] syzkaller0: entered allmulticast mode [ 77.422571][ T6342] netlink: 'syz.0.923': attribute type 4 has an invalid length. [ 77.551485][ T6353] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 77.579537][ T6354] loop0: detected capacity change from 0 to 512 [ 77.607939][ T6354] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.621061][ T6354] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.642520][ T6358] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.695446][ T6358] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.746135][ T6358] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.805240][ T6358] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.870994][ T6358] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.882074][ T6358] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.893775][ T6358] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.905718][ T6358] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.936818][ T6361] loop4: detected capacity change from 0 to 2048 [ 77.943529][ T6361] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 77.992922][ T6363] loop4: detected capacity change from 0 to 512 [ 78.000087][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 78.000102][ T29] audit: type=1400 audit(1744612789.257:1492): avc: denied { read } for pid=6364 comm="syz.6.932" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.029488][ T29] audit: type=1400 audit(1744612789.257:1493): avc: denied { open } for pid=6364 comm="syz.6.932" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.053650][ T29] audit: type=1326 audit(1744612789.257:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 78.077101][ T29] audit: type=1326 audit(1744612789.257:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 78.100675][ T29] audit: type=1326 audit(1744612789.257:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79f443bdca code=0x7ffc0000 [ 78.124070][ T29] audit: type=1326 audit(1744612789.257:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6364 comm="syz.6.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f79f446fa25 code=0x7ffc0000 [ 78.147746][ T29] audit: type=1326 audit(1744612789.337:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb40ed169 code=0x7ffc0000 [ 78.171107][ T29] audit: type=1326 audit(1744612789.337:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb40ed169 code=0x7ffc0000 [ 78.194531][ T29] audit: type=1326 audit(1744612789.337:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb40ed169 code=0x7ffc0000 [ 78.198723][ T6365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.217971][ T29] audit: type=1326 audit(1744612789.337:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6368 comm="syz.1.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb40ed169 code=0x7ffc0000 [ 78.250135][ T6365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.272974][ T6371] pim6reg1: entered promiscuous mode [ 78.278383][ T6371] pim6reg1: entered allmulticast mode [ 78.365311][ T6375] 9pnet: p9_errstr2errno: server reported unknown error [ 78.382229][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.454262][ T6381] netlink: 'syz.0.939': attribute type 12 has an invalid length. [ 78.469323][ T6383] vlan2: entered allmulticast mode [ 78.474602][ T6383] : entered allmulticast mode [ 78.479369][ T6383] bond_slave_0: entered allmulticast mode [ 78.485152][ T6383] bond_slave_1: entered allmulticast mode [ 78.549256][ T6392] loop0: detected capacity change from 0 to 512 [ 78.556383][ T6392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.563089][ T6392] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.583337][ T6392] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 78.597141][ T6392] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 78.611675][ T6392] EXT4-fs (loop0): 1 truncate cleaned up [ 78.625529][ T6392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.667297][ T6392] __nla_validate_parse: 2 callbacks suppressed [ 78.667313][ T6392] netlink: 68 bytes leftover after parsing attributes in process `syz.0.945'. [ 78.757068][ T6402] loop4: detected capacity change from 0 to 256 [ 78.776493][ T6402] syz.4.948: attempt to access beyond end of device [ 78.776493][ T6402] loop4: rw=0, sector=256, nr_sectors = 20 limit=256 [ 78.800367][ T6392] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 78.848150][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.025685][ T6427] loop1: detected capacity change from 0 to 512 [ 80.042223][ T6426] loop4: detected capacity change from 0 to 128 [ 80.077698][ T6427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.093912][ T6427] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.197486][ T6439] loop0: detected capacity change from 0 to 128 [ 80.236968][ T6439] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 80.247185][ T6439] FAT-fs (loop0): Filesystem has been set read-only [ 80.285603][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.398516][ T6448] tipc: Enabled bearer , priority 0 [ 80.411218][ T6441] tipc: Resetting bearer [ 80.427800][ T6441] tipc: Disabling bearer [ 80.436592][ T6446] tipc: Enabled bearer , priority 0 [ 80.444946][ T6446] syzkaller0: MTU too low for tipc bearer [ 80.450709][ T6446] tipc: Disabling bearer [ 80.471951][ T6414] bridge0: port 2(gretap0) entered disabled state [ 80.478454][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.527538][ T6414] bridge0: entered allmulticast mode [ 80.570348][ T6458] netlink: 'syz.1.967': attribute type 29 has an invalid length. [ 81.076928][ T6483] infiniband syz0: set active [ 81.081745][ T6483] infiniband syz0: added bond0 [ 81.099379][ T6483] RDS/IB: syz0: added [ 81.103396][ T6483] smc: adding ib device syz0 with port count 1 [ 81.119489][ T6483] smc: ib device syz0 port 1 has pnetid [ 81.214154][ T6504] netlink: 36 bytes leftover after parsing attributes in process `syz.1.982'. [ 81.292431][ T6518] loop5: detected capacity change from 0 to 512 [ 81.343772][ T6518] EXT4-fs: Ignoring removed orlov option [ 81.379647][ T6518] EXT4-fs error (device loop5): ext4_orphan_get:1390: inode #15: comm syz.5.988: casefold flag without casefold feature [ 81.460506][ T6518] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.988: couldn't read orphan inode 15 (err -117) [ 81.496120][ T6518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.531066][ T6518] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.564394][ T4746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.261449][ T6559] ALSA: seq fatal error: cannot create timer (-19) [ 82.470536][ T6568] loop5: detected capacity change from 0 to 512 [ 82.507685][ T6568] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.546498][ T6570] ªªªªªª: renamed from vlan0 [ 82.565619][ T3378] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 82.585140][ T6568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.599451][ T3378] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.616242][ T6568] ext4 filesystem being mounted at /95/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.650405][ T4746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.816278][ T6601] loop5: detected capacity change from 0 to 256 [ 83.005946][ T6614] loop5: detected capacity change from 0 to 512 [ 83.017663][ T6614] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.1023: corrupted in-inode xattr: invalid ea_ino [ 83.036427][ T6614] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1023: couldn't read orphan inode 15 (err -117) [ 83.113762][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 83.113779][ T29] audit: type=1400 audit(1744612794.357:1870): avc: denied { create } for pid=6604 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.139557][ T29] audit: type=1400 audit(1744612794.357:1871): avc: denied { getopt } for pid=6604 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.159039][ T29] audit: type=1400 audit(1744612794.357:1872): avc: denied { write } for pid=6618 comm="syz.4.