last executing test programs: 4m39.662837866s ago: executing program 32 (id=1495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 4m33.434235024s ago: executing program 33 (id=1722): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 3m50.900571328s ago: executing program 34 (id=3393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/66, 0x42}, 0xd58}], 0x1, 0x0, 0x0) 3m11.111874951s ago: executing program 4 (id=4896): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m11.084595882s ago: executing program 4 (id=4897): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 3m11.064670692s ago: executing program 4 (id=4899): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) close(r2) 3m11.030635602s ago: executing program 4 (id=4900): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 3m10.883708145s ago: executing program 4 (id=4905): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 3m10.53036178s ago: executing program 4 (id=4918): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m10.435210061s ago: executing program 35 (id=4918): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m58.785730456s ago: executing program 8 (id=5275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m58.780456875s ago: executing program 8 (id=5279): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m58.715216496s ago: executing program 8 (id=5282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x44f, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x10100, 0x2}, &(0x7f00000000c0), &(0x7f0000000080)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@private=0xa010100, 0x2, 0x6, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) 2m58.668593507s ago: executing program 8 (id=5284): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 2m58.629885637s ago: executing program 8 (id=5285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r1, 0x3) 2m58.4293959s ago: executing program 8 (id=5294): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001300add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m58.409704961s ago: executing program 36 (id=5294): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001300add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2m53.887458775s ago: executing program 6 (id=5409): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0xffffffff, 0x2}, {0x8009, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2m53.849590085s ago: executing program 6 (id=5413): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x1, @perf_config_ext={0x29a2, 0x8}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 2m53.748836457s ago: executing program 6 (id=5415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) 2m53.059943986s ago: executing program 6 (id=5435): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000380)='./file0/../file0/../file0/../file0\x00') 2m52.939746848s ago: executing program 6 (id=5440): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000010000020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_retopts={{0x10}}], 0x10}, 0x8000) 2m52.609115693s ago: executing program 6 (id=5445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) 2m52.608777983s ago: executing program 37 (id=5445): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f0000000000)=0xc92b) 2m44.158986822s ago: executing program 7 (id=5717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) unshare(0x62040200) 2m44.088795893s ago: executing program 7 (id=5721): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 2m44.029332704s ago: executing program 7 (id=5734): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 2m43.944260485s ago: executing program 7 (id=5728): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x400, &(0x7f0000000000)={[{@discard}, {@data_err_ignore}]}, 0xfe, 0x563, &(0x7f0000001280)="$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") mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m43.841266697s ago: executing program 7 (id=5732): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m43.537479121s ago: executing program 7 (id=5753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040080) 2m43.498867761s ago: executing program 38 (id=5753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040080) 51.483993433s ago: executing program 2 (id=8345): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) ioctl$MON_IOCH_MFLUSH(r4, 0x9208, 0xb9) 51.275586606s ago: executing program 2 (id=8351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa2000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)='[\\)[*!}\x00', 0xfffffffffffffffe) 48.005358642s ago: executing program 2 (id=8391): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r0, 0xb701, 0x0) 47.986330802s ago: executing program 2 (id=8392): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") socket(0x200000000000011, 0x2, 0x9b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) flistxattr(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 47.877047814s ago: executing program 2 (id=8396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffff7fffffc}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20000, 0x2) epoll_create1(0x0) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000001240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="340000000506050000000000140065d80100000805000100070000000900030073797a32000000000900e8ff7279bce3000000006f522aab3683f9a1f128d47935d9340b0df9359ec1d9fc4cdb46905b856dea58db1ff111f81d382181a7fdaebb1e03d3637b8aec39da4393ea783fd5bcb9490200000000000000543a82af0e1fd1bcc5e562d55afba096bb909464e417c9a13017eca05148fe0b02673479f21e8c2e6a7c3b5407d291bdb88045bda6510bf28719d700b51b7fa66f8a287f852a739139139cbd7d43bd8d073a4568"], 0x34}, 0x1, 0x0, 0x0, 0x4043}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000400), &(0x7f0000000440)=r4}, 0x20) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b0704063474", 0xe50}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) 47.617547438s ago: executing program 2 (id=8399): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) lstat(&(0x7f0000000000)='./file0\x00', 0x0) 47.617173128s ago: executing program 39 (id=8399): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) lstat(&(0x7f0000000000)='./file0\x00', 0x0) 6.470299979s ago: executing program 9 (id=8794): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, 0x0, 0x9913af09da26c75e) modify_ldt$write(0x1, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) close_range(r1, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e42a9f4e00ab6de6b45"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_read_part_table(0x60f, &(0x7f0000000740)="$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") 6.36174411s ago: executing program 9 (id=8796): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 5.288759485s ago: executing program 9 (id=8803): openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) 4.785878132s ago: executing program 9 (id=8817): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xa}, {}, {0x0, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4c800) 3.069641987s ago: executing program 3 (id=8837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 3.006802068s ago: executing program 5 (id=8838): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r3, 0x0) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0123ffff"], 0x36) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 2.946198898s ago: executing program 3 (id=8839): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.784428991s ago: executing program 3 (id=8840): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xf003}, 0x0, {0x0, r4}}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 2.739789641s ago: executing program 3 (id=8841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x7}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) 2.658069752s ago: executing program 5 (id=8842): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000580), 0x1000, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) ioperm(0x40, 0x2, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x20, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0xa32, 0x0, 0x47, 0x0, 0x0) 2.444718925s ago: executing program 0 (id=8843): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.318825597s ago: executing program 0 (id=8844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) unshare(0x64000600) 2.274117847s ago: executing program 5 (id=8846): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000100), 0x1, 0x775, &(0x7f0000001900)="$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") r3 = open(0x0, 0x15903e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1.806611495s ago: executing program 3 (id=8847): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3, 0x0, 0x3}, 0x18) socket(0x10, 0x80003, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x1, 0xc642, 0xa}) 1.330903101s ago: executing program 0 (id=8848): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x14142, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4400000009060102000000ffffffde00000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e0004001de69e6f994419a"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.133168224s ago: executing program 1 (id=8849): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 1.053079685s ago: executing program 5 (id=8850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, 0x0, 0x0, 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x800800, @mcast2={0xff, 0x3}, 0x2}, 0x1c) 1.039713385s ago: executing program 9 (id=8851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r5) 968.698026ms ago: executing program 0 (id=8852): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r5, 0x0, 0x408cd, 0x100000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x10, r3, 0x100000000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1135) 929.851307ms ago: executing program 5 (id=8853): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1) 820.984819ms ago: executing program 3 (id=8854): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r4, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, [@srh]}}}}}}}, 0x0) 215.901757ms ago: executing program 1 (id=8855): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c020400) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r0, 0x1, 0xea, 0xa6ff, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) 190.855247ms ago: executing program 1 (id=8856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005"], 0x48) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x104cd6360081f360) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(0x0, r2, &(0x7f00000003c0)='./file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$sock(r3, 0x0, 0x40088d4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 133.154388ms ago: executing program 1 (id=8857): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r4) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 56.361319ms ago: executing program 1 (id=8858): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_bp={0x0, 0x5}, 0x104002, 0xa1b7, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 55.508439ms ago: executing program 9 (id=8859): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 43.248879ms ago: executing program 0 (id=8860): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 24.91007ms ago: executing program 1 (id=8861): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x5a, 0x0, 0x401, 0x6, 0x5, 0x7, "f72493b624af5651219c10f4ffbdf890135e7080b6a4c9d61544ff4b3fd7d2796743e6613dd428bc30536bc3c5555c4da440ec4d5f0bfcf9af96b88f779f709b204bc57e880973fe9f09016b0edb3db2e6e02c6a03d6fa8f1cad"}}, 0x172) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1d5000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x100) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 15.39223ms ago: executing program 5 (id=8862): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x7fffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}}) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) lseek(r0, 0x2000, 0x0) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x2000) 0s ago: executing program 0 (id=8863): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1e, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000100), 0x1, 0x775, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r3 = open(0x0, 0x15903e, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) kernel console output (not intermixed with test programs): 000 [ 260.273074][T25866] netlink: 'syz.2.7749': attribute type 1 has an invalid length. [ 260.359575][T25866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.404512][T25910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7749'. [ 260.433289][T25910] vlan0: entered promiscuous mode [ 260.438412][T25910] bond3: entered promiscuous mode [ 260.527486][T25866] dummy0: entered promiscuous mode [ 260.543303][T25866] bond0: (slave dummy0): Releasing backup interface [ 260.566370][T25866] bond3: (slave dummy0): making interface the new active one [ 260.581558][T25866] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 260.697438][T25923] lo speed is unknown, defaulting to 1000 [ 260.762672][T25930] random: crng reseeded on system resumption [ 261.092048][T25965] pim6reg1: entered promiscuous mode [ 261.097451][T25965] pim6reg1: entered allmulticast mode [ 261.131497][T25972] pim6reg1: entered promiscuous mode [ 261.136893][T25972] pim6reg1: entered allmulticast mode [ 261.268097][T25986] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.275357][T25986] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.275548][T25986] bridge0: entered allmulticast mode [ 261.305152][T25986] bridge_slave_1: left allmulticast mode [ 261.310960][T25986] bridge_slave_1: left promiscuous mode [ 261.316819][T25986] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.327162][T25986] bridge_slave_0: left allmulticast mode [ 261.327181][T25986] bridge_slave_0: left promiscuous mode [ 261.327248][T25986] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.373337][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 261.373396][ T29] audit: type=1400 audit(263.840:7511): avc: denied { read write } for pid=25995 comm="syz.9.7769" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 261.465382][T26003] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 261.465382][T26003] program syz.9.7771 not setting count and/or reply_len properly [ 261.673443][ T29] audit: type=1326 audit(264.155:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26021 comm="syz.2.7777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 261.696433][ T29] audit: type=1326 audit(264.155:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26021 comm="syz.2.7777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 261.728408][ T29] audit: type=1400 audit(264.218:7514): avc: denied { bind } for pid=26021 comm="syz.2.7777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.747413][ T29] audit: type=1400 audit(264.218:7515): avc: denied { name_bind } for