last executing test programs: 2m19.210211439s ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000009006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 2m18.794260404s ago: executing program 0 (id=18): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) 2m18.658616806s ago: executing program 0 (id=23): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r1 = fcntl$dupfd(r0, 0x406, r0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) read$ptp(r1, 0x0, 0x0) 2m18.551800908s ago: executing program 0 (id=26): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x2}}, {@minixdf}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2m18.120724344s ago: executing program 0 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) dup2(r2, r0) 2m17.207481537s ago: executing program 0 (id=59): setuid(0xee01) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x4, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2100, 0x1}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) 2m17.207304397s ago: executing program 32 (id=59): setuid(0xee01) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x4, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2100, 0x1}) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) 1m30.625992593s ago: executing program 2 (id=1516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x204, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="48000000100003050000000000bbd72242000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000300000100c28000050003"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1m30.521486375s ago: executing program 2 (id=1520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0xc3b, &(0x7f00000000c0)={0x0, 0xc55a, 0x80, 0x8000004}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) shutdown(r0, 0x0) 1m30.237511158s ago: executing program 2 (id=1527): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x100) getdents64(r2, &(0x7f0000001240)=""/34, 0x22) getdents64(r2, 0xfffffffffffffffe, 0x29) 1m30.195436209s ago: executing program 2 (id=1529): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 1m30.15628529s ago: executing program 2 (id=1531): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bind$bt_hci(r0, 0x0, 0x0) listen(r0, 0x3) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) 1m30.10445562s ago: executing program 2 (id=1533): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m30.097756471s ago: executing program 33 (id=1533): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbd6f}}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 52.789873847s ago: executing program 5 (id=2757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 52.747635857s ago: executing program 5 (id=2759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') close_range(r3, 0xffffffffffffffff, 0x0) 52.690581858s ago: executing program 5 (id=2763): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 52.665868978s ago: executing program 5 (id=2764): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 52.611349639s ago: executing program 5 (id=2775): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 49.488509063s ago: executing program 5 (id=2840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 49.488252563s ago: executing program 34 (id=2840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 8.307832743s ago: executing program 6 (id=4172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') close_range(r2, 0xffffffffffffffff, 0x0) 8.251401294s ago: executing program 6 (id=4174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="d5b9bfa800000000000000000018000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0xb) 8.217019194s ago: executing program 6 (id=4176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f0000000600)='./file0\x00', 0xc9028ba210c11f09) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) 8.132223256s ago: executing program 6 (id=4179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) 8.131647536s ago: executing program 6 (id=4180): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) 7.956727839s ago: executing program 6 (id=4192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 7.900832249s ago: executing program 35 (id=4192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 3.820682626s ago: executing program 7 (id=4308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x2, 0x3f0, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000072771c40e00500069bf9010203010902de0301000000000904af00100de1130009050900400000b208ab035ac996787ecb440a6cd869ab0f7077064618a072d7bb7916a199dedaf7708866e5233e204dd14444c3ee6b718038526c6bd45123a28131dc5c483de3e462a652473d558e27e67a040b3ce5b78166e74a0f16f9df02be33a9b200b92587ba73bd6c540e25637c4e8e6a381c9d3ee1e8521863c2d3cef0ffffff93fec28c8604a378f65ff31e903b4b79031a4301e0244b2ff9f0b469afb99f40f79a6de21f2f29bc61cf090aa1e112da072501010003000905070808000404"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x27}, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000], [0xffffff00, 0x0, 0xffffffff], 'veth0_virt_wifi\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast2, @mcast1, [0xffffff00, 0x0, 0xffffffff, 0xff0000ff], [0xff, 0xff, 0xff], 'veth0_to_bridge\x00', 'ip6gre0\x00', {0xff}, {}, 0x84, 0x7, 0x4, 0x38}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x401, 0x0, 0x7, 0x3ff}, {0x100}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x7}, {0x1, 0xfe, 0x3}, {0xffff, 0x1, 0x6}, 0xfff, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) 3.138632876s ago: executing program 7 (id=4335): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = syz_io_uring_setup(0xa6a, &(0x7f0000000280)={0x0, 0x18e2, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.105738907s ago: executing program 7 (id=4337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe24, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GI={0x4}]}]}}}]}, 0x80}}, 0x0) 2.954013569s ago: executing program 7 (id=4343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000017000000b7080000000000005b8af8ff00000000bfa200000000000007020000f8ffffff5444000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.83281862s ago: executing program 7 (id=4348): r0 = fsopen(&(0x7f0000000400)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r2, 0x8, 0x0) getdents(r2, 0x0, 0x58) 2.803448821s ago: executing program 7 (id=4350): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9", 0x2, 0x1, 0x0, 0x0) recvfrom$inet6(r1, &(0x7f0000000840)=""/146, 0x92, 0x40010140, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 1.034712376s ago: executing program 4 (id=4403): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r0, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 1.012496936s ago: executing program 4 (id=4405): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000001200000000060000e808000100000000000c000d"], 0x28}}, 0x0) 964.437937ms ago: executing program 8 (id=4408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 963.741447ms ago: executing program 4 (id=4418): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 945.094477ms ago: executing program 8 (id=4409): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x479, &(0x7f0000000000)={0x0, 0x2281, 0x1000, 0x1, 0x31}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000380)=0x3d70, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 944.875167ms ago: executing program 4 (id=4410): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x10000}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 869.646728ms ago: executing program 4 (id=4411): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x8}}}}}}}, 0x42) 868.896458ms ago: executing program 8 (id=4412): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r2, r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) 814.351639ms ago: executing program 4 (id=4413): futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 799.242769ms ago: executing program 8 (id=4414): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 628.094632ms ago: executing program 8 (id=4416): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 415.003995ms ago: executing program 8 (id=4428): ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) 357.456645ms ago: executing program 3 (id=4421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 324.138026ms ago: executing program 1 (id=4422): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x479, &(0x7f0000000000)={0x0, 0x2281, 0x1000, 0x1, 0x31}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000380)=0x3d70, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) 265.300157ms ago: executing program 1 (id=4423): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000080), 0x0}, 0x20) 264.422886ms ago: executing program 3 (id=4434): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000ab0000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 225.842277ms ago: executing program 1 (id=4424): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000002f00)={0x2, 0x4e20, @dev}, 0x10) close(r0) 193.386058ms ago: executing program 3 (id=4425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 192.777647ms ago: executing program 1 (id=4426): unshare(0x20000400) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000300)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x840) accept4(r0, 0x0, 0x0, 0x0) 148.719718ms ago: executing program 1 (id=4427): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xdfff, 0x4, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x9) 111.627339ms ago: executing program 3 (id=4429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) 78.520559ms ago: executing program 3 (id=4430): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x9) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendmsg$nl_generic(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) 3.97967ms ago: executing program 3 (id=4431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0x20b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="01000004"]) 0s ago: executing program 1 (id=4432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x270, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x27d, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_ACT={0x230, 0x2, [@m_nat={0x22c, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x5, 0x5, 0x1}, @broadcast, @broadcast, 0xffffff00, 0x1}}]}, {0x1dc, 0x6, "cd12cb318c29710c5e660a06000000000000001f0b9aa509746ab45f540e19f19f7bcab9bb3c9f9cdc14a505c158f3c6ad988db0c10eb072301c0ed8edfb331258380ad0b259376716a06ce5d5f7500b443af5f7cf9d475ed21f83e7012ec8483eb6bb6e8d862b1ca79f5d183453c7b6605cd56e194861fb0791ae68e5adea735dfb975e795f525a79b6d5b71a5d09503ba942b9f58fddea9b71db76753dc17102671d0c5e11d53248d07a43ecaee8bb72795272a3e632a05273b5c2b73598ad3b13828291ce0b5822b7d6666a79b6177b7c245b8af7d875d0c4aa9f5e37523d45cfc0c59d5c31c0f924490ae3e934765b359f055a44c7f14225c9c908b7b74fa3af6a8d6af9f53ae2b5f208ddcfed85322590c43c50ef5225ee425b641fb595651e3c34c4a473a3cd65bf3e1ba64e1dfe9f1294304bba043c97edbcfd5b188e17a9bf124a32b0b50900b0781153135dd855823497158e9ae8489f9250b6e22fbc2f3f1bb65b54330b579fb84cd68184761535605d351dc70b0d69ee7afa9b23feb01aa62c136c804d614e4f517fffffce41523ab112f97fd1792bf2e4538ca7a527007ab455bf0e1be3bd87f472ad3cfa451e8071b9e6b53c2dace3dad082d157ec5ec51d04a616fd0b05b77bb14be25c627fcedb4a6299"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) kernel console output (not intermixed with test programs): e: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.421476][ T9490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.427986][ T9506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 104.775512][ T9531] lo speed is unknown, defaulting to 1000 [ 104.828371][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.837546][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.875992][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2332'. [ 104.890825][ T9542] bond2: entered promiscuous mode [ 104.895983][ T9542] bond2: entered allmulticast mode [ 104.901495][ T9542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 104.987516][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2337'. [ 105.074905][ T9561] netlink: 'syz.1.2340': attribute type 21 has an invalid length. [ 105.098871][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 105.098915][ T29] audit: type=1326 audit(1747151285.636:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.134311][ T29] audit: type=1326 audit(1747151285.636:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.158249][ T29] audit: type=1326 audit(1747151285.636:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.181781][ T29] audit: type=1326 audit(1747151285.666:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.205429][ T29] audit: type=1326 audit(1747151285.666:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.207447][ T9566] netlink: 'syz.1.2342': attribute type 11 has an invalid length. [ 105.229185][ T29] audit: type=1326 audit(1747151285.666:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.241202][ T9566] netlink: 448 bytes leftover after parsing attributes in process `syz.1.2342'. [ 105.260352][ T29] audit: type=1326 audit(1747151285.666:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.292987][ T29] audit: type=1326 audit(1747151285.666:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9562 comm="syz.5.2341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 105.448924][ T9580] netlink: 'syz.5.2350': attribute type 9 has an invalid length. [ 105.456752][ T9580] netlink: 371 bytes leftover after parsing attributes in process `syz.5.2350'. [ 105.647054][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 105.656101][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 105.796475][ T29] audit: type=1326 audit(1747151286.326:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9602 comm="syz.4.2359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x0 [ 105.906317][ T9610] lo speed is unknown, defaulting to 1000 [ 106.004110][ T29] audit: type=1326 audit(1747151286.536:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9619 comm="syz.5.2365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 106.408353][ T9643] vhci_hcd: invalid port number 96 [ 106.413554][ T9643] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 106.602457][ T9668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2385'. [ 106.618300][ T9669] all (unregistering): Released all slaves [ 106.848679][ T9699] netlink: 'syz.3.2399': attribute type 11 has an invalid length. [ 