last executing test programs: 4.637821627s ago: executing program 0 (id=763): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000001800)={0x1, 0x0, 0x0, 0x5a60}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x100) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) openat$zero(0xffffffffffffff9c, 0x0, 0xc002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r3], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xfffff) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3.547960165s ago: executing program 2 (id=768): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/103, 0x67}, {&(0x7f00000002c0)=""/168, 0xa8}], 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r9, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r9, 0x407, 0x100000) close_range(r1, 0xffffffffffffffff, 0x0) 3.540411706s ago: executing program 0 (id=769): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) 3.24502702s ago: executing program 1 (id=771): bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="8b", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='\a', 0x1}, {0x0}], 0x2, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x808, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000180)='net_dev_xmit\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x80000}, 0x18) io_setup(0x2004, &(0x7f0000000680)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000cc0)={0x4e0a}, 0x8) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002e40), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000002ec0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000002e80)=""/53, 0x35, 0x8, 0x6, 0x7, 0xb, 0x3}}, 0x120) read(r3, &(0x7f00000076c0)=""/252, 0xfc) 2.942493504s ago: executing program 0 (id=775): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/pid\x00') socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$tipc(r6, &(0x7f0000001500)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x2000c041) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9, 0x0, 0x3}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000884}, 0x40000) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001040)='/sys/power/pm_print_times', 0x8042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sendfile(r10, r10, 0x0, 0xb) 2.74124252s ago: executing program 4 (id=778): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c000380080001400000000008000240"], 0x2dc}}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x1, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x7, 0xff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f0000000000)=""/38, 0x26) 2.711208343s ago: executing program 4 (id=779): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r2, @ANYBLOB='\b', @ANYRES32=r2], 0x44}}, 0x8000) 2.691842144s ago: executing program 2 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="05fe58049ebbc0aa12b5d8ad4f4fdd74a37b605c46f6a73f0b81b2b0c37d0e7a3027fb61c39b0412c4133a59a15a1fe9a49f9a82c5b6a24c6b5b8ef3397303984353b0e663803b9be03d95ae8b99a67ef2fdfe8b8390cdc49065b76c40a70b8793944a937744f9995156a55e01e3b542f51b9ff8e90723bedc4547e3b7fb077b072c02a7d60c77c5fd0a07c6e4069a5b1306e83664824b5004db", 0x9a, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x81, 0xffffadf3, 0x4, 0x6, 0x10000}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f0000000000)=0x100000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 2.460708762s ago: executing program 3 (id=781): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x401800, 0x4b) accept4$tipc(r0, &(0x7f0000000140)=@name, 0x0, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.349608861s ago: executing program 0 (id=782): socket$kcm(0x10, 0x400000002, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, 0x0, 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4b, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000", @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "ad732cee6a7f1ed2212bb9cfa1120e0057e1be84254101d82b48ee3b6b783f4babb6a5c4b2722d295c38676ed8de0fc170d0c25fe6247473dfeb735d18072708824acaf739d6383330b437f1f52f9407148d087d"}, 0x64) 2.109389971s ago: executing program 1 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x1, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) brk(0x200000001000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYBLOB="0000000010000000180012800b000100697036746e6c0000080002800400130008000300", @ANYRES32=r6], 0x40}}, 0x0) r7 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r7, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close(r7) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r7, 0x40047211, &(0x7f00000000c0)=0x20) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000000)={0x2, 0x8, 0x1000}) 1.953902493s ago: executing program 1 (id=784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) 1.938386334s ago: executing program 3 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000008c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9feb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000001340)={0x14, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffff1d8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xa97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x2, 0xb484, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2dfd, 0x0, 0x0, 0x0, 0x4, 0x7, 0x72, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/4083, 0x0, 0xff3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r3], &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_ifreq(r5, 0x8942, &(0x7f0000000200)={'ip6gre0\x00', @ifru_settings={0x146a000, 0x8, @fr_pvc=0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2708"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 1.778315147s ago: executing program 0 (id=786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) syz_open_procfs(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) 1.777789377s ago: executing program 3 (id=787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x80, 0x23}, {0x0, 0x0, 0x0, 0x0, 0x400000000, 0x800}, {0x0, 0x8, 0x0, 0xa}, 0xfffffffc, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x32}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) acct(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r11, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x30}}, 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014"], 0x110}}, 0x0) 1.774294988s ago: executing program 4 (id=788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_io_uring_setup(0x394f, &(0x7f00000009c0)={0x0, 0x5881, 0x1000, 0x8005, 0x801001c2}, &(0x7f0000000240)=0x0, &(0x7f0000000900)=0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) migrate_pages(r4, 0x100, &(0x7f0000000200), &(0x7f0000000280)=0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000000080)=0x7, 0x0, 0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000040)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) 1.549645856s ago: executing program 2 (id=789): syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) readahead(0xffffffffffffffff, 0x7, 0xf) fcntl$notify(r3, 0x402, 0x8000003d) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) close_range(r4, 0xffffffffffffffff, 0x0) 1.449474614s ago: executing program 4 (id=790): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.273902538s ago: executing program 2 (id=791): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="f40000000b0603000000000000000000070000005000078005000700020000001800028014000240200100000000000000000000000000000c00194000000000000000090900130073797a31000000000c001840000000000000000508000940000000007c000880100007800c0018400000000000000804100007800c001b400000000000000009100007800c00184000000000000000e71c0007801800148014000240fc0100000000000000000000000000010c0007800800064000000009200007801a001a0064656235675f77616e745f65787472615f6973697a65000008000940000000080900020073"], 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8917, &(0x7f0000002080)={'netpci0\x00', @ifru_names='veth1_to_team\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x8}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f00000000c0)=0x404) 1.069647584s ago: executing program 2 (id=792): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x80002011}) shutdown(r2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r7, 0x0, 0x10}, 0x18) add_key(&(0x7f0000000380)='asymmetric\x00', 0x0, &(0x7f0000000340)="010000", 0x3, 0xffffffffffffffff) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.045937776s ago: executing program 3 (id=793): set_mempolicy_home_node(&(0x7f0000462000/0x1000)=nil, 0x1000, 0x200000000000004, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004010) 1.024925858s ago: executing program 0 (id=794): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xe1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x396) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRESHEX, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) 821.531914ms ago: executing program 4 (id=795): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0002000000000000000000000000301b969603d48851b10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x20000000000002fb, &(0x7f0000000a00)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f00000001c0)={[{@errors_remount}, {@nouid32}, {@noauto_da_alloc}]}, 0x1, 0x510, &(0x7f0000000f40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='swiotlb_bounced\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000006c0), 0x1, 0x254, &(0x7f0000000780)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) execveat(r4, &(0x7f0000000340)='./file1\x00', &(0x7f0000000640)={[&(0x7f00000003c0)='noauto_da_alloc', &(0x7f0000000600)='^#e\xa4\\&-(\'*(\x00']}, &(0x7f0000000ac0)={[&(0x7f0000000680)='sched_switch\x00', &(0x7f0000000700)='swiotlb_bounced\x00', &(0x7f0000000740)='-)(\x00']}, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pB \x00'}, 0x20) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB='$k']) 730.732122ms ago: executing program 1 (id=796): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x80, 0x23}, {0x0, 0x0, 0x0, 0x0, 0x400000000, 0x800}, {0x0, 0x8, 0x0, 0xa}, 0xfffffffc, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2e}, 0x0, 0x32}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, 0x0, &(0x7f0000000100)) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) acct(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xc0ed0040, &(0x7f00000000c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@dioread_nolock}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") bind$inet(r7, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r11, 0x603, 0x70bd2f, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x30}}, 0x10) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014"], 0x110}}, 0x0) 320.001025ms ago: executing program 4 (id=797): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5, 0x1000000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00'}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) 298.692396ms ago: executing program 1 (id=798): socket$kcm(0x10, 0x400000002, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, 0x0, 0x0, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4b, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000", @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "ad732cee6a7f1ed2212bb9cfa1120e0057e1be84254101d82b48ee3b6b783f4babb6a5c4b2722d295c38676ed8de0fc170d0c25fe6247473dfeb735d18072708824acaf739d6383330b437f1f52f9407148d087d"}, 0x64) 110.124542ms ago: executing program 1 (id=799): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000000)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0xd97) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES16=r3], 0xfffffdef}, 0x1, 0x0, 0x0, 0x8080}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 109.807701ms ago: executing program 3 (id=800): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/vlan/config\x00') close_range(r0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000cc0)="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", 0x5c5}], 0x1, &(0x7f0000000100)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}}], 0x1, 0x44000840) 54.471846ms ago: executing program 3 (id=801): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='iocost_ioc_vrate_adj\x00', r1, 0x0, 0x172}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xda08, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioperm(0x3c, 0x1, 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_emit_ethernet(0xe4d, &(0x7f0000000800)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0xe17, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{0x3c, 0x1c0, "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"}]}}}}}}, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=802): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000004}, 0x18) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000080)) r4 = socket$caif_stream(0x25, 0x1, 0x0) writev(r4, &(0x7f00000000c0), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) kernel console output (not intermixed with test programs): promiscuous mode [ 39.830530][ T3309] veth1_vlan: entered promiscuous mode [ 39.840268][ T29] audit: type=1400 audit(1755632836.381:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.856134][ T3332] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.879013][ T3434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.889730][ T3472] loop3: detected capacity change from 0 to 128 [ 39.916057][ T3309] veth0_macvtap: entered promiscuous mode [ 39.927422][ T3434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.952461][ T3309] veth1_macvtap: entered promiscuous mode [ 39.972298][ T294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.985788][ T294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.995673][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.006116][ T3310] veth0_macvtap: entered promiscuous mode [ 40.035655][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.047840][ T3310] veth1_macvtap: entered promiscuous mode [ 