pid=26021 comm="syz.2.7777" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 261.768660][ T29] audit: type=1400 audit(264.218:7516): avc: denied { node_bind } for pid=26021 comm="syz.2.7777" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 261.796479][ T29] audit: type=1326 audit(264.260:7517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26021 comm="syz.2.7777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 261.819726][ T29] audit: type=1326 audit(264.260:7518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26021 comm="syz.2.7777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 261.842653][ T29] audit: type=1326 audit(264.260:7519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26021 comm="syz.2.7777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 261.865602][ T29] audit: type=1400 audit(264.260:7520): avc: denied { shutdown } for pid=26021 comm="syz.2.7777" laddr=fe80::b lport=57926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 261.927636][T26040] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 261.927636][T26040] program syz.2.7784 not setting count and/or reply_len properly [ 262.038049][T26053] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7780'. [ 262.713916][T26070] pim6reg1: entered promiscuous mode [ 262.719335][T26070] pim6reg1: entered allmulticast mode [ 263.025132][T26083] pim6reg1: entered promiscuous mode [ 263.030541][T26083] pim6reg1: entered allmulticast mode [ 263.070993][T26098] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.114509][T24964] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 263.127029][T24964] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.153630][T26098] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.220727][T26098] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.288454][T26098] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.387489][T26098] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.426123][T26098] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.453215][T26098] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.473269][T26098] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.688540][T26178] syzkaller0: entered promiscuous mode [ 263.694074][T26178] syzkaller0: entered allmulticast mode [ 263.710917][T26183] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7820'. [ 264.004631][T26200] syzkaller0: entered promiscuous mode [ 264.067470][T26210] loop9: detected capacity change from 0 to 1024 [ 264.075736][T26210] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 264.095237][T26210] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 264.103831][T26210] EXT4-fs (loop9): write access unavailable, skipping orphan cleanup [ 264.114447][T26210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.157968][T15640] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.315333][T26222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7831'. [ 264.324464][T26222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7831'. [ 264.333583][T26222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7831'. [ 264.343042][T26222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7831'. [ 264.369905][T26224] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.377164][T26224] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.384797][T26224] bridge0: entered allmulticast mode [ 264.397080][T26224] bridge_slave_1: left allmulticast mode [ 264.402770][T26224] bridge_slave_1: left promiscuous mode [ 264.408478][T26224] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.416377][T26224] bridge_slave_0: left allmulticast mode [ 264.422209][T26224] bridge_slave_0: left promiscuous mode [ 264.427819][T26224] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.684875][T26245] syzkaller0: entered promiscuous mode [ 264.690599][T26245] syzkaller0: entered allmulticast mode [ 264.823482][T26255] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 264.831286][T26255] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 264.876281][T26259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7841'. [ 264.885596][T26259] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7841'. [ 264.922648][T26267] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.942631][T22443] usb usb8-port2: attempt power cycle [ 264.964580][T26267] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.010869][T26267] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.084179][T26288] loop9: detected capacity change from 0 to 512 [ 265.090948][T26288] EXT4-fs: Ignoring removed mblk_io_submit option [ 265.099664][T26267] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.124843][T26288] loop9: detected capacity change from 0 to 2048 [ 265.131512][T26288] EXT4-fs: quotafile must be on filesystem root [ 265.144128][T26288] random: crng reseeded on system resumption [ 265.151086][T26267] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.166139][T26267] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.178472][T26267] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.214056][T26267] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.222966][T26307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26307 comm=syz.2.7849 [ 265.318032][T26317] ref_ctr_offset mismatch. inode: 0x9d8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 265.330969][T26319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7851'. [ 265.333113][T26318] netlink: 136 bytes leftover after parsing attributes in process `syz.9.7853'. [ 265.348930][T26318] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 265.364913][T26319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.372571][T26319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.389177][T26319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.396692][T26319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.594256][T26338] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.651627][T26338] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.721590][T26350] veth5: entered promiscuous mode [ 265.727674][T26338] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.746624][T26350] erspan0: entered allmulticast mode [ 265.811401][T26338] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.903594][T26338] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.915694][T26338] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.928089][T26338] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.940525][T26338] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.949308][T26387] bridge0: entered allmulticast mode [ 266.098649][T26408] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 266.106627][T26408] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 266.143717][T26410] pim6reg1: entered promiscuous mode [ 266.149075][T26410] pim6reg1: entered allmulticast mode [ 266.634188][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 266.634202][ T29] audit: type=1326 audit(269.365:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.663457][ T29] audit: type=1326 audit(269.365:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.675434][T22443] usb usb8-port2: unable to enumerate USB device [ 266.700846][T26441] loop9: detected capacity change from 0 to 764 [ 266.740091][T26441] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 266.794273][ T29] audit: type=1326 audit(269.428:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.817364][ T29] audit: type=1326 audit(269.428:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.840344][ T29] audit: type=1326 audit(269.428:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.863207][ T29] audit: type=1326 audit(269.428:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.886343][ T29] audit: type=1326 audit(269.428:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.909226][ T29] audit: type=1326 audit(269.428:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.933612][ T29] audit: type=1326 audit(269.428:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 266.956514][ T29] audit: type=1326 audit(269.428:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26434 comm="syz.9.7879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f72212ce9a3 code=0x7ffc0000 [ 267.251902][T26458] lo speed is unknown, defaulting to 1000 [ 267.496603][T26494] pim6reg1: entered promiscuous mode [ 267.501954][T26494] pim6reg1: entered allmulticast mode [ 267.742315][T26510] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.950925][T24686] page_pool_release_retry() stalled pool shutdown: id 103, 2 inflight 60 sec [ 268.624326][T26535] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7904'. [ 268.728500][T26542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.805074][T26553] ref_ctr_offset mismatch. inode: 0x2028 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 269.065667][T26582] loop9: detected capacity change from 0 to 256 [ 269.105976][T26592] futex_wake_op: syz.9.7922 tries to shift op by -1; fix this program [ 269.292446][T26601] syzkaller0: entered promiscuous mode [ 269.321403][T26607] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 269.402530][T26614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.411539][T26614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.443324][T26605] syzkaller0: entered promiscuous mode [ 269.448953][T26605] syzkaller0: entered allmulticast mode [ 269.616138][T26646] netlink: 'syz.9.7933': attribute type 10 has an invalid length. [ 269.624208][T26646] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7933'. [ 269.633288][T26646] dummy0: entered promiscuous mode [ 269.639572][T26646] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 269.706723][T26651] lo speed is unknown, defaulting to 1000 [ 269.707899][T26655] smc: net device bond0 applied user defined pnetid SYZ2 [ 269.719763][T26655] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 269.744128][T26655] smc: net device bond0 erased user defined pnetid SYZ2 [ 269.752850][T26655] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 270.286673][T26724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7946'. [ 270.311643][T26724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7946'. [ 270.336496][T26724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7946'. [ 270.460245][T26737] block device autoloading is deprecated and will be removed. [ 270.662773][T26765] ÿ: renamed from bond_slave_0 (while UP) [ 270.974613][T26803] syzkaller0: entered promiscuous mode [ 270.980305][T26803] syzkaller0: entered allmulticast mode [ 271.126579][T26854] loop2: detected capacity change from 0 to 512 [ 271.147128][T26854] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 271.176274][T26854] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.7965: corrupted xattr entries [ 271.189595][T26854] EXT4-fs (loop2): Remounting filesystem read-only [ 271.202501][T26854] EXT4-fs (loop2): 1 truncate cleaned up [ 271.220191][T26854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.239918][T26868] loop9: detected capacity change from 0 to 512 [ 271.273987][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.353489][T26885] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7969'. [ 271.460430][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 271.460442][ T29] audit: type=1400 audit(274.438:7622): avc: denied { setopt } for pid=26908 comm="syz.9.7974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 271.486238][T26911] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7974'. [ 271.587753][T26925] loop9: detected capacity change from 0 to 1024 [ 271.712635][T26948] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7979'. [ 271.729959][T26951] tipc: New replicast peer: 255.255.255.255 [ 271.736365][T26951] tipc: Enabled bearer , priority 10 [ 271.765097][T26956] binfmt_misc: register: failed to install interpreter file ./file2 [ 272.333335][T26978] loop2: detected capacity change from 0 to 512 [ 272.340582][T26978] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 272.349688][T26978] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 272.358535][T26978] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 272.368251][T26978] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 272.376284][T26978] System zones: 0-2, 18-18, 34-35 [ 272.381797][T26978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.407601][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.423287][ T29] audit: type=1400 audit(275.446:7623): avc: denied { create } for pid=26981 comm="syz.3.7985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.443300][ T29] audit: type=1400 audit(275.446:7624): avc: denied { write } for pid=26981 comm="syz.3.7985" path="socket:[72302]" dev="sockfs" ino=72302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 272.471879][T26986] netlink: 'syz.2.7986': attribute type 1 has an invalid length. [ 272.488752][T26986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.503142][T27021] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7987'. [ 272.537140][T26986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7986'. [ 272.558913][T26986] bond4 (unregistering): Released all slaves [ 272.653432][T27090] sch_fq: defrate 0 ignored. [ 272.714842][T27094] tun0: tun_chr_ioctl cmd 1074025681 [ 272.743744][T27098] lo speed is unknown, defaulting to 1000 [ 272.797179][T24969] tipc: Node number set to 2488796186 [ 272.908321][ T29] audit: type=1326 audit(275.950:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27132 comm="syz.3.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 272.934831][T27133] xt_hashlimit: size too large, truncated to 1048576 [ 273.014055][ T29] audit: type=1326 audit(275.982:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27132 comm="syz.3.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 273.037238][ T29] audit: type=1326 audit(275.982:7627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27132 comm="syz.3.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 273.060275][ T29] audit: type=1326 audit(275.982:7628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27132 comm="syz.3.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 273.083147][ T29] audit: type=1326 audit(275.982:7629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27132 comm="syz.3.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 273.106124][ T29] audit: type=1326 audit(275.982:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27132 comm="syz.3.