last executing test programs: 5.608880453s ago: executing program 3 (id=883): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 4.852676436s ago: executing program 0 (id=890): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) 4.698945538s ago: executing program 3 (id=892): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x5000000, 0x0, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r2, 0x0, 0xf2}, 0x38) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x70, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRES64=r3, @ANYRESHEX=r3], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) 3.751868852s ago: executing program 1 (id=896): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='kfree\x00', r1}, 0x18) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x40081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) syz_usb_disconnect(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f0000000800)='./file0\x00', 0x10) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)=@v1={0x1000000, [{0xfffffff9, 0x4}]}, 0xc, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x2, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x81}, 0x0, 0x0, 0x8, 0x6, 0x7, 0x6, 0x400, 0x0, 0x200, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 3.660068094s ago: executing program 0 (id=897): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioperm(0x8, 0x9, 0x5a) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) socket$pppl2tp(0x18, 0x1, 0x1) inotify_init1(0x800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x406, r1) setsockopt$inet_mtu(r6, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x600, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.382894578s ago: executing program 3 (id=901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYRESOCT=r0], 0x34}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x80) r2 = gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r3, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(&(0x7f0000000240), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r7, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 3.073179093s ago: executing program 2 (id=902): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005ba000/0x2000)=nil) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x149180, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) syz_open_pts(r5, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) 3.004047414s ago: executing program 0 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), 0x0}, 0x20) 2.233742896s ago: executing program 1 (id=905): r0 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x34, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40850}, 0x22048091) mount(0x0, &(0x7f0000000100)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) r1 = open(0x0, 0x143862, 0x101) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.97998104s ago: executing program 0 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$GETPID(0x0, 0x0, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000600)='netlink_extack\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x30, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x30}}, 0x24000040) getsockopt(r3, 0x8, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240001d3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.9467167s ago: executing program 0 (id=907): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x21900b4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 1.878843191s ago: executing program 1 (id=909): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x2, @mcast1, 0x1}, 0x1c, 0x0}}], 0x1, 0x800) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r5 = gettid() ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004804, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") r8 = creat(&(0x7f0000000340)='./file0\x00', 0x1) getsockopt$inet6_mreq(r8, 0x29, 0x1c, 0x0, &(0x7f0000000b00)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000e80)=ANY=[@ANYRES16=r7], &(0x7f0000000c00)=""/78, 0x9e, 0x4e, 0x1, 0x86}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1b, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4f9f}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xe24348f41bfaf85c}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0x0, 0x57, &(0x7f0000000a40)=""/87, 0x40f00, 0xc0, '\x00', 0x0, @fallback=0x2f, r9, 0x8, &(0x7f0000000cc0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x5, 0xd, 0x1, 0xffff}, 0x10, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}}, @jmp={0x5, 0x1, 0xb, 0x0, 0x7, 0x80, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x709}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x7, 0xa7, &(0x7f00000007c0)=""/167, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x10, 0x40, 0x3}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000900)=[{0x4, 0x3, 0xf, 0x9}, {0x2, 0x3, 0x9, 0xb}, {0x4, 0x4, 0xa, 0x8}, {0x5, 0x3, 0x8, 0x6}, {0x1, 0x2, 0x4, 0xa}, {0x3, 