106.870196][ T9699] netlink: 448 bytes leftover after parsing attributes in process `syz.3.2399'. [ 106.923777][ T9703] xt_CT: No such helper "pptp" [ 106.928116][ T9701] lo speed is unknown, defaulting to 1000 [ 106.936029][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.077871][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.088298][ T9717] vhci_hcd: invalid port number 96 [ 107.093442][ T9717] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 107.157286][ T9724] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.170624][ T9726] ALSA: seq fatal error: cannot create timer (-19) [ 107.220582][ T9724] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.304794][ T9724] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.359755][ T9724] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.420933][ T9724] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.434626][ T9724] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.446753][ T9724] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.458974][ T9724] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.583159][ T9736] hub 2-0:1.0: USB hub found [ 107.589003][ T9736] hub 2-0:1.0: 8 ports detected [ 107.841127][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.879919][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.994741][ T2969] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 108.007787][ T2969] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.888947][ T9820] smc: net device bond0 applied user defined pnetid SYZ2 [ 108.941709][ T9820] smc: net device bond0 erased user defined pnetid SYZ2 [ 109.088719][ T9834] lo speed is unknown, defaulting to 1000 [ 109.143925][ T23] IPVS: starting estimator thread 0... [ 109.160342][ T3381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 109.238109][ T9836] IPVS: using max 2448 ests per chain, 122400 per kthread [ 109.397398][ T9848] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 109.437116][ T9848] SELinux: failed to load policy [ 109.778022][ T9861] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2467'. [ 109.823600][ T9861] 0: renamed from hsr_slave_1 (while UP) [ 109.831730][ T9863] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2468'. [ 109.841317][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2468'. [ 109.852391][ T9861] 0: entered allmulticast mode [ 109.858179][ T9861] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 111.077599][ T2969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.246018][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 111.246033][ T29] audit: type=1400 audit(1747151291.777:2071): avc: denied { read } for pid=9951 comm="syz.6.2510" path="socket:[24957]" dev="sockfs" ino=24957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.390504][ T9963] smc: net device bond0 applied user defined pnetid SYZ0 [ 111.400563][ T9963] smc: net device bond0 erased user defined pnetid SYZ0 [ 111.409477][ T9966] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2510'. [ 111.480390][ T9969] lo speed is unknown, defaulting to 1000 [ 111.572639][ T9982] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2522'. [ 111.853625][T10001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10001 comm=syz.6.2530 [ 111.866375][T10001] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10001 comm=syz.6.2530 [ 111.974097][T10006] 9pnet: p9_errstr2errno: server reported unknown error [ 112.040500][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2535'. [ 112.176787][ T29] audit: type=1326 audit(1747151292.687:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 112.200638][ T29] audit: type=1326 audit(1747151292.687:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 112.224533][ T29] audit: type=1326 audit(1747151292.687:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 112.248098][ T29] audit: type=1326 audit(1747151292.687:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 112.271876][ T29] audit: type=1326 audit(1747151292.687:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.4.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 112.427496][T10043] netlink: 'syz.4.2548': attribute type 1 has an invalid length. [ 112.464734][T10043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.555743][T10043] bond0: (slave syz_tun): making interface the new active one [ 112.600659][T10043] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.755471][ T29] audit: type=1326 audit(1747151293.287:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcc09e969 code=0x7ffc0000 [ 112.780253][ T29] audit: type=1326 audit(1747151293.287:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcc09e969 code=0x7ffc0000 [ 112.876859][ T29] audit: type=1326 audit(1747151293.287:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbcc09e969 code=0x7ffc0000 [ 112.901246][ T29] audit: type=1326 audit(1747151293.287:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10056 comm="syz.1.2555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbcc09e969 code=0x7ffc0000 [ 113.110016][ T1072] kernel write not supported for file /1213/loginuid (pid: 1072 comm: kworker/1:2) [ 113.319092][T10096] lo speed is unknown, defaulting to 1000 [ 113.332810][T10098] siw: device registration error -23 [ 113.423547][T10107] : renamed from vlan1 (while UP) [ 113.539900][T10118] SELinux: failed to load policy [ 113.584700][T10124] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.671387][T10124] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.733044][T10142] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 113.744480][T10124] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.802343][T10124] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.832983][T10152] lo: entered promiscuous mode [ 113.837963][T10152] lo: entered allmulticast mode [ 113.845043][ T1072] lo speed is unknown, defaulting to 1000 [ 113.850999][ T1072] syz0: Port: 1 Link DOWN [ 113.860774][ T23] lo speed is unknown, defaulting to 1000 [ 113.908248][T10124] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.921437][T10124] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.934258][T10124] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.944388][T10160] geneve0: entered allmulticast mode [ 113.962457][T10124] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.994119][T10162] hub 9-0:1.0: USB hub found [ 114.000168][T10162] hub 9-0:1.0: 8 ports detected [ 114.305967][T10201] vhci_hcd: invalid port number 96 [ 114.311170][T10201] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 114.821956][T10236] SELinux: failed to load policy [ 114.904336][T10244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10244 comm=+}[@ [ 115.010868][T10258] netlink: 'syz.4.2645': attribute type 1 has an invalid length. [ 115.131586][T10258] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 115.142270][T10258] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 115.202801][T10258] bond1: (slave wireguard0): making interface the new active one [ 115.214540][T10258] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 115.234768][T10271] lo speed is unknown, defaulting to 1000 [ 115.448911][ T2969] IPVS: starting estimator thread 0... [ 115.473271][T10208] syz.6.2622 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 115.487840][T10208] CPU: 0 UID: 0 PID: 10208 Comm: syz.6.2622 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 115.487875][T10208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 115.487892][T10208] Call Trace: [ 115.487901][T10208] [ 115.487959][T10208] __dump_stack+0x1d/0x30 [ 115.487985][T10208] dump_stack_lvl+0xe8/0x140 [ 115.488004][T10208] dump_stack+0x15/0x1b [ 115.488068][T10208] dump_header+0x81/0x220 [ 115.488106][T10208] oom_kill_process+0x334/0x3f0 [ 115.488134][T10208] out_of_memory+0x979/0xb80 [ 115.488221][T10208] ? css_next_descendant_pre+0x138/0x160 [ 115.488249][T10208] mem_cgroup_out_of_memory+0x13d/0x190 [ 115.488306][T10208] try_charge_memcg+0x5e2/0x870 [ 115.488346][T10208] obj_cgroup_charge_pages+0xb7/0x1a0 [ 115.488449][T10208] __memcg_kmem_charge_page+0x9f/0x170 [ 115.488653][T10208] __alloc_frozen_pages_noprof+0x188/0x360 [ 115.488691][T10208] alloc_pages_mpol+0xb3/0x250 [ 115.488715][T10208] alloc_pages_noprof+0x90/0x130 [ 115.488801][T10208] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 115.488838][T10208] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 115.488859][T10208] ? ip_set_alloc+0x1f/0x30 [ 115.488892][T10208] ? ip_set_alloc+0x1f/0x30 [ 115.488969][T10208] ? __kmalloc_cache_noprof+0x189/0x320 [ 115.488994][T10208] ip_set_alloc+0x1f/0x30 [ 115.489027][T10208] hash_netiface_create+0x282/0x740 [ 115.489106][T10208] ? __pfx_hash_netiface_create+0x10/0x10 [ 115.489143][T10208] ip_set_create+0x3cc/0x960 [ 115.489201][T10208] ? __nla_parse+0x40/0x60 [ 115.489230][T10208] nfnetlink_rcv_msg+0x4c6/0x590 [ 115.489282][T10208] netlink_rcv_skb+0x120/0x220 [ 115.489375][T10208] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 115.489431][T10208] nfnetlink_rcv+0x16b/0x1690 [ 115.489462][T10208] ? __kfree_skb+0x109/0x150 [ 115.489484][T10208] ? nlmon_xmit+0x4f/0x60 [ 115.489541][T10208] ? consume_skb+0x49/0x150 [ 115.489576][T10208] ? nlmon_xmit+0x4f/0x60 [ 115.489595][T10208] ? dev_hard_start_xmit+0x39e/0x3d0 [ 115.489619][T10208] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 115.489659][T10208] ? __dev_queue_xmit+0x182/0x1fb0 [ 115.489745][T10208] ? ref_tracker_free+0x37d/0x3e0 [ 115.489793][T10208] ? __netlink_deliver_tap+0x4dc/0x500 [ 115.489821][T10208] netlink_unicast+0x5a1/0x670 [ 115.489937][T10208] netlink_sendmsg+0x58b/0x6b0 [ 115.489965][T10208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.489990][T10208] __sock_sendmsg+0x142/0x180 [ 115.490023][T10208] ____sys_sendmsg+0x31e/0x4e0 [ 115.490054][T10208] ___sys_sendmsg+0x17b/0x1d0 [ 115.490128][T10208] __x64_sys_sendmsg+0xd4/0x160 [ 115.490159][T10208] x64_sys_call+0x2999/0x2fb0 [ 115.490186][T10208] do_syscall_64+0xd0/0x1a0 [ 115.490284][T10208] ? clear_bhb_loop+0x40/0x90 [ 115.490321][T10208] ? clear_bhb_loop+0x40/0x90 [ 115.490350][T10208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.490376][T10208] RIP: 0033:0x7fa24f7ee969 [ 115.490397][T10208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.490414][T10208] RSP: 002b:00007fa24de57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.490432][T10208] RAX: ffffffffffffffda RBX: 00007fa24fa15fa0 RCX: 00007fa24f7ee969 [ 115.490446][T10208] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 115.490526][T10208] RBP: 00007fa24f870ab1 R08: 0000000000000000 R09: 0000000000000000 [ 115.490541][T10208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.490557][T10208] R13: 0000000000000000 R14: 00007fa24fa15fa0 R15: 00007ffd52560178 [ 115.490580][T10208] [ 115.490589][T10208] memory: usage 307200kB, limit 307200kB, failcnt 87 [ 115.675183][T10291] IPVS: using max 2400 ests per chain, 120000 per kthread [ 115.679421][T10208] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 115.679441][T10208] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 115.871491][T10208] Memory cgroup stats for /syz6: [ 115.871776][T10208] cache 0 [ 115.879932][T10208] rss 32768 [ 115.883116][T10208] shmem 0 [ 115.886231][T10208] mapped_file 0 [ 115.889685][T10208] dirty 0 [ 115.892624][T10208] writeback 0 [ 115.896067][T10208] workingset_refault_anon 1811 [ 115.900832][T10208] workingset_refault_file 0 [ 115.905356][T10208] swap 147456 [ 115.908659][T10208] swapcached 49152 [ 115.912372][T10208] pgpgin 24798 [ 115.915789][T10208] pgpgout 24785 [ 115.919245][T10208] pgfault 42548 [ 115.922793][T10208] pgmajfault 250 [ 115.926340][T10208] inactive_anon 20480 [ 115.930331][T10208] active_anon 32768 [ 115.934154][T10208] inactive_file 0 [ 115.937787][T10208] active_file 0 [ 115.941250][T10208] unevictable 0 [ 115.944733][T10208] hierarchical_memory_limit 314572800 [ 115.950100][T10208] hierarchical_memsw_limit 9223372036854771712 [ 115.956331][T10208] total_cache 0 [ 115.959796][T10208] total_rss 32768 [ 115.963545][T10208] total_shmem 0 [ 115.967090][T10208] total_mapped_file 0 [ 115.971256][T10208] total_dirty 0 [ 115.974739][T10208] total_writeback 0 [ 115.978732][T10208] total_workingset_refault_anon 1811 [ 115.984052][T10208] total_workingset_refault_file 0 [ 115.989073][T10208] total_swap 147456 [ 115.993055][T10208] total_swapcached 49152 [ 115.997539][T10208] total_pgpgin 24798 [ 116.001693][T10208] total_pgpgout 24785 [ 116.005725][T10208] total_pgfault 42548 [ 116.010847][T10208] total_pgmajfault 250 [ 116.015076][T10208] total_inactive_anon 20480 [ 116.019581][T10208] total_active_anon 32768 [ 116.024018][T10208] total_inactive_file 0 [ 116.028309][T10208] total_active_file 0 [ 116.032425][T10208] total_unevictable 0 [ 116.036450][T10208] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2622,pid=10207,uid=0 [ 116.051362][T10208] Memory cgroup out of memory: Killed process 10207 (syz.6.2622) total-vm:95664kB, anon-rss:936kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 116.295726][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 116.295776][ T29] audit: type=1400 audit(1747151525.836:2182): avc: denied { create } for pid=10307 comm="syz.3.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.359095][ T29] audit: type=1400 audit(1747151525.876:2183): avc: denied { write } for pid=10307 comm="syz.3.