40.078407][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.089562][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.119407][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.147685][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.159026][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.233596][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.242921][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.283365][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.310346][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.328752][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.381317][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.391287][ T3499] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 40.408443][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.418101][ T3499] SELinux: failed to load policy [ 40.434159][ T3499] veth0_to_team: entered promiscuous mode [ 40.590887][ C0] hrtimer: interrupt took 37207 ns [ 40.710242][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 40.790055][ T3542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 40.804573][ T3546] IPVS: stopping master sync thread 3549 ... [ 40.833810][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.841605][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.860757][ T3542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.869164][ T3542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.162885][ T3575] syz_tun: entered allmulticast mode [ 41.181799][ T3574] syz_tun: left allmulticast mode [ 41.296290][ T3585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 41.645238][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.653145][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.661385][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.670006][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.677713][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.685514][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.693520][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.702285][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.711026][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.719699][ T3403] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.732216][ T3403] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.788809][ T3599] fido_id[3599]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.970831][ T3610] ref_ctr increment failed for inode: 0x4b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888109e0f8c0 [ 42.017032][ T3609] uprobe: syz.3.51:3609 failed to unregister, leaking uprobe [ 42.065347][ T3615] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 42.121016][ T3618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.126180][ T3542] syz.1.25 (3542) used greatest stack depth: 10792 bytes left [ 42.129702][ T3618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.158527][ T3615] syz.0.54 (3615) used greatest stack depth: 10144 bytes left [ 42.172019][ T3622] netlink: 'syz.4.57': attribute type 4 has an invalid length. [ 42.187457][ T3622] netlink: 'syz.4.57': attribute type 4 has an invalid length. [ 42.216678][ T3624] IPv6: Can't replace route, no match found [ 42.271648][ T3630] tipc: Started in network mode [ 42.277114][ T3630] tipc: Node identity f6efef94d8a6, cluster identity 4711 [ 42.284655][ T3630] tipc: Enabled bearer , priority 0 [ 42.319008][ T3630] syzkaller0: entered promiscuous mode [ 42.324885][ T3630] syzkaller0: entered allmulticast mode [ 42.364474][ T3626] loop4: detected capacity change from 0 to 764 [ 42.372901][ T3630] tipc: Resetting bearer [ 42.382794][ T3627] tipc: Resetting bearer [ 42.391813][ T3627] tipc: Disabling bearer [ 42.396967][ T3626] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 42.411713][ T3636] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 42.419873][ T3636] netlink: 55 bytes leftover after parsing attributes in process `syz.2.64'. [ 42.892232][ T3654] loop4: detected capacity change from 0 to 128 [ 43.570036][ T3671] netlink: 156 bytes leftover after parsing attributes in process `syz.1.77'. [ 43.697774][ T3673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.708885][ T3673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.778821][ T3683] lo speed is unknown, defaulting to 1000 [ 43.783187][ T3682] loop4: detected capacity change from 0 to 512 [ 43.785271][ T3683] lo speed is unknown, defaulting to 1000 [ 43.793195][ T3682] ======================================================= [ 43.793195][ T3682] WARNING: The mand mount option has been deprecated and [ 43.793195][ T3682] and is ignored by this kernel. Remove the mand [ 43.793195][ T3682] option from the mount to silence this warning. [ 43.793195][ T3682] ======================================================= [ 43.802823][ T3683] lo speed is unknown, defaulting to 1000 [ 43.843986][ T3683] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.850158][ T3682] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.83: iget: bad extended attribute block 1 [ 43.852289][ T3683] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.878150][ T3683] lo speed is unknown, defaulting to 1000 [ 43.885178][ T3683] lo speed is unknown, defaulting to 1000 [ 43.892881][ T3682] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.83: couldn't read orphan inode 15 (err -117) [ 43.897320][ T3683] lo speed is unknown, defaulting to 1000 [ 43.914659][ T3682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.931774][ T3682] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.942750][ T3683] lo speed is unknown, defaulting to 1000 [ 43.953318][ T3683] lo speed is unknown, defaulting to 1000 [ 43.981831][ T3682] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 43.994519][ T3682] team0: Port device dummy0 added [ 44.007538][ T3682] netlink: 'syz.4.83': attribute type 10 has an invalid length. [ 44.021831][ T3682] team0: Port device dummy0 removed [ 44.029816][ T3682] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.065790][ T3694] siw: device registration error -23 [ 44.147973][ T3696] syzkaller0: entered promiscuous mode [ 44.154436][ T3696] syzkaller0: entered allmulticast mode [ 44.223843][ T3698] tipc: Started in network mode [ 44.229251][ T3698] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 44.239577][ T3698] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 44.248454][ T3698] tipc: Enabled bearer , priority 10 [ 44.298294][ T3712] netlink: 'syz.1.91': attribute type 4 has an invalid length. [ 44.311811][ T3712] netlink: 'syz.1.91': attribute type 4 has an invalid length. [ 44.358221][ T3720] loop3: detected capacity change from 0 to 512 [ 44.373472][ T3720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.399541][ T3720] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.420027][ T3725] loop1: detected capacity change from 0 to 512 [ 44.430169][ T3720] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.96: corrupted inode contents [ 44.432013][ T3725] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.98: iget: bad extended attribute block 1 [ 44.447910][ T3726] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 44.464288][ T3725] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.98: couldn't read orphan inode 15 (err -117) [ 44.471429][ T3720] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.96: mark_inode_dirty error [ 44.499227][ T3720] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.96: corrupted inode contents [ 44.501449][ T3726] team0: Port device dummy0 added [ 44.513577][ T3725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.521251][ T3720] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.96: mark_inode_dirty error [ 44.544170][ T3725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.552549][ T3726] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 44.571993][ T29] kauditd_printk_skb: 1010 callbacks suppressed [ 44.572010][ T29] audit: type=1400 audit(1755632841.111:1101): avc: denied { setattr } for pid=3719 comm="syz.3.96" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.605137][ T29] audit: type=1400 audit(1755632841.141:1102): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.605459][ T3726] team0: Port device dummy0 removed [ 44.632161][ T3728] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.96: corrupted inode contents [ 44.640136][ T3726] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.648574][ T3728] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.96: mark_inode_dirty error [ 44.671261][ T3728] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.96: corrupted inode contents [ 44.697834][ T3725] netlink: 'syz.1.98': attribute type 10 has an invalid length. [ 44.718724][ T3725] team0: Port device dummy0 added [ 44.733086][ T29] audit: type=1400 audit(1755632841.251:1103): avc: denied { append } for pid=3731 comm="syz.0.100" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.782246][ T3725] team0: Port device dummy0 removed [ 44.805426][ T3725] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.840525][ T29] audit: type=1400 audit(1755632841.371:1104): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 44.868278][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.901422][ T29] audit: type=1326 audit(1755632841.421:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 44.927549][ T29] audit: type=1326 audit(1755632841.421:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 44.954165][ T29] audit: type=1326 audit(1755632841.421:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 44.968325][ T3747] loop4: detected capacity change from 0 to 512 [ 44.981644][ T29] audit: type=1326 audit(1755632841.421:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 45.013425][ T29] audit: type=1326 audit(1755632841.421:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 45.031825][ T3747] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.038717][ T29] audit: type=1326 audit(1755632841.421:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.4.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 45.052589][ T3747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.062293][ T3747] EXT4-fs (loop4): 1 truncate cleaned up [ 45.103011][ T3747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.164520][ T3742] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 45.173054][ T3742] tipc: Enabled bearer , priority 10 [ 45.227482][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.251216][ T3761] bond0: (slave dummy0): Releasing backup interface [ 45.260756][ T3389] tipc: Node number set to 1 [ 45.273315][ T3761] team0: Port device dummy0 added [ 45.297408][ T3761] team0: Port device dummy0 removed [ 45.305532][ T3761] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.428683][ T3771] bond0: (slave dummy0): Releasing backup interface [ 45.439719][ T3771] team0: Port device dummy0 added [ 45.454096][ T3771] team0: Port device dummy0 removed [ 45.462836][ T3771] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.478690][ T3773] loop2: detected capacity change from 0 to 512 [ 45.504578][ T3773] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.113: iget: bad extended attribute block 1 [ 45.523768][ T3773] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.113: couldn't read orphan inode 15 (err -117) [ 45.567698][ T3773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.603793][ T3773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.616692][ T3779] syz_tun: entered allmulticast mode [ 45.627182][ T3778] syz_tun: left allmulticast mode [ 45.657105][ T3773] team0: Port device dummy0 added [ 45.695081][ T3773] team0: Port device dummy0 removed [ 45.704507][ T3773] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.799260][ T3793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 45.816695][ T3795] syz.3.123 uses obsolete (PF_INET,SOCK_PACKET) [ 45.935041][ T3803] loop3: detected capacity change from 0 to 512 [ 45.945822][ T3803] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.126: iget: bad extended attribute block 1 [ 45.961393][ T3803] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.126: couldn't read orphan inode 15 (err -117) [ 45.977647][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.994063][ T3803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.012945][ T3803] team0: Port device dummy0 added [ 46.027045][ T3803] team0: Port device dummy0 removed [ 46.036364][ T3803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.290735][ T2951] tipc: Node number set to 776597396 [ 46.296961][ T3816] loop3: detected capacity change from 0 to 512 [ 46.308130][ T3816] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.132: iget: bad extended attribute block 1 [ 46.322379][ T3816] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.132: couldn't read orphan inode 15 (err -117) [ 46.335755][ T3816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.338702][ T3820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 46.350697][ T3816] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.357908][ T3820] IPVS: Error joining to the multicast group [ 46.396068][ T3816] bond0: (slave dummy0): Releasing backup interface [ 46.408970][ T3816] team0: Port device dummy0 added [ 46.423012][ T3816] team0: Port device dummy0 removed [ 46.431701][ T3816] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.460564][ T3825] tipc: Started in network mode [ 46.465800][ T3825] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 46.475949][ T3825] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 46.484453][ T3825] tipc: Enabled bearer , priority 10 [ 46.558101][ T3828] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 46.613143][ T3830] tipc: Enabled bearer , priority 0 [ 46.622827][ T3833] loop4: detected capacity change from 0 to 128 [ 46.627996][ T3824] loop1: detected capacity change from 0 to 128 [ 46.649135][ T3829] tipc: Resetting bearer [ 46.668293][ T3829] tipc: Disabling bearer [ 46.704023][ T3832] syz.4.137: attempt to access beyond end of device [ 46.704023][ T3832] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 46.719936][ T3832] syz.4.137: attempt to access beyond end of device [ 46.719936][ T3832] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 46.738929][ T3832] syz.4.137: attempt to access beyond end of device [ 46.738929][ T3832] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 46.766453][ T3832] syz.4.137: attempt to access beyond end of device [ 46.766453][ T3832] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 46.782466][ T3832] syz.4.137: attempt to access beyond end of device [ 46.782466][ T3832] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 46.806321][ T3832] syz.4.137: attempt to access beyond end of device [ 46.806321][ T3832] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 46.821730][ T3832] syz.4.137: attempt to access beyond end of device [ 46.821730][ T3832] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 46.840424][ T3832] syz.4.137: attempt to access beyond end of device [ 46.840424][ T3832] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 46.854697][ T3839] loop2: detected capacity change from 0 to 512 [ 46.858774][ T3832] syz.4.137: attempt to access beyond end of device [ 46.858774][ T3832] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 46.883216][ T3832] syz.4.137: attempt to access beyond end of device [ 46.883216][ T3832] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 46.898666][ T3839] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.141: iget: bad extended attribute block 1 [ 46.912620][ T3839] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.141: couldn't read orphan inode 15 (err -117) [ 46.926723][ T3839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.930723][ T3843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 46.947396][ T3839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.953612][ T3843] vlan2: entered promiscuous mode [ 46.966052][ T3843] team0: entered promiscuous mode [ 46.973421][ T3843] team_slave_0: entered promiscuous mode [ 46.979679][ T3843] team_slave_1: entered promiscuous mode [ 46.996672][ T3839] bond0: (slave dummy0): Releasing backup interface [ 47.005980][ T3839] team0: Port device dummy0 added [ 47.017552][ T3839] team0: Port device dummy0 removed [ 47.026053][ T3839] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.058989][ T3850] tmpfs: Unknown parameter '01777777777777777777777' [ 47.070081][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'. [ 47.082014][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.090340][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.098948][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.106918][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.209312][ T3856] loop1: detected capacity change from 0 to 128 [ 47.300570][ T3865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'. [ 47.322258][ T3865] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3865 comm=syz.3.151 [ 47.620712][ T23] tipc: Node number set to 1 [ 47.957916][ T3875] loop3: detected capacity change from 0 to 512 [ 47.968245][ T3875] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 47.983991][ T3875] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.991213][ T3875] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.156: Block bitmap for bg 0 marked uninitialized [ 48.004271][ T3877] validate_nla: 13 callbacks suppressed [ 48.004296][ T3877] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 48.017025][ T3875] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 48.028458][ T3875] EXT4-fs (loop3): 1 orphan inode deleted [ 48.035945][ T3875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.069476][ T3877] bond0: (slave dummy0): Releasing backup interface [ 48.082206][ T3881] netlink: 'syz.4.157': attribute type 13 has an invalid length. [ 48.085301][ T3877] team0: Port device dummy0 added [ 48.121226][ T3884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 48.146792][ T3886] loop2: detected capacity change from 0 to 512 [ 48.153528][ T3881] gretap0: refused to change device tx_queue_len [ 48.161383][ T3881] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.162593][ T3877] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 48.165540][ T3877] team0: Port device dummy0 removed [ 48.167601][ T3877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.170348][ T3886] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.159: iget: bad extended attribute block 1 [ 48.200251][ T3881] netlink: 3 bytes leftover after parsing attributes in process `syz.4.157'. [ 48.224408][ T3886] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.159: couldn't read orphan inode 15 (err -117) [ 48.233453][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.245784][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.280851][ T3893] loop3: detected capacity change from 0 to 512 [ 48.282309][ T3884] team0 (unregistering): Port device team_slave_0 removed [ 48.299039][ T3886] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.309650][ T3884] team0 (unregistering): Port device team_slave_1 removed [ 48.319383][ T3893] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.160: iget: bad extended attribute block 1 [ 48.333016][ T3881] 0ªX¹¦À: renamed from caif0 [ 48.335523][ T3893] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.160: couldn't read orphan inode 15 (err -117) [ 48.351458][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.364120][ T3881] 0ªX¹¦À: entered allmulticast mode [ 48.367686][ T3893] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.369745][ T3881] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 48.399574][ T3893] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 48.400732][ T3886] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 48.426627][ T3886] bond0: (slave dummy0): Releasing backup interface [ 48.438737][ T3886] team0: Port device dummy0 added [ 48.450265][ T3893] bond0: (slave dummy0): Releasing backup interface [ 48.465335][ T3886] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 48.466771][ T3893] dummy0: entered promiscuous mode [ 48.480761][ T3893] team0: Port device dummy0 added [ 48.490812][ T3893] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 48.499343][ T3886] team0: Port device dummy0 removed [ 48.508796][ T3886] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.522067][ T3893] dummy0: left promiscuous mode [ 48.529048][ T3893] team0: Port device dummy0 removed [ 48.537354][ T3893] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.561644][ T3906] hub 8-0:1.0: USB hub found [ 48.566854][ T3906] hub 8-0:1.0: 8 ports detected [ 48.662696][ T3915] process 'syz.2.168' launched './file0' with NULL argv: empty string added [ 48.731368][ T3918] syzkaller0: entered promiscuous mode [ 48.738147][ T3918] syzkaller0: entered allmulticast mode [ 49.285218][ T3936] loop4: detected capacity change from 0 to 512 [ 49.332944][ T3940] syz_tun: entered allmulticast mode [ 49.345863][ T3939] syz_tun: left allmulticast mode [ 49.353106][ T3938] loop1: detected capacity change from 0 to 512 [ 49.362741][ T3938] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.176: iget: bad extended attribute block 1 [ 49.380192][ T3938] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.176: couldn't read orphan inode 15 (err -117) [ 49.397653][ T3938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.436808][ T3938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.480916][ T3938] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 49.510963][ T3938] bond0: (slave dummy0): Releasing backup interface [ 49.529123][ T3938] netlink: 'syz.1.176': attribute type 10 has an invalid length. [ 49.539837][ T3938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.606167][ T3957] netlink: 'syz.0.184': attribute type 10 has an invalid length. [ 49.615787][ T3957] bond0: (slave dummy0): Releasing backup interface [ 49.625347][ T3957] team0: Port device dummy0 added [ 49.645368][ T3957] team0: Port device dummy0 removed [ 49.653251][ T3957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.680847][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 49.680867][ T29] audit: type=1400 audit(1755632846.221:1508): avc: denied { relabelfrom } for pid=3960 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 49.760690][ T29] audit: type=1400 audit(1755632846.221:1509): avc: denied { relabelto } for pid=3960 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 49.781337][ T29] audit: type=1326 audit(1755632846.261:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 49.806349][ T29] audit: type=1326 audit(1755632846.261:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 49.830852][ T29] audit: type=1326 audit(1755632846.261:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 49.855716][ T29] audit: type=1326 audit(1755632846.261:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 49.880522][ T29] audit: type=1326 audit(1755632846.261:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 49.904821][ T29] audit: type=1326 audit(1755632846.261:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 49.928901][ T29] audit: type=1326 audit(1755632846.261:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 49.955841][ T29] audit: type=1326 audit(1755632846.261:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3964 comm="syz.4.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 50.003471][ T3975] mmap: syz.1.191 (3975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.042264][ T3978] tipc: New replicast peer: 255.255.255.255 [ 50.048613][ T3978] tipc: Enabled bearer , priority 10 [ 51.599968][ T4128] tipc: Enabled bearer , priority 0 [ 51.621124][ T4128] syzkaller0: entered promiscuous mode [ 51.626731][ T4128] syzkaller0: entered allmulticast mode [ 51.658914][ T4128] tipc: Resetting bearer [ 51.671323][ T4124] tipc: Resetting bearer [ 51.678768][ T4124] tipc: Disabling bearer [ 51.878963][ T4144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 51.951266][ T4144] Zero length message leads to an empty skb [ 52.101638][ T4154] loop4: detected capacity change from 0 to 512 [ 52.112874][ T4154] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.214: iget: bad extended attribute block 1 [ 52.127183][ T4154] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.214: couldn't read orphan inode 15 (err -117) [ 52.142479][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.158417][ T4154] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.185439][ T4154] bond0: (slave dummy0): Releasing backup interface [ 52.199216][ T4154] team0: Port device dummy0 added [ 52.215459][ T4154] team0: Port device dummy0 removed [ 52.223578][ T4154] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 52.380135][ T4165] Driver unsupported XDP return value 0 on prog (id 145) dev N/A, expect packet loss! [ 52.447869][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 52.643069][ T4173] syzkaller0: entered promiscuous mode [ 52.650043][ T4173] syzkaller0: entered allmulticast mode [ 52.986471][ T4188] syzkaller0: entered promiscuous mode [ 52.995996][ T4188] syzkaller0: entered allmulticast mode [ 54.131368][ T4199] lo speed is unknown, defaulting to 1000 [ 54.378629][ T4205] loop3: detected capacity change from 0 to 512 [ 54.396462][ T4205] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.234: iget: bad extended attribute block 1 [ 54.420713][ T4205] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.234: couldn't read orphan inode 15 (err -117) [ 54.453391][ T4205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.492023][ T4205] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.542702][ T4205] validate_nla: 3 callbacks suppressed [ 54.542721][ T4205] netlink: 'syz.3.234': attribute type 10 has an invalid length. [ 54.572535][ T4205] bond0: (slave dummy0): Releasing backup interface [ 54.713931][ T4205] dummy0: entered promiscuous mode [ 54.738847][ T4205] team0: Port device dummy0 added [ 54.746028][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 54.746048][ T29] audit: type=1400 audit(1755632851.261:2460): avc: denied { name_bind } for pid=4217 comm="syz.0.237" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 54.790287][ T4221] netlink: 'syz.3.234': attribute type 10 has an invalid length. [ 54.834326][ T4221] dummy0: left promiscuous mode [ 54.868092][ T4221] team0: Port device dummy0 removed [ 54.929873][ T4221] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.183713][ T29] audit: type=1326 audit(1755632851.721:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.193245][ T4229] tipc: Enabling of bearer rejected, failed to enable media [ 55.270118][ T29] audit: type=1326 audit(1755632851.751:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.294344][ T29] audit: type=1326 audit(1755632851.751:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.318907][ T29] audit: type=1326 audit(1755632851.751:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.343103][ T29] audit: type=1326 audit(1755632851.751:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.366675][ T29] audit: type=1326 audit(1755632851.751:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.391447][ T29] audit: type=1326 audit(1755632851.751:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.415885][ T29] audit: type=1326 audit(1755632851.751:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.440883][ T29] audit: type=1326 audit(1755632851.751:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4228 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832f5cebe9 code=0x7ffc0000 [ 55.556635][ T4224] hub 8-0:1.0: USB hub found [ 55.562046][ T4224] hub 8-0:1.0: 8 ports detected [ 56.448927][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 56.458229][ T4275] netlink: 9 bytes leftover after parsing attributes in process `syz.3.255'. [ 56.471286][ T4271] hub 6-0:1.0: USB hub found [ 56.478415][ T4271] hub 6-0:1.0: 8 ports detected [ 57.502521][ T4308] serio: Serial port ptm0 [ 58.408010][ T4326] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 58.435957][ T4326] bond0: (slave dummy0): Releasing backup interface [ 58.454788][ T4326] team0: Port device dummy0 added [ 58.460713][ T4338] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 58.481085][ T4338] team0: Port device dummy0 removed [ 58.489693][ T4338] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.526039][ T4336] syzkaller0: entered promiscuous mode [ 58.531802][ T4336] syzkaller0: entered allmulticast mode [ 58.968804][ T4419] loop3: detected capacity change from 0 to 512 [ 58.976436][ T4419] EXT4-fs: Ignoring removed nobh option [ 58.982485][ T4419] ext4: Unknown parameter 'dont_hash' [ 59.045268][ T4431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.281'. [ 59.054761][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.281'. [ 59.064362][ T4431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.281'. [ 59.079299][ T4431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.281'. [ 59.229383][ T4449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4449 comm=syz.1.290 [ 59.245383][ T4449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'. [ 59.482789][ T4467] loop4: detected capacity change from 0 to 2048 [ 59.503758][ T4467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.752847][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 59.752860][ T29] audit: type=1326 audit(1755632856.291:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5c16e5ba7 code=0x7ffc0000 [ 59.785455][ T29] audit: type=1326 audit(1755632856.301:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5c168add9 code=0x7ffc0000 [ 59.812566][ T29] audit: type=1326 audit(1755632856.301:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 59.854699][ T29] audit: type=1326 audit(1755632856.391:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5c16e5ba7 code=0x7ffc0000 [ 59.879550][ T29] audit: type=1326 audit(1755632856.391:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5c168add9 code=0x7ffc0000 [ 60.069961][ T4405] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 234: padding at end of block bitmap is not set [ 60.104131][ T29] audit: type=1326 audit(1755632856.441:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5c16e5ba7 code=0x7ffc0000 [ 60.129462][ T29] audit: type=1326 audit(1755632856.441:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5c168add9 code=0x7ffc0000 [ 60.153445][ T29] audit: type=1326 audit(1755632856.441:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 60.177934][ T29] audit: type=1326 audit(1755632856.451:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc5c16e5ba7 code=0x7ffc0000 [ 60.179953][ T4405] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 60.202325][ T29] audit: type=1326 audit(1755632856.451:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.0.