last executing test programs: 7.268143257s ago: executing program 0 (id=4707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(r3, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 5.886507928s ago: executing program 0 (id=4709): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@private2, 0x4d6, 0x6c}, @in=@private=0x8010101, {0x0, 0x192, 0x9ba3, 0x2, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 4.786465485s ago: executing program 0 (id=4713): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='veno\x00', 0x5) writev(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)="c892f2ec2ad509fa1d4b8a6a65541730fbccbe65f68ab3baf7c970631b07a11a4e98e7c36851c844e95508a981c51854da16f62d0d8459ae0f0e9cb555dab53afb3d4d8898ee5b64103d0906beed8586dfefe71f5158fc55115a2a0f975b2ea06d8c8c46eadb176fed424a4b6ea6db3a2236f99058bba6ef9eaf072bd1216cf344e07d9aeb8c95bd1a62f0124b15492b041281c5c965009bdeaf8605c86e12c261c70e6ea0c2075d30bbeea6c58537", 0xaf}, {&(0x7f0000000380)="5353608a26e82d37c06d28cd7e0a5fdfd9881a1ee9fe66c56ee68d462128c099408c8fe300f28dd2df763f3e4419b0f5e2e14f32cb6476", 0x37}, {&(0x7f0000000900)="e70f222438ea2cd479dade79add6cb9e39f2524cf0b7970ed4025d2d6bd7b6fd12142833a92099ccf270470d8734d4b0a334085b15b087f3d71135bee27f964da46be1b7039322bd7b8b37b5ed9e637b70792525b3c9c582e0951c3147076e000cec7bf4825b0661d44f7fe185b21f3276a7585e51dc59fb17b6ae535cb24e21fae56574e0998bab141811e7acfbed70728396f1923f7314655d3c4190e8dd85a0aa2fa8e76b4aaa5966ff491138dd904ed3572427f4a85bbbf069f9e93b595704c8ea91cb1470668212a75f0926d392910f5988eb46125040ce8787be42610dbf9f23493ee582233153a945ab6477b978e8769d6f89b72d6bc0018cc0fdba2b181ed48744c08328ea922c8452ad64e1ded9972c2fa2b6cab78c8714bc05fd577b3fa7be25ad99939a75a6f7cda851096fe25f2e7fa7abc36fe4d1616ffc5d15e32495f55e9766e7b32764b16ed4a029b00bb1548104f58cf26d74a3bac3edcab8f5d2bdd555177a91d8ba81549959e928b0f5353430602a6eee26903f4d2b1ec55708f638", 0x185}, {0x0}, {&(0x7f00000006c0)="baa95202b8d7a4aaa9f5e49090f75b0e73c2a0cd38917f627c686b0def06533f832cade91105ad412d04000000524c464ba3b7ce27c7fcd1d789859e", 0x3c}, {&(0x7f0000000780)="ab97eee44dd916aaca28d91a5eed5baac399ec4e2d1c7866a1e4911df2db179c694e09a18a31e3e4abadff843ff16b78dc29c6d956453a66bab5ecffdbed1ed27cae1d02fe646e6380f792995d80b36dcbe23e408f16fb363f92b3e22a521ed9d4a19388e7ebfa4512da5c5d1e67b3c9037f50b4b7a00114", 0x78}], 0x6) shutdown(r0, 0x1) 4.711700436s ago: executing program 0 (id=4715): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000a00)={0xc, 0x0, '\x00', 0x1, &(0x7f0000000880)}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r0}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x9ac0], 0x7, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf770, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x200004, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r7 = socket$unix(0x1, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x40000000, @local}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x27, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000009000000000000000800000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001834000005000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703", @ANYRESOCT=r7], &(0x7f0000000000)='GPL\x00'}, 0x94) r8 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x3) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(r3, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 4.122120666s ago: executing program 2 (id=4721): faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1300) 4.051907017s ago: executing program 2 (id=4723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) write$qrtrtun(r3, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 3.083049932s ago: executing program 0 (id=4727): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close(r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) 2.975763914s ago: executing program 2 (id=4729): creat(&(0x7f0000000040)='./file0\x00', 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_u}]}}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000001c0)={'vlan0\x00', 0xaf3}) 1.94902606s ago: executing program 4 (id=4734): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000a00)={0xc, 0x0, '\x00', 0x1, &(0x7f0000000880)}) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0)={0x0, r0}, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000001300)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x9ac0], 0x7, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf770, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r3, @ANYRESHEX=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r6 = socket$unix(0x1, 0x4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x40000000, @local}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x27, &(0x7f0000001400)=ANY=[@ANYBLOB="1800000009000000000000000800000018110000", @ANYRES32=r2, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001834000005000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703", @ANYRESOCT=r6], &(0x7f0000000000)='GPL\x00'}, 0x94) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='page_pool_update_nid\x00', r8}, 0x18) close(r1) syz_pidfd_open(0x0, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001680)=ANY=[@ANYBLOB="440000a11300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES64=r6, @ANYRES8=r11, @ANYRES16=r4], 0x44}}, 0x40c5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2}, 0x94) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x27}, 0x74) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r13, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a100000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r7, @ANYBLOB="2e17f41add25bda4aa4d9af477cbcec41e19c0cf19a7569eb23f6070d043e56d986e89e4d801696fc2a6ad103b731d0887179ddbc9e821d1e7769781560e82c9a6ab6559985d177d93be6a14c8dc39764bafb3cb240ada4c4ab547d4c1019756c606ff5f77bffced9e3b2cf6aac6c923cbb8cde96ba04abf243027496f9aff9bbda53226d741058ff7f4784c5b48696a31fe3779d5e8", @ANYBLOB="d70c457b99c707e0374d05edede4f5ec263edb277909ef1813b1960a2015414be2a66b8ccd2923214c0838df8a8f3bf76666683adba51df4e65f46dced21a94bed56e0e62997955f1204393df24dbfdc4d2759005833", @ANYRESDEC=r9, @ANYRES8=r1, @ANYRES64], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b20000009500000005000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000efff00000000000000000000000a3c000000120a010200000000000000000200000009000200387c81f3cb0ec89408000440000000000900010073797a300000000008000340000000011400000011000100"/95], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1.708897864s ago: executing program 1 (id=4736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='veno\x00', 0x5) writev(r0, &(0x7f0000000880)=[{&(0x7f00000003c0)="c892f2ec2ad509fa1d4b8a6a65541730fbccbe65f68ab3baf7c970631b07a11a4e98e7c36851c844e95508a981c51854da16f62d0d8459ae0f0e9cb555dab53afb3d4d8898ee5b64103d0906beed8586dfefe71f5158fc55115a2a0f975b2ea06d8c8c46eadb176fed424a4b6ea6db3a2236f99058bba6ef9eaf072bd1216cf344e07d9aeb8c95bd1a62f0124b15492b041281c5c965009bdeaf8605c86e12c261c70e6ea0c2075d30bbeea6c58537", 0xaf}, {&(0x7f0000000380)="5353608a26e82d37c06d28cd7e0a5fdfd9881a1ee9fe66c56ee68d462128c099408c8fe300f28dd2df763f3e4419b0f5e2e14f32cb6476", 0x37}, {&(0x7f0000000900)="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", 0x185}, {0x0}, {&(0x7f00000006c0)="baa95202b8d7a4aaa9f5e49090f75b0e73c2a0cd38917f627c686b0def06533f832cade91105ad412d04000000524c464ba3b7ce27c7fcd1d789859e", 0x3c}, {&(0x7f0000000780)="ab97eee44dd916aaca28d91a5eed5baac399ec4e2d1c7866a1e4911df2db179c694e09a18a31e3e4abadff843ff16b78dc29c6d956453a66bab5ecffdbed1ed27cae1d02fe646e6380f792995d80b36dcbe23e408f16fb363f92b3e22a521ed9d4a19388e7ebfa4512da5c5d1e67b3c9037f50b4b7a00114", 0x78}], 0x6) shutdown(r0, 0x1) 1.697462034s ago: executing program 4 (id=4737): creat(&(0x7f0000000040)='./file0\x00', 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f00000001c0)={'vlan0\x00', 0xaf3}) 1.649981914s ago: executing program 1 (id=4738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) write$qrtrtun(r3, &(0x7f00000003c0)="00009a4bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2000000000000088}}, 0x40) 1.489047967s ago: executing program 2 (id=4739): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) getrlimit(0x1, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) futex(&(0x7f000000cffc)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x400, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000140)=0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r5, r4, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.251487401s ago: executing program 3 (id=4740): socket(0x1d, 0x2, 0x6) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r0, 0x2e) tkill(r0, 0x33) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000000)=0x81d) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.058964624s ago: executing program 3 (id=4741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="a980b2a0cb0809541841ee4e121b808a24fc8f1c27d5e4506f13af5c6d63172360b6baad00003de896f4f5f0adc0308e3ef659787d0489cf1b29169fccccd319634be2722fd699c8ed644062a9bfacffdaa3c150bef492cdfc03ece5e43464b1078d8bce998f24cdfb7db154420e9e8c04b5217452214b8dc42eaba3124e0451b3e5c47835fcd84f401d4872ef74d305fadbf1c3564d2439624164f0acfd6793dfd8740d0545c2ca35c81fd875eb635495354bbbfe7bfc8ac576b1a7c3fd70789fda3046d73a759526b6b8566974efcb2a8c2f14d41e0c6ba7d447594854130bbddb1bbbe5cdd405a5fbe56655567a", 0xef}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8a", 0x22}, {&(0x7f00000011c0)="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", 0x124}, {&(0x7f00000000c0)}, {0x0}], 0x5}, 0x88d4) 1.000669105s ago: executing program 3 (id=4742): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="754d03fb28147770b7080000000000007b8af8ff0000bb3544ad2b0000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd2a, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000380)={[], [{@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}, {@euid_lt={'euid<', r9}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*.\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x1c4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x52}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x168, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x87, 0x1, "696f6cd5ddd6be8cf495eff9ed0d406069c21fafb1973dadf5260ce9aa0a660f08d144d96a556ff5dc9c76059dcb5e456d49d7f3dbea2c98394d0c18426b9f6fb462a57d7719136044affd6e3bfa989903abb11557f37d2f94025f0831b62ec7fedf0ac4aa0cef29a230ece88038093c47045bf6e3bf11ce403656aad34bf5049b0c10"}}, {0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x71, 0x1, "5f7d3dabe6c5c3ea038a753039e2fd0d6c92834ccf047fca7be1d9bcf31e7c70195226aa6bfcff1b73dd7d76db0290dd957cc596f40d322cc6c3bcaf9ad50c7c62435faa56f889ce57037fc1ad68b3957cabe1b3f2e85049a3df6a351318276f999cfd9dd75508260ac98b4ec3"}}, {0x60, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x5b, 0x1, "543739d21a901ce51342f34b9c58d5c2698f50a4af91c7045a9e5925bf553d0a0fdb07c762cfffa1f1029edadefc6abf51ad0223da25945d87248809c2a4e36f7ad3d3e86e1cb8a80ff1797ff33760156ed19495626266"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe7c9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x1c4}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r11) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 995.515525ms ago: executing program 2 (id=4743): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@private2, 0x4d6, 0x6c}, @in=@private=0x8010101, {0x0, 0x192, 0x9ba3, 0x2, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 719.761769ms ago: executing program 1 (id=4744): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) getrlimit(0x1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 387.210304ms ago: executing program 1 (id=4745): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24006f3348c32d150000020601020000000000292d200100007baa95012f507fc5edbfc501ccfb14c433b15d7357f521fc93f11eb2dac9f47c34459450f6c8ad386cbd2ea081cabb12580a9112041edf09f0d6067f7043750753b6fae88f6f006ff3138fc05db40cced9b275820f79972b991f80d8002c"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8014) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5608, 0x3f00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0000000300000009000000d200000080010000", @ANYRES32, @ANYBLOB="01000000000000000000de07df104d0000ffffffffa5c5f2b54bef151ab114d773a1625cf651fa09e9069207449e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000ffffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800182800000000000000000040000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0xe0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x50000004) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x190, 0x190, 0x190, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3a, "e67c9ad905e28699efc7a14c0fc157edccab972b9bde56dbdf7c96ce20cc"}}}, {{@ip={@private=0xa010102, @empty, 0xffffffff, 0xffffffff, 'xfrm0\x00', 'geneve1\x00', {}, {}, 0x33, 0x1}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) mount$bind(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x23100b9, 0x0) 319.571115ms ago: executing program 3 (id=4746): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000082, &(0x7f00000002c0)=ANY=[@ANYBLOB='rodir,uni_xlate=0,rodir,rodir,codepage=932,iocharset=cp857,shortname=winnt,shortname=win95,shortname=mixed,iocharset=iso8859-9,utf8=1,uni_xlate=1,iocharset=cp861,shortname=win95,V}i_xlate=1,\x00'], 0x27, 0x358, &(0x7f0000000480)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) mq_open(&(0x7f0000000340)='):\'!