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 273.129036][ T29] audit: type=1326 audit(275.982:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27132 comm="syz.3.8001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 273.275434][T27149] netlink: 'syz.0.8003': attribute type 10 has an invalid length. [ 273.301548][T27149] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.326282][T27149] bond0: (slave team0): Enslaving as an active interface with an up link [ 273.493904][T27174] tipc: Enabling of bearer rejected, already enabled [ 273.583965][T27180] lo speed is unknown, defaulting to 1000 [ 273.775634][T27220] netlink: 'syz.3.8017': attribute type 1 has an invalid length. [ 273.793150][T27220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.805432][T27220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8017'. [ 273.817274][T27220] bond0 (unregistering): Released all slaves [ 274.056912][T27291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.072401][T27304] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8022'. [ 274.210344][T27316] loop9: detected capacity change from 0 to 164 [ 274.218205][T27316] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 274.227647][T27316] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 274.236080][T27316] Symlink component flag not implemented [ 274.241723][T27316] Symlink component flag not implemented [ 274.247756][T27316] Symlink component flag not implemented (7) [ 274.253774][T27316] Symlink component flag not implemented (116) [ 274.267580][T27322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8026'. [ 274.277288][T27318] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8026'. [ 274.348763][T27330] futex_wake_op: syz.1.8029 tries to shift op by -1; fix this program [ 274.435285][T27332] Falling back ldisc for ttyS3. [ 274.550677][T27347] loop9: detected capacity change from 0 to 128 [ 274.561623][T27347] netlink: '+}[@': attribute type 12 has an invalid length. [ 274.638918][T27362] loop9: detected capacity change from 0 to 512 [ 274.673718][T27362] loop9: detected capacity change from 0 to 8192 [ 274.729615][T27373] serio: Serial port ptm0 [ 274.794103][T27378] loop9: detected capacity change from 0 to 512 [ 274.806330][T27378] loop9: detected capacity change from 0 to 512 [ 274.955354][T27397] futex_wake_op: syz.3.8045 tries to shift op by -1; fix this program [ 275.007721][T27399] loop9: detected capacity change from 0 to 164 [ 275.020656][T27399] syz.9.8046: attempt to access beyond end of device [ 275.020656][T27399] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 275.035964][T27403] netlink: 'syz.3.8048': attribute type 1 has an invalid length. [ 275.046697][T27399] syz.9.8046: attempt to access beyond end of device [ 275.046697][T27399] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 275.094229][T27434] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.095087][T27403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8048'. [ 275.101479][T27434] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.130263][T27434] bridge0: entered allmulticast mode [ 275.149557][T27403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.164905][T27403] bond0: (slave batadv0): Enslaving as a backup interface with an up link [ 275.178919][T27449] loop9: detected capacity change from 0 to 512 [ 275.187770][T27443] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 275.201944][T27443] bond0 (unregistering): Released all slaves [ 275.222872][T27434] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.230080][T27434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.237533][T27434] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.244753][T27434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.252987][T27434] bridge0: entered promiscuous mode [ 275.273595][T27454] lo speed is unknown, defaulting to 1000 [ 276.385632][T27533] ref_ctr_offset mismatch. inode: 0xac4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 276.405163][T27535] loop9: detected capacity change from 0 to 128 [ 276.630184][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 276.630201][ T29] audit: type=1326 audit(279.702:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.686648][ T29] audit: type=1326 audit(279.702:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.709787][ T29] audit: type=1326 audit(279.702:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.733020][ T29] audit: type=1326 audit(279.702:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.756128][ T29] audit: type=1326 audit(279.702:7800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.779061][ T29] audit: type=1326 audit(279.702:7801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.802032][ T29] audit: type=1326 audit(279.702:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.824999][ T29] audit: type=1326 audit(279.702:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.848026][ T29] audit: type=1326 audit(279.702:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 276.870920][ T29] audit: type=1326 audit(279.702:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27552 comm="syz.0.8064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 277.941197][T27588] syzkaller0: entered promiscuous mode [ 277.946792][T27588] syzkaller0: entered allmulticast mode [ 278.042750][T27598] siw: device registration error -23 [ 278.142079][T27604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.150790][T27604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.178870][T27610] loop2: detected capacity change from 0 to 512 [ 278.185531][T27610] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 278.211973][T27615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8081'. [ 278.303150][T27629] vlan3: entered allmulticast mode [ 278.308701][T27629] bridge_slave_0: entered allmulticast mode [ 278.355421][T27637] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.8088'. [ 278.367142][T27637] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.8088'. [ 278.944199][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8096'. [ 278.976581][T27663] bond_slave_0: entered promiscuous mode [ 278.982353][T27663] bond_slave_1: entered promiscuous mode [ 278.988045][T27663] team_slave_0: entered promiscuous mode [ 278.993797][T27663] team_slave_1: entered promiscuous mode [ 279.078394][T27663] macsec0: entered promiscuous mode [ 279.083755][T27663] bond0: entered promiscuous mode [ 279.089149][T27663] team0: entered promiscuous mode [ 279.094744][T27663] macsec0: entered allmulticast mode [ 279.100312][T27663] bond0: entered allmulticast mode [ 279.105515][T27663] bond_slave_0: entered allmulticast mode [ 279.111303][T27663] bond_slave_1: entered allmulticast mode [ 279.117021][T27663] team0: entered allmulticast mode [ 279.122155][T27663] team_slave_0: entered allmulticast mode [ 279.127916][T27663] team_slave_1: entered allmulticast mode [ 279.918029][T27691] syzkaller0: entered promiscuous mode [ 279.923631][T27691] syzkaller0: entered allmulticast mode [ 279.985172][T27699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8107'. [ 279.994130][T27699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8107'. [ 280.042195][T27707] : (slave dummy0): Releasing backup interface [ 280.049821][T27707] bridge_slave_1: left allmulticast mode [ 280.055534][T27707] bridge_slave_1: left promiscuous mode [ 280.061571][T27707] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.083194][T27707] : (slave bond_slave_0): Releasing backup interface [ 280.094363][T27707] batadv1: left allmulticast mode [ 280.099493][T27707] batadv1: left promiscuous mode [ 280.104615][T27707] bridge0: port 3(batadv1) entered disabled state [ 280.118820][T27712] ref_ctr_offset mismatch. inode: 0x21fc offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 280.162304][T27707] netlink: 'syz.3.8109': attribute type 10 has an invalid length. [ 280.211861][T27707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8109'. [ 280.478494][T27727] xt_hashlimit: size too large, truncated to 1048576 [ 280.753106][T27733] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.820709][T27733] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.852301][T27742] binfmt_misc: register: failed to install interpreter file ./file2 [ 280.884430][T27733] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.939190][T27750] netlink: 'syz.1.8122': attribute type 1 has an invalid length. [ 280.949797][T27733] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.984233][T27750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8122'. [ 281.006274][T27750] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 281.029190][T27750] bond0: (slave batadv2): Enslaving as a backup interface with an up link [ 281.048984][T27733] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.062431][T27733] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.091029][T27733] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.113401][T27798] bond0 (unregistering): (slave batadv2): Releasing backup interface [ 281.131577][T27798] bond0 (unregistering): Released all slaves [ 281.159165][T27733] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.225740][T27843] loop2: detected capacity change from 0 to 128 [ 281.232795][T27843] vfat: Unknown parameter 'ÿÿ' [ 282.075658][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 282.075674][ T29] audit: type=1326 audit(284.804:7965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27881 comm="syz.1.8136" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72c0cbe969 code=0x0 [ 282.308525][T27917] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.341852][T27925] netlink: 'syz.2.8147': attribute type 1 has an invalid length. [ 282.357125][T27911] loop9: detected capacity change from 0 to 512 [ 282.364606][T27925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8147'. [ 282.374520][T27917] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.392157][T27925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.399887][T27925] bond4: (slave batadv0): Enslaving as a backup interface with an up link [ 282.414534][T27925] bond4 (unregistering): (slave batadv0): Releasing backup interface [ 282.431569][T27925] bond4 (unregistering): Released all slaves [ 282.467855][T27917] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.510547][ T29] audit: type=1326 audit(285.216:7966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.534010][ T29] audit: type=1326 audit(285.216:7967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.557057][ T29] audit: type=1326 audit(285.216:7968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.580093][ T29] audit: type=1326 audit(285.216:7969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.603312][ T29] audit: type=1326 audit(285.216:7970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.626233][ T29] audit: type=1326 audit(285.216:7971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.649173][ T29] audit: type=1326 audit(285.216:7972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.672723][ T29] audit: type=1326 audit(285.244:7973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.695703][ T29] audit: type=1326 audit(285.244:7974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28010 comm="syz.9.8151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 282.722326][T27917] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.735397][T28017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8153'. [ 282.744721][T28017] veth1_macvtap: left promiscuous mode [ 282.793690][T27917] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.805367][T27917] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.817652][T27917] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.829538][T27917] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.983474][T28042] netlink: 'syz.1.8158': attribute type 4 has an invalid length. [ 282.991345][T28042] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8158'. [ 283.008640][T28042] : renamed from $Hÿ [ 284.559956][T28099] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.666870][T28099] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.705942][T28106] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8174'. [ 284.732509][T28099] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.805807][T28099] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.875663][T28099] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.900367][T28116] netlink: 'syz.9.8175': attribute type 10 has an invalid length. [ 284.903730][T28099] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.938844][T28116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.958345][T28116] bond0: entered promiscuous mode [ 284.968942][T28116] team0: Port device bond0 added [ 284.982342][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8175'. [ 284.994171][T28099] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.021583][T28121] bond0: left promiscuous mode [ 285.034552][T28121] team0 (unregistering): Port device bond0 removed [ 285.068224][T28099] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.786831][T28175] loop2: detected capacity change from 0 to 512 [ 286.049434][T28175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.074877][T28175] EXT4-fs (loop2): 1 truncate cleaned up [ 286.081256][T28175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.093586][T28180] ref_ctr_offset mismatch. inode: 0xc84 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xee0000000000 [ 286.108188][T28180] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 286.116553][T28180] ref_ctr decrement failed for inode: 0xc84 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888109ab2680 [ 286.128470][T28180] uprobe: syz.9.8181:28180 failed to unregister, leaking uprobe [ 286.176773][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.667735][T28182] xt_hashlimit: max too large, truncated to 1048576 [ 286.917632][T28214] loop2: detected capacity change from 0 to 2048 [ 286.951844][T28214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.979960][T28214] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.8191: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 287.002580][T28214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8191'. [ 287.064050][T28225] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8194'. [ 287.076027][T28225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8194'. [ 287.086678][T28214] hsr_slave_0 (unregistering): left promiscuous mode [ 287.237496][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.269205][T28255] tipc: Enabling of bearer rejected, failed to enable media [ 287.290641][T28236] lo speed is unknown, defaulting to 1000 [ 287.312302][T28257] loop2: detected capacity change from 0 to 1024 [ 287.361859][T28257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.381949][T28257] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 287.405394][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.431831][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 287.431845][ T29] audit: type=1400 audit(289.811:8273): avc: denied { name_bind } for pid=28289 comm="syz.1.8207" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 287.505379][T28302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8209'. [ 287.581977][ T29] audit: type=1400 audit(289.961:8274): avc: denied { name_connect } for pid=28310 comm="syz.1.8223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 287.614424][ T29] audit: type=1400 audit(289.961:8275): avc: denied { listen } for pid=28310 comm="syz.1.8223" lport=44023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.636950][ T29] audit: type=1400 audit(289.961:8276): avc: denied { accept } for pid=28310 comm="syz.1.8223" lport=44023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.659518][ T29] audit: type=1400 audit(289.961:8277): avc: denied { write } for pid=28310 comm="syz.1.8223" lport=44023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 287.682533][ T29] audit: type=1400 audit(289.961:8278): avc: denied { setopt } for pid=28310 comm="syz.1.8223" lport=44023 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 287.789457][T28321] pim6reg1: entered promiscuous mode [ 287.794799][T28321] pim6reg1: entered allmulticast mode [ 287.879162][T28327] xt_hashlimit: max too large, truncated to 1048576 [ 287.890322][T28327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8217'. [ 287.932405][T28330] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8219'. [ 287.957535][ T29] audit: type=1326 audit(290.317:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28332 comm="syz.2.