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.208838][ T6624] loop4: detected capacity change from 0 to 512 [ 83.222339][ T6624] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.231467][ T6624] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 83.249522][ T6614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.335374][ T4746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.349312][ T6624] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 83.374592][ T29] audit: type=1400 audit(1744612794.557:1873): avc: denied { create } for pid=6613 comm="syz.5.1023" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.416095][ T29] audit: type=1400 audit(1744612794.557:1874): avc: denied { write open } for pid=6613 comm="syz.5.1023" path="/98/file0/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 83.416330][ T6624] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 83.460898][ T29] audit: type=1400 audit(1744612794.557:1875): avc: denied { create } for pid=6613 comm="syz.5.1023" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 83.526899][ T6624] System zones: 0-2, 18-18, 34-34 [ 83.532853][ T6624] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 83.549500][ T6624] EXT4-fs (loop4): 1 truncate cleaned up [ 83.549759][ T29] audit: type=1400 audit(1744612794.817:1876): avc: denied { map } for pid=6629 comm="syz.6.1029" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.555737][ T6624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.579505][ T29] audit: type=1400 audit(1744612794.817:1877): avc: denied { read write } for pid=6629 comm="syz.6.1029" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.616503][ T29] audit: type=1400 audit(1744612794.867:1878): avc: denied { read write } for pid=6623 comm="syz.4.1027" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.616610][ T29] audit: type=1400 audit(1744612794.867:1879): avc: denied { open } for pid=6623 comm="syz.4.1027" path="/216/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.644643][ T6630] loop6: detected capacity change from 0 to 4096 [ 83.690529][ T6630] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.720246][ T6633] loop5: detected capacity change from 0 to 512 [ 83.725165][ T6633] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.725209][ T6633] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.728966][ T6633] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 83.729063][ T6633] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 83.729632][ T6633] EXT4-fs (loop5): 1 truncate cleaned up [ 83.729978][ T6633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.774637][ T6633] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1030'. [ 83.784899][ T6633] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 83.785598][ T4764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.879177][ T4746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.895343][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1035'. [ 83.920456][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1035'. [ 83.920469][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'. [ 84.017625][ T6654] loop6: detected capacity change from 0 to 512 [ 84.064360][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.064533][ T6654] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.085966][ T6654] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.201340][ T4764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.243220][ T6673] loop4: detected capacity change from 0 to 512 [ 84.250339][ T6673] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.257811][ T6673] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.278221][ T6673] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 84.287281][ T6673] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 84.297343][ T6673] EXT4-fs (loop4): 1 truncate cleaned up [ 84.303438][ T6673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.327166][ T6673] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1045'. [ 84.348941][ T6673] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 84.462520][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.522253][ T6699] loop4: detected capacity change from 0 to 128 [ 84.528948][ T6699] ext4: Unknown parameter 'fowner>00000000000000000000' [ 85.090726][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1059'. [ 85.109818][ T6711] pim6reg1: entered promiscuous mode [ 85.115214][ T6711] pim6reg1: entered allmulticast mode [ 85.209916][ T6715] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1061'. [ 85.261908][ T6723] loop5: detected capacity change from 0 to 512 [ 85.463565][ T6723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.490196][ T6723] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.626710][ T6723] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1064: bg 0: block 424: padding at end of block bitmap is not set [ 85.647953][ T6740] xt_TCPMSS: Only works on TCP SYN packets [ 85.691762][ T6738] pim6reg1: entered promiscuous mode [ 85.697091][ T6738] pim6reg1: entered allmulticast mode [ 85.929279][ T6747] SELinux: ebitmap: truncated map [ 85.936062][ T4746] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.947052][ T6747] SELinux: failed to load policy [ 85.974842][ T6752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1074'. [ 85.983932][ T6752] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1074'. [ 86.027781][ T6752] team0: entered promiscuous mode [ 86.032835][ T6752] team_slave_0: entered promiscuous mode [ 86.038607][ T6752] team_slave_1: entered promiscuous mode [ 86.063892][ T6752] team0: left promiscuous mode [ 86.068751][ T6752] team_slave_0: left promiscuous mode [ 86.074302][ T6752] team_slave_1: left promiscuous mode [ 86.237069][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1079'. [ 86.280605][ T6766] loop5: detected capacity change from 0 to 512 [ 86.296732][ T6766] EXT4-fs error (device loop5): ext4_get_journal_inode:5798: comm syz.5.1082: inode #16777216: comm syz.5.1082: iget: illegal inode # [ 86.316562][ T6769] loop6: detected capacity change from 0 to 512 [ 86.390847][ T6766] EXT4-fs (loop5): Remounting filesystem read-only [ 86.397516][ T6766] EXT4-fs (loop5): no journal found [ 