#\x00', 0x40, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x5, 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000540)=""/239, 0xef) write$selinux_context(r3, &(0x7f0000000500)='system_u:object_r:tzdata_exec_t:s0\x00', 0x23) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xa2880, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x10000}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500"], 0x50}, 0x1, 0xba01}, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 240.554796ms ago: executing program 4 (id=4747): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r3, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4077, 0xfed}, {&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000001580)=""/221, 0xdd}], 0x3, 0x3ab3, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000340)='page_pool_update_nid\x00', r8}, 0x18) close(r1) syz_pidfd_open(0x0, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001680)=ANY=[@ANYBLOB="440000a11300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES64=r6, @ANYRES8=r11, @ANYRES16=r4], 0x44}}, 0x40c5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0, 0x2}, 0x94) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r12, &(0x7f0000000000)={0x27}, 0x74) munmap(&(0x7f0000003000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r13, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a100000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES32=r7, @ANYBLOB="2e17f41add25bda4aa4d9af477cbcec41e19c0cf19a7569eb23f6070d043e56d986e89e4d801696fc2a6ad103b731d0887179ddbc9e821d1e7769781560e82c9a6ab6559985d177d93be6a14c8dc39764bafb3cb240ada4c4ab547d4c1019756c606ff5f77bffced9e3b2cf6aac6c923cbb8cde96ba04abf243027496f9aff9bbda53226d741058ff7f4784c5b48696a31fe3779d5e8", @ANYBLOB="d70c457b99c707e0374d05edede4f5ec263edb277909ef1813b1960a2015414be2a66b8ccd2923214c0838df8a8f3bf76666683adba51df4e65f46dced21a94bed56e0e62997955f1204393df24dbfdc4d2759005833", @ANYRESDEC=r9, @ANYRES8=r1, @ANYRES64], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b20000009500000005000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$NFT_BATCH(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000efff00000000000000000000000a3c000000120a010200000000000000000200000009000200387c81f3cb0ec89408000440000000000900010073797a300000000008000340000000011400000011000100"/95], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 170.056928ms ago: executing program 3 (id=4748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) clock_gettime(0x0, &(0x7f0000000400)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 150.588548ms ago: executing program 4 (id=4749): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='\n\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x100, 0x80, 0x0) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="1806000000000000000000007ae20000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000008500000073000000955dfaf8387262eb65536f9f430db0d2a48ebc128a8c769b96bae9f2872ada35b786aa819f5cbc291bba693be050fc8664dbc510bcb6c8014e9419a3c79d2a440ef82779a81b159d3b7ecf76334eb387f0ba08310d22817a8c80df6c03ae552c0e5399d86792cecc87259c603df26bbef4138070695cb1aa19945fe03d876f43d55cab4ceade460e04e082164650fb846420c14df9508253f3116e4c73b7f4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, 0x0, 0x27) mq_notify(r1, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000a00)={0x100003200, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xa) 146.076109ms ago: executing program 3 (id=4750): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) 64.207059ms ago: executing program 2 (id=4751): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24006f3348c32d150000020601020000000000292d200100007baa95012f507fc5edbfc501ccfb14c433b15d7357f521fc93f11eb2dac9f47c34459450f6c8ad386cbd2ea081cabb12580a9112041edf09f0d6067f7043750753b6fae88f6f006ff3138fc05db40cced9b275820f79972b991f80d8002c"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8014) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x5608, 0x3f00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nodelalloc}, {@nobarrier}, {@errors_remount}]}, 0x1, 0x57c, &(0x7f00000129c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a0000000300000009000000d200000080010000", @ANYRES32, @ANYBLOB="01000000000000000000de07df104d0000ffffffffa5c5f2b54bef151ab114d773a1625cf651fa09e9069207449e0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000001000000ffffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800182800000000000000000040000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0xe0) r7 = inotify_init() inotify_add_watch(r7, &(0x7f00000000c0)='./file0\x00', 0x50000004) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x190, 0x190, 0x190, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3a, "e67c9ad905e28699efc7a14c0fc157edccab972b9bde56dbdf7c96ce20cc"}}}, {{@ip={@private=0xa010102, @empty, 0xffffffff, 0xffffffff, 'xfrm0\x00', 'geneve1\x00', {}, {}, 0x33, 0x1}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) mount$bind(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x23100b9, 0x0) 41.18588ms ago: executing program 4 (id=4752): socket(0x1d, 0x2, 0x6) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) rt_tgsigqueueinfo(r0, r0, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r0, 0x2e) tkill(r0, 0x33) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000000)=0x81d) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 8.48555ms ago: executing program 4 (id=4753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x4, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000008100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="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", 0x117}, {&(0x7f0000000440)="b4462ead4cd93f40db60bf447a1a6bdf72e253d86ae256e9910dcbfb8dd7edbb6b8a", 0x22}, {&(0x7f00000011c0)="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", 0x124}, {&(0x7f00000000c0)}, {0x0}], 0x5}, 0x88d4) 0s ago: executing program 1 (id=4754): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) getrlimit(0x1, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) futex(&(0x7f000000cffc)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x400, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000140)=0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r5, r4, 0x2) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000000)=0x1) r7 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_usb_connect$cdc_ecm(0x0, 0x50, &(0x7f0000000a00)=ANY=[@ANYRES8=r7], &(0x7f0000000180)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x310, 0x0, 0x1, 0x8, 0x8, 0x5}, 0xdf, &(0x7f0000000880)=ANY=[@ANYBLOB="050fdf00041410047d9bc0cf26d86aee7baa23311c5068ce73c010160c957dff97584610d9854ae0eb4973d84eb53574cf77d424560b3458bf5f984779f856c447321310a6e82465eeaef6ef6b6888931782513e6c9e9f344a74e47e91f546411d29a48b2fc3d8f24e87543ec453c6f0cff360bdb85a5649958e273141c42b2c5e450b148180a257b7fac4009f9bc89695c188c8a801d6b0ca3d444be65401340945e3f9932ed93158c3a962b10402e4674cac9ae4bd917a6619f4375b0b9413f19df45587933e4e321057e3882ca2691e266488525194713603100b03100b"], 0x3, [{0x43, &(0x7f00000003c0)=@string={0x43, 0x3, "ddf3509b410947c4dd6df8fdf9d45ca0fa3967c79c7b83c18d592557fdf6aded8399aaa7a22f3dabe188649c0fdaa288708a0dc2c7cdc1b3a8eecd8e04c7e6a203"}}, {0xad, &(0x7f0000000680)=ANY=[@ANYBLOB="ad03e9e146c62503b3914314288808db1f8486d9faf5e722052a5a1ba751c9d173682775482b61b645290f11fe5ca8740af8895207c5b8c6f500b3666f91ca5d71256e39120705ae3a2022b74570a273660f2c120541c727e4b7caa84e097f2ef0b9685588eda4a97d42fb21e22835fc577988d0c3260497e97b9a6569ea9e331fd79a3b471c05a0e80b300e03365d15066e4ad9af7cf33064382b123a1e2ff73d2b83585717aa4ecdd909a7f2"]}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x180a}}]}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): sim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.640313][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.699735][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.758664][ T67] bridge_slave_1: left allmulticast mode [ 256.764312][ T67] bridge_slave_1: left promiscuous mode [ 256.770125][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.777761][ T67] bridge_slave_0: left allmulticast mode [ 256.783470][ T67] bridge_slave_0: left promiscuous mode [ 256.789312][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.860114][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.869909][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.879454][ T67] bond0 (unregistering): Released all slaves [ 256.959117][T18107] syz_tun: entered allmulticast mode [ 256.970064][ T67] hsr_slave_0: left promiscuous mode [ 256.976097][ T67] hsr_slave_1: left promiscuous mode [ 256.982375][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.989792][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.998934][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.006392][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.017095][ T67] veth1_macvtap: left promiscuous mode [ 257.023902][ T67] veth0_macvtap: left promiscuous mode [ 257.029883][ T67] veth1_vlan: left promiscuous mode [ 257.035261][ T67] veth0_vlan: left promiscuous mode [ 257.135318][ T67] team0 (unregistering): Port device team_slave_1 removed [ 257.146916][ T67] team0 (unregistering): Port device team_slave_0 removed [ 257.239769][ T29] audit: type=1400 audit(1751321421.951:13087): avc: denied { getopt } for pid=18110 comm="syz.1.3347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 257.538532][T18120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.548645][T18120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.882448][T18134] netlink: 'syz.4.3354': attribute type 1 has an invalid length. [ 257.891388][ T29] audit: type=1400 audit(1751321422.631:13088): avc: denied { bind } for pid=18131 comm="syz.4.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 257.910898][ T29] audit: type=1400 audit(1751321422.631:13089): avc: denied { name_bind } for pid=18131 comm="syz.4.3354" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 257.931835][ T29] audit: type=1400 audit(1751321422.631:13090): avc: denied { node_bind } for pid=18131 comm="syz.4.3354" saddr=fe80::f src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 258.046026][T18000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 258.062511][T18000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 258.107240][T18000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 258.116496][T18000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 258.155547][T18000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.167042][T18000] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.176074][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.183182][ T9508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.193394][ T9505] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.200524][ T9505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.299862][ T29] audit: type=1400 audit(1751321423.031:13091): avc: denied { connect } for pid=18137 comm="syz.1.3356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 258.649272][ T29] audit: type=1400 audit(1751321423.081:13092): avc: denied { recv } for pid=18148 comm="syz.3.3357" saddr=10.128.0.163 src=30036 daddr=10.128.1.2 dest=54328 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 258.723440][ T29] audit: type=1400 audit(1751321423.461:13093): avc: denied { egress } for pid=17970 comm="kworker/0:6" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 258.746072][ T29] audit: type=1400 audit(1751321423.461:13094): avc: denied { sendto } for pid=17970 comm="kworker/0:6" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 258.983684][T18000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.005732][T18166] Unknown options in mask 5 [ 259.223064][T18179] vhci_hcd: invalid port number 96 [ 259.228331][T18179] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 259.239889][T18000] veth0_vlan: entered promiscuous mode [ 259.253005][T18000] veth1_vlan: entered promiscuous mode [ 259.288594][T18000] veth0_macvtap: entered promiscuous mode [ 259.365200][T18000] veth1_macvtap: entered promiscuous mode [ 259.385112][T18000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.402494][T18000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.414142][T18000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.423338][T18000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.432232][T18000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.441049][T18000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.493197][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 260.493211][ T29] audit: type=1400 audit(1751321425.231:13096): avc: denied { getopt } for pid=18200 comm="syz.2.3371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 260.531598][T18198] lo speed is unknown, defaulting to 1000 [ 260.606063][ T29] audit: type=1400 audit(1751321425.341:13097): avc: denied { mount } for pid=18220 comm="syz.3.3378" name="/" dev="hugetlbfs" ino=41920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 260.662667][ T29] audit: type=1400 audit(1751321425.391:13098): avc: denied { wake_alarm } for pid=18222 comm="syz.2.3379" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 260.741536][T18230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.751267][T18230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.072107][T18248] Illegal XDP return value 4294967294 on prog (id 2073) dev N/A, expect packet loss! [ 261.435250][T18238] Set syz1 is full, maxelem 65536 reached [ 261.802699][ T29] audit: type=1400 audit(1751321426.541:13099): avc: denied { mounton } for pid=18273 comm="syz.2.3401" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 261.994441][ T29] audit: type=1400 audit(1751321426.591:13100): avc: denied { unmount } for pid=18000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 263.307817][T18315] lo speed is unknown, defaulting to 1000 [ 263.930877][T18317] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 263.989357][ T29] audit: type=1400 audit(1751321428.511:13101): avc: denied { bind } for pid=18303 comm="syz.0.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 264.558676][ T3362] IPVS: starting estimator thread 0... [ 264.640803][T18368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.059771][T18359] IPVS: using max 2544 ests per chain, 127200 per kthread [ 265.095385][ T29] audit: type=1400 audit(1751321429.371:13102): avc: denied { bind } for pid=18342 comm="syz.2.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.115041][ T29] audit: type=1400 audit(1751321429.371:13103): avc: denied { listen } for pid=18342 comm="syz.2.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.134823][ T29] audit: type=1400 audit(1751321429.371:13104): avc: denied { write } for pid=18342 comm="syz.2.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.154515][ T29] audit: type=1400 audit(1751321429.371:13105): avc: denied { setopt } for pid=18342 comm="syz.2.