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 287.977103][T28337] wg2: left promiscuous mode [ 287.985038][T28337] wg2: left allmulticast mode [ 287.988834][T28334] loop2: detected capacity change from 0 to 512 [ 287.999909][ T29] audit: type=1326 audit(290.336:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28332 comm="syz.2.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 288.023061][ T29] audit: type=1326 audit(290.336:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28332 comm="syz.2.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 288.046076][ T29] audit: type=1326 audit(290.336:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28332 comm="syz.2.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9f085e969 code=0x7ffc0000 [ 288.119392][T28334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.139970][T28337] wg2: entered promiscuous mode [ 288.144861][T28337] wg2: entered allmulticast mode [ 288.239977][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.267963][T28356] vhci_hcd: default hub control req: 2007 v0005 i0001 l20 [ 288.922913][T28383] loop2: detected capacity change from 0 to 512 [ 288.929879][T28383] journal_path: Non-blockdev passed as './bus' [ 288.936053][T28383] EXT4-fs: error: could not find journal device path [ 288.944066][T28383] rdma_op ffff88812c269980 conn xmit_rdma 0000000000000000 [ 289.090910][T28400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.100608][T28400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.380018][T28421] syzkaller0: entered allmulticast mode [ 289.386020][T28421] syzkaller0: entered promiscuous mode [ 289.394595][T28421] syzkaller0 (unregistering): left promiscuous mode [ 289.401319][T28421] syzkaller0 (unregistering): left allmulticast mode [ 289.913956][T28446] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 290.206083][T28465] vhci_hcd: default hub control req: 2007 v0005 i0001 l20 [ 290.726965][T28475] loop9: detected capacity change from 0 to 1024 [ 291.055670][T28490] loop2: detected capacity change from 0 to 128 [ 291.097411][T28490] syz.2.8265: attempt to access beyond end of device [ 291.097411][T28490] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 291.120491][T28490] syz.2.8265: attempt to access beyond end of device [ 291.120491][T28490] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 291.187528][T28490] syz.2.8265: attempt to access beyond end of device [ 291.187528][T28490] loop2: rw=2049, sector=161, nr_sectors = 2 limit=128 [ 291.334446][T28483] loop9: detected capacity change from 0 to 512 [ 291.341467][T28483] journal_path: Non-blockdev passed as './bus' [ 291.347864][T28483] EXT4-fs: error: could not find journal device path [ 292.196367][T28508] Set syz1 is full, maxelem 65536 reached [ 292.377687][T28514] loop2: detected capacity change from 0 to 2048 [ 292.448426][T28514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.605753][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.991975][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 292.991991][ T29] audit: type=1326 audit(295.025:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.051507][ T29] audit: type=1326 audit(295.025:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.074865][ T29] audit: type=1326 audit(295.053:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.097961][ T29] audit: type=1326 audit(295.053:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.120962][ T29] audit: type=1326 audit(295.053:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.143958][ T29] audit: type=1326 audit(295.053:8447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.166986][ T29] audit: type=1326 audit(295.053:8448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.189891][ T29] audit: type=1326 audit(295.053:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.212946][ T29] audit: type=1326 audit(295.053:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.235896][ T29] audit: type=1326 audit(295.053:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28578 comm="syz.9.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 293.240369][T28579] loop9: detected capacity change from 0 to 8192 [ 293.527433][T28590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8299'. [ 293.578545][T28590] netlink: 'syz.1.8299': attribute type 10 has an invalid length. [ 293.596432][T28590] : left promiscuous mode [ 293.600934][T28590] bond_slave_0: left promiscuous mode [ 293.606394][T28590] bond_slave_1: left promiscuous mode [ 293.640473][T28593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8299'. [ 293.646646][T28590] 8021q: adding VLAN 0 to HW filter on device  [ 293.665816][T28590] team0: Port device  added [ 293.717176][T28593] team0 (unregistering): Port device team_slave_0 removed [ 293.758206][T28593] team0 (unregistering): Port device team_slave_1 removed [ 293.833289][T28593] team0 (unregistering): Port device  removed [ 294.636825][T28643] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 294.796937][T28661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8300'. [ 294.806270][T28661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.826876][T28665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8301'. [ 294.837478][T28661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.052251][T28698] tipc: Enabled bearer , priority 0 [ 295.102831][T28685] tipc: Resetting bearer [ 295.142410][T28685] tipc: Disabling bearer [ 295.191625][T28682] lo speed is unknown, defaulting to 1000 [ 295.282421][T28714] lo speed is unknown, defaulting to 1000 [ 295.317110][T28720] loop9: detected capacity change from 0 to 2048 [ 295.384694][T28730] loop9: detected capacity change from 0 to 1024 [ 295.403172][T28730] loop9: detected capacity change from 0 to 164 [ 295.410063][T28730] grow_buffers: requested out-of-range block 18446744072635809824 for device loop9 [ 295.419485][T28730] isofs_fill_super: bread failed, dev=loop9, iso_blknum=1610612752, block=-1073741792 [ 295.459043][T28740] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8323'. [ 295.674227][T28742] wireguard0: entered promiscuous mode [ 295.679910][T28742] wireguard0: entered allmulticast mode [ 295.708238][T28779] netlink: 'syz.9.8326': attribute type 7 has an invalid length. [ 295.716100][T28779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8326'. [ 295.811071][T28799] loop9: detected capacity change from 0 to 512 [ 295.878665][T28814] loop9: detected capacity change from 0 to 164 [ 295.899415][T28814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 295.931479][T28814] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 295.954769][T28814] Symlink component flag not implemented [ 295.956748][T28819] lo speed is unknown, defaulting to 1000 [ 295.960467][T28814] Symlink component flag not implemented [ 295.972622][T28814] Symlink component flag not implemented (7) [ 295.980167][T28814] Symlink component flag not implemented (116) [ 297.141509][T28888]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.163477][T28888]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.196898][T28888]  (unregistering): Released all slaves [ 297.439118][T28950] loop9: detected capacity change from 0 to 128 [ 297.527749][T28963] netlink: 'syz.9.8357': attribute type 6 has an invalid length. [ 297.786253][T28978] SELinux: failed to load policy [ 297.882376][T28988] netlink: 5 bytes leftover after parsing attributes in process `syz.0.8361'. [ 297.891611][T28988] 0ªX¹¦D: renamed from gretap0 (while UP) [ 297.919244][T28988] 0ªX¹¦D: entered allmulticast mode [ 297.925149][T28988] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 298.011943][T28999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8364'. [ 298.021036][T28999] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8364'. [ 298.380188][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 298.380201][ T29] audit: type=1400 audit(300.061:8630): avc: denied { read write } for pid=15640 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.448124][ T29] audit: type=1400 audit(300.089:8631): avc: denied { open } for pid=15640 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.471929][ T29] audit: type=1400 audit(300.089:8632): avc: denied { ioctl } for pid=15640 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.497107][ T29] audit: type=1400 audit(300.117:8633): avc: denied { create } for pid=29019 comm="syz.9.8369" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 298.517535][ T29] audit: type=1400 audit(300.117:8634): avc: denied { mounton } for pid=29019 comm="syz.9.8369" path="/648/file0" dev="tmpfs" ino=3438 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 298.540114][ T29] audit: type=1400 audit(300.117:8635): avc: denied { mount } for pid=29019 comm="syz.9.8369" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 298.561665][ T29] audit: type=1400 audit(300.117:8636): avc: denied { write } for pid=29019 comm="syz.9.8369" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.581957][ T29] audit: type=1400 audit(300.117:8637): avc: denied { open } for pid=29019 comm="syz.9.8369" path="/648/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.603903][ T29] audit: type=1400 audit(300.126:8638): avc: denied { read } for pid=29019 comm="syz.9.8369" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.624273][ T29] audit: type=1400 audit(300.126:8639): avc: denied { ioctl } for pid=29019 comm="syz.9.8369" path="/648/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.772762][T29030] bridge0: port 1(bond0) entered blocking state [ 298.779148][T29030] bridge0: port 1(bond0) entered disabled state [ 298.786329][T29030] bond0: entered allmulticast mode [ 298.869336][T29032] loop9: detected capacity change from 0 to 2048 [ 299.043907][T29046] loop9: detected capacity change from 0 to 1764 [ 299.058421][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8378'. [ 299.113373][T29048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8378'. [ 299.198025][T29065] tipc: Enabling of bearer rejected, already enabled [ 299.590038][T29086] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 299.596598][T29086] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 299.604197][T29086] vhci_hcd vhci_hcd.0: Device attached [ 299.625385][T29088] vhci_hcd: connection closed [ 299.626090][T11126] vhci_hcd: stop threads [ 299.635054][T11126] vhci_hcd: release socket [ 299.639517][T11126] vhci_hcd: disconnect device [ 299.752256][T29090] lo speed is unknown, defaulting to 1000 [ 299.998695][T29084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.010539][T29084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.480923][T29122] loop2: detected capacity change from 0 to 2048 [ 300.499822][T29122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.527244][ T3316] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /1749/file1: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 300.548661][T29130] wireguard2: entered promiscuous mode [ 300.550010][ T3316] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 345: padding at end of block bitmap is not set [ 300.554392][T29130] wireguard2: entered allmulticast mode [ 300.571314][ T3316] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 300.587159][ T3316] EXT4-fs error (device loop2): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 300.601468][ T3316] EXT4-fs error (device loop2): ext4_lookup:1789: inode #14: comm syz-executor: invalid fast symlink length 39 [ 300.654166][T22795] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.226467][T29146] lo speed is unknown, defaulting to 1000 [ 301.277568][T29163] loop9: detected capacity change from 0 to 256 [ 301.403967][T29170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8404'. [ 301.448951][T29170] hsr_slave_0: left promiscuous mode [ 301.456041][T29170] hsr_slave_1: left promiscuous mode [ 301.817035][T29146] chnl_net:caif_netlink_parms(): no params data found [ 301.955107][T29273] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.041244][T29273] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.092777][T29146] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.099962][T29146] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.147623][T29146] bridge_slave_0: entered allmulticast mode [ 302.171194][T29146] bridge_slave_0: entered promiscuous mode [ 302.190874][T29273] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.212039][T29146] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.219165][T29146] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.257027][T29146] bridge_slave_1: entered allmulticast mode [ 302.299429][T29146] bridge_slave_1: entered promiscuous mode [ 302.329456][T29273] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.411322][T29146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.461887][T29273] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.500692][T29146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.525149][T29273] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.602251][T29273] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.671886][T29146] team0: Port device team_slave_0 added [ 302.689408][T29146] team0: Port device team_slave_1 added [ 302.718310][T29273] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.743676][T29146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.750638][T29146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.776765][T29146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.788587][T29146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.795627][T29146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.821666][T29146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.875297][T29146] hsr_slave_0: entered promiscuous mode [ 302.882343][T29146] hsr_slave_1: entered promiscuous mode [ 302.888465][T29146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.902026][T29146] Cannot create hsr debugfs directory [ 303.589318][T29146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.625361][T29146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.640941][T29146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.652190][T29146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.744704][T29146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.782209][T29146] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.793090][T29575] netlink: '+}[@': attribute type 10 has an invalid length. [ 303.800517][T29575] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 303.811679][T29575] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 303.834175][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.841273][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.869265][T11091] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.876356][T11091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.953236][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 303.953303][ T29] audit: type=1400 audit(305.284:8760): avc: denied { create } for pid=29578 comm="syz.0.8418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 303.964194][T29146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.989071][T29146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.013263][ T29] audit: type=1400 audit(305.331:8761): avc: denied { write } for pid=29578 comm="syz.0.8418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 304.131367][ T29] audit: type=1326 audit(305.452:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29578 comm="syz.0.