86.402725][ T6766] EXT4-fs (loop5): can't get journal size [ 86.416723][ T6769] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 86.427978][ T6773] loop4: detected capacity change from 0 to 256 [ 86.435786][ T6769] EXT4-fs (loop6): 1 truncate cleaned up [ 86.441812][ T6769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.454741][ T6766] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 86.483552][ T6773] vlan2: entered promiscuous mode [ 86.488637][ T6773] bridge0: entered promiscuous mode [ 86.591056][ T6766] EXT4-fs (loop5): failed to initialize system zone (-22) [ 86.599591][ T6766] EXT4-fs (loop5): mount failed [ 86.612161][ T6769] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 87.099048][ T4764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.306206][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.365051][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.844573][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 89.844586][ T29] audit: type=1400 audit(1744612801.117:1961): avc: denied { setopt } for pid=6862 comm="syz.6.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.927052][ T29] audit: type=1400 audit(1744612801.137:1962): avc: denied { setopt } for pid=6865 comm="syz.1.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.931839][ T6868] loop6: detected capacity change from 0 to 512 [ 89.946552][ T29] audit: type=1400 audit(1744612801.147:1963): avc: denied { bind } for pid=6862 comm="syz.6.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.946601][ T29] audit: type=1400 audit(1744612801.147:1964): avc: denied { name_bind } for pid=6862 comm="syz.6.1111" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 89.994122][ T29] audit: type=1400 audit(1744612801.147:1965): avc: denied { node_bind } for pid=6862 comm="syz.6.1111" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 90.015807][ T29] audit: type=1400 audit(1744612801.147:1966): avc: denied { write } for pid=6862 comm="syz.6.1111" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.031412][ T6868] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.037205][ T29] audit: type=1400 audit(1744612801.147:1967): avc: denied { connect } for pid=6862 comm="syz.6.1111" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.068529][ T29] audit: type=1400 audit(1744612801.147:1968): avc: denied { name_connect } for pid=6862 comm="syz.6.1111" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.094947][ T29] audit: type=1400 audit(1744612801.247:1969): avc: denied { bind } for pid=6865 comm="syz.1.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.170033][ T6868] EXT4-fs (loop6): 1 truncate cleaned up [ 90.176096][ T6868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.227464][ T6874] tipc: Enabling of bearer rejected, failed to enable media [ 90.240140][ T6868] EXT4-fs error (device loop6): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.6.1113: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 90.268402][ T29] audit: type=1400 audit(1744612801.507:1970): avc: denied { rename } for pid=6867 comm="syz.6.1113" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 90.302792][ T6868] EXT4-fs (loop6): Remounting filesystem read-only [ 90.309354][ T6868] EXT4-fs warning (device loop6): ext4_rename_delete:3728: inode #2: comm syz.6.1113: Deleting old file: nlink 4, error=-117 [ 90.339721][ T6877] tipc: Enabling of bearer rejected, failed to enable media [ 90.385491][ T4764] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.506661][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.520251][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.556048][ T6897] netlink: 2256 bytes leftover after parsing attributes in process `syz.6.1124'. [ 90.999557][ T6916] xt_TCPMSS: Only works on TCP SYN packets [ 91.180182][ T6931] lo: entered allmulticast mode [ 91.185863][ T6928] lo: left allmulticast mode [ 91.208775][ T6935] tipc: Enabling of bearer rejected, failed to enable media [ 91.384392][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1139'. [ 91.536287][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 92.323703][ T6973] bond_slave_0: entered promiscuous mode [ 92.329409][ T6973] bond_slave_1: entered promiscuous mode [ 92.335651][ T6973] vlan2: entered promiscuous mode [ 92.340823][ T6973] bond0: entered promiscuous mode [ 93.409836][ T7003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.471597][ T7009] tipc: New replicast peer: 255.255.255.255 [ 93.477829][ T7009] tipc: Enabled bearer , priority 10 [ 93.919316][ T7037] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1171'. [ 94.069218][ T7041] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 94.278121][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1179'. [ 94.287321][ T7050] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1179'. [ 94.404880][ T7057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.417317][ T7057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.512911][ T7068] netlink: 'syz.1.1186': attribute type 4 has an invalid length. [ 94.593704][ T5008] tipc: Node number set to 2562290350 [ 94.635380][ T7064] bridge_slave_1: left allmulticast mode [ 94.641064][ T7064] bridge_slave_1: left promiscuous mode [ 94.646960][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.657393][ T7064] bridge_slave_0: left promiscuous mode [ 94.663087][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.693713][ T7064] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 94.704167][ T7064] batman_adv: batadv0: Removing interface: ipvlan2 [ 94.756670][ T7076] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 95.555184][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 95.555206][ T29] audit: type=1400 audit(1744612806.827:2022): avc: denied { read } for pid=7100 comm="syz.5.1198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 96.165615][ T29] audit: type=1400 audit(1744612807.437:2023): avc: denied { getopt } for pid=7117 comm="syz.6.1204" laddr=172.20.20.10 lport=56142 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 96.354917][ T7128] 9pnet_fd: Insufficient options for proto=fd [ 96.608040][ T7137] SELinux: ebitmap: truncated map [ 96.618525][ T7137] SELinux: failed to load policy [ 96.730246][ T29] audit: type=1400 audit(1744612807.997:2024): avc: denied { setopt } for pid=7150 comm="syz.5.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.060380][ T29] audit: type=1400 audit(1744612808.327:2025): avc: denied { kexec_image_load } for pid=7169 comm="syz.5.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 97.147613][ T7179] netlink: 'syz.0.1225': attribute type 10 has an invalid length. [ 97.166049][ T7179] batman_adv: batadv0: Adding interface: team0 [ 97.172223][ T7179] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 97.239021][ T29] audit: type=1326 audit(1744612808.507:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652506d169 code=0x7ffc0000 [ 97.311462][ T29] audit: type=1326 audit(1744612808.537:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652506d169 code=0x7ffc0000 [ 97.334927][ T29] audit: type=1326 audit(1744612808.537:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652506d169 code=0x7ffc0000 [ 97.358475][ T29] audit: type=1326 audit(1744612808.537:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652506d169 code=0x7ffc0000 [ 97.381894][ T29] audit: type=1326 audit(1744612808.537:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652506d169 code=0x7ffc0000 [ 97.405397][ T29] audit: type=1326 audit(1744612808.537:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7180 comm="syz.0.