0x3, 0x6}, {0x5, 0x3, 0xa, 0x7}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x12, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fff}, {}, {}, [@jmp={0x5, 0x0, 0x3, 0xa, 0xb, 0x2, 0x8}, @jmp={0x5, 0x0, 0x4, 0x5, 0x0, 0x8, 0x10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x8a, &(0x7f0000000380)=""/138, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0xe, 0x8, 0x10}, 0x10, 0x0, r10, 0x0, &(0x7f0000000980)=[r4, r4, r4, r0, r4, r4, r4], 0x0, 0x10, 0x40}, 0x94) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.752945174s ago: executing program 2 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$GETPID(0x0, 0x0, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000600)='netlink_extack\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x18, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x24000040) getsockopt(r3, 0x8, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240001d3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.707631104s ago: executing program 3 (id=911): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, 0x0, 0x2}, 0x94) futex(0x0, 0x1, 0x2, 0x0, 0x0, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/103, 0x67}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000e40)=""/232, 0xe8}, {&(0x7f0000000080)=""/109, 0x6d}], 0x5}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=") r2 = socket$kcm(0x2, 0x1, 0x84) mknod$loop(0x0, 0xc000, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) accept4(r2, &(0x7f00000007c0), 0x0, 0x36ada75d77edfe4c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) read(r4, &(0x7f0000000140)=""/68, 0x44) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.707001484s ago: executing program 2 (id=912): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x67}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0x4000000}, 0x18) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000003060101000000007e625f4609ca6fd90500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) finit_module(r6, 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150004000200142603600e12080005007a010401a800160020000340ffc60000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbacefc46fa8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d164edbb57a5025ccca9e00360db79826353d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) 1.677461254s ago: executing program 1 (id=913): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x41c902, 0x128, 0x5}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5953fdfffffffddbdf256b0000000a0003006f0d5c17deb549612c14a3c6e6149f2150d5b73231fa6d6447503d2595f9627d566a9783f9977c8a6b34ddaa259c7a19f4ffbad44baaf59b1d3127506fefd851dca6f717ba45f128ea3e2b9f789be82bd4da8a544de3c676667c9a32a60289684a6c2881370e34543a3586550bdc3bded0527735ecc3d10274d8f9b59dbcbf176a4ba4", @ANYRES32=0x0, @ANYBLOB="0c009900020000007200000010001d800c00008008000d8004000380"], 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_free\x00', r0}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.564221836s ago: executing program 4 (id=914): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) r1 = fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) fgetxattr(r1, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x46000}, 0x4000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2275, &(0x7f00000018c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) futex_waitv(&(0x7f0000001800)=[{0x2, &(0x7f0000001680)=0x73bd, 0x86}], 0x1, 0x0, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) renameat2(0xffffffffffffffff, 0x0, r6, &(0x7f0000000040)='./file1\x00', 0x5) 1.235678591s ago: executing program 4 (id=915): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, 0x0, 0x0, 0x7c00, 0x30000000, 0x3) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x30) listxattr(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) r1 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) write$binfmt_elf64(r0, &(0x7f0000000c00)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xdf, 0x79, 0x7, 0x4, 0x2, 0x3e, 0xfffffff3, 0x1b4, 0x40, 0x7b, 0x6, 0x5, 0x38, 0x3, 0x4, 0x71b, 0x6ed4}, [{0x4, 0x4, 0xe48d, 0xfffffffffffffff7, 0x8, 0x2, 0x6, 0x5}, {0x5, 0x0, 0xe, 0xd, 0xffffffffc40bf0ed, 0x3, 0x1, 0x1}, {0x3, 0x9, 0x8, 0x2, 0x3, 0x40, 0xf}], "09026e24181cec69defc5a9a90ceb41ba5c87a74ec6339b42e3c63f9efed9c9c2844ea98db24f3a6320847a81d3fa7368958c24b2be2e047b7bc705a26b52f33cce22ff5e8eae75afaa7e279a6d6dc28e8aabd7ea216e614b47966274df4d6fcf263a381f2cf28f9486cd603fdcfc4c636ca5257dae44aaf942a3cc15bc5cfdcb433ee5e2d813fd0fb3638a87cd6ef9f4c1b54751752edc68f87ce9185ca648bf793aa6842c83e6e47c50067001b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x896) brk(0x55555ede6001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000400000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setxattr$incfs_metadata(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000180), &(0x7f0000000200)="259674db40a97aaf48c9db39b410dfc8f77215205d", 