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc5c168add9 code=0x7ffc0000 [ 60.215631][ T4405] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.215631][ T4405] [ 60.270217][ T4405] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 60.283035][ T4405] EXT4-fs (loop4): This should not happen!! Data will be lost [ 60.283035][ T4405] [ 60.292912][ T4405] EXT4-fs (loop4): Total free blocks count 0 [ 60.299034][ T4405] EXT4-fs (loop4): Free/Dirty block details [ 60.305288][ T4405] EXT4-fs (loop4): free_blocks=0 [ 60.310984][ T4405] EXT4-fs (loop4): dirty_blocks=6160 [ 60.316507][ T4405] EXT4-fs (loop4): Block reservation details [ 60.535439][ T4488] lo speed is unknown, defaulting to 1000 [ 60.674456][ T4492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 60.695301][ T4492] vlan2: entered allmulticast mode [ 61.265472][ T4505] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 61.275208][ T4505] bond0: (slave dummy0): Releasing backup interface [ 61.287650][ T4505] netlink: 'syz.1.310': attribute type 10 has an invalid length. [ 61.298956][ T4505] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.552289][ T4510] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 61.571952][ T4510] bond0: (slave dummy0): Releasing backup interface [ 61.582044][ T4510] team0: Port device dummy0 added [ 61.592868][ T4510] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 61.620214][ T4510] team0: Port device dummy0 removed [ 61.628453][ T4510] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.697796][ T4516] loop4: detected capacity change from 0 to 512 [ 61.709311][ T4516] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.315: iget: bad extended attribute block 1 [ 61.724959][ T4516] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.315: couldn't read orphan inode 15 (err -117) [ 61.751445][ T4516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.766393][ T4516] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.784083][ T4512] hub 8-0:1.0: USB hub found [ 61.788061][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.316'. [ 61.789350][ T4512] hub 8-0:1.0: 8 ports detected [ 61.812480][ T4516] netlink: 'syz.4.315': attribute type 10 has an invalid length. [ 61.825037][ T4516] bond0: (slave dummy0): Releasing backup interface [ 61.838644][ T4516] team0: Port device dummy0 added [ 61.848389][ T4516] netlink: 'syz.4.315': attribute type 10 has an invalid length. [ 61.859699][ T4516] team0: Port device dummy0 removed [ 61.868613][ T4516] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.913896][ T4529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.930254][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.320'. [ 61.942148][ T4529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.961126][ T4529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.026513][ T4533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.321'. [ 62.035947][ T4533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.043783][ T4533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.196797][ T4543] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 62.207245][ T4543] bond0: (slave dummy0): Releasing backup interface [ 62.218927][ T4543] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 62.230357][ T4543] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.272228][ T4548] tipc: Enabled bearer , priority 0 [ 62.279725][ T4548] syzkaller0: entered promiscuous mode [ 62.286318][ T4548] syzkaller0: entered allmulticast mode [ 62.308805][ T4548] tipc: Resetting bearer [ 62.315157][ T4550] Set syz1 is full, maxelem 6117 reached [ 62.321364][ T4547] tipc: Resetting bearer [ 62.329442][ T4547] tipc: Disabling bearer [ 62.565831][ T4554] hub 8-0:1.0: USB hub found [ 62.571307][ T4561] tipc: Enabled bearer , priority 0 [ 62.571264][ T4554] hub 8-0:1.0: 8 ports detected [ 62.579944][ T4561] syzkaller0: entered promiscuous mode [ 62.589587][ T4561] syzkaller0: entered allmulticast mode [ 62.777653][ T4561] tipc: Resetting bearer [ 62.841222][ T4560] tipc: Resetting bearer [ 62.882800][ T4560] tipc: Disabling bearer [ 63.147004][ T4573] loop0: detected capacity change from 0 to 512 [ 63.148370][ T4574] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 63.269827][ T4574] bond0: (slave dummy0): Releasing backup interface [ 63.318705][ T4574] team0: Port device dummy0 added [ 63.325592][ T4573] EXT4-fs (loop0): too many log groups per flexible block group [ 63.333947][ T4573] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 63.342101][ T4578] tipc: Enabled bearer , priority 0 [ 63.349492][ T4578] syzkaller0: entered promiscuous mode [ 63.355115][ T4578] syzkaller0: entered allmulticast mode [ 63.364262][ T4573] EXT4-fs (loop0): mount failed [ 63.367969][ T4574] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 63.379583][ T4578] tipc: Resetting bearer [ 63.393497][ T4574] team0: Port device dummy0 removed [ 63.401508][ T4574] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 63.449693][ T4584] netlink: 64 bytes leftover after parsing attributes in process `syz.2.340'. [ 63.472241][ T4577] tipc: Resetting bearer [ 63.493674][ T4577] tipc: Disabling bearer [ 63.769582][ T4607] loop0: detected capacity change from 0 to 2048 [ 63.801844][ T4607] Alternate GPT is invalid, using primary GPT. [ 63.808986][ T4607] loop0: p1 p2 p3 [ 64.446004][ T4623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 64.663058][ T4622] bond0: (slave dummy0): Releasing backup interface [ 64.673437][ T4622] dummy0: entered promiscuous mode [ 64.679715][ T4622] team0: Port device dummy0 added [ 64.691969][ T4622] dummy0: left promiscuous mode [ 64.698342][ T4622] team0: Port device dummy0 removed [ 64.723283][ T4622] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.746776][ T4627] tipc: Started in network mode [ 64.752473][ T4627] tipc: Node identity 2acafac1bc76, cluster identity 4711 [ 64.761411][ T4627] tipc: Enabled bearer , priority 0 [ 64.789285][ T4627] syzkaller0: entered promiscuous mode [ 64.795744][ T4627] syzkaller0: entered allmulticast mode [ 64.881974][ T4627] tipc: Resetting bearer [ 64.888797][ T4626] tipc: Resetting bearer [ 64.896200][ T4626] tipc: Disabling bearer [ 64.920630][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 64.927288][ T29] audit: type=1400 audit(1755632861.411:3832): avc: denied { bind } for pid=4629 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.958890][ T4634] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 64.966213][ T4634] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 64.974078][ T4634] vhci_hcd vhci_hcd.0: Device attached [ 64.985966][ T4635] vhci_hcd: connection closed [ 64.986188][ T4106] vhci_hcd: stop threads [ 64.995828][ T4106] vhci_hcd: release socket [ 65.000531][ T4106] vhci_hcd: disconnect device [ 65.033764][ T4639] bond0: (slave dummy0): Releasing backup interface [ 65.044625][ T4639] dummy0: entered promiscuous mode [ 65.050550][ T4639] team0: Port device dummy0 added [ 65.064685][ T4639] dummy0: left promiscuous mode [ 65.077249][ T4639] team0: Port device dummy0 removed [ 65.086255][ T4639] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.116499][ T29] audit: type=1400 audit(1755632861.651:3833): avc: denied { sqpoll } for pid=4640 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 65.141195][ T29] audit: type=1400 audit(1755632861.681:3834): avc: denied { read } for pid=4640 comm="syz.3.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.192496][ T29] audit: type=1400 audit(1755632861.731:3835): avc: denied { name_bind } for pid=4640 comm="syz.3.357" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 65.215324][ T29] audit: type=1400 audit(1755632861.731:3836): avc: denied { node_bind } for pid=4640 comm="syz.3.357" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 65.329695][ T4646] bond0: (slave dummy0): Releasing backup interface [ 65.348223][ T4646] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.409279][ T4650] bond0: (slave dummy0): Releasing backup interface [ 65.422250][ T4650] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.453275][ T4652] tipc: Enabling of bearer rejected, failed to enable media [ 65.565134][ T4663] netlink: 96 bytes leftover after parsing attributes in process `syz.0.362'. [ 65.616750][ T29] audit: type=1400 audit(1755632862.151:3837): avc: denied { getopt } for pid=4664 comm="syz.1.364" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.669011][ T29] audit: type=1400 audit(1755632862.201:3838): avc: denied { cpu } for pid=4668 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.694921][ T4670] pim6reg: entered allmulticast mode [ 65.699560][ T29] audit: type=1400 audit(1755632862.231:3839): avc: denied { write } for pid=4668 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 65.703244][ T4668] pim6reg: left allmulticast mode [ 65.725040][ T29] audit: type=1400 audit(1755632862.231:3840): avc: denied { setopt } for pid=4668 comm="syz.4.365" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 65.777160][ T29] audit: type=1400 audit(1755632862.311:3841): avc: denied { ioctl } for pid=4674 comm="syz.1.368" path="socket:[7968]" dev="sockfs" ino=7968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.811996][ T4675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'. [ 65.865155][ T4681] bond0: (slave dummy0): Releasing backup interface [ 65.875630][ T4681] team0: Port device dummy0 added [ 65.889964][ T4681] team0: Port device dummy0 removed [ 65.899029][ T4681] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 65.938656][ T4687] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.958874][ T4685] bond0: (slave dummy0): Releasing backup interface [ 65.969977][ T4685] team0: Port device dummy0 added [ 66.003195][ T4685] team0: Port device dummy0 removed [ 66.015130][ T4685] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.121847][ T4704] tipc: Enabled bearer , priority 0 [ 66.129714][ T4704] syzkaller0: entered promiscuous mode [ 66.135976][ T4704] syzkaller0: entered allmulticast mode [ 66.162338][ T4704] tipc: Resetting bearer [ 66.172860][ T4703] tipc: Resetting bearer [ 66.181924][ T4703] tipc: Disabling bearer [ 66.205194][ T4709] bond0: (slave dummy0): Releasing backup interface [ 66.224352][ T4709] team0: Port device dummy0 added [ 66.237246][ T4709] team0: Port device dummy0 removed [ 66.245584][ T4709] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.299814][ T4712] lo speed is unknown, defaulting to 1000 [ 66.374386][ T4722] validate_nla: 14 callbacks suppressed [ 66.374419][ T4722] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 66.395719][ T4722] bond0: (slave dummy0): Releasing backup interface [ 66.415169][ T4720] tipc: Enabled bearer , priority 0 [ 66.427620][ T4720] syzkaller0: entered promiscuous mode [ 66.434704][ T4720] syzkaller0: entered allmulticast mode [ 66.444005][ T4722] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 66.455115][ T4720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 66.480017][ T4722] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.495915][ T4720] tipc: Resetting bearer [ 66.503634][ T4725] tipc: Started in network mode [ 66.508816][ T4725] tipc: Node identity 9a5d1d094fde, cluster identity 4711 [ 66.516159][ T4725] tipc: Enabled bearer , priority 0 [ 66.531702][ T4725] syzkaller0: entered promiscuous mode [ 66.538176][ T4725] syzkaller0: entered allmulticast mode [ 66.547173][ T4719] tipc: Resetting bearer [ 66.556227][ T4719] tipc: Disabling bearer [ 66.575882][ T4725] tipc: Resetting bearer [ 66.584887][ T4724] tipc: Resetting bearer [ 66.592895][ T4724] tipc: Disabling bearer [ 66.629533][ T4733] tipc: Enabled bearer , priority 0 [ 66.638251][ T4733] syzkaller0: entered promiscuous mode [ 66.646472][ T4733] syzkaller0: entered allmulticast mode [ 66.674236][ T4733] tipc: Resetting bearer [ 66.700359][ T4737] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 66.737622][ T4737] bond0: (slave dummy0): Releasing backup interface [ 66.757152][ T4742] netlink: 'syz.4.397': attribute type 10 has an invalid length. [ 66.779623][ T4737] team0: Port device dummy0 added [ 66.780260][ T4735] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 66.798568][ T4735] netlink: 224 bytes leftover