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.378803][ T29] audit: type=1400 audit(1747151525.897:2184): avc: denied { read } for pid=10307 comm="syz.3.2663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 116.435942][T10208] syz.6.2622 (10208) used greatest stack depth: 7000 bytes left [ 116.460109][T10316] SELinux: failed to load policy [ 116.477289][ T29] audit: type=1400 audit(1747151526.007:2185): avc: denied { load_policy } for pid=10315 comm="syz.3.2666" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 116.498032][ T29] audit: type=1326 audit(1747151526.007:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 116.521858][ T29] audit: type=1326 audit(1747151526.007:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 116.545386][ T29] audit: type=1326 audit(1747151526.007:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 116.569087][ T29] audit: type=1326 audit(1747151526.007:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 116.593122][ T29] audit: type=1326 audit(1747151526.007:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 116.616853][ T29] audit: type=1326 audit(1747151526.007:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10317 comm="syz.5.2677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5152de969 code=0x7ffc0000 [ 116.826372][ T5439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 116.942290][T10339] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 116.957487][T10338] IPVS: stopping master sync thread 10339 ... [ 116.986502][T10341] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.045934][T10341] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.097022][T10341] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.155080][T10341] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.251648][T10361] vlan2: entered allmulticast mode [ 117.314101][T10363] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2689'. [ 117.453037][T10384] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 117.459771][T10384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.467462][T10384] vhci_hcd vhci_hcd.0: Device attached [ 117.486316][T10384] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 117.492949][T10384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.500761][T10384] vhci_hcd vhci_hcd.0: Device attached [ 117.517599][T10384] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 117.524165][T10384] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.531930][T10384] vhci_hcd vhci_hcd.0: Device attached [ 117.546763][T10393] binfmt_misc: register: failed to install interpreter file ./file2 [ 117.563112][T10384] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 117.569697][T10384] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.577381][T10384] vhci_hcd vhci_hcd.0: Device attached [ 117.606428][T10403] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 117.613139][T10403] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.613619][T10402] netlink: 'syz.6.2703': attribute type 4 has an invalid length. [ 117.620825][T10403] vhci_hcd vhci_hcd.0: Device attached [ 117.629554][T10384] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(11) [ 117.640810][T10384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.648432][T10384] vhci_hcd vhci_hcd.0: Device attached [ 117.653950][ T1072] vhci_hcd: vhci_device speed not set [ 117.661357][T10384] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(15) [ 117.668036][T10384] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.676421][T10384] vhci_hcd vhci_hcd.0: Device attached [ 117.701637][T10411] vhci_hcd: connection closed [ 117.701913][T10409] vhci_hcd: connection closed [ 117.706724][ T5455] vhci_hcd: stop threads [ 117.706954][T10404] vhci_hcd: connection closed [ 117.711570][ T5455] vhci_hcd: release socket [ 117.719204][T10394] vhci_hcd: connection closed [ 117.721448][ T5455] vhci_hcd: disconnect device [ 117.729091][T10388] vhci_hcd: connection closed [ 117.730684][ T1072] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 117.742146][T10396] vhci_hcd: connection closed [ 117.747663][T10385] vhci_hcd: connection closed [ 117.753147][ T5455] vhci_hcd: stop threads [ 117.762418][ T5455] vhci_hcd: release socket [ 117.767014][ T5455] vhci_hcd: disconnect device [ 117.771178][T10386] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 117.795920][ T5455] vhci_hcd: stop threads [ 117.800266][ T5455] vhci_hcd: release socket [ 117.804747][ T5455] vhci_hcd: disconnect device [ 117.817226][ T5455] vhci_hcd: stop threads [ 117.821582][ T5455] vhci_hcd: release socket [ 117.826160][ T5455] vhci_hcd: disconnect device [ 117.838381][ T5455] vhci_hcd: stop threads [ 117.842673][ T5455] vhci_hcd: release socket [ 117.847114][ T5455] vhci_hcd: disconnect device [ 117.853772][ T5455] vhci_hcd: stop threads [ 117.858079][ T5455] vhci_hcd: release socket [ 117.862529][ T5455] vhci_hcd: disconnect device [ 117.867635][ T5455] vhci_hcd: stop threads [ 117.872039][ T5455] vhci_hcd: release socket [ 117.876695][ T5455] vhci_hcd: disconnect device [ 118.156352][T10436] binfmt_misc: register: failed to install interpreter file ./file2 [ 118.410223][T10453] infiniband syz!: set active [ 118.415147][T10453] infiniband syz!: added team_slave_0 [ 118.438557][T10453] RDS/IB: syz!: added [ 118.442740][T10453] smc: adding ib device syz! with port count 1 [ 118.455116][T10453] smc: ib device syz! port 1 has pnetid [ 118.740072][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2728'. [ 118.754919][T10467] erspan0: entered promiscuous mode [ 118.760447][T10467] macvtap1: entered promiscuous mode [ 118.766174][T10467] macvtap1: entered allmulticast mode [ 118.771801][T10467] erspan0: entered allmulticast mode [ 118.784663][T10467] erspan0: left allmulticast mode [ 118.789822][T10467] erspan0: left promiscuous mode [ 118.804105][T10341] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.816141][T10341] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.838712][T10341] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.874865][T10341] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.905995][T10480] atomic_op ffff888117c2e928 conn xmit_atomic 0000000000000000 [ 119.498427][T10523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.609579][T10523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.699640][T10523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.775334][T10523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.869605][T10523] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.896674][T10523] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.921197][T10523] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.945918][T10523] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.987646][T10567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2770'. [ 120.093079][T10573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2773'. [ 120.361800][T10596] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.401202][T10596] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.461544][T10596] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.510077][T10596] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.589359][T10596] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.603364][T10596] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.615892][T10596] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.629419][T10596] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.708293][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2787'. [ 121.287010][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 121.287029][ T29] audit: type=1400 audit(1747151530.873:2374): avc: denied { ioctl } for pid=10653 comm="syz.6.2811" path="socket:[27359]" dev="sockfs" ino=27359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.370291][ T29] audit: type=1400 audit(1747151530.944:2375): avc: denied { open } for pid=10657 comm="syz.6.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.389951][ T29] audit: type=1400 audit(1747151530.944:2376): avc: denied { kernel } for pid=10657 comm="syz.6.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.517743][ T29] audit: type=1400 audit(1747151531.095:2377): avc: denied { name_bind } for pid=10665 comm="syz.6.2817" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 121.572014][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2818'. [ 121.587671][ T29] audit: type=1400 audit(1747151531.166:2378): avc: denied { write } for pid=10671 comm="syz.6.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.608456][ T29] audit: type=1400 audit(1747151531.196:2379): avc: denied { cpu } for pid=10671 comm="syz.6.2820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 121.797295][ T29] audit: type=1400 audit(1747151531.377:2380): avc: denied { block_suspend } for pid=10678 comm="syz.1.2833" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 121.835828][ T29] audit: type=1400 audit(1747151531.417:2381): avc: denied { create } for pid=10683 comm="syz.1.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.855805][ T29] audit: type=1400 audit(1747151531.417:2382): avc: denied { read } for pid=10683 comm="syz.1.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.881777][ T29] audit: type=1400 audit(1747151531.468:2383): avc: denied { execmem } for pid=10685 comm="syz.6.2826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 122.160218][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2830'. [ 122.208381][T10700] netlink: 'syz.6.2831': attribute type 1 has an invalid length. [ 122.218029][T10701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 122.251195][T10700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 122.295863][T10700] bond4: (slave syz_tun): making interface the new active one [ 122.307830][T10700] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 122.519819][T10709] vhci_hcd: invalid port number 100 [ 122.525127][T10709] vhci_hcd: default hub control req: 0500 vfffc i0064 l0 [ 122.545957][ T5455] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.792003][ T1072] usb 3-1: enqueue for inactive port 0 [ 122.812289][ T1072] usb 3-1: enqueue for inactive port 0 [ 122.821550][ T5439] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.901245][ T1072] vhci_hcd: vhci_device speed not set [ 122.912934][ T5439] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.002403][ T5439] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.071622][ T5439] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.114844][T10719] lo speed is unknown, defaulting to 1000 [ 123.236530][ T5439] bridge_slave_1: left allmulticast mode [ 123.242353][ T5439] bridge_slave_1: left promiscuous mode [ 123.248094][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.278385][ T5439] bridge_slave_0: left allmulticast mode [ 123.284166][ T5439] bridge_slave_0: left promiscuous mode [ 123.289984][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.420498][ T5439] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.439254][ T5439] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.458992][ T5439] bond0 (unregistering): Released all slaves [ 123.468516][ T5439] bond1 (unregistering): Released all slaves [ 123.487908][ T5439] bond2 (unregistering): Released all slaves [ 123.509607][T10694] syz.1.2829 (10694) used greatest stack depth: 5952 bytes left [ 123.643096][T10719] chnl_net:caif_netlink_parms(): no params data found [ 123.670644][ T5439] hsr_slave_0: left promiscuous mode [ 123.681905][ T5439] hsr_slave_1: left promiscuous mode [ 123.687870][ T5439] batman_adv: batadv0: Removing interface: team0 [ 123.694728][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.702240][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.710365][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.717858][ T5439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.731352][ T5439] veth1_vlan: left promiscuous mode [ 123.736879][ T5439] veth0_vlan: left promiscuous mode [ 123.831859][ T5439] team0 (unregistering): Port device team_slave_1 removed [ 123.841705][ T5439] team0 (unregistering): Port device team_slave_0 removed [ 123.911624][T10765] pim6reg1: entered promiscuous mode [ 123.917050][T10765] pim6reg1: entered allmulticast mode [ 123.959254][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.966702][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.974134][T10719] bridge_slave_0: entered allmulticast mode [ 123.981523][T10719] bridge_slave_0: entered promiscuous mode [ 123.989221][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.996401][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.004038][T10719] bridge_slave_1: entered allmulticast mode [ 124.012173][T10719] bridge_slave_1: entered promiscuous mode [ 124.043438][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.058878][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.088036][T10719] team0: Port device team_slave_0 added [ 124.095058][T10719] team0: Port device team_slave_1 added [ 124.114845][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.122046][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.148259][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.164095][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.171090][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.197363][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.239818][T10792] siw: device registration error -23 [ 124.246509][T10796] smc: net device bond0 applied user defined pnetid SYZ2 [ 124.254200][T10796] smc: net device bond0 erased user defined pnetid SYZ2 [ 124.268874][T10719] hsr_slave_0: entered promiscuous mode [ 124.275268][T10719] hsr_slave_1: entered promiscuous mode [ 124.281830][T10719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.289582][T10719] Cannot create hsr debugfs directory [ 124.296847][ T5439] IPVS: stop unused estimator thread 0... [ 124.363054][T10804] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.378149][T10804] team0: Port device batadv1 added [ 124.463868][T10719] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.477199][T10719] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.492529][T10719] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.510583][T10719] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.576815][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.595411][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.613868][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.621004][ T5439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.632938][T10825] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 124.653160][ T5445] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.660370][ T5445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.718503][T10831] xt_hashlimit: size too large, truncated to 1048576 [ 124.879610][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.033916][T10719] veth0_vlan: entered promiscuous mode [ 125.059799][T10719] veth1_vlan: entered promiscuous mode [ 125.104428][T10719] veth0_macvtap: entered promiscuous mode [ 125.120593][T10719] veth1_macvtap: entered promiscuous mode [ 