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.175476][T18368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.190020][T18370] Unknown options in mask 5 [ 265.324673][T18373] syz_tun: entered allmulticast mode [ 265.331968][T18372] syz_tun: left allmulticast mode [ 265.386352][T18377] team0: No ports can be present during mode change [ 265.496636][T18386] vhci_hcd: invalid port number 96 [ 265.502633][T18386] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 265.553269][T18392] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 265.561873][T18392] mroute: pending queue full, dropping entries [ 265.636473][ T29] audit: type=1400 audit(1751321430.371:13106): avc: denied { search } for pid=18403 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.658839][ T29] audit: type=1400 audit(1751321430.371:13107): avc: denied { search } for pid=18403 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=478 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.682074][ T29] audit: type=1400 audit(1751321430.371:13108): avc: denied { search } for pid=18403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.705340][ T29] audit: type=1400 audit(1751321430.371:13109): avc: denied { search } for pid=18403 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.720403][T18413] 9pnet_fd: Insufficient options for proto=fd [ 265.817448][ T29] audit: type=1400 audit(1751321430.431:13110): avc: denied { read open } for pid=18412 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.843040][ T29] audit: type=1400 audit(1751321430.431:13111): avc: denied { getattr } for pid=18412 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.868492][ T29] audit: type=1400 audit(1751321430.431:13112): avc: denied { getattr } for pid=18412 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.895025][ T29] audit: type=1400 audit(1751321430.501:13113): avc: denied { read } for pid=18416 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 265.918730][ T29] audit: type=1400 audit(1751321430.501:13114): avc: denied { open } for pid=18416 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=510 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 266.106559][ T29] audit: type=1400 audit(1751321430.781:13115): avc: denied { add_name } for pid=18403 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.185527][T18436] delete_channel: no stack [ 266.941591][T18451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.087633][T18451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.150993][T18456] syz_tun: entered allmulticast mode [ 267.165018][T18456] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 267.173642][T18456] mroute: pending queue full, dropping entries [ 267.211163][T18454] syz_tun: left allmulticast mode [ 267.365887][T18451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.366725][T18451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.655184][T18491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.663714][T18491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.485439][T18534] lo speed is unknown, defaulting to 1000 [ 269.049487][T18566] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 269.780909][T18599] syz_tun: entered allmulticast mode [ 269.786844][T18599] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 269.795482][T18599] mroute: pending queue full, dropping entries [ 269.809331][T18596] syz_tun: left allmulticast mode [ 269.963883][T18619] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3499'. [ 269.974513][T18619] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.981935][T18619] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.992148][T18617] hub 6-0:1.0: USB hub found [ 269.998830][T18617] hub 6-0:1.0: 8 ports detected [ 270.004434][T18619] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.011861][T18619] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.019567][T18621] loop3: detected capacity change from 0 to 1024 [ 270.035623][T18621] EXT4-fs: Ignoring removed oldalloc option [ 270.050988][T18621] EXT4-fs: Ignoring removed orlov option [ 270.059459][T18621] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 270.101967][T18621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.616975][T18718] syz_tun: entered allmulticast mode [ 270.623020][T18718] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 270.631632][T18718] mroute: pending queue full, dropping entries [ 270.647987][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 270.656513][ C1] mroute: pending queue full, dropping entries [ 270.666195][T18717] syz_tun: left allmulticast mode [ 270.677031][T18725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3503'. [ 270.699612][T18725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.707044][T18725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.715843][T18725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.723435][T18725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.750442][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 270.750483][ T29] audit: type=1326 audit(1751321435.491:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.786833][ T29] audit: type=1326 audit(1751321435.521:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.810469][ T29] audit: type=1326 audit(1751321435.521:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.834144][ T29] audit: type=1326 audit(1751321435.521:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.857710][ T29] audit: type=1326 audit(1751321435.521:13158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.881292][ T29] audit: type=1326 audit(1751321435.521:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.904942][ T29] audit: type=1326 audit(1751321435.521:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.961246][ T29] audit: type=1326 audit(1751321435.701:13161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.984904][ T29] audit: type=1326 audit(1751321435.701:13162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 270.989121][T18740] openvswitch: netlink: Message has 6 unknown bytes. [ 271.008478][ T29] audit: type=1326 audit(1751321435.701:13163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18724 comm="syz.1.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f524030d290 code=0x7ffc0000 [ 271.043175][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.073002][T18749] hub 6-0:1.0: USB hub found [ 271.077658][T18749] hub 6-0:1.0: 8 ports detected [ 271.869362][T18786] SELinux: syz.4.3512 (18786) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 272.135038][T18798] loop4: detected capacity change from 0 to 1024 [ 272.144442][T18798] EXT4-fs: Ignoring removed oldalloc option [ 272.150802][T18798] EXT4-fs: Ignoring removed orlov option [ 272.157348][T18798] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 272.175185][T18805] loop1: detected capacity change from 0 to 512 [ 272.181727][T18805] ext4: Unknown parameter 'smackfshat' [ 272.190565][T18805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3520'. [ 272.190772][T18798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.233366][T18811] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 272.241966][T18811] mroute: pending queue full, dropping entries [ 272.300862][T18824] loop1: detected capacity change from 0 to 1024 [ 272.319379][T18824] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.338196][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3526'. [ 272.361233][T18824] vhci_hcd: invalid port number 96 [ 272.366459][T18824] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 272.448901][T18835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3530'. [ 272.477996][T18824] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 272.518850][T16956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.661946][T18843] Unknown options in mask 5 [ 272.667404][T18843] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 272.883746][T18849] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 272.892268][T18849] mroute: pending queue full, dropping entries [ 272.913914][T18851] loop3: detected capacity change from 0 to 512 [ 272.920401][T18851] ext4: Unknown parameter 'smackfshat' [ 272.944874][T18853] loop3: detected capacity change from 0 to 2048 [ 272.967196][T16677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.991195][T18853] Alternate GPT is invalid, using primary GPT. [ 272.997502][T18853] loop3: p2 p3 p7 [ 273.121853][T18870] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3543'. [ 273.131234][T18870] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3543'. [ 273.202337][T18873] Unknown options in mask 5 [ 273.220881][T18873] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 273.231196][T18877] loop3: detected capacity change from 0 to 256 [ 273.231257][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'. [ 273.237843][T18877] vfat: Unknown parameter 'V}i_xlate' [ 273.388090][T18877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3546'. [ 273.397008][T18877] bridge_slave_1: left allmulticast mode [ 273.402698][T18877] bridge_slave_1: left promiscuous mode [ 273.408477][T18877] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.418053][T18877] bridge_slave_0: left allmulticast mode [ 273.423716][T18877] bridge_slave_0: left promiscuous mode [ 273.429457][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.591919][T18908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3557'. [ 273.597648][T18914] loop2: detected capacity change from 0 to 512 [ 273.607501][T18914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.614457][T18914] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.625517][T18914] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 273.640733][T18914] EXT4-fs (loop2): 1 truncate cleaned up [ 273.646897][T18914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.672283][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.739820][T18926] Unknown options in mask 5 [ 273.745148][T18926] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 273.794280][T18933] loop3: detected capacity change from 0 to 256 [ 273.801166][T18933] vfat: Unknown parameter 'V}i_xlate' [ 274.098974][T18960] Unknown options in mask 5 [ 274.103852][T18960] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 274.131214][T18958] hub 6-0:1.0: USB hub found [ 274.136154][T18958] hub 6-0:1.0: 8 ports detected [ 274.903067][T19016] openvswitch: netlink: Message has 6 unknown bytes. [ 294.336129][T19122] loop3: detected capacity change from 0 to 2048 [ 294.394520][T19122] Alternate GPT is invalid, using primary GPT. [ 294.400814][T19122] loop3: p2 p3 p7 [ 294.481123][T19146] loop1: detected capacity change from 0 to 1024 [ 294.516710][T19146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.538485][T19155] loop4: detected capacity change from 0 to 256 [ 294.544784][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 294.544795][ T29] audit: type=1326 audit(1751321459.281:13252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.574451][ T29] audit: type=1326 audit(1751321459.281:13253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.598135][ T29] audit: type=1326 audit(1751321459.281:13254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.604942][T19146] vhci_hcd: invalid port number 96 [ 294.621701][ T29] audit: type=1326 audit(1751321459.281:13255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.621725][ T29] audit: type=1326 audit(1751321459.281:13256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.621745][ T29] audit: type=1326 audit(1751321459.281:13257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.621767][ T29] audit: type=1326 audit(1751321459.281:13258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.626855][T19146] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 294.650347][ T29] audit: type=1326 audit(1751321459.281:13259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.751724][ T29] audit: type=1326 audit(1751321459.281:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.775353][ T29] audit: type=1326 audit(1751321459.281:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19121 comm="syz.3.3594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 294.799573][T19155] vfat: Unknown parameter 'V}i_xlate' [ 294.892056][T19155] __nla_validate_parse: 4 callbacks suppressed [ 294.892097][T19155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3609'. [ 294.892119][T19155] bridge_slave_1: left allmulticast mode [ 294.892134][T19155] bridge_slave_1: left promiscuous mode [ 294.892271][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.908266][T19155] bridge_slave_0: left allmulticast mode [ 294.908280][T19155] bridge_slave_0: left promiscuous mode [ 294.908405][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.933648][T16956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.992677][T19165] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 295.001235][T19165] mroute: pending queue full, dropping entries [ 295.088115][T19183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3620'. [ 295.109442][T19186] loop3: detected capacity change from 0 to 1024 [ 295.133797][T19186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.185722][T19186] vhci_hcd: invalid port number 96 [ 295.190996][T19186] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 295.359394][T19193] SELinux: syz.0.3623 (19193) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 295.379190][T19195] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 295.387714][T19195] mroute: pending queue full, dropping entries [ 295.408208][ C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 295.416871][ C0] mroute: pending queue full, dropping entries [ 295.519128][T19205] loop1: detected capacity change from 0 to 256 [ 295.525967][T19205] vfat: Unknown parameter 'V}i_xlate' [ 295.545549][T19186] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 295.594663][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3628'. [ 295.604570][T19205] bridge_slave_1: left allmulticast mode [ 295.610337][T19205] bridge_slave_1: left promiscuous mode [ 295.615977][T19205] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.625252][T19205] bridge_slave_0: left allmulticast mode [ 295.630995][T19205] bridge_slave_0: left promiscuous mode [ 295.636660][T19205] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.669356][T19219] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3634'. [ 295.678547][T19219] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3634'. [ 295.716080][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.877661][T19227] SELinux: syz.0.3638 (19227) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 295.892646][ T3407] IPVS: starting estimator thread 0... [ 295.998043][T19225] IPVS: using max 2640 ests per chain, 132000 per kthread [ 296.082032][T19241] Unknown options in mask 5 [ 296.086968][T19241] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 296.125492][T19245] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3645'. [ 296.191151][T19245] loop2: detected capacity change from 0 to 164 [ 296.300770][T19270] Unknown options in mask 5 [ 296.305816][T19270] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 296.321670][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3654'. [ 296.545837][T19291] loop4: detected capacity change from 0 to 164 [ 296.570132][T19296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3665'. [ 296.660889][T19300] Unknown options in mask 5 [ 296.665814][T19300] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 296.781884][T19313] loop2: detected capacity change from 0 to 1024 [ 296.788678][T19313] EXT4-fs: Ignoring removed oldalloc option [ 296.794882][T19313] EXT4-fs: Ignoring removed orlov option [ 296.800954][T19313] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 296.829197][T19313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.929503][T19319] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3674'. [ 296.938647][T19319] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3674'. [ 297.446309][T19365] loop4: detected capacity change from 0 to 2048 [ 297.502810][T19365] Alternate GPT is invalid, using primary GPT. [ 297.509230][T19365] loop4: p2 p3 p7 [ 297.601463][T19367] vhci_hcd: invalid port number 96 [ 297.606610][T19367] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 297.694772][T19371] SELinux: syz.4.3696 (19371) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 297.714541][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.751262][T19378] loop2: detected capacity change from 0 to 512 [ 297.758114][T19378] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.764936][T19378] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 297.775938][T19378] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 297.790440][T19378] EXT4-fs (loop2): 1 truncate cleaned up [ 297.796362][T19378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.819122][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.901019][T19387] loop4: detected capacity change from 0 to 1024 [ 297.916710][T19388] Unknown options in mask 5 [ 297.922426][T19388] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 297.923258][T19387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.984022][T19387] vhci_hcd: invalid port number 96 [ 297.989236][T19387] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 298.068886][T19395] loop1: detected capacity change from 0 to 256 [ 298.085517][T19395] vfat: Unknown parameter 'V}i_xlate' [ 298.096545][T19399] loop3: detected capacity change from 0 to 1024 [ 298.118950][T19399] EXT4-fs: Ignoring removed oldalloc option [ 298.124923][T19399] EXT4-fs: Ignoring removed orlov option [ 298.156099][T19401] loop2: detected capacity change from 0 to 1024 [ 298.169193][T19399] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 298.171182][T19401] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.195087][T19403] SELinux: syz.0.3709 (19403) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 298.210091][T19401] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3708: Invalid block bitmap block 0 in block_group 0 [ 298.224964][T19407] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 298.236499][T19399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.250085][T19401] EXT4-fs (loop2): Remounting filesystem read-only [ 298.256911][T19401] EXT4-fs (loop2): 1 orphan inode deleted [ 298.263209][T19401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.331820][T16677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.431946][T19434] SELinux: syz.4.3720 (19434) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 298.600793][T19443] bridge_slave_1: left allmulticast mode [ 298.606486][T19443] bridge_slave_1: left promiscuous mode [ 298.612136][T19443] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.628251][T19443] bridge_slave_0: left allmulticast mode [ 298.634040][T19443] bridge_slave_0: left promiscuous mode [ 298.639758][T19443] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.934606][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.960366][T19452] vhci_hcd: invalid port number 96 [ 298.965652][T19452] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 299.139880][T19462] vhci_hcd: invalid port number 96 [ 299.145008][T19462] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 299.404266][T19484] loop1: detected capacity change from 0 to 1024 [ 299.443286][T19484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.310281][T19482] uprobe: syz.3.3735:19482 failed to unregister, leaking uprobe [ 300.318027][T19482] uprobe: syz.3.3735:19482 failed to unregister, leaking uprobe [ 300.326932][T19495] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 300.344724][T19500] syz_tun: entered allmulticast mode [ 300.364266][T19500] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 300.372887][T19500] mroute: pending queue full, dropping entries [ 300.389272][ C0] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 300.397775][ C0] mroute: pending queue full, dropping entries [ 300.470685][T19499] syz_tun: left allmulticast mode [ 300.504576][T16956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.526409][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 300.526421][ T29] audit: type=1326 audit(1751321465.261:13357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19510 comm="syz.1.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.556381][ T29] audit: type=1326 audit(1751321465.261:13358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19510 comm="syz.1.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.580013][ T29] audit: type=1326 audit(1751321465.261:13359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19510 comm="syz.1.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.603642][ T29] audit: type=1326 audit(1751321465.261:13360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19510 comm="syz.1.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.636133][T19505] vhci_hcd: invalid port number 96 [ 300.641365][T19505] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 300.649946][ T29] audit: type=1326 audit(1751321465.371:13361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.673570][ T29] audit: type=1326 audit(1751321465.371:13362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.697025][ T29] audit: type=1326 audit(1751321465.371:13363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.720632][ T29] audit: type=1326 audit(1751321465.371:13364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.744194][ T29] audit: type=1326 audit(1751321465.371:13365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.767762][ T29] audit: type=1326 audit(1751321465.371:13366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19513 comm="syz.1.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 300.810801][T19520] SELinux: syz.4.3750 (19520) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 300.870719][T19522] Unknown options in mask 5 [ 300.876202][T19522] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 300.928127][ T3407] IPVS: starting estimator thread 0... [ 300.984109][T19528] __nla_validate_parse: 5 callbacks suppressed [ 300.984119][T19528] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3752'. [ 301.011992][T19530] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3753'. [ 301.030290][T19526] IPVS: using max 2736 ests per chain, 136800 per kthread [ 301.039205][T19530] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3753'. [ 301.245726][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.267231][T19540] syz_tun: entered allmulticast mode [ 301.272919][T19540] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 301.281444][T19540] mroute: pending queue full, dropping entries [ 301.289205][T19539] syz_tun: left allmulticast mode [ 301.493755][T19549] vhci_hcd: invalid port number 96 [ 301.498953][T19549] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 301.560763][T19553] loop3: detected capacity change from 0 to 512 [ 301.581453][T19553] ext4: Unknown parameter 'smackfshat' [ 301.693608][T19563] loop2: detected capacity change from 0 to 164 [ 301.700670][T19563] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 301.710893][T19563] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 301.720828][T19563] Symlink component flag not implemented [ 301.726475][T19563] Symlink component flag not implemented [ 301.733499][T19563] Symlink component flag not implemented (7) [ 301.739713][T19563] Symlink component flag not implemented (116) [ 301.741844][T19557] Unknown options in mask 5 [ 301.768507][T19557] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 301.817412][T19567] serio: Serial port ptm0 [ 301.827043][T19569] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3767'. [ 301.864454][T19575] loop3: detected capacity change from 0 to 256 [ 301.871139][T19575] vfat: Unknown parameter 'V}i_xlate' [ 301.934135][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3770'. [ 301.978734][T19583] loop3: detected capacity change from 0 to 1024 [ 301.996808][T19583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.041378][T19583] vhci_hcd: invalid port number 96 [ 302.046518][T19583] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 302.087707][T19590] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3775'. [ 302.097393][T19590] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3775'. [ 302.151072][T19592] loop4: detected capacity change from 0 to 1024 [ 302.159573][T19592] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 302.172322][T19592] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3776: Invalid block bitmap block 0 in block_group 0 [ 302.186133][T19592] EXT4-fs (loop4): Remounting filesystem read-only [ 302.193166][T19592] EXT4-fs (loop4): 1 orphan inode deleted [ 302.199473][T19583] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 302.199473][T19592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.292374][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.318883][T19597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3777'. [ 302.346294][T19601] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3779'. [ 302.396849][T19605] loop3: detected capacity change from 0 to 512 [ 302.403666][T19605] ext4: Unknown parameter 'smackfshat' [ 302.417060][T19612] loop1: detected capacity change from 0 to 164 [ 302.424294][T19612] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 302.434209][T19612] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 302.442707][T19612] Symlink component flag not implemented [ 302.448473][T19612] Symlink component flag not implemented [ 302.454207][T19612] Symlink component flag not implemented (7) [ 302.456050][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3783'. [ 302.460221][T19612] Symlink component flag not implemented (116) [ 302.506543][T19616] openvswitch: netlink: Message has 6 unknown bytes. [ 302.525198][T19617] serio: Serial port ptm1 [ 302.538972][T19619] loop3: detected capacity change from 0 to 256 [ 302.545581][T19619] vfat: Unknown parameter 'V}i_xlate' [ 303.466463][T19655] Unknown options in mask 5 [ 303.472208][T19655] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 303.527045][T19662] loop2: detected capacity change from 0 to 256 [ 303.533985][T19662] vfat: Unknown parameter 'V}i_xlate' [ 303.604996][T19662] bridge_slave_1: left allmulticast mode [ 303.610707][T19662] bridge_slave_1: left promiscuous mode [ 303.616485][T19662] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.630206][T19662] bridge_slave_0: left allmulticast mode [ 303.635891][T19662] bridge_slave_0: left promiscuous mode [ 303.641592][T19662] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.904386][T19704] lo speed is unknown, defaulting to 1000 [ 305.292822][T19707] netlink: 'syz.0.3815': attribute type 10 has an invalid length. [ 305.304346][T19707] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 305.363898][T19713] vhci_hcd: default hub control req: 8016 v000d i0004 l110 [ 305.418396][T19718] loop2: detected capacity change from 0 to 2048 [ 305.435601][T16677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.697279][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 305.697291][ T29] audit: type=1326 audit(1751321470.431:13420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.736607][T19718] Alternate GPT is invalid, using primary GPT. [ 305.743105][T19718] loop2: p2 p3 p7 [ 305.754099][ T29] audit: type=1326 audit(1751321470.471:13421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.777823][ T29] audit: type=1326 audit(1751321470.471:13422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.801548][ T29] audit: type=1326 audit(1751321470.471:13423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.825200][ T29] audit: type=1326 audit(1751321470.471:13424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.848766][ T29] audit: type=1326 audit(1751321470.471:13425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.872390][ T29] audit: type=1326 audit(1751321470.471:13426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.895937][ T29] audit: type=1326 audit(1751321470.471:13427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.919536][ T29] audit: type=1326 audit(1751321470.471:13428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 305.943040][ T29] audit: type=1326 audit(1751321470.471:13429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19717 comm="syz.2.3822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 306.137371][T19737] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 306.145929][T19737] mroute: pending queue full, dropping entries [ 306.602007][ T3407] IPVS: starting estimator thread 0... [ 306.696498][T19743] IPVS: using max 2496 ests per chain, 124800 per kthread [ 306.711558][T19764] loop3: detected capacity change from 0 to 2048 [ 306.712417][T19765] __nla_validate_parse: 4 callbacks suppressed [ 306.712430][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3835'. [ 306.750670][T19764] Alternate GPT is invalid, using primary GPT. [ 306.757050][T19764] loop3: p2 p3 p7 [ 306.795175][T19769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3839'. [ 306.804220][T19769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.811663][T19769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.819647][T19769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.827115][T19769] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.850421][T19774] openvswitch: netlink: Message has 6 unknown bytes. [ 306.885440][T19776] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 306.905105][T19779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3843'. [ 306.959955][T19783] hub 6-0:1.0: USB hub found [ 306.964656][T19783] hub 6-0:1.0: 8 ports detected [ 307.046173][T19797] loop4: detected capacity change from 0 to 1024 [ 307.067358][T19797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.092868][T19797] vhci_hcd: invalid port number 96 [ 307.098062][T19797] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 307.251947][T19821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3848'. [ 307.274425][T19797] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 307.377932][T19842] syz_tun: entered allmulticast mode [ 307.389151][T19842] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 307.397686][T19842] mroute: pending queue full, dropping entries [ 307.404438][T16677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.417971][ C1] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 307.426520][ C1] mroute: pending queue full, dropping entries [ 307.435530][T19841] syz_tun: left allmulticast mode [ 307.460629][T19851] loop4: detected capacity change from 0 to 512 [ 307.471893][T19851] ext4: Unknown parameter 'smackfshat' [ 307.821946][T19886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3859'. [ 307.822096][T19886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.822117][T19886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.822568][T19886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.822585][T19886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.136443][T19889] lo speed is unknown, defaulting to 1000 [ 308.238921][T19897] loop3: detected capacity change from 0 to 256 [ 308.245806][T19897] vfat: Unknown parameter 'V}i_xlate' [ 308.311580][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3860'. [ 308.543035][T19911] Unknown options in mask 5 [ 308.586120][T19911] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 308.950062][T19930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3870'. [ 309.548378][T19999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3876'. [ 309.638171][T20005] loop4: detected capacity change from 0 to 256 [ 309.639140][T20005] vfat: Unknown parameter 'V}i_xlate' [ 309.712628][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3878'. [ 309.822741][T20010] loop4: detected capacity change from 0 to 512 [ 309.823065][T20010] ext4: Unknown parameter 'smackfshat' [ 310.009436][T20017] loop4: detected capacity change from 0 to 1024 [ 310.025139][T20017] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 