0x15, 0x0) close(r1) 1.222602391s ago: executing program 2 (id=916): socket$unix(0x1, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socket(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x8, 0x2, 0x10000120}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 1.044972594s ago: executing program 2 (id=917): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='ufshcd_command\x00', r1, 0x0, 0xfffffffff7fffffc}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0xfe, "0062ba7d9dd00014fbb36d9df98c4038096304"}) syz_open_pts(r3, 0x900) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000a440)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x8008801) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setns(r5, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x158) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300), 0x10, &(0x7f0000000900)=ANY=[@ANYRESHEX=r7]) 1.028270354s ago: executing program 4 (id=918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$GETPID(0x0, 0x0, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000600)='netlink_extack\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x30, r6, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0x30}}, 0x24000040) getsockopt(r3, 0x8, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240001d3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 934.010566ms ago: executing program 0 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x4041, &(0x7f0000000600), 0x60, 0x50e, &(0x7f0000000bc0)="$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") r5 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 933.410756ms ago: executing program 4 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) semctl$GETPID(0x0, 0x0, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000600)='netlink_extack\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, 0x0, 0x24000040) getsockopt(r3, 0x8, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x240001d3, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 724.39762ms ago: executing program 4 (id=921): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x3, 0x100000001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@discard}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f00000009c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x48}}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r4], 0x60}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r8, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 126.500918ms ago: executing program 3 (id=926): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffd, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd25, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20044815}, 0x20000004) 0s ago: executing program 2 (id=927): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x100000df, @empty}, 0x1c) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="020b000302000000d0fb8c0b00000000706a1ac4826c538c3ef5c42daccd81eb3bc0ab1cdbd9ddd70f20853a2fa5c027ec103583f008f4e5bd98b99578c44c5ca4b7e89101b5aaa0d157f9a9e86a2898873c79a45a88f77ff8"], 0x10}}, 0x40) listen(0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000710001002dbd70000000000007000000", @ANYRES32=r6, @ANYBLOB="1c0001"], 0x34}}, 0x20008000) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="00ddab662c4d7bc0f478bd224783d41b67c1f220497fcc33754c31e5119eb26723a33824d18b3d3dbda22be0b689f22a640fb48f8381f1396004aff6967b0ae7bd28db5d0d231066bbf68002a08855a681764301f0d51b140696d5d6851b5f430883f799ea9b3bf9e4190e59491c284527c030f33eff87fdc23a5e36e12fdcdf8da16a992a5c134458bba5e32b630b00ad35e2f3aa82bc9ec68704028d4db785d36ec24953b313efbe06408a8a90e9406e23e4f3b35c3ab16afb976219dafce5076bf060c1152a06ec930a", 0xcb}, {&(0x7f00000002c0)="0919dd034ad1ab6b8be08bc71b1a7d42fcbce130ad2a92b252753b1ee1cb672fe5e247031636898300aee529e122", 0x2e}, {&(0x7f00000004c0)="0cb0c3c7ad031ad7af290274fe8d3ae91e5332c19e6f68a63d2ae58e413ebd2eeda9b27dc1535cc0b34c6aa42f036710dc550d9831cdd27a73b33e8bfce93c7ce1f1", 0x42}, {&(0x7f0000000680)="6d9a076537e4e6f19d8633d5bf54c1408d64805ac9bc4e98cc0330455f7ba623738e7b9abcb58309b53932fd21529a7c9b8be0ecbe5b18a21b4ee78f421e2434f6010282683253cca1e40bfb5351ee3c265a568139f848c7cf1bd70c4e6e64962dd7de6cc9bce048290f7ea71cf159476d8b304d4b3e660697d5a60933144cba7a8bf594a3c19bb87938d068557baf3e04d08250fa596da776a412b6da6f3a42c9f09ebd2362778609bed5ca762e89437ae90dd0658c3ef145e6b6f14c2e27f1842f678d89a973af028889d158df3afb3242", 0xd2}], 0x4}, 0x8040) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000780), 0x8, &(0x7f0000000840)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, 'ip6gretap0\x00'}}, {@access_user}, {@nodevmap}, {@dfltgid}, {@access_any}], [{@uid_gt={'uid>', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, '/[.'