125.146234][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.156869][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.166967][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.177662][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.199934][T10719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.215333][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.225962][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.235963][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.246554][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.256688][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.267230][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.285386][T10719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.294769][T10719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.303573][T10719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.312396][T10719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.321221][T10719] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.334365][T10875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2895'. [ 125.360320][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2894'. [ 125.378598][T10875] team0: Port device team_slave_0 removed [ 125.588348][T10907] C: renamed from team_slave_0 (while UP) [ 125.599661][T10907] netlink: 'syz.7.2907': attribute type 1 has an invalid length. [ 125.607544][T10907] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2907'. [ 125.619946][T10907] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 125.666738][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2912'. [ 125.692353][T10918] team0: Port device C removed [ 125.715156][T10627] IPVS: starting estimator thread 0... [ 125.801400][T10927] IPVS: using max 1872 ests per chain, 93600 per kthread [ 125.873566][T10627] IPVS: starting estimator thread 0... [ 125.887136][T10952] lo speed is unknown, defaulting to 1000 [ 125.980172][T10955] IPVS: using max 2400 ests per chain, 120000 per kthread [ 126.301678][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 126.301695][ T29] audit: type=1400 audit(1747151535.918:2531): avc: denied { search } for pid=10987 comm="syz.3.2943" name="/" dev="configfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.333149][ T29] audit: type=1400 audit(1747151535.948:2532): avc: denied { read } for pid=10987 comm="syz.3.2943" name="/" dev="configfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.356130][ T29] audit: type=1400 audit(1747151535.948:2533): avc: denied { open } for pid=10987 comm="syz.3.2943" path="/" dev="configfs" ino=1209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 126.401474][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2945'. [ 126.412224][ T29] audit: type=1400 audit(1747151536.029:2534): avc: denied { read write } for pid=10986 comm="syz.4.2944" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.447408][ T29] audit: type=1400 audit(1747151536.029:2535): avc: denied { open } for pid=10986 comm="syz.4.2944" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 126.472502][ T29] audit: type=1400 audit(1747151536.029:2536): avc: denied { ioctl } for pid=10986 comm="syz.4.2944" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 127.104668][ T29] audit: type=1400 audit(1747151536.723:2537): avc: denied { read write } for pid=10998 comm="syz.6.2957" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.129252][ T29] audit: type=1400 audit(1747151536.723:2538): avc: denied { open } for pid=10998 comm="syz.6.2957" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.157556][T11000] program syz.6.2957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.167526][T11000] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 127.176083][ T29] audit: type=1400 audit(1747151536.784:2539): avc: denied { ioctl } for pid=10998 comm="syz.6.2957" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 127.213934][ T29] audit: type=1400 audit(1747151536.824:2540): avc: denied { connect } for pid=11004 comm="syz.4.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.234886][T11008] tipc: Started in network mode [ 127.239848][T11008] tipc: Node identity ac14140f, cluster identity 4711 [ 127.249789][T11008] tipc: New replicast peer: 10.1.1.2 [ 127.255285][T11008] tipc: Enabled bearer , priority 10 [ 127.695633][T11060] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2976'. [ 127.737846][T11070] lo speed is unknown, defaulting to 1000 [ 127.923385][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 127.975257][T11088] netem: incorrect ge model size [ 127.980301][T11088] netem: change failed [ 128.015988][T11095] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 128.061565][T11098] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2994'. [ 128.189906][T11109] SELinux: ebitmap: map size 1701995264 does not match my size 64 (high bit was 191198305) [ 128.203290][T11109] SELinux: failed to load policy [ 128.266632][T11123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3008'. [ 128.338798][T11135] bridge0: entered promiscuous mode [ 128.347815][T11135] bridge0: port 3(macvlan2) entered blocking state [ 128.354535][T11135] bridge0: port 3(macvlan2) entered disabled state [ 128.363125][T11135] macvlan2: entered allmulticast mode [ 128.368712][T11135] bridge0: entered allmulticast mode [ 128.374179][ T10] tipc: Node number set to 2886997007 [ 128.382306][T11135] macvlan2: left allmulticast mode [ 128.387575][T11135] bridge0: left allmulticast mode [ 128.393437][T11135] bridge0: left promiscuous mode [ 129.281069][T11187] vhci_hcd: invalid port number 96 [ 129.286345][T11187] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 129.813815][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'. [ 129.851970][T11205] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 129.906215][T11215] unsupported nla_type 52263 [ 130.527664][T11260] __nla_validate_parse: 1 callbacks suppressed [ 130.527684][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3068'. [ 131.050688][T11296] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 131.069907][T11299] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 131.090740][T11302] netlink: 596 bytes leftover after parsing attributes in process `syz.7.3087'. [ 131.282135][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 131.282154][ T29] audit: type=1400 audit(1747151540.930:2662): avc: denied { create } for pid=11324 comm="syz.4.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.282477][T11320] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.321946][ T29] audit: type=1400 audit(1747151540.970:2663): avc: denied { connect } for pid=11324 comm="syz.4.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.345874][ T29] audit: type=1400 audit(1747151541.000:2664): avc: denied { ioctl } for pid=11324 comm="syz.4.3098" path="socket:[30573]" dev="sockfs" ino=30573 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 131.382991][ T29] audit: type=1400 audit(1747151541.030:2665): avc: denied { sqpoll } for pid=11328 comm="syz.1.3100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 131.501363][ T29] audit: type=1400 audit(1747151541.151:2666): avc: denied { write } for pid=11341 comm="syz.1.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.522010][ T29] audit: type=1400 audit(1747151541.151:2667): avc: denied { read } for pid=11341 comm="syz.1.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.600440][ T29] audit: type=1400 audit(1747151541.232:2668): avc: denied { ioctl } for pid=11343 comm="syz.1.3107" path="socket:[30606]" dev="sockfs" ino=30606 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.638177][ T29] audit: type=1400 audit(1747151541.282:2669): avc: denied { name_bind } for pid=11345 comm="syz.3.3106" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 131.660164][ T29] audit: type=1400 audit(1747151541.282:2670): avc: denied { node_bind } for pid=11345 comm="syz.3.3106" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 131.674150][T11350] netlink: 'syz.4.3109': attribute type 3 has an invalid length. [ 131.682472][ T29] audit: type=1400 audit(1747151541.292:2671): avc: denied { read } for pid=11347 comm="syz.4.3108" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.993375][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 132.005867][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3124'. [ 132.061179][T11390] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 132.061179][T11390] program syz.1.3127 not setting count and/or reply_len properly [ 132.116471][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3129'. [ 132.324444][T11409] 9pnet_fd: Insufficient options for proto=fd [ 132.551644][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3141'. [ 132.666689][T11437] bridge0: entered promiscuous mode [ 132.678540][T11437] bridge0: port 3(macvlan2) entered blocking state [ 132.685198][T11437] bridge0: port 3(macvlan2) entered disabled state [ 132.692345][T11437] macvlan2: entered allmulticast mode [ 132.697796][T11437] bridge0: entered allmulticast mode [ 132.706192][T11437] macvlan2: left allmulticast mode [ 132.711472][T11437] bridge0: left allmulticast mode [ 132.725649][T11437] bridge0: left promiscuous mode [ 132.941746][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3156'. [ 133.328683][T11479] netlink: 'syz.7.3167': attribute type 3 has an invalid length. [ 133.509977][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 133.548965][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 134.053818][T11515] syzkaller0: entered promiscuous mode [ 134.059369][T11515] syzkaller0: entered allmulticast mode [ 134.193738][T11525] serio: Serial port ptm1 [ 134.435239][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3199'. [ 134.789367][T11572] smc: net device bond0 applied user defined pnetid SYZ2 [ 135.340809][T11634] sd 0:0:1:0: device reset [ 135.466570][T11649] rdma_op ffff88811b75fd80 conn xmit_rdma 0000000000000000 [ 135.577600][T11659] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11659 comm=syz.3.3249 [ 135.621985][T11664] sd 0:0:1:0: device reset [ 135.654612][T11666] syzkaller0: entered promiscuous mode [ 135.660178][T11666] syzkaller0: entered allmulticast mode [ 135.673363][T11666] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 135.792908][T11675] block device autoloading is deprecated and will be removed. [ 136.019004][T11694] netlink: 'syz.4.3263': attribute type 13 has an invalid length. [ 136.146738][T11694] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.154082][T11694] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.466368][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.475512][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 136.475528][ T29] audit: type=1400 audit(1747151546.150:2892): avc: denied { append } for pid=11728 comm="syz.1.3275" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 136.496303][T11694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.520866][T11729] SELinux: syz.7.3276 (11729) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 136.607660][T11694] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.616171][T11694] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.624704][T11694] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.633120][T11694] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.796890][ T29] audit: type=1400 audit(1747151546.482:2893): avc: denied { create } for pid=11754 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.818713][ T29] audit: type=1400 audit(1747151546.482:2894): avc: denied { write } for pid=11754 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.871379][ T29] audit: type=1326 audit(1747151546.553:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.7.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 136.895151][ T29] audit: type=1326 audit(1747151546.553:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.7.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 136.942193][ T29] audit: type=1326 audit(1747151546.603:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.7.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 136.965942][ T29] audit: type=1326 audit(1747151546.603:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.7.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 136.989858][ T29] audit: type=1326 audit(1747151546.603:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.7.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 137.013532][ T29] audit: type=1326 audit(1747151546.603:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.7.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 137.037420][ T29] audit: type=1326 audit(1747151546.603:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.7.3289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 137.068337][T11767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11767 comm=syz.3.3291 [ 137.086411][T11767] netlink: 'syz.3.3291': attribute type 1 has an invalid length. [ 137.114618][T11767] bond1: (slave gretap2): making interface the new active one [ 137.129059][T11767] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 137.304957][T11784] SELinux: failed to load policy [ 137.348082][T11791] netlink: 'syz.4.3302': attribute type 12 has an invalid length. [ 137.356009][T11791] netlink: 'syz.4.3302': attribute type 29 has an invalid length. [ 137.363905][T11791] __nla_validate_parse: 1 callbacks suppressed [ 137.363959][T11791] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3302'. [ 137.379215][T11791] netlink: 'syz.4.3302': attribute type 1 has an invalid length. [ 137.387069][T11791] netlink: 'syz.4.3302': attribute type 2 has an invalid length. [ 137.395061][T11791] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3302'. [ 137.989244][T11840] pim6reg: entered allmulticast mode [ 138.014102][T11840] pim6reg: left allmulticast mode [ 138.148080][T11849] vhci_hcd: invalid port number 96 [ 138.153270][T11849] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 138.304010][T11866] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 138.401715][T11882] netlink: 'syz.3.3344': attribute type 1 has an invalid length. [ 138.559421][T11904] SELinux: policydb version 280 does not match my version range 15-34 [ 138.568624][T11904] SELinux: failed to load policy [ 138.594244][T11908] veth1_macvtap: left promiscuous mode [ 138.599930][T11908] macsec0: entered allmulticast mode [ 138.711902][T11920] ALSA: seq fatal error: cannot create timer (-22) [ 138.734798][T11924] vlan2: entered allmulticast mode [ 138.812846][T11936] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3370'. [ 138.938943][T11944] hub 2-0:1.0: USB hub found [ 138.949965][T11944] hub 2-0:1.0: 8 ports detected [ 138.970164][T11948] netlink: 'syz.6.3375': attribute type 1 has an invalid length. [ 139.025772][T11956] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3379'. [ 139.272848][T11973] sd 0:0:1:0: device reset [ 139.399019][T11987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3395'. [ 140.046926][T10627] page_pool_release_retry() stalled pool shutdown: id 48, 1 inflight 60 sec [ 140.836301][T12077] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 140.956305][T12090] ALSA: seq fatal error: cannot create timer (-19) [ 141.064813][T12100] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3441'. [ 141.169918][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3443'. [ 141.261857][T12111] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 141.418679][T12117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3449'. [ 141.548073][T12129] netlink: 'syz.1.3455': attribute type 3 has an invalid length. [ 141.760952][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 141.760966][ T29] audit: type=1400 audit(1747151551.469:2988): avc: denied { bind } for pid=12141 comm="syz.4.