310.042401][T20019] netlink: 'syz.0.3884': attribute type 1 has an invalid length. [ 310.053129][T20017] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3883: Invalid block bitmap block 0 in block_group 0 [ 310.075596][T20017] EXT4-fs (loop4): Remounting filesystem read-only [ 310.083617][T20019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 310.091156][T20017] EXT4-fs (loop4): 1 orphan inode deleted [ 310.103160][T20017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.115435][T20019] bond1: (slave batadv0): Opening slave failed [ 311.061225][T20057] hub 6-0:1.0: USB hub found [ 311.066021][T20057] hub 6-0:1.0: 8 ports detected [ 311.149754][T20072] loop3: detected capacity change from 0 to 164 [ 311.156737][T20072] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 311.166238][T20072] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 311.176634][T20072] Symlink component flag not implemented [ 311.182331][T20072] Symlink component flag not implemented [ 311.189200][T20072] Symlink component flag not implemented (7) [ 311.195263][T20072] Symlink component flag not implemented (116) [ 311.260408][T20091] serio: Serial port ptm1 [ 311.280761][T20096] loop1: detected capacity change from 0 to 1024 [ 311.287552][T20096] EXT4-fs: Ignoring removed oldalloc option [ 311.294240][T20096] EXT4-fs: Ignoring removed orlov option [ 311.300613][T20096] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 311.319417][T20096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.665759][T20152] openvswitch: netlink: Message has 6 unknown bytes. [ 311.745571][T20171] __nla_validate_parse: 3 callbacks suppressed [ 311.745585][T20171] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3903'. [ 311.761087][T20171] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3903'. [ 311.871149][T20197] hub 6-0:1.0: USB hub found [ 311.875800][T20197] hub 6-0:1.0: 8 ports detected [ 312.119833][T16956] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.173538][T20225] openvswitch: netlink: Message has 6 unknown bytes. [ 312.384290][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 312.384303][ T29] audit: type=1326 audit(1751321477.121:13558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20232 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 312.415328][ T29] audit: type=1326 audit(1751321477.121:13559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20232 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 312.438999][ T29] audit: type=1326 audit(1751321477.121:13560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20232 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 312.462622][ T29] audit: type=1326 audit(1751321477.121:13561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20232 comm="syz.3.3917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 312.550557][T20251] vhci_hcd: invalid port number 96 [ 312.555750][T20251] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 312.878464][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3930'. [ 312.950180][T20268] hub 6-0:1.0: USB hub found [ 312.954990][T20268] hub 6-0:1.0: 8 ports detected [ 312.981853][T16677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.003695][T20276] hub 6-0:1.0: USB hub found [ 313.003736][T20276] hub 6-0:1.0: 8 ports detected [ 313.188647][T20305] SELinux: syz.1.3935 (20305) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 313.277169][T20319] loop1: detected capacity change from 0 to 256 [ 313.277459][T20319] vfat: Unknown parameter 'V}i_xlate' [ 313.326750][T20319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3936'. [ 313.393298][T20330] openvswitch: netlink: Message has 6 unknown bytes. [ 313.442044][ T29] audit: type=1326 audit(1751321478.181:13562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 313.465992][ T29] audit: type=1326 audit(1751321478.181:13563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 313.492500][ T29] audit: type=1326 audit(1751321478.181:13564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 313.516162][ T29] audit: type=1326 audit(1751321478.181:13565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 313.539766][ T29] audit: type=1326 audit(1751321478.181:13566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 313.563457][ T29] audit: type=1326 audit(1751321478.181:13567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20341 comm="syz.2.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 313.610079][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3944'. [ 313.623672][T20358] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 313.734584][T20385] loop2: detected capacity change from 0 to 1024 [ 313.746583][T20385] EXT4-fs: Ignoring removed oldalloc option [ 313.757456][T20385] EXT4-fs: Ignoring removed orlov option [ 313.764959][T20380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3948'. [ 313.774332][T20385] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 313.804021][T20385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.857837][T20412] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3953'. [ 313.867014][T20412] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3953'. [ 313.933552][T20426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3955'. [ 314.130914][T20464] Unknown options in mask 5 [ 314.136364][T20464] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 314.348607][T20472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3966'. [ 314.359037][T20472] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 314.512279][T20490] loop3: detected capacity change from 0 to 512 [ 314.519052][T20490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.525891][T20490] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 314.536604][T20490] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 314.551403][T20490] EXT4-fs (loop3): 1 truncate cleaned up [ 314.557509][T20490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.584428][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.589327][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.632554][T20497] loop2: detected capacity change from 0 to 1024 [ 314.736687][T20497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.757256][T20520] loop4: detected capacity change from 0 to 512 [ 314.763856][T20520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.772363][T20520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 314.783230][T20520] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 314.789992][T20497] vhci_hcd: invalid port number 96 [ 314.802669][T20497] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 314.814608][T20522] hub 6-0:1.0: USB hub found [ 314.819476][T20522] hub 6-0:1.0: 8 ports detected [ 314.831629][T20520] EXT4-fs (loop4): 1 truncate cleaned up [ 314.841659][T20520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.102663][T16677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.317135][T20497] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 315.381091][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.420670][T20558] loop2: detected capacity change from 0 to 2048 [ 315.472776][T20558] Alternate GPT is invalid, using primary GPT. [ 315.479204][T20558] loop2: p2 p3 p7 [ 315.511038][T20579] loop4: detected capacity change from 0 to 164 [ 315.528640][T20579] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 315.553535][T20579] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 315.571967][T20579] Symlink component flag not implemented [ 315.571974][T20579] Symlink component flag not implemented [ 315.571997][T20579] Symlink component flag not implemented (7) [ 315.572079][T20579] Symlink component flag not implemented (116) [ 315.626309][T20597] serio: Serial port ptm1 [ 315.866068][T20640] vhci_hcd: default hub control req: 8016 v000d i0004 l110 [ 316.471002][T20701] loop3: detected capacity change from 0 to 2048 [ 316.507687][T20701] Alternate GPT is invalid, using primary GPT. [ 316.514166][T20701] loop3: p2 p3 p7 [ 316.846310][T20722] loop3: detected capacity change from 0 to 164 [ 316.929346][T20731] __nla_validate_parse: 1 callbacks suppressed [ 316.929360][T20731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4023'. [ 317.004677][T20739] loop2: detected capacity change from 0 to 2048 [ 317.047219][T20745] netlink: 'syz.1.4030': attribute type 1 has an invalid length. [ 317.060292][T20739] Alternate GPT is invalid, using primary GPT. [ 317.066676][T20739] loop2: p2 p3 p7 [ 317.539466][T20771] vhci_hcd: default hub control req: 8016 v000d i0004 l110 [ 317.616120][T20777] loop2: detected capacity change from 0 to 1024 [ 317.649921][T20777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.689024][T20789] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4041'. [ 317.738457][T20789] syz.3.4041: attempt to access beyond end of device [ 317.738457][T20789] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 317.785141][T20777] vhci_hcd: invalid port number 96 [ 317.790539][T20777] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 317.835743][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 317.835757][ T29] audit: type=1326 audit(1751321482.571:13682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e60ee929 code=0x7ffc0000 [ 317.883767][T20777] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 317.923085][ T29] audit: type=1326 audit(1751321482.571:13683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20730 comm="syz.0.4023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2e60ee929 code=0x7ffc0000 [ 318.293845][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.350262][T20836] netlink: 'syz.3.4046': attribute type 1 has an invalid length. [ 318.402248][T20836] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.419185][T20846] loop2: detected capacity change from 0 to 256 [ 318.441499][T20846] vfat: Unknown parameter 'V}i_xlate' [ 318.536698][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4048'. [ 318.638775][T20866] loop2: detected capacity change from 0 to 2048 [ 318.707560][T20866] Alternate GPT is invalid, using primary GPT. [ 318.713871][T20866] loop2: p2 p3 p7 [ 318.732841][ T29] audit: type=1326 audit(1751321483.471:13684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 318.756509][ T29] audit: type=1326 audit(1751321483.471:13685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 318.834358][ T29] audit: type=1326 audit(1751321483.521:13686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 318.857974][ T29] audit: type=1326 audit(1751321483.521:13687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 318.881524][ T29] audit: type=1326 audit(1751321483.521:13688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 318.905413][ T29] audit: type=1326 audit(1751321483.521:13689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 318.928988][ T29] audit: type=1326 audit(1751321483.521:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 318.952730][ T29] audit: type=1326 audit(1751321483.521:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20865 comm="syz.2.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 319.181527][T20909] ref_ctr_offset mismatch. inode: 0x44e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 319.555366][T20925] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4057'. [ 319.903568][T20984] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4072'. [ 319.903602][T20984] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4072'. [ 319.932744][T20985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4071'. [ 320.530895][T20999] vhci_hcd: invalid port number 96 [ 320.536097][T20999] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 320.545933][T21004] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4081'. [ 320.581280][T21009] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4083'. [ 320.614442][T21015] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4086'. [ 320.634893][T21012] hub 6-0:1.0: USB hub found [ 320.639685][T21012] hub 6-0:1.0: 8 ports detected [ 320.695965][T21031] netlink: 'syz.1.4090': attribute type 1 has an invalid length. [ 320.809614][T21053] loop3: detected capacity change from 0 to 512 [ 320.816140][T21053] ext4: Unknown parameter 'smackfshat' [ 320.998933][T21064] lo speed is unknown, defaulting to 1000 [ 322.023129][T21107] syz_tun: entered allmulticast mode [ 322.539917][T21139] lo speed is unknown, defaulting to 1000 [ 322.783877][ T36] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 61 sec [ 323.278231][T21191] __nla_validate_parse: 1 callbacks suppressed [ 323.278244][T21191] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4113'. [ 323.313105][T21181] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4113'. [ 323.354425][T21190] loop3: detected capacity change from 0 to 512 [ 323.377358][T21190] ext4: Unknown parameter 'smackfshat' [ 323.418111][T21181] loop2: detected capacity change from 0 to 164 [ 323.553771][T21221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4121'. [ 323.598131][T21226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4119'. [ 323.675836][T21232] vhci_hcd: invalid port number 96 [ 323.681015][T21232] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 323.772560][T21250] Unknown options in mask 5 [ 323.779595][T21250] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 324.014204][T21260] SELinux: syz.4.4135 (21260) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 324.275191][T21267] loop4: detected capacity change from 0 to 1024 [ 324.347047][T21267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.504372][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 324.504387][ T29] audit: type=1400 audit(1751321489.241:13733): avc: denied { recv } for pid=21264 comm="syz.0.4136" saddr=10.128.0.163 src=48508 daddr=10.128.1.2 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.541021][T21267] vhci_hcd: invalid port number 96 [ 324.546160][T21267] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 324.657180][T21277] loop3: detected capacity change from 0 to 2048 [ 324.701482][T21277] Alternate GPT is invalid, using primary GPT. [ 324.707843][T21277] loop3: p2 p3 p7 [ 324.735806][ T29] audit: type=1326 audit(1751321489.471:13734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.759503][ T29] audit: type=1326 audit(1751321489.471:13735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.783310][ T29] audit: type=1326 audit(1751321489.471:13736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.806988][ T29] audit: type=1326 audit(1751321489.471:13737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.830710][ T29] audit: type=1326 audit(1751321489.471:13738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.854372][ T29] audit: type=1326 audit(1751321489.471:13739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.879083][ T29] audit: type=1326 audit(1751321489.471:13740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.902696][ T29] audit: type=1326 audit(1751321489.471:13741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.926488][ T29] audit: type=1326 audit(1751321489.471:13742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21275 comm="syz.3.