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652506d169 code=0x7ffc0000 [ 97.660294][ T7201] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 97.660369][ T3366] IPVS: starting estimator thread 0... [ 97.753829][ T7210] IPVS: using max 2400 ests per chain, 120000 per kthread [ 97.911641][ T7220] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.938100][ T7222] ªªªªªª: renamed from vlan0 (while UP) [ 98.032439][ T7223] veth3: entered promiscuous mode [ 98.037557][ T7223] veth3: entered allmulticast mode [ 98.932165][ T7266] netlink: 'syz.5.1252': attribute type 4 has an invalid length. [ 98.958109][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1253'. [ 98.987392][ T7268] gretap0: left allmulticast mode [ 98.992545][ T7268] gretap0: left promiscuous mode [ 98.997706][ T7268] bridge0: port 2(gretap0) entered disabled state [ 99.041532][ T7268] bridge_slave_0: left promiscuous mode [ 99.047401][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.224359][ T7273] bond_slave_0: entered promiscuous mode [ 99.230029][ T7273] bond_slave_1: entered promiscuous mode [ 99.248519][ T7273] vlan0: entered promiscuous mode [ 99.253750][ T7273] bond0: entered promiscuous mode [ 99.684226][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1261'. [ 99.693184][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1261'. [ 100.598785][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1271'. [ 100.631461][ T7334] netlink: 'syz.0.1273': attribute type 4 has an invalid length. [ 100.659791][ T7335] veth3: entered promiscuous mode [ 100.664914][ T7335] veth3: entered allmulticast mode [ 100.792251][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 100.792265][ T29] audit: type=1326 audit(1744612812.057:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 100.859098][ T29] audit: type=1326 audit(1744612812.097:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 100.882724][ T29] audit: type=1326 audit(1744612812.097:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd572e8d1a3 code=0x7ffc0000 [ 100.906067][ T29] audit: type=1326 audit(1744612812.117:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd572e8bc1f code=0x7ffc0000 [ 100.931823][ T29] audit: type=1326 audit(1744612812.177:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd572e8d1f7 code=0x7ffc0000 [ 100.975290][ T29] audit: type=1326 audit(1744612812.247:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd572e8bad0 code=0x7ffc0000 [ 100.998790][ T29] audit: type=1326 audit(1744612812.247:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd572e8bdca code=0x7ffc0000 [ 101.057780][ T29] audit: type=1326 audit(1744612812.277:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 101.081275][ T29] audit: type=1326 audit(1744612812.277:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 101.107242][ T29] audit: type=1326 audit(1744612812.357:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7343 comm="syz.5.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 101.910855][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.918361][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.958007][ T7356] bridge0: entered allmulticast mode [ 101.969955][ T7364] netlink: 'syz.0.1284': attribute type 12 has an invalid length. [ 102.165403][ T7369] netlink: 'syz.1.1286': attribute type 10 has an invalid length. [ 102.200639][ T7369] batman_adv: batadv0: Adding interface: team0 [ 102.206906][ T7369] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.232044][ T7369] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 102.636391][ T7393] tipc: New replicast peer: 10.1.1.2 [ 102.641823][ T7393] tipc: Enabled bearer , priority 10 [ 102.980248][ T7406] netlink: 'syz.0.1301': attribute type 4 has an invalid length. [ 103.134493][ T7410] Falling back ldisc for ttyS3. [ 103.572844][ T7473] geneve0: entered allmulticast mode [ 104.262327][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'. [ 104.354074][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 104.366418][ T7518] macvtap1: entered promiscuous mode [ 104.371845][ T7518] team0: entered promiscuous mode [ 104.376916][ T7518] team_slave_0: entered promiscuous mode [ 104.382637][ T7518] team_slave_1: entered promiscuous mode [ 104.388370][ T7518] macvtap1: entered allmulticast mode [ 104.393773][ T7518] team0: entered allmulticast mode [ 104.398889][ T7518] team_slave_0: entered allmulticast mode [ 104.404643][ T7518] team_slave_1: entered allmulticast mode [ 104.412500][ T7518] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 104.420872][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1332'. [ 104.432686][ T7519] team0: left allmulticast mode [ 104.437748][ T7519] team_slave_0: left allmulticast mode [ 104.443382][ T7519] team_slave_1: left allmulticast mode [ 104.448856][ T7519] team0: left promiscuous mode [ 104.453605][ T7519] team_slave_0: left promiscuous mode [ 104.459105][ T7519] team_slave_1: left promiscuous mode [ 104.515757][ T7523] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1334'. [ 104.525086][ T7523] unsupported nlmsg_type 40 [ 104.563552][ T7527] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1336'. [ 104.575590][ T7527] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.635417][ T7527] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.695580][ T7527] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.755711][ T7527] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.812433][ T7527] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.826466][ T7527] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.839915][ T7527] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.851273][ T7527] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.904919][ T7538] @: renamed from vlan0 (while UP) [ 104.972476][ T7545] netlink: 'syz.4.1341': attribute type 12 has an invalid length. [ 105.178808][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1345'. [ 105.223504][ T7551] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 105.469567][ T7562] pim6reg: entered allmulticast mode [ 105.623312][ T7568] tipc: New replicast peer: 10.1.1.2 [ 105.628759][ T7568] tipc: Enabled bearer , priority 10 [ 105.755830][ T7562] pim6reg: left allmulticast mode [ 105.942464][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1353'. [ 106.062585][ T7570] netlink: 'syz.1.1351': attribute type 6 has an invalid length. [ 106.201059][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 106.201074][ T29] audit: type=1326 audit(1744612817.467:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.233900][ T29] audit: type=1326 