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 304.194057][T29146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.208135][ T29] audit: type=1326 audit(305.452:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29578 comm="syz.0.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 304.231233][ T29] audit: type=1326 audit(305.471:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29578 comm="syz.0.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 304.254300][ T29] audit: type=1326 audit(305.471:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29578 comm="syz.0.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 304.277204][ T29] audit: type=1400 audit(305.499:8766): avc: denied { mount } for pid=29600 comm="syz.1.8420" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 304.298955][ T29] audit: type=1400 audit(305.499:8767): avc: denied { create } for pid=29600 comm="syz.1.8420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.318488][ T29] audit: type=1326 audit(305.509:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29578 comm="syz.0.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 304.341570][ T29] audit: type=1326 audit(305.509:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29578 comm="syz.0.8418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cbea3e969 code=0x7ffc0000 [ 304.563033][T29146] veth0_vlan: entered promiscuous mode [ 304.582664][T29635] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8427'. [ 304.584756][T29146] veth1_vlan: entered promiscuous mode [ 304.637969][T29146] veth0_macvtap: entered promiscuous mode [ 304.652580][T29146] veth1_macvtap: entered promiscuous mode [ 304.677677][T29146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.686863][T29146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.698992][T29146] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.707843][T29146] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.716604][T29146] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.725483][T29146] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.767014][T29640] erspan0: left allmulticast mode [ 305.682972][T29680] SELinux: Context system_u:object_r:dhcpd_state_t:s0 is not valid (left unmapped). [ 305.771627][T29686] lo speed is unknown, defaulting to 1000 [ 306.060728][T29690] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 306.550541][T29738] tipc: New replicast peer: 10.1.1.2 [ 306.556258][T29738] tipc: Enabled bearer , priority 10 [ 306.636147][T29741] netlink: 'syz.1.8443': attribute type 21 has an invalid length. [ 307.081882][T29753] loop5: detected capacity change from 0 to 128 [ 307.226341][T29758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8449'. [ 307.298309][T29758] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.308343][T29758] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.317594][T29758] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.326804][T29758] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.434338][T29758] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.444350][T29758] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.453613][T29758] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.462791][T29758] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.799019][T29792] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8457'. [ 307.810460][T29792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8457'. [ 307.826175][T29792] team0 (unregistering): Port device team_slave_0 removed [ 307.838475][T29792] team0 (unregistering): Port device team_slave_1 removed [ 307.870267][T29829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.878987][T29829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.963375][T29833] loop9: detected capacity change from 0 to 2048 [ 308.011312][T29833] loop9: p1 < > p3 [ 308.012598][T29841] syzkaller0: entered promiscuous mode [ 308.016550][T29833] loop9: p3 size 134217728 extends beyond EOD, [ 308.020729][T29841] syzkaller0: entered allmulticast mode [ 308.032728][T29833] truncated [ 308.154534][T29859] block device autoloading is deprecated and will be removed. [ 308.162606][T29859] syz.0.8464: attempt to access beyond end of device [ 308.162606][T29859] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 308.537511][T29897] netlink: 'syz.3.8469': attribute type 21 has an invalid length. [ 308.571848][T29910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.601090][T29910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.780683][T29946] loop9: detected capacity change from 0 to 512 [ 308.793371][T29946] EXT4-fs: Ignoring removed i_version option [ 309.769401][T30017] loop9: detected capacity change from 0 to 128 [ 309.814408][T30017] loop9: detected capacity change from 0 to 512 [ 309.821143][T30017] EXT4-fs: Ignoring removed orlov option [ 309.881482][T30026] loop9: detected capacity change from 0 to 128 [ 310.705451][T30078] loop5: detected capacity change from 0 to 512 [ 310.729311][T30078] EXT4-fs: inline encryption not supported [ 310.737751][T30078] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.750688][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 310.750703][ T29] audit: type=1400 audit(311.649:8835): avc: denied { mounton } for pid=30080 comm="syz.3.8495" path="/1679/file0" dev="tmpfs" ino=8735 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 310.793349][T30078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 310.811713][ T29] audit: type=1400 audit(311.705:8836): avc: denied { add_name } for pid=30077 comm="syz.5.8503" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.832010][ T29] audit: type=1400 audit(311.705:8837): avc: denied { create } for pid=30077 comm="syz.5.8503" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 310.852733][ T29] audit: type=1400 audit(311.724:8838): avc: denied { read write open } for pid=30077 comm="syz.5.8503" path="/8/file0/file1" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 310.889229][T29146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 311.064895][T30126] syzkaller0: entered allmulticast mode [ 311.073586][T30126] syzkaller0: entered promiscuous mode [ 311.079179][T30126] syzkaller0: left allmulticast mode [ 311.099287][T30126] syzkaller0: left promiscuous mode [ 311.142869][T30132] loop0: detected capacity change from 0 to 8192 [ 311.215910][ T29] audit: type=1326 audit(312.089:8839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30145 comm="syz.3.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 311.250494][ T29] audit: type=1326 audit(312.107:8840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30145 comm="syz.3.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 311.273526][ T29] audit: type=1326 audit(312.107:8841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30145 comm="syz.3.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 311.283712][T30149] 0ªX¹¦D: left allmulticast mode [ 311.296548][ T29] audit: type=1326 audit(312.107:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30145 comm="syz.3.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 311.306088][T30149] sit0: left promiscuous mode [ 311.324586][ T29] audit: type=1326 audit(312.107:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30145 comm="syz.3.8505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaef2ce969 code=0x7ffc0000 [ 311.336247][T30149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.373279][ T29] audit: type=1400 audit(312.145:8844): avc: denied { append } for pid=30148 comm="syz.9.8506" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 311.405060][T30149] dummy0: left promiscuous mode [ 311.415747][T30149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.556447][T30170] netlink: 'syz.3.8512': attribute type 39 has an invalid length. [ 311.692971][T30181] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.772772][T30181] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.836570][T30181] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.931023][T30181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.013295][T30181] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.028065][T30181] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.040541][T30181] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.055945][T30181] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.124047][T30209] @: renamed from vlan0 (while UP) [ 312.460213][T30194] syz.1.8520 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 312.474577][T30194] CPU: 1 UID: 0 PID: 30194 Comm: syz.1.8520 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 312.474694][T30194] Tainted: [W]=WARN [ 312.474703][T30194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 312.474719][T30194] Call Trace: [ 312.474727][T30194] [ 312.474737][T30194] __dump_stack+0x1d/0x30 [ 312.474764][T30194] dump_stack_lvl+0xe8/0x140 [ 312.474784][T30194] dump_stack+0x15/0x1b [ 312.474805][T30194] dump_header+0x81/0x220 [ 312.474843][T30194] oom_kill_process+0x334/0x3f0 [ 312.474871][T30194] out_of_memory+0x979/0xb80 [ 312.474899][T30194] ? css_next_descendant_pre+0x138/0x160 [ 312.474975][T30194] mem_cgroup_out_of_memory+0x13d/0x190 [ 312.475011][T30194] try_charge_memcg+0x5e2/0x870 [ 312.475041][T30194] obj_cgroup_charge_pages+0xb7/0x1a0 [ 312.475084][T30194] __memcg_kmem_charge_page+0x9f/0x170 [ 312.475173][T30194] __alloc_frozen_pages_noprof+0x188/0x360 [ 312.475205][T30194] alloc_pages_mpol+0xb3/0x250 [ 312.475230][T30194] alloc_pages_noprof+0x90/0x130 [ 312.475257][T30194] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 312.475329][T30194] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 312.475471][T30194] ? ip_set_alloc+0x1f/0x30 [ 312.475496][T30194] ? ip_set_alloc+0x1f/0x30 [ 312.475532][T30194] ip_set_alloc+0x1f/0x30 [ 312.475618][T30194] hash_netiface_create+0x282/0x740 [ 312.475654][T30194] ? __pfx_hash_netiface_create+0x10/0x10 [ 312.475681][T30194] ip_set_create+0x3c9/0x960 [ 312.475809][T30194] ? __nla_parse+0x40/0x60 [ 312.475830][T30194] nfnetlink_rcv_msg+0x4c6/0x590 [ 312.475878][T30194] netlink_rcv_skb+0x123/0x220 [ 312.475916][T30194] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 312.475979][T30194] nfnetlink_rcv+0x16b/0x1690 [ 312.476006][T30194] ? __kfree_skb+0x109/0x150 [ 312.476026][T30194] ? nlmon_xmit+0x4f/0x60 [ 312.476045][T30194] ? consume_skb+0x49/0x150 [ 312.476092][T30194] ? nlmon_xmit+0x4f/0x60 [ 312.476110][T30194] ? dev_hard_start_xmit+0x39e/0x3d0 [ 312.476130][T30194] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 312.476197][T30194] ? __dev_queue_xmit+0x182/0x1fb0 [ 312.476232][T30194] ? ref_tracker_free+0x37d/0x3e0 [ 312.476270][T30194] ? __netlink_deliver_tap+0x4dc/0x500 [ 312.476299][T30194] netlink_unicast+0x5a1/0x670 [ 312.476379][T30194] netlink_sendmsg+0x58b/0x6b0 [ 312.476412][T30194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.476437][T30194] __sock_sendmsg+0x145/0x180 [ 312.476470][T30194] ____sys_sendmsg+0x31e/0x4e0 [ 312.476497][T30194] ___sys_sendmsg+0x17b/0x1d0 [ 312.476540][T30194] __x64_sys_sendmsg+0xd4/0x160 [ 312.476583][T30194] x64_sys_call+0x2999/0x2fb0 [ 312.476685][T30194] do_syscall_64+0xd0/0x1a0 [ 312.476712][T30194] ? clear_bhb_loop+0x40/0x90 [ 312.476731][T30194] ? clear_bhb_loop+0x40/0x90 [ 312.476750][T30194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.476768][T30194] RIP: 0033:0x7f72c0cbe969 [ 312.476817][T30194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.476883][T30194] RSP: 002b:00007f72bf327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.476903][T30194] RAX: ffffffffffffffda RBX: 00007f72c0ee5fa0 RCX: 00007f72c0cbe969 [ 312.476919][T30194] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 312.476973][T30194] RBP: 00007f72c0d40ab1 R08: 0000000000000000 R09: 0000000000000000 [ 312.477062][T30194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.477076][T30194] R13: 0000000000000000 R14: 00007f72c0ee5fa0 R15: 00007ffd045dc3e8 [ 312.477169][T30194] [ 312.477244][T30194] memory: usage 307200kB, limit 307200kB, failcnt 145 [ 312.830949][T30194] memory+swap: usage 307864kB, limit 9007199254740988kB, failcnt 0 [ 312.838880][T30194] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 312.846199][T30194] Memory cgroup stats for /syz1: [ 312.846477][T30194] cache 0 [ 312.854428][T30194] rss 4096 [ 312.857529][T30194] shmem 0 [ 312.860714][T30194] mapped_file 0 [ 312.864282][T30194] dirty 0 [ 312.867230][T30194] writeback 0 [ 312.870535][T30194] workingset_refault_anon 205 [ 312.875211][T30194] workingset_refault_file 1968 [ 312.877150][T30227] loop9: detected capacity change from 0 to 512 [ 312.880005][T30194] swap 679936 [ 312.889568][T30194] swapcached 16384 [ 312.893324][T30194] pgpgin 299243 [ 312.896819][T30194] pgpgout 299237 [ 312.900362][T30194] pgfault 347951 [ 312.904002][T30194] pgmajfault 55 [ 312.907459][T30194] inactive_anon 8192 [ 312.911346][T30194] active_anon 8192 [ 312.915154][T30194] inactive_file 0 [ 312.918794][T30194] active_file 8192 [ 312.922517][T30194] unevictable 0 [ 312.926018][T30194] hierarchical_memory_limit 314572800 [ 312.931427][T30194] hierarchical_memsw_limit 9223372036854771712 [ 312.937648][T30194] total_cache 0 [ 312.941110][T30194] total_rss 4096 [ 312.944786][T30194] total_shmem 0 [ 312.948255][T30194] total_mapped_file 0 [ 312.952248][T30194] total_dirty 0 [ 312.955783][T30194] total_writeback 0 [ 312.956762][T30236] loop9: detected capacity change from 0 to 1024 [ 312.959575][T30194] total_workingset_refault_anon 205 [ 312.971115][T30194] total_workingset_refault_file 1968 [ 312.976431][T30194] total_swap 679936 [ 312.980238][T30194] total_swapcached 16384 [ 