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 324.991002][T21267] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 325.099308][T21295] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 325.570217][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4146'. [ 325.597682][T16677] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.673536][T21326] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4149'. [ 325.684126][T21309] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4149'. [ 325.755536][T21309] loop2: detected capacity change from 0 to 164 [ 325.846419][T21358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4155'. [ 325.898224][T21367] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4157'. [ 326.019143][T21376] loop2: detected capacity change from 0 to 1024 [ 326.039725][T21376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.092139][T21376] vhci_hcd: invalid port number 96 [ 326.097290][T21376] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 326.212310][T21376] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 326.267018][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.302396][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4161'. [ 326.761707][T21478] lo speed is unknown, defaulting to 1000 [ 327.265784][T21481] loop4: detected capacity change from 0 to 164 [ 327.395156][T21490] openvswitch: netlink: Message has 6 unknown bytes. [ 327.499895][T21500] SELinux: syz.2.4173 (21500) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 327.525068][T21503] netlink: 'syz.1.4170': attribute type 10 has an invalid length. [ 327.539792][T21502] vhci_hcd: invalid port number 96 [ 327.544915][T21502] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 327.556700][T21503] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 327.599064][T21508] loop2: detected capacity change from 0 to 256 [ 327.605820][T21508] vfat: Unknown parameter 'V}i_xlate' [ 327.680017][T21512] loop2: detected capacity change from 0 to 2048 [ 327.719813][T21512] Alternate GPT is invalid, using primary GPT. [ 327.726240][T21512] loop2: p2 p3 p7 [ 327.746080][T21515] hub 6-0:1.0: USB hub found [ 327.757153][T21515] hub 6-0:1.0: 8 ports detected [ 328.020055][T21562] loop2: detected capacity change from 0 to 164 [ 328.506468][T21646] __nla_validate_parse: 9 callbacks suppressed [ 328.506483][T21646] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4193'. [ 328.533149][T21646] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4193'. [ 328.586921][T21654] netlink: 'syz.4.4194': attribute type 1 has an invalid length. [ 328.614025][T21654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.701452][T21669] vhci_hcd: invalid port number 96 [ 328.706637][T21669] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 328.857601][T21686] SELinux: syz.4.4199 (21686) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 330.037005][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 330.037017][ T29] audit: type=1326 audit(1751321494.771:13832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 330.127733][T21725] loop2: detected capacity change from 0 to 2048 [ 330.152730][ T29] audit: type=1326 audit(1751321494.801:13833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 330.176485][ T29] audit: type=1326 audit(1751321494.801:13834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 330.200120][ T29] audit: type=1326 audit(1751321494.801:13835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21723 comm="syz.4.4212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 330.251328][T21725] Alternate GPT is invalid, using primary GPT. [ 330.257697][T21725] loop2: p2 p3 p7 [ 330.270205][ T29] audit: type=1326 audit(1751321495.011:13836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21722 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 330.320880][ T29] audit: type=1326 audit(1751321495.031:13837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21722 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 330.344530][ T29] audit: type=1326 audit(1751321495.031:13838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21722 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 330.368172][ T29] audit: type=1326 audit(1751321495.031:13839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21722 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 330.391780][ T29] audit: type=1326 audit(1751321495.031:13840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21722 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 330.415337][ T29] audit: type=1326 audit(1751321495.031:13841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21722 comm="syz.2.4211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 330.461300][T21737] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4216'. [ 330.616090][T21748] loop2: detected capacity change from 0 to 256 [ 330.630782][T21748] vfat: Unknown parameter 'V}i_xlate' [ 330.730741][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4220'. [ 331.100683][T21757] ref_ctr_offset mismatch. inode: 0x3fa offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 331.235328][T21764] lo speed is unknown, defaulting to 1000 [ 331.618999][T21761] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 331.716418][T21768] netlink: 'syz.2.4225': attribute type 1 has an invalid length. [ 331.817405][T21782] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4226'. [ 331.829750][T21781] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4229'. [ 331.831582][T21780] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4230'. [ 331.848191][T21773] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4226'. [ 331.917652][T21784] loop3: detected capacity change from 0 to 2048 [ 331.989553][T21784] Alternate GPT is invalid, using primary GPT. [ 331.995990][T21784] loop3: p2 p3 p7 [ 332.005865][T21801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4233'. [ 332.058027][T21811] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4241'. [ 332.904213][T21863] SELinux: syz.2.4262 (21863) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 333.097274][T21889] vhci_hcd: default hub control req: 8016 v000d i0004 l110 [ 333.120237][T21891] loop2: detected capacity change from 0 to 2048 [ 333.261610][T21891] Alternate GPT is invalid, using primary GPT. [ 333.268004][T21891] loop2: p2 p3 p7 [ 334.896008][T21991] SELinux: syz.2.4288 (21991) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 335.028168][T22009] lo speed is unknown, defaulting to 1000 [ 335.523040][T22014] __nla_validate_parse: 12 callbacks suppressed [ 335.523054][T22014] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4292'. [ 335.540056][T22014] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4292'. [ 335.603082][T22016] hub 6-0:1.0: USB hub found [ 335.612047][T22016] hub 6-0:1.0: 8 ports detected [ 335.891154][T22031] ref_ctr_offset mismatch. inode: 0x603 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 336.444013][T22071] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4297'. [ 336.456824][T22071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4297'. [ 336.505971][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 336.506055][ T29] audit: type=1326 audit(1751321501.241:13987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.4.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 336.594519][ T29] audit: type=1326 audit(1751321501.241:13988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.4.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 336.671193][T22093] loop3: detected capacity change from 0 to 1024 [ 336.679431][T22093] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 336.705606][ T29] audit: type=1326 audit(1751321501.241:13989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22085 comm="syz.4.4298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 336.887471][T22098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4302'. [ 336.896799][T22098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.904214][T22098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.209316][T22098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.216723][T22098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.245590][T22100] lo speed is unknown, defaulting to 1000 [ 337.369600][ T29] audit: type=1326 audit(1751321502.101:13990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.2.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 337.393214][ T29] audit: type=1326 audit(1751321502.101:13991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.2.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 337.416791][ T29] audit: type=1326 audit(1751321502.101:13992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.2.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 337.440367][ T29] audit: type=1326 audit(1751321502.101:13993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.2.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 337.463931][ T29] audit: type=1326 audit(1751321502.101:13994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.2.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 337.487521][ T29] audit: type=1326 audit(1751321502.101:13995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.2.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 337.511094][ T29] audit: type=1326 audit(1751321502.101:13996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.2.4302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 337.576685][T22093] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4300: Invalid block bitmap block 0 in block_group 0 [ 337.592003][T22093] EXT4-fs (loop3): Remounting filesystem read-only [ 337.598560][T22093] EXT4-fs (loop3): 1 orphan inode deleted [ 337.604778][T22093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.704220][T22110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4305'. [ 337.795214][T22123] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4306'. [ 337.826370][T22116] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4306'. [ 338.404613][T22185] Unknown options in mask 5 [ 338.509797][T22202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4317'. [ 338.616321][T22236] Unknown options in mask 5 [ 338.621694][T22236] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 338.790498][T22260] Unknown options in mask 5 [ 339.157345][T22287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4327'. [ 339.215038][T22292] loop2: detected capacity change from 0 to 256 [ 339.221808][T22292] vfat: Unknown parameter 'V}i_xlate' [ 339.682610][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.703299][T22318] Unknown options in mask 5 [ 339.719706][T22320] vhci_hcd: default hub control req: 8016 v000d i0004 l110 [ 339.896943][T22341] loop3: detected capacity change from 0 to 1024 [ 339.905949][T22341] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 339.919113][T22341] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.4349: Invalid block bitmap block 0 in block_group 0 [ 339.934083][T22341] EXT4-fs (loop3): Remounting filesystem read-only [ 339.941678][T22341] EXT4-fs (loop3): 1 orphan inode deleted [ 339.949842][T22341] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.142171][T22347] lo speed is unknown, defaulting to 1000 [ 341.049445][T22352] Unknown options in mask 5 [ 341.078361][T22350] __nla_validate_parse: 5 callbacks suppressed [ 341.078372][T22350] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4352'. [ 341.370538][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4364'. [ 341.863593][T22390] ref_ctr_offset mismatch. inode: 0x49a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 342.241556][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4368'. [ 342.255493][T22401] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4368'. [ 342.310271][T22414] Unknown options in mask 5 [ 342.315923][T22414] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 342.324706][T22416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4375'. [ 342.362183][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4376'. [ 342.384222][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 342.384237][ T29] audit: type=1326 audit(1751321507.121:14044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.430286][ T29] audit: type=1326 audit(1751321507.121:14045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.454006][ T29] audit: type=1326 audit(1751321507.161:14046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.460930][T22431] Unknown options in mask 5 [ 342.477568][ T29] audit: type=1326 audit(1751321507.161:14047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.505609][ T29] audit: type=1326 audit(1751321507.161:14048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.529203][ T29] audit: type=1326 audit(1751321507.161:14049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.552718][ T29] audit: type=1326 audit(1751321507.161:14050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.576281][ T29] audit: type=1326 audit(1751321507.161:14051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.577421][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4382'. [ 342.599921][ T29] audit: type=1326 audit(1751321507.161:14052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.599948][ T29] audit: type=1326 audit(1751321507.161:14053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22415 comm="syz.1.