audit(1744612817.497:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.257377][ T29] audit: type=1326 audit(1744612817.497:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.280853][ T29] audit: type=1326 audit(1744612817.507:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.306391][ T29] audit: type=1326 audit(1744612817.577:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.329938][ T29] audit: type=1326 audit(1744612817.577:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.355086][ T29] audit: type=1326 audit(1744612817.577:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.423020][ T29] audit: type=1326 audit(1744612817.647:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.446444][ T29] audit: type=1326 audit(1744612817.647:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.469886][ T29] audit: type=1326 audit(1744612817.647:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7596 comm="syz.4.1360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 106.504791][ T7606] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1363'. [ 106.518811][ T7606] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.565416][ T7606] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.625282][ T7606] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.640931][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'. [ 106.675180][ T7606] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.743733][ T3366] tipc: Node number set to 3289837877 [ 106.761158][ T7606] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.787997][ T7606] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.811739][ T7606] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.825406][ T7606] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.036738][ T7635] IPv6: Can't replace route, no match found [ 108.005375][ T7675] hub 9-0:1.0: USB hub found [ 108.010275][ T7675] hub 9-0:1.0: 8 ports detected [ 108.985061][ T7704] batman_adv: batadv0: Removing interface: team0 [ 109.052536][ T7704] bond0: (slave bond_slave_0): Releasing backup interface [ 109.118841][ T7704] bond0: (slave bond_slave_1): Releasing backup interface [ 109.237529][ T7704] team0: Port device team_slave_0 removed [ 109.279903][ T7704] team0: Port device team_slave_1 removed [ 109.395355][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.402791][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.460191][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.467775][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.674443][ T7704] team0: Port device geneve1 removed [ 110.055657][ T7715] netlink: 'syz.4.1397': attribute type 10 has an invalid length. [ 110.101204][ T7715] batman_adv: batadv0: Adding interface: team0 [ 110.107485][ T7715] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.132652][ T7715] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.366621][ T7721] tipc: Enabled bearer , priority 10 [ 110.408862][ T7721] tipc: Enabled bearer , priority 0 [ 110.622903][ T7727] netlink: '+}[@': attribute type 2 has an invalid length. [ 112.082018][ T3366] tipc: Node number set to 2147570802 [ 112.180267][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 112.180284][ T29] audit: type=1400 audit(1744612823.447:2471): avc: denied { name_bind } for pid=7745 comm="syz.0.1406" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 112.212269][ T29] audit: type=1326 audit(1744612823.487:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.5.1408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x0 [ 112.258885][ T7750] netlink: 132 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 112.259475][ T29] audit: type=1400 audit(1744612823.507:2473): avc: denied { module_load } for pid=7740 comm="syz.4.1405" path="/290/bus" dev="tmpfs" ino=1561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 112.268673][ T7752] netlink: 'syz.1.1410': attribute type 10 has an invalid length. [ 112.306355][ T7741] Invalid ELF header magic: != ELF [ 112.354067][ T29] audit: type=1326 audit(1744612823.617:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 112.377673][ T29] audit: type=1326 audit(1744612823.617:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 112.401316][ T29] audit: type=1326 audit(1744612823.617:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 112.532279][ T29] audit: type=1326 audit(1744612823.647:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 112.556071][ T29] audit: type=1326 audit(1744612823.647:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 112.579498][ T29] audit: type=1326 audit(1744612823.647:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 112.602930][ T29] audit: type=1326 audit(1744612823.697:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7757 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 112.627968][ T7770] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.648818][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1416'. [ 112.736073][ T7770] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.796207][ T7770] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.866943][ T7770] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.935653][ T7770] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.951369][ T7770] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.967514][ T7770] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.981230][ T7770] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.168501][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1425'. [ 114.276838][ T7809] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 114.296006][ T7809] batman_adv: batadv0: Adding interface: team0 [ 114.302280][ T7809] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 114.497620][ T7808] IPv6: Can't replace route, no match found [ 114.516976][ T7822] batman_adv: batadv0: Removing interface: team0 [ 114.540487][ T7822] : (slave bond_slave_0): Releasing backup interface [ 114.609418][ T7822] bond_slave_0: left allmulticast mode [ 114.650505][ T7822] : (slave bond_slave_1): Releasing backup interface [ 114.672053][ T7822] bond_slave_1: left allmulticast mode [ 114.699003][ T7822] team0: Port device team_slave_0 removed [ 114.736239][ T7822] team0: Port device team_slave_1 removed [ 114.771289][ T7822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.791740][ T7830] vlan0: entered allmulticast mode [ 114.796927][ T7830] bond0: entered allmulticast mode [ 114.802054][ T7830] bond_slave_0: entered allmulticast mode [ 114.807908][ T7830] bond_slave_1: entered allmulticast mode [ 115.076153][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 115.103974][ T7839] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.851854][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1440'. [ 115.868064][ T7860] tipc: Disabling bearer [ 115.883957][ T7860] batman_adv: batadv0: Removing interface: team0 [ 115.892776][ T7860] team0 (unregistering): Port device team_slave_0 removed [ 115.917440][ T7860] team0 (unregistering): Port device team_slave_1 removed [ 116.142718][ T7875] netlink: 'syz.5.1446': attribute type 10 has an invalid length. [ 