312.984542][T30194] total_pgpgin 299243 [ 312.988570][T30194] total_pgpgout 299237 [ 312.992701][T30194] total_pgfault 347951 [ 312.996750][T30194] total_pgmajfault 55 [ 313.000732][T30194] total_inactive_anon 8192 [ 313.005164][T30194] total_active_anon 8192 [ 313.009468][T30194] total_inactive_file 0 [ 313.013687][T30194] total_active_file 8192 [ 313.017939][T30194] total_unevictable 0 [ 313.021917][T30194] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8520,pid=30193,uid=0 [ 313.036721][T30194] Memory cgroup out of memory: Killed process 30193 (syz.1.8520) total-vm:95796kB, anon-rss:936kB, file-rss:22476kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 313.166597][T30244] loop9: detected capacity change from 0 to 512 [ 313.260994][T30256] loop9: detected capacity change from 0 to 512 [ 313.420659][T30266] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.471283][T30266] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.500101][T30271] xt_hashlimit: max too large, truncated to 1048576 [ 313.519545][T30271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8535'. [ 313.530474][T30266] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.546271][T30282] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8536'. [ 313.588748][T30266] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.617058][T30263] lo speed is unknown, defaulting to 1000 [ 313.655513][T30266] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.762026][T30266] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.774009][T30266] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.786389][T30266] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.934424][T30336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.943246][T30336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.300110][T30384] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8551'. [ 314.550820][T30430] loop9: detected capacity change from 0 to 512 [ 314.790507][T30462] loop5: detected capacity change from 0 to 256 [ 315.227173][T30514] syzkaller0: entered promiscuous mode [ 315.232755][T30514] syzkaller0: entered allmulticast mode [ 315.354198][T30539] syzkaller0: entered allmulticast mode [ 315.365471][T30539] syzkaller0: entered promiscuous mode [ 315.371158][T30539] syzkaller0: left allmulticast mode [ 315.385297][T30539] syzkaller0: left promiscuous mode [ 315.416897][T30546] xt_hashlimit: max too large, truncated to 1048576 [ 315.445217][T30546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8573'. [ 315.823894][T30582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8579'. [ 315.833534][T30582] bridge_slave_1: left allmulticast mode [ 315.839229][T30582] bridge_slave_1: left promiscuous mode [ 315.845183][T30582] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.863278][T30582] bridge_slave_0: left allmulticast mode [ 315.868959][T30582] bridge_slave_0: left promiscuous mode [ 315.874792][T30582] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.994231][T30595] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 316.105580][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 316.105592][ T29] audit: type=1400 audit(316.657:8975): avc: denied { write } for pid=30600 comm="syz.5.8596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 316.184681][ T29] audit: type=1400 audit(316.731:8976): avc: denied { read write } for pid=15640 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 316.211782][ T29] audit: type=1400 audit(316.731:8977): avc: denied { open } for pid=15640 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 316.238688][ T29] audit: type=1400 audit(316.731:8978): avc: denied { ioctl } for pid=15640 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:dhcpd_state_t:s0" [ 316.313365][T30608] loop5: detected capacity change from 0 to 512 [ 316.346446][T30608] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 316.364999][T30608] EXT4-fs (loop5): orphan cleanup on readonly fs [ 316.381072][ T29] audit: type=1400 audit(316.844:8979): avc: denied { read } for pid=30605 comm="syz.9.8587" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 316.401871][ T29] audit: type=1400 audit(316.844:8980): avc: denied { open } for pid=30605 comm="syz.9.8587" path="net:[4026533519]" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 316.424629][ T29] audit: type=1400 audit(316.844:8981): avc: denied { create } for pid=30605 comm="syz.9.8587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 316.444127][ T29] audit: type=1400 audit(316.844:8982): avc: denied { read } for pid=30605 comm="syz.9.8587" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 316.466903][ T29] audit: type=1400 audit(316.844:8983): avc: denied { open } for pid=30605 comm="syz.9.8587" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 316.490545][ T29] audit: type=1400 audit(316.853:8984): avc: denied { mounton } for pid=30607 comm="+}[@" path="/24/file0" dev="tmpfs" ino=145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 316.512975][T30608] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 256 (level 2) [ 316.527163][T30608] EXT4-fs (loop5): 2 truncates cleaned up [ 316.533437][T30608] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.585080][T29146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.651144][T30617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8589'. [ 316.743406][T30627] netlink: 'syz.1.8594': attribute type 10 has an invalid length. [ 316.858630][T30635] loop5: detected capacity change from 0 to 2048 [ 316.893578][T30635] EXT4-fs error (device loop5): __ext4_fill_super:5502: inode #2: comm syz.5.8598: iget: bad extended attribute block 281474976710655 [ 316.922153][T30638] lo speed is unknown, defaulting to 1000 [ 316.939527][T30635] EXT4-fs (loop5): get root inode failed [ 316.945384][T30635] EXT4-fs (loop5): mount failed [ 317.109353][T30681] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8606'. [ 317.159512][T30684] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.251628][T30682] netlink: 'syz.5.8605': attribute type 1 has an invalid length. [ 317.259402][T30682] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8605'. [ 317.290856][T30684] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.368887][T30684] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.438807][T30701] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 317.496631][T30684] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.631809][T30684] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.673348][T30684] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.700422][T30684] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.725186][T30684] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.928488][T30720] loop5: detected capacity change from 0 to 2048 [ 318.083375][T30720] loop5: p1 < > p4 [ 318.089075][T30720] loop5: p4 size 8388608 extends beyond EOD, truncated [ 318.462255][T30735] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.616110][T30735] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.707079][T30735] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.791439][T30735] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.906570][T30757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8618'. [ 318.918335][T30735] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.935184][T30735] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.948733][T30735] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.965231][T30767] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8619'. [ 318.977168][T30735] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.000471][T30767] bond0: left allmulticast mode [ 319.005563][T30767] bridge0: port 1(bond0) entered disabled state [ 319.141893][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8623'. [ 319.422151][T30780] lo speed is unknown, defaulting to 1000 [ 319.906362][T30813] loop0: detected capacity change from 0 to 512 [ 319.932554][T30813] EXT4-fs (loop0): too many log groups per flexible block group [ 319.940377][T30813] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 319.947237][T30813] EXT4-fs (loop0): mount failed [ 319.964381][T30813] loop0: detected capacity change from 0 to 1024 [ 319.977557][T30813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.016361][T17545] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.191702][T30837] cgroup: fork rejected by pids controller in /syz5 [ 320.215009][T30832] lo speed is unknown, defaulting to 1000 [ 320.359803][T21517] usb usb8-port2: attempt power cycle [ 320.841577][T30879] dvmrp1: entered allmulticast mode [ 320.846657][T30873] netlink: 'syz.0.8633': attribute type 21 has an invalid length. [ 320.870914][T30885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8639'. [ 320.890516][T30885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8639'. [ 321.039423][T30885] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8639'. [ 321.905249][T30903] loop0: detected capacity change from 0 to 128 [ 321.913462][T30903] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 321.927711][T30903] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 321.947854][T17545] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 322.087458][T30914] lo speed is unknown, defaulting to 1000 [ 322.292302][T30945] cgroup: fork rejected by pids controller in /syz0 [ 322.304161][T21517] usb usb8-port2: unable to enumerate USB device [ 322.621353][T30954] lo speed is unknown, defaulting to 1000 [ 323.365061][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 323.365075][ T29] audit: type=1400 audit(1091.451:9050): avc: denied { mounton } for pid=30982 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 323.519452][T30970] netlink: 976 bytes leftover after parsing attributes in process `syz.9.8650'. [ 323.528654][ T29] audit: type=1400 audit(1091.592:9051): avc: denied { create } for pid=30967 comm="syz.9.8650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.535062][T30982] lo speed is unknown, defaulting to 1000 [ 323.548646][ T29] audit: type=1400 audit(1091.592:9052): avc: denied { write } for pid=30967 comm="syz.9.8650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.548675][ T29] audit: type=1400 audit(1091.592:9053): avc: denied { nlmsg_write } for pid=30967 comm="syz.9.8650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 323.773682][T30996] lo speed is unknown, defaulting to 1000 [ 323.801965][T30982] chnl_net:caif_netlink_parms(): no params data found [ 323.934852][T30982] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.939435][T30952] xt_hashlimit: max too large, truncated to 1048576 [ 323.942021][T30982] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.943384][T30982] bridge_slave_0: entered allmulticast mode [ 323.962905][T30982] bridge_slave_0: entered promiscuous mode [ 323.969735][T30982] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.976873][T30982] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.984164][T30982] bridge_slave_1: entered allmulticast mode [ 323.990646][T30982] bridge_slave_1: entered promiscuous mode [ 324.008870][T31181] loop9: detected capacity change from 0 to 128 [ 324.088202][T30982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.147559][T30982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.180571][T30996] chnl_net:caif_netlink_parms(): no params data found [ 324.187672][ T29] audit: type=1326 audit(1092.219:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31241 comm="syz.9.8660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 324.370559][ T29] audit: type=1326 audit(1092.247:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31241 comm="syz.9.8660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 324.393635][ T29] audit: type=1400 audit(1092.247:9056): avc: denied { execute } for pid=31241 comm="syz.9.8660" name="file0" dev="tmpfs" ino=3843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.415710][ T29] audit: type=1400 audit(1092.247:9057): avc: denied { execute_no_trans } for pid=31241 comm="syz.9.8660" path="/723/file0" dev="tmpfs" ino=3843 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 324.439089][ T29] audit: type=1326 audit(1092.312:9058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31241 comm="syz.9.8660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 324.462233][ T29] audit: type=1326 audit(1092.312:9059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31241 comm="syz.9.8660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 324.620688][T30982] team0: Port device team_slave_0 added [ 324.662190][T31347] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8663'. [ 324.674838][T30982] team0: Port device team_slave_1 added [ 324.716549][T30996] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.723893][T30996] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.736162][T30996] bridge_slave_0: entered allmulticast mode [ 324.743677][T30996] bridge_slave_0: entered promiscuous mode [ 324.750705][T30982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.757937][T30982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.784049][T30982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.795619][T30996] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.802704][T30996] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.810133][T30996] bridge_slave_1: entered allmulticast mode [ 324.818918][T30996] bridge_slave_1: entered promiscuous mode [ 324.830102][T30982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.837181][T30982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.863261][T30982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.088145][T30996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.109707][T30982] hsr_slave_0: entered promiscuous mode [ 325.138211][T30982] hsr_slave_1: entered promiscuous mode [ 325.162641][T30982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.198069][T30982] Cannot create hsr debugfs directory [ 325.206749][T30996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.283427][T30996] team0: Port device team_slave_0 added [ 325.291092][T30996] team0: Port device team_slave_1 added [ 325.331027][T31469] syzkaller0: entered promiscuous mode [ 325.336522][T31469] syzkaller0: entered allmulticast mode [ 325.363085][T30996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.370089][T30996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.396131][T30996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.407762][T30996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.414743][T30996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.440920][T30996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.498849][T30996] hsr_slave_0: entered promiscuous mode [ 325.505066][T30996] hsr_slave_1: entered promiscuous mode [ 325.511370][T30996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.518935][T30996] Cannot create hsr debugfs directory [ 325.554610][T31597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8669'. [ 325.563732][T31597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8669'. [ 