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.762878][ T29] audit: type=1400 audit(1747151551.469:2989): avc: denied { listen } for pid=12141 comm="syz.4.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.763871][ T29] audit: type=1400 audit(1747151551.469:2990): avc: denied { setopt } for pid=12141 comm="syz.4.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.840336][ T29] audit: type=1400 audit(1747151551.509:2991): avc: denied { write } for pid=12141 comm="syz.4.3462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 141.840368][ T29] audit: type=1326 audit(1747151551.539:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.7.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 141.840464][ T29] audit: type=1326 audit(1747151551.539:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.7.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 141.840564][ T29] audit: type=1326 audit(1747151551.549:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.7.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 141.840589][ T29] audit: type=1326 audit(1747151551.549:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.7.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 141.840614][ T29] audit: type=1326 audit(1747151551.549:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.7.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 141.840737][ T29] audit: type=1326 audit(1747151551.549:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12145 comm="syz.7.3463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 142.025206][T12158] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3466'. [ 142.178182][T12173] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3476'. [ 142.313430][T12187] SELinux: Context system_u:object_r:lvm_control_t:s0 is not valid (left unmapped). [ 142.399833][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3490'. [ 142.451223][T12208] syz.1.3492: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 142.465913][T12208] CPU: 0 UID: 0 PID: 12208 Comm: syz.1.3492 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 142.465949][T12208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 142.465965][T12208] Call Trace: [ 142.465972][T12208] [ 142.465980][T12208] __dump_stack+0x1d/0x30 [ 142.466040][T12208] dump_stack_lvl+0xe8/0x140 [ 142.466060][T12208] dump_stack+0x15/0x1b [ 142.466076][T12208] warn_alloc+0x12b/0x1a0 [ 142.466103][T12208] ? schedule+0x5f/0xd0 [ 142.466132][T12208] ? futex_unqueue+0xb9/0xf0 [ 142.466232][T12208] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 142.466261][T12208] ? __pfx_futex_wake_mark+0x10/0x10 [ 142.466291][T12208] ? __rcu_read_unlock+0x4f/0x70 [ 142.466313][T12208] ? avc_has_perm_noaudit+0x1b1/0x200 [ 142.466399][T12208] ? should_fail_ex+0x30/0x280 [ 142.466431][T12208] ? xskq_create+0x36/0xe0 [ 142.466483][T12208] ? should_failslab+0x8c/0xb0 [ 142.466515][T12208] vmalloc_user_noprof+0x59/0x70 [ 142.466602][T12208] ? xskq_create+0x80/0xe0 [ 142.466629][T12208] xskq_create+0x80/0xe0 [ 142.466657][T12208] xsk_init_queue+0x95/0xf0 [ 142.466685][T12208] xsk_setsockopt+0x35c/0x510 [ 142.466779][T12208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 142.466848][T12208] __sys_setsockopt+0x181/0x200 [ 142.466866][T12208] ? fpregs_restore_userregs+0xbb/0x190 [ 142.466895][T12208] __x64_sys_setsockopt+0x64/0x80 [ 142.466995][T12208] x64_sys_call+0x2bd5/0x2fb0 [ 142.467024][T12208] do_syscall_64+0xd0/0x1a0 [ 142.467047][T12208] ? clear_bhb_loop+0x40/0x90 [ 142.467069][T12208] ? clear_bhb_loop+0x40/0x90 [ 142.467144][T12208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.467166][T12208] RIP: 0033:0x7fbbcc09e969 [ 142.467181][T12208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.467234][T12208] RSP: 002b:00007fbbca707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 142.467253][T12208] RAX: ffffffffffffffda RBX: 00007fbbcc2c5fa0 RCX: 00007fbbcc09e969 [ 142.467315][T12208] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 142.467328][T12208] RBP: 00007fbbcc120ab1 R08: 0000000000000004 R09: 0000000000000000 [ 142.467340][T12208] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.467352][T12208] R13: 0000000000000000 R14: 00007fbbcc2c5fa0 R15: 00007ffc5a45c4d8 [ 142.467371][T12208] [ 142.467379][T12208] Mem-Info: [ 142.602419][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3495'. [ 142.607086][T12208] active_anon:26149 inactive_anon:13334 isolated_anon:0 [ 142.607086][T12208] active_file:23488 inactive_file:2428 isolated_file:0 [ 142.607086][T12208] unevictable:0 dirty:257 writeback:0 [ 142.607086][T12208] slab_reclaimable:3397 slab_unreclaimable:155163 [ 142.607086][T12208] mapped:28726 shmem:32463 pagetables:962 [ 142.607086][T12208] sec_pagetables:0 bounce:0 [ 142.607086][T12208] kernel_misc_reclaimable:0 [ 142.607086][T12208] free:1698802 free_pcp:8651 free_cma:0 [ 142.619710][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3495'. [ 142.621024][T12208] Node 0 active_anon:104596kB inactive_anon:53336kB active_file:93952kB inactive_file:9712kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114904kB dirty:1028kB writeback:0kB shmem:129852kB writeback_tmp:0kB kernel_stack:4176kB pagetables:3848kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.799524][T12208] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.826491][T12208] lowmem_reserve[]: 0 2884 7863 7863 [ 142.831950][T12208] Node 0 DMA32 free:2949932kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953564kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 142.860539][T12208] lowmem_reserve[]: 0 0 4978 4978 [ 142.865730][T12208] Node 0 Normal free:3829220kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:104828kB inactive_anon:53336kB active_file:93952kB inactive_file:9712kB unevictable:0kB writepending:1028kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:30960kB local_pcp:14928kB free_cma:0kB [ 142.896461][T12208] lowmem_reserve[]: 0 0 0 0 [ 142.901092][T12208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.914520][T12208] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949932kB [ 142.930660][T12208] Node 0 Normal: 696*4kB (UME) 1225*8kB (UME) 920*16kB (UME) 653*32kB (UME) 256*64kB (UME) 135*128kB (UME) 167*256kB (UM) 128*512kB (UM) 100*1024kB (UM) 74*2048kB (UME) 826*4096kB (UM) = 3827400kB [ 142.943582][T12222] syzkaller0: entered promiscuous mode [ 142.950340][T12208] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 142.955839][T12222] syzkaller0: entered allmulticast mode [ 142.965210][T12208] 58445 total pagecache pages [ 142.975618][T12208] 71 pages in swap cache [ 142.979859][T12208] Free swap = 42680kB [ 142.984018][T12208] Total swap = 124996kB [ 142.988193][T12208] 2097051 pages RAM [ 142.992029][T12208] 0 pages HighMem/MovableOnly [ 142.996706][T12208] 80259 pages reserved [ 143.148568][T12242] netlink: 'syz.7.3508': attribute type 1 has an invalid length. [ 143.180857][T12242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.206108][T12242] bond1: (slave gretap1): making interface the new active one [ 143.214705][T12242] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 143.351567][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 143.363108][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3519'. [ 143.425706][T12272] SELinux: security policydb version 18 (MLS) not backwards compatible [ 143.434574][T12272] SELinux: failed to load policy [ 143.465149][T12279] netlink: 'syz.3.3525': attribute type 1 has an invalid length. [ 143.487346][T12279] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.549298][T12285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.570966][T12279] bond2: (slave gretap3): making interface the new active one [ 143.583932][T12285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.599607][T12279] bond2: (slave gretap3): Enslaving as an active interface with an up link [ 143.730922][T12291] ip6tnl2: entered promiscuous mode [ 143.753805][T12295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3531'. [ 143.782767][T12295] 8021q: adding VLAN 0 to HW filter on device team2 [ 143.842654][T12303] netlink: 542 bytes leftover after parsing attributes in process `syz.4.3535'. [ 144.057724][T12318] netlink: 'syz.4.3542': attribute type 1 has an invalid length. [ 144.148139][T12318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.250116][T12322] bond2: (slave gretap1): making interface the new active one [ 144.267029][T12322] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 144.648287][T12343] block device autoloading is deprecated and will be removed. [ 145.107558][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3566'. [ 145.122600][T12374] $H: (slave bond_slave_0): Releasing backup interface [ 145.123557][T12374] bond_slave_0 (unregistering): left promiscuous mode [ 145.137450][T12374] bond_slave_0 (unregistering): left allmulticast mode [ 145.211832][T12381] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 145.320968][T12384] 9pnet_fd: Insufficient options for proto=fd [ 145.961551][T12441] netlink: 'syz.1.3595': attribute type 1 has an invalid length. [ 145.978838][T12441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.013012][T12444] syzkaller0: entered promiscuous mode [ 146.018582][T12444] syzkaller0: entered allmulticast mode [ 146.034358][T12441] bond2: (slave gretap2): making interface the new active one [ 146.043180][T12441] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 146.605031][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3623'. [ 146.781401][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 146.781419][ T29] audit: type=1400 audit(1747151556.504:3245): avc: denied { execute } for pid=12517 comm="syz.1.3631" dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 146.812139][ T29] audit: type=1400 audit(1747151556.534:3246): avc: denied { mount } for pid=12519 comm="syz.4.3632" name="/" dev="ramfs" ino=34713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 146.834898][ T29] audit: type=1400 audit(1747151556.544:3247): avc: denied { execute_no_trans } for pid=12517 comm="syz.1.3631" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.226303][T12545] netlink: 'syz.4.3643': attribute type 2 has an invalid length. [ 147.234150][T12545] netlink: 'syz.4.3643': attribute type 1 has an invalid length. [ 147.242009][T12545] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3643'. [ 147.303506][ T29] audit: type=1400 audit(1747151557.037:3248): avc: denied { name_bind } for pid=12549 comm="syz.1.3645" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 147.385965][ T29] audit: type=1400 audit(1747151557.117:3249): avc: denied { sys_module } for pid=12554 comm="syz.1.3647" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.561355][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 147.875727][ C1] vcan0: j1939_tp_rxtimer: 0xffff888118e04c00: rx timeout, send abort [ 147.884066][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888118e04c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.001011][ T29] audit: type=1400 audit(1747151557.740:3250): avc: denied { mount } for pid=12593 comm="syz.3.3664" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 148.128722][ T29] audit: type=1326 audit(1747151557.870:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.7.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 148.174978][ T29] audit: type=1326 audit(1747151557.870:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.7.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 148.198587][ T29] audit: type=1326 audit(1747151557.901:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.7.