after parsing attributes in process `syz.3.394'. [ 66.810101][ T4732] tipc: Resetting bearer [ 66.823545][ T4732] tipc: Disabling bearer [ 66.832807][ T4737] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 66.846630][ T4742] bond0: (slave dummy0): Releasing backup interface [ 66.857593][ T4742] team0: Port device dummy0 added [ 66.871821][ T4737] team0: Port device dummy0 removed [ 66.875949][ T4742] netlink: 'syz.4.397': attribute type 10 has an invalid length. [ 66.880476][ T4737] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.950124][ T4742] team0: Port device dummy0 removed [ 66.996020][ T4742] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.078670][ T4753] smc: net device bond0 applied user defined pnetid SYZ2 [ 67.144938][ T4756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.401'. [ 67.206787][ T4760] lo speed is unknown, defaulting to 1000 [ 67.415906][ T4766] netlink: 40 bytes leftover after parsing attributes in process `syz.4.405'. [ 67.927281][ T4769] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 67.950843][ T4774] tipc: Enabled bearer , priority 0 [ 68.003949][ T4774] syzkaller0: entered promiscuous mode [ 68.015532][ T4774] syzkaller0: entered allmulticast mode [ 68.079985][ T4777] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 68.127398][ T4769] bond0: (slave dummy0): Releasing backup interface [ 68.197502][ T4769] team0: Port device dummy0 added [ 68.276298][ T4777] team0: Port device dummy0 removed [ 68.285284][ T4777] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 68.308097][ T4774] tipc: Resetting bearer [ 68.331831][ T4773] tipc: Resetting bearer [ 68.366187][ T4773] tipc: Disabling bearer [ 68.422316][ T4788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'. [ 68.615556][ T4797] loop0: detected capacity change from 0 to 512 [ 68.628218][ T4797] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.411: iget: bad extended attribute block 1 [ 68.642353][ T4797] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.411: couldn't read orphan inode 15 (err -117) [ 68.656723][ T4797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.673355][ T4797] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.719626][ T4804] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 68.733742][ T4804] bond0: (slave dummy0): Releasing backup interface [ 68.748130][ T4804] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.242629][ T4797] bond0: (slave dummy0): Releasing backup interface [ 69.257675][ T4797] team0: Port device dummy0 added [ 69.308015][ T4797] team0: Port device dummy0 removed [ 69.317165][ T4797] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 69.332341][ T4816] tipc: Enabled bearer , priority 0 [ 69.340202][ T4816] syzkaller0: entered promiscuous mode [ 69.346263][ T4816] syzkaller0: entered allmulticast mode [ 69.396044][ T4816] tipc: Resetting bearer [ 69.407525][ T4815] tipc: Resetting bearer [ 69.417092][ T4815] tipc: Disabling bearer [ 69.427803][ T4821] tipc: Enabled bearer , priority 0 [ 69.437405][ T4821] syzkaller0: entered promiscuous mode [ 69.445611][ T4821] syzkaller0: entered allmulticast mode [ 69.469671][ T4821] tipc: Resetting bearer [ 69.494764][ T4820] tipc: Resetting bearer [ 69.555576][ T4820] tipc: Disabling bearer [ 69.677391][ T4837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.424'. [ 69.688237][ T4837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'. [ 69.698045][ T4837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.424'. [ 69.750764][ T4837] netlink: 36 bytes leftover after parsing attributes in process `syz.2.424'. [ 70.012613][ T4852] loop0: detected capacity change from 0 to 512 [ 70.032157][ T4852] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.432: iget: bad extended attribute block 1 [ 70.050989][ T4852] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.432: couldn't read orphan inode 15 (err -117) [ 70.077684][ T4852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.093074][ T4852] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.114067][ T4857] bond0: (slave dummy0): Releasing backup interface [ 70.133458][ T4857] dummy0: entered promiscuous mode [ 70.139872][ T4857] team0: Port device dummy0 added [ 70.212494][ T4857] dummy0: left promiscuous mode [ 70.218703][ T4857] team0: Port device dummy0 removed [ 70.243506][ T4857] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 70.306070][ T4852] bond0: (slave dummy0): Releasing backup interface [ 70.321220][ T4852] team0: Port device dummy0 added [ 70.349881][ T4852] team0: Port device dummy0 removed [ 70.350270][ T4869] random: crng reseeded on system resumption [ 70.355476][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 70.355513][ T29] audit: type=1400 audit(1755632866.881:3973): avc: denied { append } for pid=4865 comm="syz.2.436" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.370473][ T4869] Restarting kernel threads ... [ 70.394034][ T29] audit: type=1400 audit(1755632866.881:3974): avc: denied { open } for pid=4865 comm="syz.2.436" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.406410][ T4852] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 70.443924][ T4869] Done restarting kernel threads. [ 70.475369][ T4872] lo speed is unknown, defaulting to 1000 [ 70.600400][ T29] audit: type=1400 audit(1755632866.901:3975): avc: denied { ioctl } for pid=4865 comm="syz.2.436" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.901459][ T4866] lo speed is unknown, defaulting to 1000 [ 71.484466][ T29] audit: type=1400 audit(1755632868.011:3976): avc: denied { ioctl } for pid=4859 comm="syz.1.434" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 71.581986][ T4878] tipc: Enabled bearer , priority 0 [ 71.599515][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.449'. [ 71.650960][ T4878] syzkaller0: entered promiscuous mode [ 71.656950][ T4878] syzkaller0: entered allmulticast mode [ 71.724690][ T4878] tipc: Resetting bearer [ 71.758478][ T29] audit: type=1400 audit(1755632868.271:3977): avc: denied { bind } for pid=4883 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 71.795541][ T4877] tipc: Resetting bearer [ 71.803016][ T4882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.440'. [ 71.814501][ T4877] tipc: Disabling bearer [ 72.113994][ T4902] netlink: 64 bytes leftover after parsing attributes in process `syz.3.446'. [ 72.354854][ T4907] validate_nla: 7 callbacks suppressed [ 72.354870][ T4907] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 72.371892][ T4907] bond0: (slave dummy0): Releasing backup interface [ 72.381308][ T4907] dummy0: entered promiscuous mode [ 72.387278][ T4907] team0: Port device dummy0 added [ 72.397417][ T4907] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 72.400294][ T4910] tipc: Enabled bearer , priority 0 [ 72.417170][ T4910] syzkaller0: entered promiscuous mode [ 72.423250][ T4910] syzkaller0: entered allmulticast mode [ 72.435144][ T4907] dummy0: left promiscuous mode [ 72.442025][ T4907] team0: Port device dummy0 removed [ 72.450472][ T4907] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.463704][ T4910] tipc: Resetting bearer [ 72.479420][ T4909] tipc: Resetting bearer [ 72.501210][ T4909] tipc: Disabling bearer [ 72.520043][ T4915] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 72.531517][ T4915] bond0: (slave dummy0): Releasing backup interface [ 72.540608][ T4915] dummy0: entered promiscuous mode [ 72.547430][ T4915] team0: Port device dummy0 added [ 72.808193][ T4927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 72.819435][ T4927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.455'. [ 72.830249][ T4927] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 72.850809][ T4928] tipc: Enabled bearer , priority 0 [ 72.870135][ T4928] syzkaller0: entered promiscuous mode [ 72.876853][ T4928] syzkaller0: entered allmulticast mode [ 72.910752][ T4928] tipc: Resetting bearer [ 72.919910][ T4926] tipc: Resetting bearer [ 72.928523][ T4926] tipc: Disabling bearer [ 73.067120][ T4938] lo speed is unknown, defaulting to 1000 [ 73.564921][ T29] audit: type=1326 audit(1755632870.101:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 73.755536][ T29] audit: type=1326 audit(1755632870.161:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 73.781353][ T29] audit: type=1326 audit(1755632870.161:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 73.807054][ T29] audit: type=1326 audit(1755632870.161:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 73.831561][ T29] audit: type=1326 audit(1755632870.171:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 73.932114][ T4950] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 74.020789][ T4950] bond0: (slave dummy0): Releasing backup interface [ 74.070572][ T4952] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 74.124777][ T4952] bond0: (slave dummy0): Releasing backup interface [ 74.143403][ T4950] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 74.195682][ T4952] team0: Port device dummy0 added [ 74.237689][ T4950] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.247557][ T4959] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 74.294534][ T4959] team0: Port device dummy0 removed [ 74.335956][ T4959] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 74.465927][ T4964] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 74.496792][ T4964] syz.2.468 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 74.926622][ T4984] __nla_validate_parse: 3 callbacks suppressed [ 74.926644][ T4984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'. [ 74.946179][ T4984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 74.960337][ T4984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'. [ 75.000722][ T4984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'. [ 75.057697][ T4993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.472'. [ 75.214153][ T5003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'. [ 75.225527][ T5003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'. [ 75.234812][ T5003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'. [ 75.245030][ T5003] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'. [ 75.256536][ T5004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 75.417370][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 75.417388][ T29] audit: type=1400 audit(1755632871.951:4036): avc: denied { create } for pid=5010 comm="syz.2.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.465366][ T5011] team0: No ports can be present during mode change [ 75.496884][ T5014] netlink: 'syz.3.478': attribute type 10 has an invalid length. [ 75.510959][ T5014] netlink: 'syz.3.478': attribute type 10 has an invalid length. [ 75.520532][ T5014] dummy0: left promiscuous mode [ 75.522600][ T29] audit: type=1400 audit(1755632872.001:4037): avc: denied { ioctl } for pid=5010 comm="syz.2.477" path="socket:[9113]" dev="sockfs" ino=9113 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.553451][ T29] audit: type=1400 audit(1755632872.001:4038): avc: denied { lock } for pid=5010 comm="syz.2.477" path="socket:[9113]" dev="sockfs" ino=9113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 75.593941][ T5014] team0: Port device dummy0 removed [ 75.602448][ T5014] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.622269][ T5017] netlink: 'syz.2.479': attribute type 10 has an invalid length. [ 75.635134][ T5017] bond0: (slave dummy0): Releasing backup interface [ 75.654682][ T5017] team0: Port device dummy0 added [ 75.714808][ T5017] team0: Port device dummy0 removed [ 75.765016][ T5017] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.806991][ T29] audit: type=1400 audit(1755632872.341:4039): avc: denied { setcurrent } for pid=5025 comm="syz.4.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 75.832241][ T29] audit: type=1401 audit(1755632872.341:4040): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 76.111792][ T5035] bond0: (slave dummy0): Releasing backup interface [ 77.073516][ T5035] team0: Port device dummy0 added [ 77.354667][ T5038] lo speed is unknown, defaulting to 1000 [ 77.831685][ T29] audit: type=1400 audit(1755632874.361:4041): avc: denied { firmware_load } for pid=5029 comm="syz.4.485" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 77.950871][ T5035] validate_nla: 2 callbacks suppressed [ 77.950891][ T5035] netlink: 'syz.0.487': attribute type 10 has an invalid length. [ 78.041136][ T5035] team0: Port device dummy0 removed [ 78.064482][ T5035] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.150691][ T29] audit: type=1326 audit(1755632874.681:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 78.186361][ T29] audit: type=1326 audit(1755632874.681:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 78.230546][ T5054] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 78.298968][ T5057] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 78.309410][ T5057] bond0: (slave dummy0): Releasing backup interface [ 78.319650][ T5057] dummy0: entered promiscuous mode [ 78.328687][ T5057] team0: Port device dummy0 added [ 78.350702][ T29] audit: type=1326 audit(1755632874.751:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 78.358341][ T5057] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 78.376155][ T29] audit: type=1326 audit(1755632874.751:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5050 comm="syz.3.490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 78.396054][ T5057] dummy0: left promiscuous mode [ 78.521093][ T5057] team0: Port device dummy0 removed [ 78.536288][ T5057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.569392][ T5049] syz.2.499 (5049) used greatest stack depth: 10008 bytes left [ 78.616773][ T5060] netlink: 'syz.4.493': attribute type 13 has an invalid length. [ 78.743607][ T5060] 0ªX¹¦À: left allmulticast mode [ 78.751798][ T5060] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.114599][ T5074] lo speed is unknown, defaulting to 1000 [ 79.121244][ T5074] lo speed is unknown, defaulting to 1000 [ 79.128335][ T5074] lo speed is unknown, defaulting to 1000 [ 79.128381][ T5078] netlink: 'syz.2.497': attribute type 10 has an invalid length. [ 79.129099][ T5074] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 79.154150][ T5078] bond0: (slave dummy0): Releasing backup interface [ 79.166442][ T5078] team0: Port device dummy0 added [ 79.177086][ T5084] wireguard0: entered promiscuous mode [ 79.183874][ T5084] wireguard0: entered allmulticast mode [ 79.200070][ T5074] lo speed is unknown, defaulting to 1000 [ 79.203117][ T5078] netlink: 'syz.2.497': attribute type 10 has an invalid length. [ 79.217770][ T5078] team0: Port device dummy0 removed [ 79.226669][ T5078] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.237095][ T5074] lo speed is unknown, defaulting to 1000 [ 79.244323][ T5074] lo speed is unknown, defaulting to 1000 [ 79.250856][ T5074] lo speed is unknown, defaulting to 1000 [ 79.258108][ T5074] lo speed is unknown, defaulting to 1000 [ 79.301020][ T5090] block device autoloading is deprecated and will be removed. [ 79.364464][ T37] hid_parser_main: 16 callbacks suppressed [ 79.364565][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 79.379608][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.387467][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.397943][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.405567][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.414022][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.421772][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x4 [ 79.429828][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.438744][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.447336][ T37] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 79.510516][ T37] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 80.123128][ T5114] lo speed is unknown, defaulting to 1000 [ 80.130286][ T5114] lo speed is unknown, defaulting to 1000 [ 80.620421][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 80.620437][ T29] audit: type=1400 audit(1755632877.151:4186): avc: denied { map } for pid=5122 comm="syz.2.514" path="socket:[10027]" dev="sockfs" ino=10027 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 81.379827][ T5127] loop1: detected capacity change from 0 to 512 [ 81.388378][ T5127] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.516: iget: bad extended attribute block 1 [ 81.401774][ T5127] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.516: couldn't read orphan inode 15 (err -117) [ 81.411096][ T5129] __nla_validate_parse: 5 callbacks suppressed [ 81.411141][ T5129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.515'. [ 81.432034][ T5127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.448958][ T5127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.513290][ T5127] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 81.606724][ T5127] bond0: (slave dummy0): Releasing backup interface [ 81.641474][ T29] audit: type=1326 audit(1755632878.161:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.647978][ T5127] netlink: 'syz.1.516': attribute type 10 has an invalid length. [ 81.666016][ T29] audit: type=1326 audit(1755632878.161:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.698992][ T29] audit: type=1326 audit(1755632878.161:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.725281][ T29] audit: type=1326 audit(1755632878.161:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.734161][ T5127] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 81.751118][ T29] audit: type=1326 audit(1755632878.161:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.783551][ T29] audit: type=1326 audit(1755632878.161:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.807255][ T29] audit: type=1326 audit(1755632878.161:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.831191][ T29] audit: type=1326 audit(1755632878.161:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.854727][ T29] audit: type=1326 audit(1755632878.161:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5145 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 81.986209][ T5158] bridge0: entered promiscuous mode [ 81.991902][ T5158] macsec1: entered promiscuous mode [ 81.998789][ T5158] bridge0: port 3(macsec1) entered blocking state [ 82.006458][ T5158] bridge0: port 3(macsec1) entered disabled state [ 82.062276][ T5158] macsec1: entered allmulticast mode [ 82.067917][ T5158] bridge0: entered allmulticast mode [ 82.095551][ T5158] macsec1: left allmulticast mode [ 82.101054][ T5158] bridge0: left allmulticast mode [ 82.187289][ T5158] bridge0: left promiscuous mode [ 82.291679][ T5135] Set syz1 is full, maxelem 65536 reached [ 82.299281][ T5162] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 82.308016][ T5162] netlink: 224 bytes leftover after parsing attributes in process `syz.1.524'. [ 82.330600][ T5161] lo speed is unknown, defaulting to 1000 [ 82.355175][ T5161] lo speed is unknown, defaulting to 1000 [ 82.448306][ T5168] block device autoloading is deprecated and will be removed. [ 82.544909][ T5173] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 82.554674][ T5173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.563602][ T5173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.571875][ T5173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.580013][ T5173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.715395][ T5170] block device autoloading is deprecated and will be removed. [ 82.794714][ T5179] lo speed is unknown, defaulting to 1000 [ 82.801477][ T5179] lo speed is unknown, defaulting to 1000 [ 83.340848][ T5187] lo speed is unknown, defaulting to 1000 [ 83.347573][ T5187] lo speed is unknown, defaulting to 1000 [ 83.552449][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 83.655321][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 84.147478][ T5198] siw: device registration error -23 [ 84.531302][ T5214] tipc: Cannot configure node identity twice [ 84.582834][ T5214] lo speed is unknown, defaulting to 1000 [ 84.607272][ T5214] lo speed is unknown, defaulting to 1000 [ 84.799141][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.544'. [ 84.922022][ T5225] bond_slave_0: entered promiscuous mode [ 84.928273][ T5225] bond_slave_1: entered promiscuous mode [ 84.934772][ T5225] dummy0: entered promiscuous mode [ 84.961616][ T5225] macvtap1: entered promiscuous mode [ 84.968261][ T5225] bond0: entered promiscuous mode [ 84.989938][ T5225] macvtap1: entered allmulticast mode [ 84.996135][ T5225] bond0: entered allmulticast mode [ 85.001644][ T5225] bond_slave_0: entered allmulticast mode [ 85.008001][ T5225] bond_slave_1: entered allmulticast mode [ 85.026059][ T5225] dummy0: entered allmulticast mode [ 85.033533][ T5225] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 85.051400][ T5227] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.083496][ T5228] bond0: left allmulticast mode [ 85.089421][ T5228] bond_slave_0: left allmulticast mode [ 85.095881][ T5228] bond_slave_1: left allmulticast mode [ 85.111783][ T5228] dummy0: left allmulticast mode [ 85.117544][ T5228] bond0: left promiscuous mode [ 85.135418][ T5228] bond_slave_0: left promiscuous mode [ 85.142338][ T5228] bond_slave_1: left promiscuous mode [ 85.148628][ T5228] dummy0: left promiscuous mode [ 85.206130][ T5227] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.226344][ T5235] hub 6-0:1.0: USB hub found [ 85.243637][ T5235] hub 6-0:1.0: 8 ports detected [ 85.315162][ T5227] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.399422][ T5227] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.505601][ T35] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.520606][ T5227] debugfs: 'netdev@ffff8881198f2550' already exists in 'ref_tracker' [ 85.529875][ T35] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.563760][ T35] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.604440][ T35] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.690713][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 85.690825][ T29] audit: type=1400 audit(1755632882.221:4296): avc: denied { bind } for pid=5259 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.721134][ T29] audit: type=1400 audit(1755632882.221:4297): avc: denied { write } for pid=5259 comm="syz.4.558" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.745998][ T29] audit: type=1400 audit(1755632882.221:4298): avc: denied { open } for pid=5259 comm="syz.4.558" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 85.772138][ T29] audit: type=1400 audit(1755632882.221:4299): avc: denied { ioctl } for pid=5259 comm="syz.4.558" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.134189][ T5269] lo speed is unknown, defaulting to 1000 [ 86.142228][ T5269] lo speed is unknown, defaulting to 1000 [ 86.818030][ T5278] netlink: 'syz.4.575': attribute type 10 has an invalid length. [ 86.838539][ T5278] bond0: (slave dummy0): Releasing backup interface [ 86.848242][ T5278] team0: Port device dummy0 added [ 87.090763][ T29] audit: type=1400 audit(1755632883.601:4300): avc: denied { map } for pid=5286 comm="syz.4.566" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 87.150914][ T5291] lo speed is unknown, defaulting to 1000 [ 87.158947][ T5291] lo speed is unknown, defaulting to 1000 [ 87.335972][ T5295] loop1: detected capacity change from 0 to 1024 [ 87.384113][ T5295] EXT4-fs: Ignoring removed orlov option [ 87.482532][ T5295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.521133][ T29] audit: type=1400 audit(1755632884.061:4301): avc: denied { add_name } for pid=5293 comm="syz.1.568" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.562848][ T29] audit: type=1400 audit(1755632884.061:4302): avc: denied { create } for pid=5293 comm="syz.1.568" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.583511][ T29] audit: type=1400 audit(1755632884.061:4303): avc: denied { read open } for pid=5293 comm="syz.1.568" path="/124/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.606751][ T29] audit: type=1400 audit(1755632884.091:4304): avc: denied { write } for pid=5293 comm="syz.1.568" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 87.629396][ T29] audit: type=1400 audit(1755632884.091:4305): avc: denied { mounton } for pid=5293 comm="syz.1.568" path="/124/bus" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.870374][ T5310] bridge0: entered promiscuous mode [ 87.876340][ T5310] macsec1: entered promiscuous mode [ 87.884710][ T5310] bridge0: port 3(macsec1) entered blocking state [ 87.891849][ T5310] bridge0: port 3(macsec1) entered disabled state [ 87.899192][ T5310] macsec1: entered allmulticast mode [ 87.904874][ T5310] bridge0: entered allmulticast mode [ 87.914332][ T5310] macsec1: left allmulticast mode [ 87.919499][ T5310] bridge0: left allmulticast mode [ 87.931945][ T5310] bridge0: left promiscuous mode [ 87.966207][ T5318] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 87.974946][ T5318] netlink: 224 bytes leftover after parsing attributes in process `syz.2.573'. [ 88.018900][ T5320] netlink: 'syz.4.579': attribute type 10 has an invalid length. [ 88.049728][ T5312] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.057413][ T5312] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.066762][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.143307][ T5317] netlink: 'syz.0.578': attribute type 3 has an invalid length. [ 88.158423][ T23] lo speed is unknown, defaulting to 1000 [ 88.164984][ T23] syz2: Port: 1 Link DOWN [ 88.171321][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.209043][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.221499][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.231603][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.074546][ T5355] lo speed is unknown, defaulting to 1000 [ 89.105990][ T5355] lo speed is unknown, defaulting to 1000 [ 89.249002][ T5366] loop1: detected capacity change from 0 to 512 [ 89.273642][ T5366] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.593: iget: bad extended attribute block 1 [ 89.287838][ T5366] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.593: couldn't read orphan inode 15 (err -117) [ 89.302037][ T5366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.316997][ T5366] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.346610][ T5366] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 89.362439][ T5366] bond0: (slave dummy0): Releasing backup interface [ 89.768098][ T5378] @: renamed from vlan0 (while UP) [ 89.879555][ T5386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 90.324453][ T5391] loop1: detected capacity change from 0 to 2368 [ 90.331860][ T5391] iso9660: Bad value for 'check' [ 90.772706][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 90.772724][ T29] audit: type=1400 audit(1755632887.301:4577): avc: denied { create } for pid=5393 comm="syz.4.602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 90.800389][ T29] audit: type=1400 audit(1755632887.301:4578): avc: denied { sys_admin } for pid=5393 comm="syz.4.602" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 90.905088][ T5405] lo speed is unknown, defaulting to 1000 [ 90.912179][ T5405] lo speed is unknown, defaulting to 1000 [ 91.030375][ T29] audit: type=1326 audit(1755632887.561:4579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 91.068972][ T29] audit: type=1326 audit(1755632887.591:4580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5390 comm="syz.1.