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 342.634735][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4384'. [ 342.676564][T22436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4384'. [ 342.755781][T22449] loop2: detected capacity change from 0 to 164 [ 342.769536][T22449] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 342.780715][T22449] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 342.797884][T22449] Symlink component flag not implemented [ 342.803533][T22449] Symlink component flag not implemented [ 342.813847][T22449] Symlink component flag not implemented (7) [ 342.819868][T22449] Symlink component flag not implemented (116) [ 342.826980][T22451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4391'. [ 342.890035][T22457] serio: Serial port ptm0 [ 342.909598][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.938461][T22463] loop3: detected capacity change from 0 to 164 [ 342.946350][T22463] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 342.956796][T22463] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 342.965157][T22463] Symlink component flag not implemented [ 342.970909][T22463] Symlink component flag not implemented [ 342.977862][T22463] Symlink component flag not implemented (7) [ 342.983854][T22463] Symlink component flag not implemented (116) [ 343.056161][T22472] serio: Serial port ptm1 [ 343.105303][T22478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 343.130394][T22478] bond2: (slave veth3): Enslaving as an active interface with an up link [ 343.154322][T22478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.163770][T22478] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 343.478182][T22493] ref_ctr_offset mismatch. inode: 0x597 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 343.887042][T22509] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 343.895608][T22509] mroute: pending queue full, dropping entries [ 343.941391][T22514] netlink: 'syz.2.4410': attribute type 10 has an invalid length. [ 343.964796][T22514] team0: Port device dummy0 added [ 343.980535][T22514] netlink: 'syz.2.4410': attribute type 10 has an invalid length. [ 343.999475][T22514] team0: Port device dummy0 removed [ 344.006963][T22514] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 344.380320][T22540] netlink: 'syz.0.4424': attribute type 1 has an invalid length. [ 344.423166][T22540] 8021q: adding VLAN 0 to HW filter on device bond3 [ 344.458322][T22544] bond3: (slave batadv1): Opening slave failed [ 344.694768][T22550] lo speed is unknown, defaulting to 1000 [ 345.144288][T22557] SELinux: syz.2.4430 (22557) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 345.693386][T22576] loop2: detected capacity change from 0 to 2048 [ 345.772558][T22576] Alternate GPT is invalid, using primary GPT. [ 345.778972][T22576] loop2: p2 p3 p7 [ 345.893458][T22594] loop2: detected capacity change from 0 to 256 [ 345.914096][T22594] vfat: Unknown parameter 'V}i_xlate' [ 346.164176][T22607] loop2: detected capacity change from 0 to 512 [ 346.180080][T22607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 346.213070][T22607] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 346.438665][T22607] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 346.598295][T22607] EXT4-fs (loop2): 1 truncate cleaned up [ 346.605935][T22607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.945085][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.165441][T22672] lo speed is unknown, defaulting to 1000 [ 347.534678][T22684] __nla_validate_parse: 13 callbacks suppressed [ 347.534710][T22684] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4447'. [ 347.587405][T22677] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4447'. [ 347.957354][T22698] loop3: detected capacity change from 0 to 1024 [ 347.999151][T22698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.087220][T22698] vhci_hcd: invalid port number 96 [ 348.092371][T22698] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 348.245929][T22698] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 348.301092][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.378088][T22750] Unknown options in mask 5 [ 348.984729][T22775] netlink: 'syz.2.4459': attribute type 10 has an invalid length. [ 348.995009][T22775] bond0: (slave dummy0): Releasing backup interface [ 349.005433][T22775] team0: Port device dummy0 added [ 349.012735][T22775] netlink: 'syz.2.4459': attribute type 10 has an invalid length. [ 349.024501][T22775] team0: Port device dummy0 removed [ 349.032028][T22775] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 349.128161][T22779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4462'. [ 349.151083][T22783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4464'. [ 349.160974][T22783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4464'. [ 349.211408][T22794] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4468'. [ 349.220896][T22794] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4468'. [ 349.350528][T22816] hub 6-0:1.0: USB hub found [ 349.355288][T22816] hub 6-0:1.0: 8 ports detected [ 349.749945][T22905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4472'. [ 349.775845][T22911] loop2: detected capacity change from 0 to 164 [ 349.783249][T22911] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 349.793583][T22911] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 349.802188][T22911] Symlink component flag not implemented [ 349.808034][T22911] Symlink component flag not implemented [ 349.813777][T22911] Symlink component flag not implemented (7) [ 349.819900][T22911] Symlink component flag not implemented (116) [ 349.882498][T22928] serio: Serial port ptm1 [ 349.961836][T22934] netlink: 'syz.0.4474': attribute type 10 has an invalid length. [ 349.971256][T22934] bond0: (slave dummy0): Releasing backup interface [ 349.980621][T22934] team0: Port device dummy0 added [ 349.989801][T22934] netlink: 'syz.0.4474': attribute type 10 has an invalid length. [ 349.999595][T22934] team0: Port device dummy0 removed [ 350.006613][T22934] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 350.130130][T22938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4476'. [ 350.140555][T22938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4476'. [ 350.302741][T22957] netlink: 'syz.4.4483': attribute type 10 has an invalid length. [ 350.313187][T22957] team0: Port device dummy0 added [ 350.320069][T22957] netlink: 'syz.4.4483': attribute type 10 has an invalid length. [ 350.329818][T22957] team0: Port device dummy0 removed [ 350.336818][T22957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 350.411529][T22959] loop3: detected capacity change from 0 to 256 [ 350.419282][T22959] vfat: Unknown parameter 'V}i_xlate' [ 350.491267][T22971] loop3: detected capacity change from 0 to 2048 [ 350.530211][T22971] Alternate GPT is invalid, using primary GPT. [ 350.536552][T22971] loop3: p2 p3 p7 [ 350.544611][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 350.544622][ T29] audit: type=1326 audit(1751321515.281:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.586298][ T29] audit: type=1326 audit(1751321515.291:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.610036][ T29] audit: type=1326 audit(1751321515.291:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.633646][ T29] audit: type=1326 audit(1751321515.291:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.657428][ T29] audit: type=1326 audit(1751321515.291:14147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.681053][ T29] audit: type=1326 audit(1751321515.291:14148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.704845][ T29] audit: type=1326 audit(1751321515.291:14149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.728409][ T29] audit: type=1326 audit(1751321515.291:14150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.752194][ T29] audit: type=1326 audit(1751321515.291:14151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.775823][ T29] audit: type=1326 audit(1751321515.291:14152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22970 comm="syz.3.4489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 350.845247][T22981] Unknown options in mask 5 [ 350.850929][T22981] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 350.864360][T22992] hub 6-0:1.0: USB hub found [ 350.871224][T22992] hub 6-0:1.0: 8 ports detected [ 351.345973][T23076] lo speed is unknown, defaulting to 1000 [ 352.203448][T23125] SELinux: syz.3.4505 (23125) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 352.214406][T23127] netlink: 'syz.4.4506': attribute type 1 has an invalid length. [ 352.255685][T23127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.285386][T23127] bond2: (slave veth3): Enslaving as an active interface with an up link [ 352.309629][T23127] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 352.318932][T23127] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 352.334326][T23143] loop3: detected capacity change from 0 to 164 [ 352.342641][T23143] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.357578][T23143] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.368257][T23143] Symlink component flag not implemented [ 352.373986][T23143] Symlink component flag not implemented [ 352.383219][T23143] Symlink component flag not implemented (7) [ 352.389323][T23143] Symlink component flag not implemented (116) [ 352.421211][T23150] netlink: 'syz.4.4510': attribute type 10 has an invalid length. [ 352.430257][T23150] bond0: (slave dummy0): Releasing backup interface [ 352.438556][T23150] team0: Port device dummy0 added [ 352.445037][T23150] netlink: 'syz.4.4510': attribute type 10 has an invalid length. [ 352.455069][T23150] team0: Port device dummy0 removed [ 352.455528][T23151] serio: Serial port ptm0 [ 352.463469][T23150] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 352.927997][T23154] __nla_validate_parse: 5 callbacks suppressed [ 352.928024][T23154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4511'. [ 352.939233][T23160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4513'. [ 352.984332][T23164] loop2: detected capacity change from 0 to 2048 [ 353.020258][T23164] Alternate GPT is invalid, using primary GPT. [ 353.026641][T23164] loop2: p2 p3 p7 [ 353.071754][T23169] vhci_hcd: default hub control req: 8016 v000d i0004 l110 [ 353.167188][T23172] lo speed is unknown, defaulting to 1000 [ 353.909782][T23182] hub 6-0:1.0: USB hub found [ 353.918540][T23182] hub 6-0:1.0: 8 ports detected [ 353.954066][T23186] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4522'. [ 353.963226][T23186] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4522'. [ 354.064317][T23199] netlink: 'syz.4.4526': attribute type 1 has an invalid length. [ 354.079062][T23199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.110803][T23199] bond3: (slave veth5): Enslaving as an active interface with an up link [ 354.156029][T23199] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 354.159676][T23212] Unknown options in mask 5 [ 354.165700][T23199] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 354.203426][T23212] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 354.687084][T23256] lo speed is unknown, defaulting to 1000 [ 355.341040][T23296] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4535'. [ 355.359734][T23296] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4535'. [ 355.474941][T23313] netlink: 'syz.3.4536': attribute type 10 has an invalid length. [ 355.494012][T23313] team0: Port device dummy0 added [ 355.515425][T23313] netlink: 'syz.3.4536': attribute type 10 has an invalid length. [ 355.544043][T23313] team0: Port device dummy0 removed [ 355.573827][T23313] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 355.618673][T23320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4537'. [ 355.629325][T23320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'. [ 356.550162][T23367] Unknown options in mask 5 [ 356.567098][T23367] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 356.585304][T23372] loop2: detected capacity change from 0 to 1024 [ 356.602126][T23372] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 356.619547][T23372] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.4545: Invalid block bitmap block 0 in block_group 0 [ 356.633143][T23372] EXT4-fs (loop2): Remounting filesystem read-only [ 356.640046][T23372] __quota_error: 81 callbacks suppressed [ 356.640059][T23372] Quota error (device loop2): write_blk: dquota write failed [ 356.653136][T23372] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 356.663220][T23372] EXT4-fs (loop2): 1 orphan inode deleted [ 356.669370][T23387] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4547'. [ 356.673840][T23382] vhci_hcd: invalid port number 96 [ 356.678983][T23372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.683819][T23382] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 356.707632][T23374] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4547'. [ 356.760043][ T29] audit: type=1326 audit(1751321521.491:14234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23370 comm="syz.2.4545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x0 [ 357.053284][ T29] audit: type=1326 audit(1751321521.791:14235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 357.076902][ T29] audit: type=1326 audit(1751321521.791:14236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 357.100498][ T29] audit: type=1326 audit(1751321521.791:14237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 357.126359][ T29] audit: type=1326 audit(1751321521.861:14238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 357.150094][ T29] audit: type=1326 audit(1751321521.861:14239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 357.177547][ T29] audit: type=1326 audit(1751321521.891:14240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 357.201213][ T29] audit: type=1326 audit(1751321521.891:14241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23434 comm="syz.4.4554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 357.709776][T23525] hub 6-0:1.0: USB hub found [ 357.714446][T23525] hub 6-0:1.0: 8 ports detected [ 358.205497][T23617] __nla_validate_parse: 2 callbacks suppressed [ 358.205512][T23617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4557'. [ 358.515385][T23669] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4563'. [ 358.524939][T23667] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4563'. [ 358.755112][T23677] Unknown options in mask 5 [ 358.913739][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4566'. [ 359.348873][T23695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4571'. [ 359.369995][T23699] loop3: detected capacity change from 0 to 512 [ 359.376484][T23699] ext4: Unknown parameter 'smackfshat' [ 359.697854][T18000] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.960573][T23706] ref_ctr_offset mismatch. inode: 0x6ee offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 360.689374][T23704] lo speed is unknown, defaulting to 1000 [ 360.773142][T23717] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4576'. [ 360.783748][T23717] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4576'. [ 360.900390][T23722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4577'. [ 360.945518][T23729] loop2: detected capacity change from 0 to 2048 [ 360.964734][T23730] netlink: 'syz.4.4579': attribute type 10 has an invalid length. [ 361.000214][T23729] Alternate GPT is invalid, using primary GPT. [ 361.006564][T23729] loop2: p2 p3 p7 [ 361.045660][T23733] SELinux: syz.2.4581 (23733) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 361.762675][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 361.762698][ T29] audit: type=1326 audit(1751321526.501:14336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.3.