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 148.222143][ T29] audit: type=1326 audit(1747151557.901:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.7.3667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4ea8e969 code=0x7ffc0000 [ 148.262336][T11742] IPVS: starting estimator thread 0... [ 148.276364][T12609] lo speed is unknown, defaulting to 1000 [ 148.364690][T12612] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 148.381223][T12607] IPVS: using max 2400 ests per chain, 120000 per kthread [ 148.454647][T12625] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 148.540468][T12635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3683'. [ 148.593052][T12640] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 148.609145][T12640] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 148.650340][T12640] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 148.658964][T12640] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 148.674916][T12645] xt_hashlimit: max too large, truncated to 1048576 [ 148.687892][T12645] Cannot find set identified by id 0 to match [ 148.711868][T12640] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 148.723535][T12640] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 148.902671][T12659] loop7: detected capacity change from 0 to 2048 [ 148.933921][T12659] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.946832][T12659] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.961336][T12659] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3693: bg 0: block 345: padding at end of block bitmap is not set [ 148.979086][T12659] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 148.991705][T12659] EXT4-fs (loop7): This should not happen!! Data will be lost [ 148.991705][T12659] [ 149.032945][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.866984][T12718] lo speed is unknown, defaulting to 1000 [ 149.892056][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3720'. [ 149.908149][T12722] SELinux: failed to load policy [ 150.006628][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a2ca00: rx timeout, send abort [ 150.054519][T12734] lo speed is unknown, defaulting to 1000 [ 150.099632][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3724'. [ 150.319931][T12748] lo speed is unknown, defaulting to 1000 [ 150.511582][T12767] lo speed is unknown, defaulting to 1000 [ 150.517395][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a2ca00: abort rx timeout. Force session deactivation [ 150.584597][T12771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 150.702781][T12782] syzkaller1: entered promiscuous mode [ 150.708396][T12782] syzkaller1: entered allmulticast mode [ 150.722254][T12782] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 150.798151][T10627] kernel write not supported for file /1627/attr/exec (pid: 10627 comm: kworker/1:5) [ 150.836472][T12794] loop9: detected capacity change from 0 to 8 [ 151.193969][T12820] SELinux: failed to load policy [ 151.200582][T12825] xt_hashlimit: max too large, truncated to 1048576 [ 151.212349][T12825] Cannot find set identified by id 0 to match [ 151.567934][T12857] netlink: 'syz.7.3780': attribute type 5 has an invalid length. [ 151.616980][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.624508][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.631966][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.641481][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.649017][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.656616][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.664129][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.671612][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.679217][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.686901][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.694469][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.701924][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.709387][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.720011][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.727448][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.734904][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.742450][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.749999][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.757489][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.764934][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.772507][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.780136][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.787613][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.795235][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.802678][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.808984][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 151.809002][ T29] audit: type=1326 audit(1747151561.567:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa52e145927 code=0x7ffc0000 [ 151.810244][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.816512][ T29] audit: type=1326 audit(1747151561.567:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa52e0eab39 code=0x7ffc0000 [ 151.840531][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.840558][ T3381] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 151.857840][ T3381] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 151.871749][ T29] audit: type=1326 audit(1747151561.567:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e14e969 code=0x7ffc0000 [ 151.919803][ T29] audit: type=1326 audit(1747151561.567:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12862 comm="syz.3.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa52e14e969 code=0x7ffc0000 [ 151.971261][ T29] audit: type=1400 audit(1747151561.728:3424): avc: denied { mounton } for pid=12866 comm="syz.1.3784" path="/739/file0" dev="tmpfs" ino=3830 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 152.044957][ T29] audit: type=1400 audit(1747151561.758:3425): avc: denied { execmem } for pid=12870 comm="syz.7.3786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 152.064507][ T29] audit: type=1400 audit(1747151561.758:3426): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 152.084690][ T29] audit: type=1400 audit(1747151561.778:3427): avc: denied { write } for pid=12867 comm="syz.3.3785" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 152.117156][ T29] audit: type=1400 audit(1747151561.869:3428): avc: denied { name_bind } for pid=12874 comm="syz.3.3788" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 152.139271][ T29] audit: type=1400 audit(1747151561.869:3429): avc: denied { node_bind } for pid=12874 comm="syz.3.3788" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 152.168434][T12875] unsupported nlmsg_type 40 [ 152.288989][T12890] netlink: 'syz.4.3795': attribute type 12 has an invalid length. [ 152.633042][T12913] __nla_validate_parse: 13 callbacks suppressed [ 152.633081][T12913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.678937][T12913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.700688][T12922] xt_hashlimit: max too large, truncated to 1048576 [ 152.720072][T12922] Cannot find set identified by id 0 to match [ 152.729510][T12925] geneve0: entered allmulticast mode [ 152.737574][T12913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.755213][T12913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.762700][T12929] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 152.788190][T12929] SELinux: failed to load policy [ 152.802319][T12913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.812549][T12913] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.891125][T12945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3819'. [ 152.958595][T12944] lo speed is unknown, defaulting to 1000 [ 153.002951][T12959] lo speed is unknown, defaulting to 1000 [ 153.054178][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3825'. [ 153.071425][T12951] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 153.126283][T12969] loop7: detected capacity change from 0 to 512 [ 153.132941][T12969] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.164174][T12969] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 153.174305][T12972] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 153.183284][T12972] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 153.216321][T12969] EXT4-fs (loop7): 1 truncate cleaned up [ 153.234620][T12978] xt_hashlimit: max too large, truncated to 1048576 [ 153.242193][T12978] Cannot find set identified by id 0 to match [ 153.254877][T12980] vlan2: entered allmulticast mode [ 153.260104][T12980] batadv0: entered allmulticast mode [ 153.276415][T12969] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.346854][T12987] openvswitch: netlink: Message has 6 unknown bytes. [ 153.513611][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.722514][T13026] xt_hashlimit: max too large, truncated to 1048576 [ 153.738986][T13026] Cannot find set identified by id 0 to match [ 154.197940][T13066] xt_hashlimit: max too large, truncated to 1048576 [ 154.210822][T13066] Cannot find set identified by id 0 to match [ 154.352853][T13091] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 154.530422][T13111] loop7: detected capacity change from 0 to 1024 [ 154.537780][T13111] EXT4-fs: Ignoring removed nobh option [ 154.543647][T13111] EXT4-fs: Ignoring removed nobh option [ 154.552159][T13111] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 154.562827][T13111] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: comm syz.7.3885: inode #4294967295: comm syz.7.3885: iget: illegal inode # [ 154.577144][T13111] EXT4-fs (loop7): no journal found [ 154.582390][T13111] EXT4-fs (loop7): can't get journal size [ 154.598861][T13111] EXT4-fs (loop7): failed to initialize system zone (-22) [ 154.606707][T13111] EXT4-fs (loop7): mount failed [ 154.682664][T13128] lo speed is unknown, defaulting to 1000 [ 154.699415][T13131] lo speed is unknown, defaulting to 1000 [ 154.738990][T13134] A link change request failed with some changes committed already. Interface $H may have been left with an inconsistent configuration, please check. [ 154.806739][T13141] loop7: detected capacity change from 0 to 164 [ 154.827661][T13141] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.847076][T13141] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.855442][T13141] Symlink component flag not implemented [ 154.861175][T13141] Symlink component flag not implemented [ 154.867493][T13141] Symlink component flag not implemented (7) [ 154.873500][T13141] Symlink component flag not implemented (116) [ 154.951154][T13151] dvmrp1: entered allmulticast mode [ 154.959596][T13151] dvmrp1: left allmulticast mode [ 155.283194][T13181] pim6reg: entered allmulticast mode [ 155.299539][T13181] pim6reg: left allmulticast mode [ 155.816705][T13219] lo speed is unknown, defaulting to 1000 [ 156.079104][T13242] uprobe: syz.4.3943:13242 failed to unregister, leaking uprobe [ 156.152940][T13241] uprobe: syz.4.3943:13241 failed to unregister, leaking uprobe [ 156.344325][T13256] netlink: 'syz.1.3948': attribute type 21 has an invalid length. [ 156.364611][T13259] random: crng reseeded on system resumption [ 156.583041][T13273] atomic_op ffff88811e216928 conn xmit_atomic 0000000000000000 [ 156.629852][T13279] dvmrp1: entered allmulticast mode [ 156.642064][T13279] dvmrp1: left allmulticast mode [ 156.665423][T13285] syzkaller1: entered promiscuous mode [ 156.670991][T13285] syzkaller1: entered allmulticast mode [ 156.834101][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 156.834157][ T29] audit: type=1400 audit(1747151566.609:3668): avc: denied { create } for pid=13295 comm="syz.6.3967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.864861][ T29] audit: type=1400 audit(1747151566.639:3669): avc: denied { ioctl } for pid=13295 comm="syz.6.3967" path="socket:[37294]" dev="sockfs" ino=37294 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.944339][T13285] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.952808][T13285] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.961559][T13285] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.970117][T13285] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.052604][T13297] lo speed is unknown, defaulting to 1000 [ 157.143636][ T29] audit: type=1400 audit(1747151566.920:3670): avc: denied { create } for pid=13307 comm="syz.6.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.164888][T13308] Cannot find add_set index 0 as target [ 157.202918][T13310] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 157.259163][ T29] audit: type=1400 audit(1747151567.040:3671): avc: denied { tracepoint } for pid=13320 comm="syz.3.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 157.298795][ T29] audit: type=1400 audit(1747151567.081:3672): avc: denied { create } for pid=13320 comm="syz.3.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.621379][ T29] audit: type=1400 audit(1747151567.402:3673): avc: denied { create } for pid=13346 comm="syz.4.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.651717][T13348] __nla_validate_parse: 33 callbacks suppressed [ 157.651736][T13348] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3988'. [ 157.659039][ T29] audit: type=1400 audit(1747151567.442:3674): avc: denied { connect } for pid=13346 comm="syz.4.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.689903][T13345] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3988'. [ 157.706009][ T29] audit: type=1400 audit(1747151567.482:3675): avc: denied { ioctl } for pid=13349 comm="syz.7.3991" path="socket:[37390]" dev="sockfs" ino=37390 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.785400][ T29] audit: type=1400 audit(1747151567.572:3676): avc: denied { name_bind } for pid=13362 comm="syz.4.3998" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 157.807438][ T29] audit: type=1400 audit(1747151567.572:3677): avc: denied { node_bind } for pid=13362 comm="syz.4.3998" saddr=::ffff:172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 157.891249][ T7431] bond4: (slave syz_tun): Releasing active interface [ 157.952761][ T5456] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.008617][ T5456] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.056694][ T5456] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.094812][ T5456] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.115175][T13377] lo speed is unknown, defaulting to 1000 [ 158.171523][ T5456] bridge_slave_1: left allmulticast mode [ 158.177317][ T5456] bridge_slave_1: left promiscuous mode [ 158.183117][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.193086][ T5456] bridge_slave_0: left allmulticast mode [ 158.198901][ T5456] bridge_slave_0: left promiscuous mode [ 158.204819][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.363671][ T5456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.379908][ T5456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.391950][ T5456] bond0 (unregistering): Released all slaves [ 158.403308][ T5456] bond1 (unregistering): Released all slaves [ 158.413572][ T5456] bond2 (unregistering): Released all slaves [ 158.422965][ T5456] bond3 (unregistering): Released all slaves [ 158.434666][ T5456] bond4 (unregistering): Released all slaves [ 158.452942][T13392] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4007'. [ 158.507166][T13391] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4007'. [ 158.556280][T13377] chnl_net:caif_netlink_parms(): no params data found [ 158.576671][ T5456] hsr_slave_0: left promiscuous mode [ 158.586088][ T5456] 0: left promiscuous mode [ 158.592972][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.600477][ T5456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.610077][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.617583][ T5456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.630319][ T5456] veth0_macvtap: left promiscuous mode [ 158.636124][ T5456] veth1_vlan: left promiscuous mode [ 158.725249][ T5456] team0 (unregistering): Port device team_slave_1 removed [ 158.784946][T11723] infiniband syz1: ib_query_port failed (-19) [ 158.817027][T13377] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.824274][T13377] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.838294][T13377] bridge_slave_0: entered allmulticast mode [ 158.845518][T13377] bridge_slave_0: entered promiscuous mode [ 158.855263][T13377] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.862471][T13377] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.887008][T13377] bridge_slave_1: entered allmulticast mode [ 158.911923][T13377] bridge_slave_1: entered promiscuous mode [ 158.933791][T13377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.947019][T13377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.956933][T13389] syz.7.4006 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 158.971176][T13389] CPU: 0 UID: 0 PID: 13389 Comm: syz.7.4006 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 158.971207][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 158.971220][T13389] Call Trace: [ 158.971227][T13389] [ 158.971234][T13389] __dump_stack+0x1d/0x30 [ 158.971373][T13389] dump_stack_lvl+0xe8/0x140 [ 158.971396][T13389] dump_stack+0x15/0x1b [ 158.971449][T13389] dump_header+0x81/0x220 [ 158.971487][T13389] oom_kill_process+0x334/0x3f0 [ 158.971515][T13389] out_of_memory+0x979/0xb80 [ 158.971693][T13389] ? css_next_descendant_pre+0x138/0x160 [ 158.971715][T13389] mem_cgroup_out_of_memory+0x13d/0x190 [ 158.971755][T13389] try_charge_memcg+0x5e2/0x870 [ 158.971797][T13389] obj_cgroup_charge_pages+0xb7/0x1a0 [ 158.971918][T13389] __memcg_kmem_charge_page+0x9f/0x170 [ 158.971967][T13389] __alloc_frozen_pages_noprof+0x188/0x360 [ 158.972006][T13389] alloc_pages_mpol+0xb3/0x250 [ 158.972034][T13389] alloc_pages_noprof+0x90/0x130 [ 158.972119][T13389] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 158.972161][T13389] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 158.972191][T13389] ? ip_set_alloc+0x1f/0x30 [ 158.972225][T13389] ? ip_set_alloc+0x1f/0x30 [ 158.972262][T13389] ? __kmalloc_cache_noprof+0x189/0x320 [ 158.972295][T13389] ip_set_alloc+0x1f/0x30 [ 158.972385][T13389] hash_netiface_create+0x282/0x740 [ 158.972427][T13389] ? __pfx_hash_netiface_create+0x10/0x10 [ 158.972459][T13389] ip_set_create+0x3cc/0x960 [ 158.972524][T13389] ? __nla_parse+0x40/0x60 [ 158.972548][T13389] nfnetlink_rcv_msg+0x4c6/0x590 [ 158.972592][T13389] netlink_rcv_skb+0x120/0x220 [ 158.972639][T13389] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 158.972680][T13389] nfnetlink_rcv+0x16b/0x1690 [ 158.972705][T13389] ? __kfree_skb+0x109/0x150 [ 158.972816][T13389] ? nlmon_xmit+0x4f/0x60 [ 158.972838][T13389] ? consume_skb+0x49/0x150 [ 158.972869][T13389] ? nlmon_xmit+0x4f/0x60 [ 158.972888][T13389] ? dev_hard_start_xmit+0x39e/0x3d0 [ 158.972915][T13389] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 158.972941][T13389] ? __dev_queue_xmit+0x182/0x1fb0 [ 158.972964][T13389] ? ref_tracker_free+0x37d/0x3e0 [ 158.973012][T13389] ? __netlink_deliver_tap+0x4dc/0x500 [ 158.973099][T13389] netlink_unicast+0x5a1/0x670 [ 158.973133][T13389] netlink_sendmsg+0x58b/0x6b0 [ 158.973199][T13389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.973219][T13389] __sock_sendmsg+0x142/0x180 [ 158.973304][T13389] ____sys_sendmsg+0x31e/0x4e0 [ 158.973334][T13389] ___sys_sendmsg+0x17b/0x1d0 [ 158.973368][T13389] __x64_sys_sendmsg+0xd4/0x160 [ 158.973393][T13389] x64_sys_call+0x2999/0x2fb0 [ 158.973416][T13389] do_syscall_64+0xd0/0x1a0 [ 158.973494][T13389] ? clear_bhb_loop+0x40/0x90 [ 158.973515][T13389] ? clear_bhb_loop+0x40/0x90 [ 158.973538][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.973561][T13389] RIP: 0033:0x7f2a4ea8e969 [ 158.973576][T13389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.973616][T13389] RSP: 002b:00007f2a4d0f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.973638][T13389] RAX: ffffffffffffffda RBX: 00007f2a4ecb5fa0 RCX: 00007f2a4ea8e969 [ 158.973675][T13389] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 158.973751][T13389] RBP: 00007f2a4eb10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 158.973765][T13389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.973777][T13389] R13: 0000000000000000 R14: 00007f2a4ecb5fa0 R15: 00007ffd5e91c838 [ 158.973799][T13389] [ 158.973808][T13389] memory: usage 307200kB, limit 307200kB, failcnt 109 [ 159.327393][T13389] memory+swap: usage 307828kB, limit 9007199254740988kB, failcnt 0 [ 159.335392][T13389] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 159.342760][T13389] Memory cgroup stats for /syz7: [ 159.342905][T13389] cache 0 [ 159.350831][T13389] rss 4096 [ 159.353935][T13389] shmem 0 [ 159.356919][T13389] mapped_file 0 [ 159.360395][T13389] dirty 0 [ 159.363333][T13389] writeback 0 [ 159.366646][T13389] workingset_refault_anon 21 [ 159.371259][T13389] workingset_refault_file 0 [ 159.375769][T13389] swap 643072 [ 159.379115][T13389] swapcached 32768 [ 159.382847][T13389] pgpgin 40746 [ 159.386213][T13389] pgpgout 40738 [ 159.389701][T13389] pgfault 56803 [ 159.393200][T13389] pgmajfault 6 [ 159.396571][T13389] inactive_anon 32768 [ 159.400674][T13389] active_anon 0 [ 159.404134][T13389] inactive_file 0 [ 159.407926][T13389] active_file 0 [ 159.411461][T13389] unevictable 0 [ 159.415019][T13389] hierarchical_memory_limit 314572800 [ 159.420450][T13389] hierarchical_memsw_limit 9223372036854771712 [ 159.426621][T13389] total_cache 0 [ 159.430187][T13389] total_rss 4096 [ 159.433799][T13389] total_shmem 0 [ 159.437316][T13389] total_mapped_file 0 [ 159.441304][T13389] total_dirty 0 [ 159.444787][T13389] total_writeback 0 [ 159.448706][T13389] total_workingset_refault_anon 21 [ 159.453830][T13389] total_workingset_refault_file 0 [ 159.458905][T13389] total_swap 643072 [ 159.462890][T13389] total_swapcached 32768 [ 159.467200][T13389] total_pgpgin 40746 [ 159.471185][T13389] total_pgpgout 40738 [ 159.475260][T13389] total_pgfault 56803 [ 159.479284][T13389] total_pgmajfault 6 [ 159.483210][T13389] total_inactive_anon 32768 [ 159.487779][T13389] total_active_anon 0 [ 159.491772][T13389] total_inactive_file 0 [ 159.495937][T13389] total_active_file 0 [ 159.499954][T13389] total_unevictable 0 [ 159.503947][T13389] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4006,pid=13388,uid=0 [ 159.518696][T13389] Memory cgroup out of memory: Killed process 13388 (syz.7.4006) total-vm:93616kB, anon-rss:1044kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 159.566002][T13377] team0: Port device team_slave_0 added [ 159.582834][T13377] team0: Port device team_slave_1 added [ 159.629214][ T5456] IPVS: stop unused estimator thread 0... [ 159.635882][T13377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.642900][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.669102][T13377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.710658][T13377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.717698][T13377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.743749][T13377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.778299][T13411] uprobe: syz.3.4013:13411 failed to unregister, leaking uprobe [ 159.802410][T13377] hsr_slave_0: entered promiscuous mode [ 159.808635][T13377] hsr_slave_1: entered promiscuous mode [ 159.876736][T13410] uprobe: syz.3.4013:13410 failed to unregister, leaking uprobe [ 160.150099][T13377] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.184622][T13377] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.233144][T13377] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.244624][T13436] SELinux: failed to load policy [ 160.256549][T13377] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.271833][T13445] program syz.7.4029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.301773][T13377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.320235][T13377] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.332151][ T5456] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.339320][ T5456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.354528][ T5454] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.361732][ T5454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.422523][T13459] loop7: detected capacity change from 0 to 1024 [ 160.435739][T13459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.435756][T13377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.475529][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.568197][T13377] veth0_vlan: entered promiscuous mode [ 160.576284][T13377] veth1_vlan: entered promiscuous mode [ 160.595288][T13377] veth0_macvtap: entered promiscuous mode [ 160.603561][T13377] veth1_macvtap: entered promiscuous mode [ 160.614684][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.625311][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.640517][T13377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.653624][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.664183][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.674160][T13377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.684621][T13377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.695920][T13377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.718741][T13377] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.727625][T13377] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.736594][T13377] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.745377][T13377] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.800329][T13495] atomic_op ffff88810124c928 conn xmit_atomic 0000000000000000 [ 160.803541][T13493] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4042'. [ 160.971750][T13520] uprobe: syz.6.4053:13520 failed to unregister, leaking uprobe [ 161.033327][T13519] uprobe: syz.6.4053:13519 failed to unregister, leaking uprobe [ 161.151401][T13532] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 161.172741][T13534] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 161.746136][T13587] netlink: 572 bytes leftover after parsing attributes in process `syz.7.4082'. [ 162.043702][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 162.043717][ T29] audit: type=1326 audit(1747151571.839:3755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.073535][ T29] audit: type=1326 audit(1747151571.839:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.103366][T13609] uprobe: syz.1.4090:13609 failed to unregister, leaking uprobe [ 162.103385][ T29] audit: type=1326 audit(1747151571.899:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.134807][ T29] audit: type=1326 audit(1747151571.899:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.158857][ T29] audit: type=1326 audit(1747151571.899:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.182537][ T29] audit: type=1326 audit(1747151571.899:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.206232][ T29] audit: type=1326 audit(1747151571.899:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.230327][ T29] audit: type=1326 audit(1747151571.899:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.253923][ T29] audit: type=1326 audit(1747151571.899:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.277493][ T29] audit: type=1326 audit(1747151571.899:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c07a8e969 code=0x7ffc0000 [ 162.359219][T13608] uprobe: syz.1.4090:13608 failed to unregister, leaking uprobe [ 162.590656][T13643] vhci_hcd: invalid port number 96 [ 162.595974][T13643] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 162.841019][T13658] loop7: detected capacity change from 0 to 2048 [ 162.876429][T13634] Set syz1 is full, maxelem 65536 reached [ 162.895347][T13660] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 162.919264][T13658] loop7: p1 < > p3 [ 162.924572][T13658] loop7: p3 size 134217728 extends beyond EOD, truncated [ 162.950092][T13658] SELinux: syz.7.4116 (13658) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 163.285480][T13694] hub 2-0:1.0: USB hub found [ 163.291201][T13694] hub 2-0:1.0: 8 ports detected [ 163.380346][T13709] ip6gretap1: entered allmulticast mode [ 163.411076][T13717] loop7: detected capacity change from 0 to 512 [ 163.447405][T13722] vlan2: entered allmulticast mode [ 163.453875][T13717] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 163.502297][T13717] EXT4-fs (loop7): 1 truncate cleaned up [ 163.508578][T13717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.564348][T10719] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.638984][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4155'. [ 163.653979][T13738] hub 4-0:1.0: USB hub found [ 163.657420][T13740] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.658732][T13738] hub 4-0:1.0: 8 ports detected [ 163.794202][T13757] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=22 sclass=netlink_audit_socket pid=13757 comm=syz.1.4161 [ 164.147381][T13788] macvtap0: refused to change device tx_queue_len [ 164.181589][T13793] program syz.4.4178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.193857][T13793] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 164.273644][T13802] serio: Serial port ptm0 [ 164.294513][T13806] xt_hashlimit: size too large, truncated to 1048576 [ 164.456277][T13824] ALSA: seq fatal error: cannot create timer (-22) [ 164.634285][T13840] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 164.663154][T13829] lo speed is unknown, defaulting to 1000 [ 164.826634][T13859] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 164.878891][T13829] chnl_net:caif_netlink_parms(): no params data found [ 164.934818][T13866] batadv2: entered allmulticast mode [ 164.952120][T13868] loop7: detected capacity change from 0 to 2048 [ 164.968127][T13866] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 164.981193][T13866] bridge0: port 1(batadv2) entered blocking state [ 164.987768][T13866] bridge0: port 1(batadv2) entered disabled state [ 164.995206][T13866] batadv2: entered promiscuous mode [ 165.018279][T13868] loop7: p1 < > p4 [ 165.023244][T13868] loop7: p4 size 8388608 extends beyond EOD, truncated [ 165.099086][T13829] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.106399][T13829] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.123800][T13829] bridge_slave_0: entered allmulticast mode [ 165.152388][T13829] bridge_slave_0: entered promiscuous mode [ 165.192232][T13829] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.199549][T13829] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.242155][T13829] bridge_slave_1: entered allmulticast mode [ 165.256610][T13829] bridge_slave_1: entered promiscuous mode [ 165.282182][T13829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.295294][T13829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.326640][T13829] team0: Port device team_slave_0 added [ 165.346275][T13829] team0: Port device team_slave_1 added [ 