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 91.095120][ T5410] bond0: (slave dummy0): Releasing backup interface [ 91.103809][ T5410] bridge_slave_0: left allmulticast mode [ 91.110160][ T5410] bridge_slave_0: left promiscuous mode [ 91.116283][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.129161][ T5410] bridge_slave_1: left allmulticast mode [ 91.135607][ T5410] bridge_slave_1: left promiscuous mode [ 91.142521][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.156876][ T5410] bond0: (slave bond_slave_0): Releasing backup interface [ 91.401590][ T5416] loop1: detected capacity change from 0 to 128 [ 91.411441][ T29] audit: type=1400 audit(1755632887.951:4581): avc: denied { mount } for pid=5415 comm="syz.1.606" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 91.442471][ T5410] bond0: (slave bond_slave_1): Releasing backup interface [ 91.468486][ T5410] team_slave_0: left promiscuous mode [ 91.488702][ T5410] team0: Port device team_slave_0 removed [ 91.533636][ T5410] team_slave_1: left promiscuous mode [ 91.560478][ T5410] team0: Port device team_slave_1 removed [ 91.579996][ T5413] team0: Mode changed to "activebackup" [ 92.745668][ T5429] netlink: 'syz.4.610': attribute type 10 has an invalid length. [ 92.757333][ T29] audit: type=1400 audit(1755632889.281:4582): avc: denied { create } for pid=5428 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 92.838037][ T5429] netlink: 'syz.4.610': attribute type 10 has an invalid length. [ 92.869620][ T5429] team0: Port device dummy0 removed [ 92.929604][ T5429] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 93.023170][ T5438] hub 6-0:1.0: USB hub found [ 93.050421][ T5439] netlink: 292 bytes leftover after parsing attributes in process `syz.4.613'. [ 93.062320][ T5438] hub 6-0:1.0: 8 ports detected [ 93.168872][ T5441] bridge: RTM_NEWNEIGH with invalid ether address [ 94.660686][ T29] audit: type=1400 audit(1755632891.191:4583): avc: denied { write } for pid=5452 comm="syz.4.618" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.662661][ T5453] random: crng reseeded on system resumption [ 94.694443][ T29] audit: type=1400 audit(1755632891.201:4584): avc: denied { write } for pid=5452 comm="syz.4.618" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 94.725720][ T29] audit: type=1400 audit(1755632891.261:4585): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 94.762560][ T29] audit: type=1400 audit(1755632891.281:4586): avc: denied { read } for pid=5452 comm="syz.4.618" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.846449][ T5458] block device autoloading is deprecated and will be removed. [ 94.922844][ T5466] netlink: 'syz.4.624': attribute type 10 has an invalid length. [ 95.094246][ T5466] bond0: (slave dummy0): Releasing backup interface [ 95.179306][ T5471] loop1: detected capacity change from 0 to 512 [ 95.214254][ T5466] team0: Port device dummy0 added [ 95.236812][ T5471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.250473][ T5471] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.265862][ T5471] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.620: bg 0: block 328: padding at end of block bitmap is not set [ 95.677169][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 96.345997][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 96.346015][ T29] audit: type=1326 audit(1755632892.791:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.376964][ T29] audit: type=1326 audit(1755632892.791:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.401505][ T29] audit: type=1326 audit(1755632892.791:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.428270][ T29] audit: type=1326 audit(1755632892.791:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.453055][ T29] audit: type=1326 audit(1755632892.791:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.477455][ T29] audit: type=1326 audit(1755632892.791:4593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.502351][ T29] audit: type=1326 audit(1755632892.791:4594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.527150][ T29] audit: type=1326 audit(1755632892.871:4595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.551369][ T29] audit: type=1326 audit(1755632892.871:4596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.576427][ T29] audit: type=1326 audit(1755632892.871:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5482 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d949debe9 code=0x7ffc0000 [ 96.640953][ T5483] lo speed is unknown, defaulting to 1000 [ 96.662931][ T5483] lo speed is unknown, defaulting to 1000 [ 96.797302][ T5491] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 96.858107][ T5492] netlink: 'syz.0.630': attribute type 10 has an invalid length. [ 96.937213][ T5491] bond0: (slave dummy0): Releasing backup interface [ 96.978661][ T5491] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.011192][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.012533][ T5491] team0: Failed to send options change via netlink (err -105) [ 97.029399][ T5491] team0: Port device dummy0 added [ 97.039361][ T5494] serio: Serial port ptm1 [ 97.045644][ T5492] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.110011][ T5492] team0: Failed to send options change via netlink (err -105) [ 97.129471][ T5492] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 97.139082][ T5492] team0: Port device dummy0 removed [ 97.148057][ T5492] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 97.228529][ T5508] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 97.278399][ T5508] bond0: (slave dummy0): Releasing backup interface [ 97.293879][ T5508] team0: Port device dummy0 added [ 97.344180][ T5515] block device autoloading is deprecated and will be removed. [ 98.337148][ T5535] tipc: Enabled bearer , priority 0 [ 98.377129][ T5536] tipc: Enabled bearer , priority 0 [ 98.390192][ T5535] syzkaller0: entered promiscuous mode [ 98.396180][ T5535] syzkaller0: entered allmulticast mode [ 98.417812][ T5536] syzkaller0: entered promiscuous mode [ 98.423612][ T5536] syzkaller0: entered allmulticast mode [ 98.453926][ T5536] tipc: Resetting bearer [ 98.462085][ T5533] tipc: Resetting bearer [ 98.492796][ T5533] tipc: Disabling bearer [ 98.644380][ T5535] tipc: Resetting bearer [ 98.665184][ T5534] tipc: Resetting bearer [ 98.685225][ T5534] tipc: Disabling bearer [ 98.714013][ T5543] ALSA: seq fatal error: cannot create timer (-22) [ 98.730959][ T5543] 9pnet_fd: Insufficient options for proto=fd [ 98.813537][ T5553] loop3: detected capacity change from 0 to 512 [ 98.854027][ T5553] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.650: iget: bad extended attribute block 1 [ 98.917181][ T5553] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.650: couldn't read orphan inode 15 (err -117) [ 98.944435][ T5553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.992816][ T5553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.053972][ T5553] netlink: 'syz.3.650': attribute type 10 has an invalid length. [ 99.075564][ T5553] dummy0: entered promiscuous mode [ 99.095687][ T5553] team0: Port device dummy0 added [ 99.321681][ T5576] tipc: Enabled bearer , priority 0 [ 99.387527][ T5580] syzkaller0: entered promiscuous mode [ 99.404000][ T5580] syzkaller0: entered allmulticast mode [ 99.561719][ T5575] tipc: Resetting bearer [ 99.579456][ T5575] tipc: Disabling bearer [ 99.861310][ T5578] @: renamed from vlan0 (while UP) [ 100.013145][ T5605] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 100.080566][ T5610] tipc: Enabled bearer , priority 0 [ 100.088136][ T5610] syzkaller0: entered promiscuous mode [ 100.093984][ T5610] syzkaller0: entered allmulticast mode [ 100.149972][ T5610] tipc: Resetting bearer [ 100.158021][ T5609] tipc: Resetting bearer [ 100.174142][ T5609] tipc: Disabling bearer [ 100.508848][ T5616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.527931][ T5616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.798667][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 101.093610][ T5634] loop3: detected capacity change from 0 to 512 [ 101.102420][ T5634] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.676: iget: bad extended attribute block 1 [ 101.128943][ T5634] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.676: couldn't read orphan inode 15 (err -117) [ 101.179512][ T5634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.219480][ T5634] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.486729][ T5634] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 101.503348][ T5634] netlink: 'syz.3.676': attribute type 10 has an invalid length. [ 101.519927][ T5634] dummy0: left promiscuous mode [ 101.562791][ T5634] team0: Port device dummy0 removed [ 101.572877][ T5634] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 101.642102][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 101.642122][ T29] audit: type=1326 audit(1755632898.171:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 101.673811][ T29] audit: type=1326 audit(1755632898.171:4737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 101.698447][ T29] audit: type=1326 audit(1755632898.171:4738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc5c16eebe9 code=0x7ffc0000 [ 101.725031][ T29] audit: type=1326 audit(1755632898.171:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5645 comm="syz.0.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc5c16eec23 code=0x7ffc0000 [ 101.752729][ T29] audit: type=1326 audit(1755632898.221:4740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a71ebe9 code=0x7ffc0000 [ 101.777093][ T29] audit: type=1326 audit(1755632898.221:4741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a71ebe9 code=0x7ffc0000 [ 101.801938][ T29] audit: type=1326 audit(1755632898.231:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6c5a71ebe9 code=0x7ffc0000 [ 101.826830][ T29] audit: type=1326 audit(1755632898.231:4743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a71ebe9 code=0x7ffc0000 [ 101.851200][ T29] audit: type=1326 audit(1755632898.231:4744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c5a71ebe9 code=0x7ffc0000 [ 101.877130][ T29] audit: type=1326 audit(1755632898.231:4745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5651 comm="syz.2.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f6c5a71ebe9 code=0x7ffc0000 [ 101.981028][ T5667] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 102.101405][ T5675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.189717][ T5675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.254999][ T5675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.332083][ T5675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.476560][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.502228][ T4116] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.522370][ T4116] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.540997][ T4116] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.936103][ T5687] loop3: detected capacity change from 0 to 1024 [ 102.963203][ T5687] EXT4-fs: Ignoring removed nobh option [ 102.994585][ T5687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.181553][ T5697] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 103.225843][ T5699] loop9: detected capacity change from 0 to 7 [ 103.233362][ T5699] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.241839][ T5699] Buffer I/O error on dev loop9, logical block 0, async page read [ 103.250429][ T5699] loop9: unable to read partition table [ 103.257197][ T5699] loop_reread_partitions: partition scan of loop9 (þ被x½d|¤´à–‘) failed (rc=-5) [ 104.060987][ T5697] bond0: (slave dummy0): Releasing backup interface [ 104.071240][ T5703] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 104.108520][ T5697] team0: Port device dummy0 added [ 104.169279][ T5703] team0: Port device dummy0 removed [ 104.181303][ T5703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.191006][ T5708] veth0: entered promiscuous mode [ 104.248514][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.696'. [ 104.259375][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.399014][ T5723] loop3: detected capacity change from 0 to 512 [ 104.444902][ T5717] hub 6-0:1.0: USB hub found [ 104.447915][ T5723] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.697: iget: bad extended attribute block 1 [ 104.473930][ T5723] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.697: couldn't read orphan inode 15 (err -117) [ 104.474183][ T5717] hub 6-0:1.0: 8 ports detected [ 104.503756][ T5723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.519693][ T5723] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.545257][ T5723] netlink: 'syz.3.697': attribute type 10 has an invalid length. [ 104.569624][ T5723] bond0: (slave dummy0): Releasing backup interface [ 104.590089][ T5723] dummy0: entered promiscuous mode [ 104.596020][ T5723] team0: Port device dummy0 added [ 104.679643][ T5736] SELinux: failed to load policy [ 104.726870][ T5740] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 104.776296][ T5740] bond0: (slave dummy0): Releasing backup interface [ 104.779041][ T5740] team0: Port device dummy0 added [ 104.822752][ T5740] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 104.842156][ T5740] team0: Port device dummy0 removed [ 104.844546][ T5740] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.918451][ T5746] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 104.941448][ T5746] bond0: (slave dummy0): Releasing backup interface [ 104.954884][ T5746] team0: Port device dummy0 added [ 105.624589][ T5768] hub 6-0:1.0: USB hub found [ 105.625657][ T5768] hub 6-0:1.0: 8 ports detected [ 105.698848][ T5773] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 105.762345][ T5775] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 105.826909][ T5782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5782 comm=syz.3.719 [ 105.841164][ T5782] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5782 comm=syz.3.719 [ 105.884223][ T5784] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 105.911857][ T5787] loop3: detected capacity change from 0 to 512 [ 105.921975][ T5787] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.721: iget: bad extended attribute block 1 [ 105.924661][ T5784] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 105.947569][ T5784] team0: Port device dummy0 removed [ 105.954960][ T5787] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.721: couldn't read orphan inode 15 (err -117) [ 105.972400][ T5784] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 105.985264][ T5787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.011213][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.033602][ T5787] netlink: 'syz.3.721': attribute type 10 has an invalid length. [ 106.062006][ T5798] bond0: (slave dummy0): Releasing backup interface [ 106.072749][ T5798] team0: Port device dummy0 added [ 106.130474][ T5798] team0: Port device dummy0 removed [ 106.138930][ T5798] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.676886][ T5821] hub 6-0:1.0: USB hub found [ 106.700166][ T5815] bond0: (slave dummy0): Releasing backup interface [ 106.714383][ T5821] hub 6-0:1.0: 8 ports detected [ 106.730057][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 106.730075][ T29] audit: type=1326 audit(1755632903.261:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 106.802458][ T5815] team0: Port device dummy0 added [ 106.862943][ T29] audit: type=1326 audit(1755632903.301:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 106.888221][ T29] audit: type=1326 audit(1755632903.301:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 106.913282][ T29] audit: type=1326 audit(1755632903.301:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 106.938441][ T29] audit: type=1326 audit(1755632903.301:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 106.964591][ T29] audit: type=1326 audit(1755632903.301:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 106.989936][ T29] audit: type=1326 audit(1755632903.301:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 107.014520][ T29] audit: type=1326 audit(1755632903.301:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 107.039209][ T29] audit: type=1326 audit(1755632903.301:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 107.063722][ T29] audit: type=1326 audit(1755632903.301:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5822 comm="syz.1.