325.605710][T30982] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.668769][T31668] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8671'. [ 325.685020][T30982] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.812889][T30982] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.901486][T30982] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.047745][T30996] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.191568][T30996] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.257172][T30996] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.323145][T30996] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.404171][T30996] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.413086][T30996] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.422059][T30996] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.434578][T30996] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.455551][T30982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.465748][T30982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.475299][T30982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.484462][T30982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.541395][T30996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.560522][T30996] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.575022][T11130] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.582167][T11130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.597907][T30982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.608178][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.615240][T11130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.635404][T30982] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.647918][T11091] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.655011][T11091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.676538][T11130] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.683657][T11130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.776159][T30982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.845439][T30996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.871406][T31763] loop9: detected capacity change from 0 to 512 [ 326.966866][T30996] veth0_vlan: entered promiscuous mode [ 326.977665][T30996] veth1_vlan: entered promiscuous mode [ 327.006234][T30982] veth0_vlan: entered promiscuous mode [ 327.021979][T30996] veth0_macvtap: entered promiscuous mode [ 327.034472][T31780] loop9: detected capacity change from 0 to 2048 [ 327.039944][T30996] veth1_macvtap: entered promiscuous mode [ 327.062605][T30982] veth1_vlan: entered promiscuous mode [ 327.074551][T30996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.095968][T30996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.105004][T30996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.113809][T30996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.123580][T30996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.132356][T30996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.174848][T30982] veth0_macvtap: entered promiscuous mode [ 327.194382][T30982] veth1_macvtap: entered promiscuous mode [ 327.311486][T30982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.321698][T30982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.353809][T31786] lo speed is unknown, defaulting to 1000 [ 327.370095][T30982] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.378928][T30982] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.387684][T30982] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.396581][T30982] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.422471][T11072] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 327.430937][T11072] ref_tracker: lo@ffff888119158550 has 1/1 users at [ 327.430937][T11072] netdev_get_by_index+0x13e/0x1b0 [ 327.430937][T11072] fib6_nh_init+0xeb/0x15a0 [ 327.430937][T11072] rtm_new_nexthop+0x1db8/0x4510 [ 327.430937][T11072] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 327.430937][T11072] netlink_rcv_skb+0x123/0x220 [ 327.430937][T11072] rtnetlink_rcv+0x1c/0x30 [ 327.430937][T11072] netlink_unicast+0x5a1/0x670 [ 327.430937][T11072] netlink_sendmsg+0x58b/0x6b0 [ 327.430937][T11072] __sock_sendmsg+0x145/0x180 [ 327.430937][T11072] ____sys_sendmsg+0x31e/0x4e0 [ 327.430937][T11072] ___sys_sendmsg+0x17b/0x1d0 [ 327.430937][T11072] __x64_sys_sendmsg+0xd4/0x160 [ 327.430937][T11072] x64_sys_call+0x2999/0x2fb0 [ 327.430937][T11072] do_syscall_64+0xd0/0x1a0 [ 327.430937][T11072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.430937][T11072] [ 327.576971][T31797] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 328.725576][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 328.725592][ T29] audit: type=1400 audit(1096.467:9129): avc: denied { ioctl } for pid=31850 comm="syz.1.8689" path="socket:[81589]" dev="sockfs" ino=81589 ioctlcmd=0xe scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 328.782837][ T29] audit: type=1400 audit(1096.514:9130): avc: denied { bind } for pid=31835 comm="syz.5.8698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 328.802940][ T29] audit: type=1400 audit(1096.514:9131): avc: denied { setopt } for pid=31835 comm="syz.5.8698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 329.009614][T31865] netlink: 'syz.0.8691': attribute type 6 has an invalid length. [ 329.198942][ T29] audit: type=1400 audit(1096.916:9132): avc: denied { ioctl } for pid=31882 comm="syz.1.8695" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 329.255661][ T29] audit: type=1400 audit(1096.963:9133): avc: denied { relabelfrom } for pid=31885 comm="syz.1.8696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 329.275190][ T29] audit: type=1400 audit(1096.963:9134): avc: denied { relabelto } for pid=31885 comm="syz.1.8696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 329.402404][ T29] audit: type=1400 audit(1097.103:9135): avc: denied { bind } for pid=31900 comm="syz.1.8700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.427024][ T29] audit: type=1400 audit(1097.122:9136): avc: denied { listen } for pid=31900 comm="syz.1.8700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.446455][ T29] audit: type=1400 audit(1097.122:9137): avc: denied { write } for pid=31900 comm="syz.1.8700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.465528][ T29] audit: type=1400 audit(1097.122:9138): avc: denied { accept } for pid=31900 comm="syz.1.8700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 329.833716][T31920] loop5: detected capacity change from 0 to 2048 [ 329.871165][T31920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.889598][T31920] EXT4-fs error (device loop5): ext4_find_extent:938: inode #2: comm syz.5.8706: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 329.927937][T30982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.977527][T31931] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.115390][T31935] lo speed is unknown, defaulting to 1000 [ 330.839393][T31981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8712'. [ 330.848582][T31981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8712'. [ 331.115135][T32019] loop9: detected capacity change from 0 to 2048 [ 331.443470][T32051] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8731'. [ 331.535683][T32054] lo speed is unknown, defaulting to 1000 [ 332.365911][T32099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8740'. [ 332.377951][T32100] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8737'. [ 332.386952][T32100] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8737'. [ 332.504821][T32123] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.575330][T32123] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.649661][T32123] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.703719][T32123] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.801977][T32123] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.821260][T32123] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.836452][T32123] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.849744][T32123] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.934592][T31931] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.039672][T31931] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.084206][T32153] loop9: detected capacity change from 0 to 2048 [ 333.099160][T31931] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.156567][T31931] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.183781][T31931] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.217308][T31931] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.235178][T31931] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.593525][T32173] lo speed is unknown, defaulting to 1000 [ 334.306038][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 334.306055][ T29] audit: type=1400 audit(1101.698:9193): avc: denied { write } for pid=32202 comm="syz.9.8750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 334.333723][T32097] syz.3.8739 (32097) used greatest stack depth: 4968 bytes left [ 334.393591][ T29] audit: type=1400 audit(1101.773:9194): avc: denied { write } for pid=32209 comm="syz.3.8751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 334.459710][ T29] audit: type=1400 audit(1101.792:9195): avc: denied { connect } for pid=32202 comm="syz.9.8750" lport=121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.479967][ T29] audit: type=1400 audit(1101.792:9196): avc: denied { write } for pid=32202 comm="syz.9.8750" laddr=::ac14:1444 lport=121 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.502345][ T29] audit: type=1400 audit(1101.792:9197): avc: denied { ioctl } for pid=32202 comm="syz.9.8750" path="socket:[83346]" dev="sockfs" ino=83346 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 334.530278][ T29] audit: type=1400 audit(1101.885:9198): avc: denied { unlink } for pid=30996 comm="syz-executor" name="file0" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 334.552522][ T29] audit: type=1400 audit(1101.894:9199): avc: denied { setopt } for pid=32216 comm="syz.3.8752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.678170][T32228] macsec0: entered allmulticast mode [ 335.030727][T32230] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8758'. [ 335.031247][T32232] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.041118][T32230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8758'. [ 335.064396][ T29] audit: type=1400 audit(1102.409:9200): avc: denied { lock } for pid=32229 comm="syz.3.8758" path="socket:[83359]" dev="sockfs" ino=83359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 335.107476][T32232] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.203726][T32232] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.289236][T32232] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.671566][T32232] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.682920][T32232] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.694505][T32232] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.706105][T32232] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.735658][T32259] loop0: detected capacity change from 0 to 512 [ 336.767575][T32261] loop5: detected capacity change from 0 to 2048 [ 336.774536][T32261] EXT4-fs: inline encryption not supported [ 336.780506][T32261] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.792960][T32261] EXT4-fs: dax option not supported [ 336.801236][T32263] IPv6: sit1: Disabled Multicast RS [ 336.860198][T32259] EXT4-fs (loop0): 1 orphan inode deleted [ 336.869672][ T29] audit: type=1400 audit(1104.094:9201): avc: denied { create } for pid=32276 comm="syz.3.8766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 336.876180][T32259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.888992][T11126] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 336.910896][T11126] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:58: Failed to release dquot type 1 [ 337.109367][T32280] lo speed is unknown, defaulting to 1000 [ 337.568424][T32323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8769'. [ 337.577928][T32323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.660365][T32326] loop9: detected capacity change from 0 to 764 [ 337.677087][T32326] rock: directory entry would overflow storage [ 337.683347][T32326] rock: sig=0x4f50, size=4, remaining=3 [ 337.688926][T32326] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 337.705505][T32323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.932935][T32344] lo speed is unknown, defaulting to 1000 [ 337.938306][T32348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8775'. [ 337.973345][T32348] netlink: 'syz.3.8775': attribute type 2 has an invalid length. [ 337.981155][T32348] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.009722][T32349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.018842][T32349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.027868][T32349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.049493][T32349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.058549][T32349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.067561][T32349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.118526][T32349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8775'. [ 338.417544][T32377] netlink: 'syz.5.8778': attribute type 4 has an invalid length. [ 338.491800][T32378] syz.3.8777: attempt to access beyond end of device [ 338.491800][T32378] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 338.505114][T32378] FAT-fs (loop7): unable to read boot sector [ 338.788472][T30996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.026988][T32385] loop5: detected capacity change from 0 to 8192 [ 339.103702][T32395] hub 9-0:1.0: USB hub found [ 339.109545][T32395] hub 9-0:1.0: 8 ports detected [ 339.302749][T32408] loop5: detected capacity change from 0 to 1024 [ 339.379647][T32413] lo speed is unknown, defaulting to 1000 [ 339.687540][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 339.687568][ T29] audit: type=1326 audit(1106.723:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.744119][T32408] EXT4-fs: Ignoring removed nobh option [ 339.749864][T32408] EXT4-fs: Ignoring removed bh option [ 339.755542][ T29] audit: type=1326 audit(1106.751:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.778609][ T29] audit: type=1326 audit(1106.761:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.801685][ T29] audit: type=1326 audit(1106.761:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.824688][ T29] audit: type=1326 audit(1106.761:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.864219][ T29] audit: type=1326 audit(1106.817:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.887569][ T29] audit: type=1326 audit(1106.817:9277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.910707][ T29] audit: type=1326 audit(1106.817:9278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.933758][ T29] audit: type=1326 