165.366273][T13829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.373271][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.399515][T13829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.422219][T13829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.429392][T13829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.455771][T13829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.469123][ T5424] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 165.478560][ T5424] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 165.499345][T13829] hsr_slave_0: entered promiscuous mode [ 165.517962][T13829] hsr_slave_1: entered promiscuous mode [ 165.524076][T13829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.532324][T13829] Cannot create hsr debugfs directory [ 165.608401][T13907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4228'. [ 165.652856][T13829] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 165.661960][T13829] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 165.670882][T13829] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 165.700854][T13829] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 165.728947][T13829] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.736194][T13829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.743596][T13829] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.750754][T13829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.779883][ T5424] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.789159][ T5424] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.832764][T13829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.848752][T13829] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.860701][ T5424] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.867831][ T5424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.878145][T13926] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4236'. [ 165.889291][ T5424] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.896439][ T5424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.992017][T13829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.133645][T13829] veth0_vlan: entered promiscuous mode [ 166.141781][T13829] veth1_vlan: entered promiscuous mode [ 166.167700][T13829] veth0_macvtap: entered promiscuous mode [ 166.180002][T13829] veth1_macvtap: entered promiscuous mode [ 166.199921][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.210507][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.220432][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.231014][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.250171][T13829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.261346][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.271999][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.281894][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.292543][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.302408][T13829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.313001][T13829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.324983][T13829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.337091][T13829] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.345994][T13829] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.354849][T13829] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.363640][T13829] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.379764][T13976] tipc: Failed to remove unknown binding: 66,3,3/0:2794445063/2794445064 [ 166.405782][ T5456] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.457647][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4193'. [ 166.467328][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.474961][T13985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.487799][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.497178][T13985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.528925][ T5456] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.566148][T13991] loop9: detected capacity change from 0 to 7 [ 166.572710][T13991] buffer_io_error: 2 callbacks suppressed [ 166.572727][T13991] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.586877][T13991] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.594806][T13991] loop9: unable to read partition table [ 166.601364][T13991] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 166.601364][T13991] U) failed (rc=-5) [ 166.627723][ T5456] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.693347][ T5456] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.768160][ T5456] bridge_slave_1: left allmulticast mode [ 166.773939][ T5456] bridge_slave_1: left promiscuous mode [ 166.779610][ T5456] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.788237][ T5456] bridge_slave_0: left promiscuous mode [ 166.794000][ T5456] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.983371][ T5456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.995718][ T5456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.005984][ T5456] bond0 (unregistering): Released all slaves [ 167.092394][ T5456] hsr_slave_0: left promiscuous mode [ 167.112245][ T5456] hsr_slave_1: left promiscuous mode [ 167.238174][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.245822][ T5456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.269516][ T5456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.277006][ T5456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.301098][ T5456] veth1_macvtap: left promiscuous mode [ 167.320319][ T5456] veth0_macvtap: left promiscuous mode [ 167.325864][ T5456] veth1_vlan: left promiscuous mode [ 167.339897][ T5456] veth0_vlan: left promiscuous mode [ 167.448355][ T5456] team0 (unregistering): Port device team_slave_1 removed [ 167.463692][ T5456] team0 (unregistering): Port device team_slave_0 removed [ 167.509094][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 167.509112][ T29] audit: type=1400 audit(1747151577.329:3997): avc: denied { ioctl } for pid=14020 comm="syz.3.4270" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 167.547594][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4268'. [ 167.587031][ T29] audit: type=1400 audit(1747151577.379:3998): avc: denied { read } for pid=14022 comm="syz.1.4271" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.587056][T14023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4271'. [ 167.617400][ T29] audit: type=1400 audit(1747151577.379:3999): avc: denied { open } for pid=14022 comm="syz.1.4271" path="net:[4026532631]" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.671770][ T29] audit: type=1400 audit(1747151577.479:4000): avc: denied { write } for pid=14027 comm="syz.4.4274" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.694850][ T29] audit: type=1400 audit(1747151577.479:4001): avc: denied { create } for pid=14026 comm="syz.3.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.762187][ T29] audit: type=1326 audit(1747151577.580:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.4.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 167.785836][ T29] audit: type=1326 audit(1747151577.580:4003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.4.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 167.809376][ T29] audit: type=1326 audit(1747151577.580:4004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.4.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 167.835880][ T29] audit: type=1326 audit(1747151577.580:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.4.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 167.859815][ T29] audit: type=1326 audit(1747151577.580:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14035 comm="syz.4.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923f75e969 code=0x7ffc0000 [ 168.035844][T14054] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 168.036179][T14052] sg_write: data in/out 122/10 bytes for SCSI command 0xe4-- guessing data in; [ 168.036179][T14052] program syz.3.4285 not setting count and/or reply_len properly [ 168.181965][T14059] ip6t_rpfilter: unknown options [ 168.207351][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4290'. [ 168.550102][ T9] kernel write not supported for file /12/attr/exec (pid: 9 comm: kworker/0:0) [ 168.569972][T14104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.583981][T14104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.601583][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4311'. [ 168.632340][T14110] lo speed is unknown, defaulting to 1000 [ 168.863571][T14120] lo speed is unknown, defaulting to 1000 [ 168.879116][T14118] vhci_hcd: invalid port number 255 [ 168.884475][T14118] vhci_hcd: default hub control req: 0000 vfffc i00ff l0 [ 168.956363][T14127] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.036925][T14139] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 169.110539][T14150] netlink: 'syz.8.4330': attribute type 2 has an invalid length. [ 169.118614][T14150] netlink: 'syz.8.4330': attribute type 1 has an invalid length. [ 169.126448][T14150] netlink: 199820 bytes leftover after parsing attributes in process `syz.8.4330'. [ 169.172868][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.181816][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.210432][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.254436][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.263503][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.275588][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.306923][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.306977][T14166] netem: incorrect gi model size [ 169.315856][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.320811][T14166] netem: change failed [ 169.334083][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4332'. [ 169.421502][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.429164][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.436873][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.444549][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 169.451979][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 169.503521][T14193] netlink: 'syz.8.4347': attribute type 1 has an invalid length. [ 169.532344][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.551168][T14193] bridge_slave_1 (unregistering): left allmulticast mode [ 169.558317][T14193] bridge_slave_1 (unregistering): left promiscuous mode [ 169.565476][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.644135][T14209] binfmt_misc: register: failed to install interpreter file ./file2 [ 169.924820][T14236] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 170.180265][T14252] lo speed is unknown, defaulting to 1000 [ 171.142638][T14290] netlink: 'syz.1.4388': attribute type 13 has an invalid length. [ 171.274357][T14311] program syz.8.4400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.283946][T14311] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 171.353231][T14321] netlink: 'syz.4.4405': attribute type 13 has an invalid length. [ 171.414100][T14334] vlan2: entered allmulticast mode [ 171.554881][T14343] loop8: detected capacity change from 0 to 512 [ 171.561935][T14343] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 171.572307][T14343] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.4414: invalid block [ 171.585168][T14343] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4414: invalid indirect mapped block 4294967295 (level 1) [ 171.601377][T14343] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4414: invalid indirect mapped block 4294967295 (level 1) [ 171.616267][T14343] EXT4-fs (loop8): 2 truncates cleaned up [ 171.624344][T14343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.641012][T14343] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.8.4414: path /29/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 171.666599][T14343] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.8.4414: path /29/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 171.719196][T13829] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.031561][T14356] loop8: detected capacity change from 0 to 8192 [ 172.426696][ T5427] ================================================================== [ 172.435013][ T5427] BUG: KCSAN: data-race in copy_page_from_iter_atomic / fat16_ent_put [ 172.443223][ T5427] [ 172.445592][ T5427] write to 0xffff88811f5c480c of 2 bytes by task 14356 on cpu 1: [ 172.453334][ T5427] fat16_ent_put+0x28/0x60 [ 172.457791][ T5427] fat_alloc_clusters+0x4ce/0xa80 [ 172.462848][ T5427] fat_get_block+0x258/0x5e0 [ 172.467481][ T5427] __block_write_begin_int+0x419/0xf70 [ 172.472975][ T5427] cont_write_begin+0x5a3/0x8e0 [ 172.477868][ T5427] fat_write_begin+0x4f/0xe0 [ 172.482500][ T5427] generic_perform_write+0x184/0x490 [ 172.487833][ T5427] __generic_file_write_iter+0x9e/0x120 [ 172.493436][ T5427] generic_file_write_iter+0x8d/0x2f0 [ 172.498853][ T5427] vfs_write+0x49d/0x8d0 [ 172.503172][ T5427] ksys_write+0xda/0x1a0 [ 172.507446][ T5427] __x64_sys_write+0x40/0x50 [ 172.512071][ T5427] x64_sys_call+0x2cdd/0x2fb0 [ 172.516781][ T5427] do_syscall_64+0xd0/0x1a0 [ 172.521410][ T5427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.527338][ T5427] [ 172.529678][ T5427] read to 0xffff88811f5c4800 of 512 bytes by task 5427 on cpu 0: [ 172.537432][ T5427] copy_page_from_iter_atomic+0x77f/0xff0 [ 172.543191][ T5427] generic_perform_write+0x2c2/0x490 [ 172.548627][ T5427] shmem_file_write_iter+0xc5/0xf0 [ 172.553881][ T5427] lo_rw_aio+0x5fa/0x7c0 [ 172.558172][ T5427] loop_process_work+0x52d/0xa60 [ 172.563334][ T5427] loop_workfn+0x31/0x40 [ 172.567604][ T5427] process_scheduled_works+0x4ce/0x9d0 [ 172.573094][ T5427] worker_thread+0x582/0x770 [ 172.577732][ T5427] kthread+0x489/0x510 [ 172.581830][ T5427] ret_from_fork+0x4b/0x60 [ 172.586280][ T5427] ret_from_fork_asm+0x1a/0x30 [ 172.591084][ T5427] [ 172.593420][ T5427] Reported by Kernel Concurrency Sanitizer on: [ 172.599586][ T5427] CPU: 0 UID: 0 PID: 5427 Comm: kworker/u8:38 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(voluntary) [ 172.612302][ T5427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 172.622386][ T5427] Workqueue: loop8 loop_workfn [ 172.627195][ T5427] ================================================================== [ 173.018511][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 173.018592][ T29] audit: type=1400 audit(1747151582.847:4207): avc: denied { unmount } for pid=13829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1