116.157442][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.961731][ T7886] netlink: 'syz.0.1449': attribute type 6 has an invalid length. [ 117.023345][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1454'. [ 117.035494][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1451'. [ 117.046994][ T7901] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 117.779151][ T7919] netlink: 'syz.6.1460': attribute type 10 has an invalid length. [ 117.797804][ T7919] batman_adv: batadv0: Adding interface: team0 [ 117.804179][ T7919] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.829483][ T7919] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 117.862683][ T7921] syz_tun: entered allmulticast mode [ 117.869236][ T7921] syz_tun: left allmulticast mode [ 118.211443][ T7927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1462'. [ 118.456669][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 118.456685][ T29] audit: type=1400 audit(1744612829.727:2619): avc: denied { read } for pid=7931 comm="syz.5.1465" name="file0" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.555250][ T29] audit: type=1400 audit(1744612829.767:2620): avc: denied { open } for pid=7931 comm="syz.5.1465" path="/180/file0" dev="tmpfs" ino=966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 118.578074][ T29] audit: type=1326 audit(1744612829.767:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 118.601539][ T29] audit: type=1326 audit(1744612829.767:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 118.625805][ T29] audit: type=1326 audit(1744612829.767:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="syz.5.1465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 118.649361][ T29] audit: type=1326 audit(1744612829.767:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 118.672337][ T29] audit: type=1326 audit(1744612829.767:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 118.695243][ T29] audit: type=1326 audit(1744612829.767:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 118.718152][ T29] audit: type=1326 audit(1744612829.767:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7931 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 119.856055][ T7955] netlink: 'syz.4.1473': attribute type 4 has an invalid length. [ 120.220513][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.229466][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.248643][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.300296][ T7975] $Hÿ: renamed from bond0 (while UP) [ 120.374464][ T7970] netlink: 'syz.0.1479': attribute type 10 has an invalid length. [ 120.392518][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.401490][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.419352][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.428685][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.433970][ T7962] x_tables: unsorted underflow at hook 2 [ 120.441900][ T7970] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 120.471616][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.480617][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.489859][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1480'. [ 120.569322][ T29] audit: type=1400 audit(1744612831.807:2628): avc: denied { write } for pid=7982 comm="syz.6.1481" path="socket:[17893]" dev="sockfs" ino=17893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.630851][ T7983] tipc: New replicast peer: 255.255.255.255 [ 120.637115][ T7983] tipc: Enabled bearer , priority 10 [ 120.753527][ T7992] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 121.889711][ T8020] netlink: 'syz.6.1495': attribute type 10 has an invalid length. [ 121.901883][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.911189][ T8020] batadv0: entered promiscuous mode [ 121.916607][ T8020] batadv0: entered allmulticast mode [ 121.922628][ T8020] $Hÿ: (slave batadv0): Enslaving as an active interface with an up link [ 121.949214][ T8026] 9pnet_fd: Insufficient options for proto=fd [ 122.877855][ T8042] tipc: Enabling of bearer rejected, failed to enable media [ 122.900688][ T8042] tipc: Enabled bearer , priority 0 [ 122.956984][ T8043] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 124.077446][ T5016] tipc: Node number set to 147680800 [ 124.439791][ T8067] __nla_validate_parse: 2 callbacks suppressed [ 124.439810][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 124.620458][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 124.620473][ T29] audit: type=1400 audit(1744612835.337:2641): avc: denied { associate } for pid=8059 comm="syz.1.1504" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 124.648025][ T29] audit: type=1400 audit(1744612835.417:2642): avc: denied { read } for pid=8056 comm="syz.0.1506" name="event2" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 124.671180][ T29] audit: type=1326 audit(1744612835.487:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.694597][ T29] audit: type=1326 audit(1744612835.487:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.718064][ T29] audit: type=1326 audit(1744612835.487:2645): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.741862][ T29] audit: type=1326 audit(1744612835.487:2646): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.765780][ T29] audit: type=1326 audit(1744612835.487:2647): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.789544][ T29] audit: type=1326 audit(1744612835.497:2648): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.813222][ T29] audit: type=1326 audit(1744612835.497:2649): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.837060][ T29] audit: type=1326 audit(1744612835.497:2650): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f443d169 code=0x7ffc0000 [ 124.893137][ T8093] netlink: 'syz.0.1513': attribute type 10 has an invalid length. [ 124.901133][ T8093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1513'. [ 124.913397][ T8082] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.934477][ T8093] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 124.962965][ T8093] team0: Failed to send options change via netlink (err -105) [ 124.970539][ T8093] team0: Port device geneve1 added [ 125.066174][ T8095] bridge_slave_0: left allmulticast mode [ 125.071863][ T8095] bridge_slave_0: left promiscuous mode [ 125.077594][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.128752][ T8095] bridge_slave_1: left allmulticast mode [ 125.134733][ T8095] bridge_slave_1: left promiscuous mode [ 125.140535][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.275962][ T8095] bond0: (slave bond_slave_0): Releasing backup interface [ 125.287577][ T8095] bond0: (slave bond_slave_1): Releasing backup interface [ 125.305149][ T8095] team0: Port device team_slave_0 removed [ 125.321467][ T8095] team0: Port device team_slave_1 removed [ 125.332307][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.339929][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.359918][ T8095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.367393][ T8095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.509281][ T23] syz!: Port: 1 Link DOWN [ 125.517087][ T8082] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.587064][ T8082] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.609571][ T8112] vlan0: entered promiscuous mode [ 125.614741][ T8112] team0: entered promiscuous mode [ 125.635055][ T8082] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.691043][ T8082] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.703513][ T8082] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.718086][ T8082] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.738617][ T8082] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.772730][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.782556][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.188435][ T8219] netlink: 'syz.4.1529': attribute type 10 has an invalid length. [ 126.196325][ T8219] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1529'. [ 126.421853][ T8252] batman_adv: batadv0: Removing interface: team0 [ 126.442470][ T8252] $Hÿ: (slave batadv0): Releasing backup interface [ 126.461354][ T8252] batadv0: left promiscuous mode [ 126.466406][ T8252] batadv0: left allmulticast mode [ 126.544346][ T8252] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 126.561313][ T8252] bond_slave_0: left promiscuous mode [ 126.566835][ T8252] bond_slave_0: left allmulticast mode [ 126.603986][ T8252] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 126.621707][ T8252] bond_slave_1: left promiscuous mode [ 126.627332][ T8252] bond_slave_1: left allmulticast mode [ 126.657312][ T8252] team0: Port device team_slave_0 removed [ 126.678628][ T8252] team0: Port device team_slave_1 removed [ 126.687164][ T8252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.694695][ T8252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.775317][ T8275] 9pnet_fd: Insufficient options for proto=fd [ 126.816085][ T8277] netlink: 'syz.4.1541': attribute type 13 has an invalid length. [ 126.824118][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1541'. [ 129.661957][ T8343] netlink: '+}[@': attribute type 2 has an invalid length. [ 129.696282][ T8343] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.737747][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 129.737775][ T29] audit: type=1326 audit(1744612841.007:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.798336][ T8343] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.806039][ T29] audit: type=1326 audit(1744612841.037:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.831644][ T29] audit: type=1326 audit(1744612841.037:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.855098][ T29] audit: type=1326 audit(1744612841.037:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.878617][ T29] audit: type=1326 audit(1744612841.037:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.902286][ T29] audit: type=1326 audit(1744612841.037:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.925679][ T29] audit: type=1326 audit(1744612841.037:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.949312][ T29] audit: type=1326 audit(1744612841.037:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.972647][ T29] audit: type=1326 audit(1744612841.037:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 129.996187][ T29] audit: type=1326 audit(1744612841.037:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.4.1562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe58047d169 code=0x7ffc0000 [ 130.096936][ T8343] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.146011][ T8355] netlink: 'syz.5.1565': attribute type 10 has an invalid length. [ 130.146191][ T8343] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.175581][ T8355] batman_adv: batadv0: Adding interface: team0 [ 130.181768][ T8355] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.207038][ T8355] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 130.244296][ T8343] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.266137][ T8343] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.278409][ T8343] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.294186][ T8343] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.358302][ T8364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1568'. [ 130.414090][ T8364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1568'. [ 130.541632][ T8377] 9pnet_fd: Insufficient options for proto=fd [ 130.732350][ T8389] netlink: 'syz.6.1578': attribute type 10 has an invalid length. [ 130.740713][ T8384] process 'syz.4.1576' launched '/dev/fd/9' with NULL argv: empty string added [ 130.794343][ T8389] batman_adv: batadv0: Adding interface: team0 [ 130.800533][ T8389] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.825754][ T8389] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 131.763315][ T8419] 9pnet_fd: Insufficient options for proto=fd [ 132.358807][ T8439] 9pnet_fd: Insufficient options for proto=fd [ 132.367342][ T8439] netlink: 'syz.6.1593': attribute type 4 has an invalid length. [ 133.343548][ T8456] x_tables: unsorted underflow at hook 2 [ 133.524493][ T8474] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.620495][ T8479] netlink: 'syz.4.1604': attribute type 10 has an invalid length. [ 133.628428][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1604'. [ 133.698511][ T8474] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.808372][ T8479] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.816870][ T8479] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.845766][ T8479] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 134.067837][ T8492] netlink: '+}[@': attribute type 2 has an invalid length. [ 134.089144][ T8494] xt_CT: No such helper "pptp" [ 134.129246][ T8499] netlink: 'syz.6.1611': attribute type 13 has an invalid length. [ 134.137188][ T8499] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1611'. [ 134.177802][ T8502] wg2: left promiscuous mode [ 134.182452][ T8502] wg2: left allmulticast mode [ 134.202582][ T8504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1613'. [ 134.424423][ T8509] wg2: entered promiscuous mode [ 134.429359][ T8509] wg2: entered allmulticast mode [ 134.693174][ T8511] netlink: 62967 bytes leftover after parsing attributes in process `syz.6.1615'. [ 135.057985][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 135.058005][ T29] audit: type=1400 audit(1744612846.307:3139): avc: denied { read } for pid=8522 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.146943][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1623'. [ 136.129178][ T29] audit: type=1326 audit(1744612847.397:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.164337][ T29] audit: type=1326 audit(1744612847.417:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.187984][ T29] audit: type=1326 audit(1744612847.417:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.205572][ T8592] GUP no longer grows the stack in syz.0.1633 (8592): 200000004000-20000000a000 (200000002000) [ 136.211665][ T29] audit: type=1326 