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 107.391056][ T5840] random: crng reseeded on system resumption [ 107.963727][ T5857] loop3: detected capacity change from 0 to 512 [ 107.973982][ T5857] EXT4-fs: Ignoring removed nobh option [ 108.002662][ T5857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.744: corrupted inode contents [ 108.016475][ T5857] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.744: mark_inode_dirty error [ 108.033133][ T5857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.744: corrupted inode contents [ 108.052879][ T5857] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.744: mark_inode_dirty error [ 108.066494][ T5857] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.744: Failed to acquire dquot type 0 [ 108.079036][ T5857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.744: corrupted inode contents [ 108.102985][ T5857] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.744: mark_inode_dirty error [ 108.114754][ T5857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.744: corrupted inode contents [ 108.128648][ T5857] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.744: mark_inode_dirty error [ 108.141327][ T5857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.744: corrupted inode contents [ 108.154665][ T5857] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 108.164699][ T5857] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.744: corrupted inode contents [ 108.178580][ T5857] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.744: mark_inode_dirty error [ 108.192648][ T5857] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 108.202877][ T5857] EXT4-fs (loop3): 1 truncate cleaned up [ 108.209276][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.223444][ T5857] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.256072][ T5857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.267752][ T5857] syz.3.744 (5857) used greatest stack depth: 9760 bytes left [ 108.778761][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a405e00: rx timeout, send abort [ 108.787576][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a405e00: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 108.802515][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a405000: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 110.581919][ T5871] hub 6-0:1.0: USB hub found [ 110.586951][ T5871] hub 6-0:1.0: 8 ports detected [ 110.649731][ T5879] validate_nla: 6 callbacks suppressed [ 110.649752][ T5879] netlink: 'syz.2.751': attribute type 10 has an invalid length. [ 111.029575][ T5892] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 111.277762][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 111.609447][ T5902] vlan0: entered promiscuous mode [ 111.615030][ T5902] vlan0: entered allmulticast mode [ 111.620538][ T5902] hsr_slave_1: entered allmulticast mode [ 111.740538][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 111.740553][ T29] audit: type=1400 audit(1755632908.271:4959): avc: denied { append } for pid=5905 comm="syz.1.758" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.774723][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 111.785065][ T5906] program syz.1.758 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.320483][ T29] audit: type=1326 audit(1755632908.851:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.345289][ T29] audit: type=1326 audit(1755632908.851:4961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.370067][ T29] audit: type=1326 audit(1755632908.851:4962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.397079][ T29] audit: type=1326 audit(1755632908.851:4963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.422088][ T29] audit: type=1326 audit(1755632908.851:4964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.447973][ T29] audit: type=1326 audit(1755632908.991:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.473012][ T29] audit: type=1326 audit(1755632908.991:4966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.497430][ T29] audit: type=1326 audit(1755632908.991:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.523152][ T29] audit: type=1326 audit(1755632908.991:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.1.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25c88debe9 code=0x7ffc0000 [ 112.573843][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.762'. [ 112.774539][ T5928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 114.053293][ T3359] hid_parser_main: 27 callbacks suppressed [ 114.053314][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.067054][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.075017][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.083704][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.091702][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.099297][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.107352][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.115062][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.123911][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.132138][ T3359] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 114.179687][ T5955] loop3: detected capacity change from 0 to 512 [ 114.199366][ T5955] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.773: iget: bad extended attribute block 1 [ 114.213567][ T5955] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.773: couldn't read orphan inode 15 (err -117) [ 114.227216][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.243151][ T5955] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.255386][ T5955] netlink: 'syz.3.773': attribute type 10 has an invalid length. [ 114.265585][ T5955] netlink: 'syz.3.773': attribute type 10 has an invalid length. [ 114.274856][ T3359] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 114.285976][ T5955] dummy0: left promiscuous mode [ 114.294066][ T5955] team0: Port device dummy0 removed [ 114.304529][ T5955] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.340530][ T5960] lo speed is unknown, defaulting to 1000 [ 114.347071][ T5960] lo speed is unknown, defaulting to 1000 [ 114.454782][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 114.477972][ T5967] lo speed is unknown, defaulting to 1000 [ 114.484162][ T5967] lo speed is unknown, defaulting to 1000 [ 114.763511][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 114.774284][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 114.900292][ T5983] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 114.914886][ T5982] team_slave_0: entered promiscuous mode [ 114.921959][ T5982] team_slave_1: entered promiscuous mode [ 114.929413][ T5982] macsec1: entered promiscuous mode [ 114.935778][ T5982] team0: entered promiscuous mode [ 114.942731][ T5982] dummy0: entered promiscuous mode [ 114.948874][ T5982] macsec1: entered allmulticast mode [ 114.955749][ T5982] team0: entered allmulticast mode [ 114.962835][ T5982] team_slave_0: entered allmulticast mode [ 114.969217][ T5982] team_slave_1: entered allmulticast mode [ 114.975517][ T5982] dummy0: entered allmulticast mode [ 115.074350][ T5988] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 115.118123][ T5983] bond0: (slave dummy0): Releasing backup interface [ 115.128288][ T5983] dummy0: entered promiscuous mode [ 115.134171][ T5983] team0: Failed to send options change via netlink (err -105) [ 115.142303][ T5983] team0: Port device dummy0 added [ 115.151429][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 115.168589][ T5988] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 115.179400][ T5986] SELinux: failed to load policy [ 115.186185][ T5988] dummy0: left promiscuous mode [ 115.192612][ T5988] team0: Failed to send options change via netlink (err -105) [ 115.200746][ T5988] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 115.210528][ T5988] team0: Port device dummy0 removed [ 115.218459][ T5988] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.241792][ T5979] lo speed is unknown, defaulting to 1000 [ 115.248664][ T5979] lo speed is unknown, defaulting to 1000 [ 115.285942][ T5995] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 115.449032][ T6000] loop3: detected capacity change from 0 to 512 [ 115.638410][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.787: iget: bad extended attribute block 1 [ 115.818151][ T6000] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.787: couldn't read orphan inode 15 (err -117) [ 115.848291][ T6016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.790'. [ 115.871115][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.886876][ T6000] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.919815][ T6000] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 115.932029][ T6016] bridge1: port 1(veth3) entered blocking state [ 115.941763][ T6016] bridge1: port 1(veth3) entered disabled state [ 115.955001][ T6016] veth3: entered allmulticast mode [ 115.965640][ T6016] veth3: entered promiscuous mode [ 115.981332][ T6000] bond0: (slave dummy0): Releasing backup interface [ 115.996306][ T6000] dummy0: entered promiscuous mode [ 116.003172][ T6000] team0: Port device dummy0 added [ 116.030472][ T6020] bridge1: port 2(veth0_to_bond) entered blocking state [ 116.040706][ T6020] bridge1: port 2(veth0_to_bond) entered disabled state [ 116.058948][ T6020] veth0_to_bond: entered allmulticast mode [ 116.067602][ T6020] veth0_to_bond: entered promiscuous mode [ 116.070141][ T6022] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 116.112397][ T6022] dummy0: left promiscuous mode [ 116.118940][ T6022] team0: Port device dummy0 removed [ 116.127716][ T6022] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.143267][ T6016] vlan0: entered allmulticast mode [ 116.148656][ T6016] veth1: entered allmulticast mode [ 116.155062][ T6016] bridge1: port 3(vlan0) entered blocking state [ 116.162192][ T6016] bridge1: port 3(vlan0) entered disabled state [ 116.172016][ T6016] vlan0: entered promiscuous mode [ 116.177656][ T6016] veth1: entered promiscuous mode [ 116.196790][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.792'. [ 116.542250][ T6037] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 116.857863][ T6035] 9pnet_fd: Insufficient options for proto=fd [ 116.952347][ T6043] SELinux: failed to load policy [ 117.165616][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.801'. [ 117.195713][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 117.264654][ T6055] loop3: detected capacity change from 0 to 8192 [ 117.271512][ T6028] ================================================================== [ 117.280415][ T6028] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 117.288178][ T6028] [ 117.290606][ T6028] read to 0xffff88811b066f70 of 4 bytes by task 6030 on cpu 0: [ 117.298662][ T6028] atime_needs_update+0x25f/0x3e0 [ 117.304432][ T6028] touch_atime+0x4a/0x340 [ 117.309231][ T6028] shmem_file_read_iter+0x477/0x540 [ 117.314452][ T6028] copy_splice_read+0x442/0x660 [ 117.320140][ T6028] splice_direct_to_actor+0x290/0x680 [ 117.325761][ T6028] do_splice_direct+0xda/0x150 [ 117.331283][ T6028] do_sendfile+0x380/0x650 [ 117.335990][ T6028] __x64_sys_sendfile64+0x105/0x150 [ 117.341737][ T6028] x64_sys_call+0x2bb0/0x2ff0 [ 117.346950][ T6028] do_syscall_64+0xd2/0x200 [ 117.351495][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.357484][ T6028] [ 117.359833][ T6028] write to 0xffff88811b066f70 of 4 bytes by task 6028 on cpu 1: [ 117.367902][ T6028] touch_atime+0x1e8/0x340 [ 117.372872][ T6028] shmem_file_read_iter+0x477/0x540 [ 117.378766][ T6028] copy_splice_read+0x442/0x660 [ 117.383915][ T6028] splice_direct_to_actor+0x290/0x680 [ 117.389560][ T6028] do_splice_direct+0xda/0x150 [ 117.394860][ T6028] do_sendfile+0x380/0x650 [ 117.399483][ T6028] __x64_sys_sendfile64+0x105/0x150 [ 117.405227][ T6028] x64_sys_call+0x2bb0/0x2ff0 [ 117.410037][ T6028] do_syscall_64+0xd2/0x200 [ 117.414678][ T6028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.420884][ T6028] [ 117.423386][ T6028] value changed: 0x2fc9d065 -> 0x306266e5 [ 117.429274][ T6028] [ 117.431832][ T6028] Reported by Kernel Concurrency Sanitizer on: [ 117.438180][ T6028] CPU: 1 UID: 0 PID: 6028 Comm: syz.0.794 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.448170][ T6028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.458582][ T6028] ================================================================== [ 117.476341][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 117.476355][ T29] audit: type=1400 audit(1755632914.011:5066): avc: denied { read } for pid=6053 comm="syz.3.801" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.507236][ T29] audit: type=1400 audit(1755632914.011:5067): avc: denied { open } for pid=6053 comm="syz.3.801" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 117.532207][ T29] audit: type=1400 audit(1755632914.031:5068): avc: denied { ioctl } for pid=6053 comm="syz.3.801" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1