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 361.794160][ T29] audit: type=1326 audit(1751321526.541:14337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23718 comm="syz.3.4578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d2cd5e929 code=0x7ffc0000 [ 362.036592][T23752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4586'. [ 362.052682][T23752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4586'. [ 362.150322][T23756] Unknown options in mask 5 [ 362.155766][T23756] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 362.323196][T23764] loop3: detected capacity change from 0 to 1024 [ 362.339202][T23764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.389930][T23764] vhci_hcd: invalid port number 96 [ 362.395056][T23764] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 362.518176][T23769] ref_ctr_offset mismatch. inode: 0x57f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 362.646765][T23774] netlink: 'syz.1.4592': attribute type 10 has an invalid length. [ 362.656974][T23774] bond0: (slave dummy0): Releasing backup interface [ 362.670745][T23774] team0: Port device dummy0 added [ 362.682869][T23774] netlink: 'syz.1.4592': attribute type 10 has an invalid length. [ 362.695369][T23774] team0: Port device dummy0 removed [ 362.705502][T23774] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.768168][T23764] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 362.954652][T16420] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.400479][T23784] hub 6-0:1.0: USB hub found [ 363.405294][T23784] hub 6-0:1.0: 8 ports detected [ 363.490246][T23790] __nla_validate_parse: 2 callbacks suppressed [ 363.490280][T23790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4597'. [ 363.564069][ T29] audit: type=1326 audit(1751321528.301:14338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.587694][ T29] audit: type=1326 audit(1751321528.301:14339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.616841][ T29] audit: type=1326 audit(1751321528.351:14340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.640589][ T29] audit: type=1326 audit(1751321528.351:14341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.664182][ T29] audit: type=1326 audit(1751321528.351:14342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.687848][ T29] audit: type=1326 audit(1751321528.351:14343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.711530][ T29] audit: type=1326 audit(1751321528.351:14344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.735145][ T29] audit: type=1326 audit(1751321528.351:14345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23806 comm="syz.1.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524030e929 code=0x7ffc0000 [ 363.785191][T23832] netlink: 'syz.0.4603': attribute type 1 has an invalid length. [ 363.801878][T23832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 363.831890][T23832] bond4: (slave batadv1): Opening slave failed [ 363.965316][T23852] netlink: 'syz.0.4606': attribute type 1 has an invalid length. [ 364.097763][T23852] 8021q: adding VLAN 0 to HW filter on device bond5 [ 364.206462][T23850] lo speed is unknown, defaulting to 1000 [ 364.561134][T23871] netlink: 'syz.4.4609': attribute type 1 has an invalid length. [ 364.601273][T23871] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.650461][T23880] bond4: (slave veth7): Enslaving as an active interface with a down link [ 364.690138][T23871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.712408][T23871] bond4: (slave batadv0): making interface the new active one [ 364.728801][T23871] batadv0: entered promiscuous mode [ 364.744100][T23871] bond4: (slave batadv0): Enslaving as an active interface with an up link [ 364.894263][T23901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4612'. [ 365.189743][T23936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4618'. [ 365.303698][T23961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4622'. [ 365.491857][T23986] netlink: 'syz.1.4624': attribute type 1 has an invalid length. [ 365.503791][T23986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.518580][T23986] bond1: (slave veth7): Enslaving as an active interface with a down link [ 365.531532][T23986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.540132][T23986] bond1: (slave batadv0): making interface the new active one [ 365.548657][T23986] batadv0: entered promiscuous mode [ 365.553957][T23986] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 365.746501][T23998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4626'. [ 365.908223][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4628'. [ 365.918168][T24001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4628'. [ 365.996362][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4629'. [ 366.869552][T24009] ref_ctr_offset mismatch. inode: 0x709 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 367.063316][T24011] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 367.094964][T24024] netlink: 'syz.4.4636': attribute type 1 has an invalid length. [ 367.128037][T24024] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.156582][T24024] bond5: (slave veth9): Enslaving as an active interface with a down link [ 367.197692][T24033] ref_ctr_offset mismatch. inode: 0x5b3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 367.364669][T24043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4641'. [ 367.426073][T24047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4641'. [ 368.071047][T24111] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 368.234837][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 368.234861][ T29] audit: type=1326 audit(1751321532.971:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.0.4653" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2e60ee929 code=0x0 [ 368.572230][T24180] __nla_validate_parse: 3 callbacks suppressed [ 368.572246][T24180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4655'. [ 368.596071][T24180] bond4: (slave batadv0): Releasing active interface [ 368.604656][T24180] batadv0 (unregistering): left promiscuous mode [ 368.634454][ T29] audit: type=1326 audit(1751321533.371:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 368.658100][ T29] audit: type=1326 audit(1751321533.371:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 368.677828][T24192] netlink: 'syz.3.4657': attribute type 1 has an invalid length. [ 368.691437][ T29] audit: type=1326 audit(1751321533.431:14374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 368.731041][T24192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 368.753735][T24204] bond3: (slave batadv0): Opening slave failed [ 368.760509][ T29] audit: type=1326 audit(1751321533.451:14375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 368.784207][ T29] audit: type=1326 audit(1751321533.451:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 368.796502][T24206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4658'. [ 368.938764][T24224] loop3: detected capacity change from 0 to 256 [ 368.945417][ T29] audit: type=1326 audit(1751321533.681:14377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 368.953066][T24224] vfat: Unknown parameter 'V}i_xlate' [ 368.968883][ T29] audit: type=1326 audit(1751321533.681:14378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 368.968910][ T29] audit: type=1326 audit(1751321533.681:14379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24178 comm="syz.4.4655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb11043e929 code=0x7ffc0000 [ 369.995717][ T29] audit: type=1326 audit(1751321534.731:14380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24247 comm="syz.2.4670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e533ae929 code=0x7ffc0000 [ 370.001000][T24246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 370.067387][T24254] netlink: 'syz.3.4672': attribute type 1 has an invalid length. [ 370.081147][T24254] 8021q: adding VLAN 0 to HW filter on device bond4 [ 370.101221][T24254] bond4: (slave batadv0): Opening slave failed [ 370.294273][T24259] lo speed is unknown, defaulting to 1000 [ 371.197299][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4674'. [ 371.239860][T24263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4674'. [ 371.262873][T24269] Unknown options in mask 5 [ 371.274442][T24269] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 371.358249][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4681'. [ 371.381400][T24284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4681'. [ 371.711743][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4683'. [ 372.445352][T24427] netlink: 'syz.3.4687': attribute type 10 has an invalid length. [ 372.496326][T24428] netlink: 'syz.3.4687': attribute type 10 has an invalid length. [ 372.518620][T24427] bond0: (slave dummy0): Releasing backup interface [ 372.554764][T24427] team0: Port device dummy0 added [ 372.571350][T24428] team0: Port device dummy0 removed [ 372.581120][T24428] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 372.604025][T24434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4690'. [ 372.613633][T24434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4690'. [ 373.079482][T24460] netlink: 'syz.2.4700': attribute type 1 has an invalid length. [ 373.105980][T24460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.176043][T24460] bond1: (slave veth3): Enslaving as an active interface with a down link [ 374.550792][T24520] ref_ctr_offset mismatch. inode: 0x79a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 374.581250][T24523] lo speed is unknown, defaulting to 1000 [ 374.639150][T24534] __nla_validate_parse: 8 callbacks suppressed [ 374.639162][T24534] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4708'. [ 374.664588][T24522] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4708'. [ 375.098632][T24549] netlink: 'syz.4.4711': attribute type 1 has an invalid length. [ 375.298097][T24556] ref_ctr_offset mismatch. inode: 0x77b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 375.327114][T24549] 8021q: adding VLAN 0 to HW filter on device bond6 [ 376.047527][T24559] bond6: (slave veth11): Enslaving as an active interface with a down link [ 376.085087][T24573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4714'. [ 376.152700][T24579] ref_ctr_offset mismatch. inode: 0x781 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 376.164334][T24580] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4715'. [ 376.185593][T24575] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4715'. [ 376.621034][T24609] netlink: 'syz.2.4719': attribute type 10 has an invalid length. [ 376.631050][T24609] bond0: (slave dummy0): Releasing backup interface [ 376.653080][T24609] team0: Port device dummy0 added [ 376.659976][T24609] netlink: 'syz.2.4719': attribute type 10 has an invalid length. [ 376.671586][T24609] team0: Port device dummy0 removed [ 376.685963][T24609] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 377.069272][T24620] ref_ctr_offset mismatch. inode: 0x7af offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 377.321619][T24625] ref_ctr_offset mismatch. inode: 0x60c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 377.374524][T24626] netlink: 'syz.4.4722': attribute type 10 has an invalid length. [ 377.429145][T24628] netlink: 'syz.4.4722': attribute type 10 has an invalid length. [ 377.445400][T24626] bond0: (slave dummy0): Releasing backup interface [ 377.506025][T24626] team0: Port device dummy0 added [ 377.562933][T24628] team0: Port device dummy0 removed [ 377.614474][T24628] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 377.893618][T24642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4728'. [ 377.980388][T24634] lo speed is unknown, defaulting to 1000 [ 378.329032][T24654] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4731'. [ 378.370293][T24652] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4731'. [ 378.648821][T24642] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4728'. [ 378.735860][T24671] netlink: 'syz.4.4733': attribute type 10 has an invalid length. [ 378.763061][T24671] bond0: (slave dummy0): Releasing backup interface [ 378.784782][T24671] team0: Port device dummy0 added [ 378.791072][T24674] netlink: 'syz.4.4733': attribute type 10 has an invalid length. [ 378.792398][T24658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4732'. [ 378.830745][T24674] team0: Port device dummy0 removed [ 378.845779][T24674] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 379.413995][T24721] ref_ctr_offset mismatch. inode: 0x70b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 379.512819][T24726] netlink: 'syz.2.4739': attribute type 10 has an invalid length. [ 379.573847][T24729] netlink: 'syz.2.4739': attribute type 10 has an invalid length. [ 379.614654][T24726] bond0: (slave dummy0): Releasing backup interface [ 379.721498][T24726] team0: Port device dummy0 added [ 379.764017][T24729] team0: Port device dummy0 removed [ 379.789577][T24729] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 380.195019][T24763] netlink: 'syz.1.4744': attribute type 10 has an invalid length. [ 380.242798][T24763] bond0: (slave dummy0): Releasing backup interface [ 380.255277][T24766] netlink: 'syz.1.4744': attribute type 10 has an invalid length. [ 380.293618][T24763] team0: Port device dummy0 added [ 380.337709][T24766] team0: Port device dummy0 removed [ 380.414861][T24766] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 380.508548][ T9501] batadv0: left promiscuous mode [ 380.610981][T24791] __nla_validate_parse: 4 callbacks suppressed [ 380.611051][T24791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4746'. [ 380.631171][T24790] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4747'. [ 380.642988][T24790] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4747'. [ 380.833799][T16677] ================================================================== [ 380.841903][T16677] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 380.849365][T16677] [ 380.851683][T16677] read-write to 0xffff88810a30ae90 of 8 bytes by task 24821 on cpu 1: [ 380.859834][T16677] shmem_recalc_inode+0x36/0x1c0 [ 380.864790][T16677] shmem_get_folio_gfp+0x7a3/0xd60 [ 380.869919][T16677] shmem_write_begin+0xa8/0x190 [ 380.874787][T16677] generic_perform_write+0x184/0x490 [ 380.880081][T16677] shmem_file_write_iter+0xc5/0xf0 [ 380.885200][T16677] __kernel_write_iter+0x256/0x4c0 [ 380.890334][T16677] __kernel_write+0x8f/0xc0 [ 380.894850][T16677] dump_emit+0x194/0x260 [ 380.899107][T16677] elf_core_dump+0x1760/0x1f80 [ 380.903869][T16677] do_coredump+0x1dfd/0x27b0 [ 380.908470][T16677] get_signal+0xd85/0xf70 [ 380.912809][T16677] arch_do_signal_or_restart+0x96/0x480 [ 380.918355][T16677] exit_to_user_mode_loop+0x7a/0x100 [ 380.923647][T16677] do_syscall_64+0x1d6/0x200 [ 380.928247][T16677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.934146][T16677] [ 380.936465][T16677] read to 0xffff88810a30ae90 of 8 bytes by task 16677 on cpu 0: [ 380.944092][T16677] shmem_getattr+0x41/0x200 [ 380.948586][T16677] vfs_getattr_nosec+0x143/0x1e0 [ 380.953517][T16677] vfs_statx+0x113/0x390 [ 380.957752][T16677] vfs_fstatat+0x115/0x170 [ 380.962159][T16677] __se_sys_newfstatat+0x55/0x260 [ 380.967176][T16677] __x64_sys_newfstatat+0x55/0x70 [ 380.972192][T16677] x64_sys_call+0x2c22/0x2fb0 [ 380.976862][T16677] do_syscall_64+0xd2/0x200 [ 380.981351][T16677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.987237][T16677] [ 380.989545][T16677] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 380.996634][T16677] [ 380.998943][T16677] Reported by Kernel Concurrency Sanitizer on: [ 381.005088][T16677] CPU: 0 UID: 0 PID: 16677 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 381.016012][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.026054][T16677] ================================================================== [ 381.116954][T24840] netlink: 'syz.1.4754': attribute type 10 has an invalid length. [ 381.131169][T24840] bond0: (slave dummy0): Releasing backup interface [ 381.140153][T24840] team0: Port device dummy0 added