audit(1744612847.427:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.221792][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.0.1633 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 136.221866][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.221889][ T8592] Call Trace: [ 136.221899][ T8592] [ 136.221908][ T8592] dump_stack_lvl+0xf6/0x150 [ 136.221957][ T8592] dump_stack+0x15/0x1a [ 136.222044][ T8592] __get_user_pages+0x1dc1/0x2340 [ 136.222089][ T8592] get_user_pages_remote+0x1f4/0x800 [ 136.222123][ T8592] __access_remote_vm+0x160/0x590 [ 136.222153][ T8592] access_remote_vm+0x34/0x50 [ 136.222183][ T8592] proc_pid_cmdline_read+0x3fd/0x720 [ 136.222289][ T8592] vfs_readv+0x3e5/0x660 [ 136.222361][ T8592] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 136.222468][ T8592] __x64_sys_preadv+0xf9/0x1c0 [ 136.222509][ T8592] x64_sys_call+0x1410/0x2e10 [ 136.222537][ T8592] do_syscall_64+0xc9/0x1c0 [ 136.222586][ T8592] ? clear_bhb_loop+0x25/0x80 [ 136.222612][ T8592] ? clear_bhb_loop+0x25/0x80 [ 136.222640][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.222666][ T8592] RIP: 0033:0x7f652506d169 [ 136.222684][ T8592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.222724][ T8592] RSP: 002b:00007f65236d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 136.222746][ T8592] RAX: ffffffffffffffda RBX: 00007f6525285fa0 RCX: 00007f652506d169 [ 136.222761][ T8592] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 136.222776][ T8592] RBP: 00007f65250ee990 R08: 00000000fffffff9 R09: 0000000000000000 [ 136.222790][ T8592] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 136.222844][ T8592] R13: 0000000000000000 R14: 00007f6525285fa0 R15: 00007fff93cce7c8 [ 136.222867][ T8592] [ 136.422802][ T29] audit: type=1326 audit(1744612847.427:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.446403][ T29] audit: type=1326 audit(1744612847.427:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.469800][ T29] audit: type=1326 audit(1744612847.427:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.493232][ T29] audit: type=1326 audit(1744612847.427:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 136.516716][ T29] audit: type=1326 audit(1744612847.427:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.5.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 138.697951][ T8716] netlink: 'syz.1.1647': attribute type 10 has an invalid length. [ 138.707813][ T8716] batman_adv: batadv0: Adding interface: team0 [ 138.714017][ T8716] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.739205][ T8716] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 138.743288][ T8718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1648'. [ 138.881133][ T8722] SELinux: Context Ü is not valid (left unmapped). [ 138.959562][ T8725] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 139.780292][ T8744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1658'. [ 139.794950][ T8744] veth0_macvtap: left promiscuous mode [ 139.972400][ T8754] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 140.006424][ T8755] SELinux: failed to load policy [ 140.104322][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 140.104338][ T29] audit: type=1326 audit(1744612851.377:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 140.223659][ T29] audit: type=1326 audit(1744612851.407:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 140.247133][ T29] audit: type=1326 audit(1744612851.407:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 140.267455][ T8751] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 140.270520][ T29] audit: type=1326 audit(1744612851.407:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 140.277046][ T8751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 140.277962][ T8751] vhci_hcd vhci_hcd.0: Device attached [ 140.300303][ T29] audit: type=1326 audit(1744612851.407:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 140.300406][ T29] audit: type=1326 audit(1744612851.407:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.5.1655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd572e8d169 code=0x7ffc0000 [ 140.371073][ T8758] vhci_hcd: connection closed [ 140.396240][ T6787] vhci_hcd: stop threads [ 140.405209][ T6787] vhci_hcd: release socket [ 140.409635][ T6787] vhci_hcd: disconnect device [ 141.415367][ T29] audit: type=1400 audit(1744612852.687:3236): avc: denied { bind } for pid=8769 comm="syz.6.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.950212][ T29] audit: type=1400 audit(1744612852.707:3237): avc: denied { listen } for pid=8769 comm="syz.6.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.969873][ T29] audit: type=1400 audit(1744612852.707:3238): avc: denied { write } for pid=8769 comm="syz.6.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.989414][ T29] audit: type=1400 audit(1744612852.707:3239): avc: denied { setopt } for pid=8769 comm="syz.6.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 142.440808][ T8783] xt_hashlimit: max too large, truncated to 1048576 [ 144.163393][ T8809] ================================================================== [ 144.171533][ T8809] BUG: KCSAN: data-race in tipc_poll / tipc_sk_proto_rcv [ 144.178583][ T8809] [ 144.180921][ T8809] read-write to 0xffff888103685786 of 2 bytes by task 8807 on cpu 0: [ 144.188982][ T8809] tipc_sk_proto_rcv+0x672/0xb70 [ 144.193923][ T8809] tipc_sk_filter_rcv+0x18ed/0x1a20 [ 144.199123][ T8809] tipc_sk_rcv+0x48b/0x1020 [ 144.203629][ T8809] tipc_node_xmit+0x234/0x8b0 [ 144.208304][ T8809] tipc_node_xmit_skb+0x99/0xd0 [ 144.213154][ T8809] tipc_sk_send_ack+0x265/0x280 [ 144.218045][ T8809] tipc_recvstream+0x3b2/0x7e0 [ 144.222843][ T8809] sock_recvmsg+0x13f/0x170 [ 144.227344][ T8809] ____sys_recvmsg+0xfb/0x290 [ 144.232024][ T8809] __sys_recvmsg+0x1c7/0x270 [ 144.236625][ T8809] __x64_sys_recvmsg+0x46/0x50 [ 144.241398][ T8809] x64_sys_call+0xc6d/0x2e10 [ 144.245991][ T8809] do_syscall_64+0xc9/0x1c0 [ 144.250518][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.256415][ T8809] [ 144.258738][ T8809] read to 0xffff888103685786 of 2 bytes by task 8809 on cpu 1: [ 144.266279][ T8809] tipc_poll+0x1f6/0x360 [ 144.270532][ T8809] sock_poll+0x22d/0x250 [ 144.274789][ T8809] __io_arm_poll_handler+0x1e5/0xd40 [ 144.280092][ T8809] io_arm_poll_handler+0x4b0/0x5f0 [ 144.285224][ T8809] io_queue_async+0x8a/0x460 [ 144.289825][ T8809] io_submit_sqes+0x9f2/0x1050 [ 144.294613][ T8809] __se_sys_io_uring_enter+0x1ce/0x1c00 [ 144.300168][ T8809] __x64_sys_io_uring_enter+0x78/0x90 [ 144.305554][ T8809] x64_sys_call+0x26cb/0x2e10 [ 144.310236][ T8809] do_syscall_64+0xc9/0x1c0 [ 144.314757][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.320660][ T8809] [ 144.322983][ T8809] value changed: 0x020a -> 0x0188 [ 144.328029][ T8809] [ 144.330371][ T8809] Reported by Kernel Concurrency Sanitizer on: [ 144.336521][ T8809] CPU: 1 UID: 0 PID: 8809 Comm: syz.1.1674 Not tainted 6.15.0-rc2-syzkaller #0 PREEMPT(voluntary) [ 144.347201][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 144.357271][ T8809] ==================================================================