audit(1106.817:9279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.956842][ T29] audit: type=1326 audit(1106.817:9280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32403 comm="syz.9.8785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72212ce969 code=0x7ffc0000 [ 339.995313][T32408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.064440][T32408] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.8787: Allocating blocks 385-513 which overlap fs metadata [ 340.086435][T32408] EXT4-fs (loop5): pa ffff8881075ee8c0: logic 16, phys. 129, len 24 [ 340.094552][T32408] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 340.142623][T30982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.408462][T32491] lo speed is unknown, defaulting to 1000 [ 341.225019][T32575] loop5: detected capacity change from 0 to 512 [ 341.333587][T32575] EXT4-fs (loop5): 1 orphan inode deleted [ 341.340339][T32575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.366083][T11074] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 1 [ 342.003362][T32617] loop9: detected capacity change from 0 to 2048 [ 342.052553][T32617] loop9: p1 < > p4 [ 342.060222][T32617] loop9: p4 size 8388608 extends beyond EOD, truncated [ 342.323539][T32635] hub 9-0:1.0: USB hub found [ 342.339953][T32635] hub 9-0:1.0: 8 ports detected [ 342.427814][T32639] syz.9.8796: attempt to access beyond end of device [ 342.427814][T32639] loop19: rw=0, sector=0, nr_sectors = 1 limit=0 [ 342.440952][T32639] FAT-fs (loop19): unable to read boot sector [ 342.546975][T32640] loop0: detected capacity change from 0 to 1024 [ 342.556567][T30982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.625653][T32640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.282923][T32661] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.347457][T30996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.361671][T32661] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.395020][T32680] loop0: detected capacity change from 0 to 2048 [ 343.430721][T32661] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.442804][T32689] ref_ctr_offset mismatch. inode: 0xddd offset: 0x0 ref_ctr_offset(old): 0x200000000300 ref_ctr_offset(new): 0x0 [ 343.455273][T32680] loop0: p1 < > p4 [ 343.457938][T32689] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 343.467595][T32689] ref_ctr decrement failed for inode: 0xddd offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888109ab3180 [ 343.484435][T32680] loop0: p4 size 8388608 extends beyond EOD, truncated [ 343.485648][T32689] uprobe: syz.1.8813:32689 failed to unregister, leaking uprobe [ 343.518358][T32661] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.573104][T32707] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 343.581919][T32707] ref_ctr increment failed for inode: 0xde3 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888109ab3180 [ 343.631839][T32661] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.658710][T32661] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.667903][T32705] pim6reg1: entered promiscuous mode [ 343.673225][T32705] pim6reg1: entered allmulticast mode [ 343.696260][T32723] __nla_validate_parse: 12 callbacks suppressed [ 343.696279][T32723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8817'. [ 343.713272][T32661] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.747646][T32661] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.199776][T21517] hid-generic 0021:0009:0000.0012: unknown main item tag 0x0 [ 344.207336][T21517] hid-generic 0021:0009:0000.0012: unknown main item tag 0x0 [ 344.214774][T21517] hid-generic 0021:0009:0000.0012: unknown main item tag 0x0 [ 344.222205][T21517] hid-generic 0021:0009:0000.0012: unknown main item tag 0x0 [ 344.229599][T21517] hid-generic 0021:0009:0000.0012: unknown main item tag 0x0 [ 344.237205][T21517] hid-generic 0021:0009:0000.0012: unknown main item tag 0x0 [ 344.253173][T21517] hid-generic 0021:0009:0000.0012: hidraw0: HID v0.07 Device [syz0] on syz1 [ 344.320864][ T314] lo speed is unknown, defaulting to 1000 [ 344.827802][ T351] random: crng reseeded on system resumption [ 344.906089][ T357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8832'. [ 345.040043][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 345.040068][ T29] audit: type=1400 audit(1111.739:9528): avc: denied { block_suspend } for pid=350 comm=04 capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 345.096196][ T370] ref_ctr_offset mismatch. inode: 0x2415 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa [ 345.123640][ T29] audit: type=1326 audit(1111.814:9529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.150013][ T29] audit: type=1326 audit(1111.814:9530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.172978][ T29] audit: type=1326 audit(1111.814:9531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.195881][ T29] audit: type=1326 audit(1111.814:9532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.218826][ T29] audit: type=1326 audit(1111.814:9533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.241532][ T29] audit: type=1326 audit(1111.814:9534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.264766][ T29] audit: type=1326 audit(1111.814:9535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.287905][ T29] audit: type=1326 audit(1111.814:9536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.310727][ T29] audit: type=1326 audit(1111.814:9537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=362 comm="syz.5.8833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11026be969 code=0x7ffc0000 [ 345.447152][ T394] ref_ctr_offset mismatch. inode: 0xae offset: 0x0 ref_ctr_offset(old): 0x200000000300 ref_ctr_offset(new): 0x0 [ 345.459643][ T394] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 345.468181][ T394] ref_ctr decrement failed for inode: 0xae offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888109ab0000 [ 345.479396][ T394] uprobe: syz.5.8838:394 failed to unregister, leaking uprobe [ 346.182627][ T415] loop5: detected capacity change from 0 to 512 [ 346.215347][ T415] EXT4-fs (loop5): 1 orphan inode deleted [ 346.221776][ T415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.259487][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 346.386877][ T425] lo speed is unknown, defaulting to 1000 [ 347.409775][T30982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.296593][ T484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8857'. [ 348.639442][ T501] ================================================================== [ 348.647544][ T501] BUG: KCSAN: data-race in __delete_from_swap_cache / folio_mapping [ 348.655519][ T501] [ 348.657842][ T501] write to 0xffffea00052a1028 of 8 bytes by task 500 on cpu 0: [ 348.665370][ T501] __delete_from_swap_cache+0x1e8/0x280 [ 348.670907][ T501] delete_from_swap_cache+0x73/0xe0 [ 348.676096][ T501] folio_free_swap+0x188/0x1a0 [ 348.680856][ T501] do_swap_page+0x1546/0x2460 [ 348.685542][ T501] handle_mm_fault+0xb60/0x2ae0 [ 348.690390][ T501] do_user_addr_fault+0x3fe/0x1090 [ 348.695497][ T501] exc_page_fault+0x54/0xc0 [ 348.699989][ T501] asm_exc_page_fault+0x26/0x30 [ 348.704837][ T501] [ 348.707151][ T501] read to 0xffffea00052a1028 of 8 bytes by task 501 on cpu 1: [ 348.714593][ T501] folio_mapping+0xdd/0x120 [ 348.719090][ T501] evict_folios+0xdb9/0x33d0 [ 348.723671][ T501] try_to_shrink_lruvec+0x45a/0x7e0 [ 348.728858][ T501] shrink_lruvec+0x22e/0x1a40 [ 348.733550][ T501] shrink_node+0x686/0x2110 [ 348.738042][ T501] do_try_to_free_pages+0x3f6/0xcd0 [ 348.743244][ T501] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 348.749133][ T501] try_charge_memcg+0x3ab/0x870 [ 348.753984][ T501] obj_cgroup_charge_pages+0xb7/0x1a0 [ 348.759347][ T501] __memcg_kmem_charge_page+0x9f/0x170 [ 348.764799][ T501] __alloc_frozen_pages_noprof+0x188/0x360 [ 348.770602][ T501] alloc_pages_mpol+0xb3/0x250 [ 348.775356][ T501] alloc_pages_noprof+0x90/0x130 [ 348.780283][ T501] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 348.786086][ T501] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 348.791452][ T501] ip_set_alloc+0x1f/0x30 [ 348.795774][ T501] hash_netiface_create+0x282/0x740 [ 348.800969][ T501] ip_set_create+0x3c9/0x960 [ 348.805554][ T501] nfnetlink_rcv_msg+0x4c6/0x590 [ 348.810479][ T501] netlink_rcv_skb+0x123/0x220 [ 348.815240][ T501] nfnetlink_rcv+0x16b/0x1690 [ 348.819908][ T501] netlink_unicast+0x5a1/0x670 [ 348.824670][ T501] netlink_sendmsg+0x58b/0x6b0 [ 348.829427][ T501] __sock_sendmsg+0x145/0x180 [ 348.834104][ T501] ____sys_sendmsg+0x31e/0x4e0 [ 348.838858][ T501] ___sys_sendmsg+0x17b/0x1d0 [ 348.843522][ T501] __x64_sys_sendmsg+0xd4/0x160 [ 348.848361][ T501] x64_sys_call+0x2999/0x2fb0 [ 348.853029][ T501] do_syscall_64+0xd0/0x1a0 [ 348.857526][ T501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.863408][ T501] [ 348.865719][ T501] value changed: 0x0000000000001e05 -> 0x0000000000000000 [ 348.872825][ T501] [ 348.875133][ T501] Reported by Kernel Concurrency Sanitizer on: [ 348.881271][ T501] CPU: 1 UID: 0 PID: 501 Comm: syz.0.8863 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 348.895149][ T501] Tainted: [W]=WARN [ 348.898937][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 348.908982][ T501] ================================================================== [ 349.412807][ T501] syz.0.8863 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 349.427032][ T501] CPU: 0 UID: 0 PID: 501 Comm: syz.0.8863 Tainted: G W 6.15.0-rc6-syzkaller-00278-g172a9d94339c #0 PREEMPT(voluntary) [ 349.427088][ T501] Tainted: [W]=WARN [ 349.427095][ T501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 349.427156][ T501] Call Trace: [ 349.427165][ T501] [ 349.427175][ T501] __dump_stack+0x1d/0x30 [ 349.427207][ T501] dump_stack_lvl+0xe8/0x140 [ 349.427224][ T501] dump_stack+0x15/0x1b [ 349.427238][ T501] dump_header+0x81/0x220 [ 349.427301][ T501] oom_kill_process+0x334/0x3f0 [ 349.427326][ T501] out_of_memory+0x979/0xb80 [ 349.427348][ T501] ? css_next_descendant_pre+0x138/0x160 [ 349.427418][ T501] mem_cgroup_out_of_memory+0x13d/0x190 [ 349.427470][ T501] try_charge_memcg+0x5e2/0x870 [ 349.427510][ T501] obj_cgroup_charge_pages+0xb7/0x1a0 [ 349.427534][ T501] __memcg_kmem_charge_page+0x9f/0x170 [ 349.427595][ T501] __alloc_frozen_pages_noprof+0x188/0x360 [ 349.427633][ T501] alloc_pages_mpol+0xb3/0x250 [ 349.427711][ T501] alloc_pages_noprof+0x90/0x130 [ 349.427732][ T501] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 349.427784][ T501] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 349.427814][ T501] ? ip_set_alloc+0x1f/0x30 [ 349.427839][ T501] ? ip_set_alloc+0x1f/0x30 [ 349.427867][ T501] ? __kmalloc_cache_noprof+0x189/0x320 [ 349.427894][ T501] ip_set_alloc+0x1f/0x30 [ 349.428066][ T501] hash_netiface_create+0x282/0x740 [ 349.428125][ T501] ? __pfx_hash_netiface_create+0x10/0x10 [ 349.428216][ T501] ip_set_create+0x3c9/0x960 [ 349.428317][ T501] ? __nla_parse+0x40/0x60 [ 349.428341][ T501] nfnetlink_rcv_msg+0x4c6/0x590 [ 349.428389][ T501] netlink_rcv_skb+0x123/0x220 [ 349.428425][ T501] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 349.428460][ T501] nfnetlink_rcv+0x16b/0x1690 [ 349.428486][ T501] ? __kfree_skb+0x109/0x150 [ 349.428512][ T501] ? nlmon_xmit+0x4f/0x60 [ 349.428536][ T501] ? consume_skb+0x49/0x150 [ 349.428574][ T501] ? nlmon_xmit+0x4f/0x60 [ 349.428598][ T501] ? dev_hard_start_xmit+0x39e/0x3d0 [ 349.428625][ T501] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 349.428642][ T501] ? __dev_queue_xmit+0x182/0x1fb0 [ 349.428662][ T501] ? ref_tracker_free+0x37d/0x3e0 [ 349.428699][ T501] ? __netlink_deliver_tap+0x4dc/0x500 [ 349.428772][ T501] netlink_unicast+0x5a1/0x670 [ 349.428873][ T501] netlink_sendmsg+0x58b/0x6b0 [ 349.428927][ T501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.428948][ T501] __sock_sendmsg+0x145/0x180 [ 349.428972][ T501] ____sys_sendmsg+0x31e/0x4e0 [ 349.428997][ T501] ___sys_sendmsg+0x17b/0x1d0 [ 349.429092][ T501] __x64_sys_sendmsg+0xd4/0x160 [ 349.429117][ T501] x64_sys_call+0x2999/0x2fb0 [ 349.429142][ T501] do_syscall_64+0xd0/0x1a0 [ 349.429164][ T501] ? clear_bhb_loop+0x40/0x90 [ 349.429245][ T501] ? clear_bhb_loop+0x40/0x90 [ 349.429276][ T501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.429295][ T501] RIP: 0033:0x7f7b0683e969 [ 349.429313][ T501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.429336][ T501] RSP: 002b:00007f7b04ea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.429360][ T501] RAX: ffffffffffffffda RBX: 00007f7b06a65fa0 RCX: 00007f7b0683e969 [ 349.429375][ T501] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 349.429460][ T501] RBP: 00007f7b068c0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 349.429471][ T501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.429482][ T501] R13: 0000000000000000 R14: 00007f7b06a65fa0 R15: 00007ffec4c3d858 [ 349.429554][ T501] [ 349.429562][ T501] memory: usage 307200kB, limit 307200kB, failcnt 343 [ 349.787933][ T501] memory+swap: usage 307880kB, limit 9007199254740988kB, failcnt 0 [ 349.795928][ T501] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 349.803249][ T501] Memory cgroup stats for /syz0: [ 349.803603][ T501] cache 0 [ 349.811536][ T501] rss 0 [ 349.814303][ T501] shmem 0 [ 349.817232][ T501] mapped_file 0 [ 349.820679][ T501] dirty 0 [ 349.823669][ T501] writeback 0 [ 349.827029][ T501] workingset_refault_anon 2759 [ 349.831871][ T501] workingset_refault_file 211 [ 349.836610][ T501] swap 696320 [ 349.839880][ T501] swapcached 0 [ 349.843274][ T501] pgpgin 407291 [ 349.846795][ T501] pgpgout 407287 [ 349.850336][ T501] pgfault 426985 [ 349.853986][ T501] pgmajfault 419 [ 349.857521][ T501] inactive_anon 0 [ 349.861153][ T501] active_anon 0 [ 349.864633][ T501] inactive_file 16384 [ 349.868621][ T501] active_file 0 [ 349.872081][ T501] unevictable 0 [ 349.875587][ T501] hierarchical_memory_limit 314572800 [ 349.881011][ T501] hierarchical_memsw_limit 9223372036854771712 [ 349.887165][ T501] total_cache 0 [ 349.890655][ T501] total_rss 0 [ 349.893962][ T501] total_shmem 0 [ 349.897444][ T501] total_mapped_file 0 [ 349.901420][ T501] total_dirty 0 [ 349.904869][ T501] total_writeback 0 [ 349.908723][ T501] total_workingset_refault_anon 2759 [ 349.913994][ T501] total_workingset_refault_file 211 [ 349.919260][ T501] total_swap 696320 [ 349.923052][ T501] total_swapcached 0 [ 349.926930][ T501] total_pgpgin 407291 [ 349.930915][ T501] total_pgpgout 407287 [ 349.934969][ T501] total_pgfault 426985 [ 349.939055][ T501] total_pgmajfault 419 [ 349.943195][ T501] total_inactive_anon 0 [ 349.947352][ T501] total_active_anon 0 [ 349.951357][ T501] total_inactive_file 16384 [ 349.955905][ T501] total_active_file 0 [ 349.959923][ T501] total_unevictable 0 [ 349.963930][ T501] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8863,pid=500,uid=0 [ 349.978478][ T501] Memory cgroup out of memory: Killed process 500 (syz.0.8863) total-vm:95796kB, anon-rss:936kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000