}}, {@subj_user={'subj_user', 0x3d, 'hashlimit\x00'}}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r8, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) kernel console output (not intermixed with test programs): arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 38.085440][ T29] audit: type=1326 audit(1752176155.496:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 38.108968][ T29] audit: type=1326 audit(1752176155.496:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 38.241627][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.44'. [ 38.481322][ T3703] loop4: detected capacity change from 0 to 128 [ 38.541638][ T3703] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.554233][ T3703] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.044488][ T3708] loop3: detected capacity change from 0 to 2048 [ 39.394412][ T2995] loop3: p1 < > p4 [ 39.414731][ C0] hrtimer: interrupt took 38976 ns [ 39.420304][ T2995] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.455941][ T2995] loop3: p1 < > p4 [ 39.466112][ T3718] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.48'. [ 39.487373][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 39.500368][ T3717] netlink: 68 bytes leftover after parsing attributes in process `syz.0.49'. [ 39.505172][ T2995] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.518974][ T3712] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.48'. [ 39.532209][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 39.543281][ T3719] netlink: 'syz.2.50': attribute type 3 has an invalid length. [ 39.544844][ T3708] loop3: p1 < > p4 [ 39.558353][ T3708] loop3: p4 size 8388608 extends beyond EOD, truncated [ 39.567040][ T3716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 39.612766][ T3716] team0: Port device team_slave_0 removed [ 39.654210][ T3502] udevd[3502]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.671009][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.076174][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 40.116493][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.169599][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 40.184859][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 40.199550][ T3734] netlink: 'syz.0.57': attribute type 13 has an invalid length. [ 40.217719][ T3728] tipc: Started in network mode [ 40.222681][ T3728] tipc: Node identity ac14140f, cluster identity 4711 [ 40.244848][ T3728] tipc: New replicast peer: 255.255.255.83 [ 40.250880][ T3728] tipc: Enabled bearer , priority 10 [ 40.279376][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.475540][ T3742] netlink: 'syz.1.60': attribute type 21 has an invalid length. [ 40.481608][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.490560][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.505905][ T3412] IPVS: starting estimator thread 0... [ 40.619938][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.630165][ T3734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.638143][ T3747] IPVS: using max 2256 ests per chain, 112800 per kthread [ 40.697617][ T3731] loop3: detected capacity change from 0 to 8192 [ 40.718617][ T3734] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.727789][ T3734] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.736909][ T3734] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.746073][ T3734] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.776169][ T3296] loop3: p2 p4 [ 40.779868][ T3296] loop3: p2 start 452985600 is beyond EOD, truncated [ 40.786861][ T3296] loop3: p4 start 8388607 is beyond EOD, truncated [ 40.803159][ T3742] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 40.810809][ T3742] netlink: 144 bytes leftover after parsing attributes in process `syz.1.60'. [ 40.839490][ T3731] loop3: p2 p4 [ 40.843175][ T3731] loop3: p2 start 452985600 is beyond EOD, truncated [ 40.850102][ T3731] loop3: p4 start 8388607 is beyond EOD, truncated [ 40.872221][ T3755] pim6reg: entered allmulticast mode [ 40.922586][ T3756] pim6reg: left allmulticast mode [ 41.163246][ T3771] random: crng reseeded on system resumption [ 41.224179][ T3772] loop1: detected capacity change from 0 to 512 [ 41.285548][ T3772] EXT4-fs (loop1): too many log groups per flexible block group [ 41.293475][ T3772] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 41.313024][ T3772] EXT4-fs (loop1): mount failed [ 41.394770][ T10] tipc: Node number set to 2886997007 [ 41.472866][ T3778] loop2: detected capacity change from 0 to 2048 [ 41.585785][ T3296] Alternate GPT is invalid, using primary GPT. [ 41.592127][ T3296] loop2: p1 p2 p3 [ 41.603456][ T3778] Alternate GPT is invalid, using primary GPT. [ 41.603896][ T3769] Set syz1 is full, maxelem 65536 reached [ 41.609937][ T3778] loop2: p1 p2 p3 [ 42.728653][ T3806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.80'. [ 42.755336][ T3808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 42.764169][ T3808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 42.815749][ T3808] netlink: 'syz.4.79': attribute type 6 has an invalid length. [ 42.835485][ T3808] netlink: 'syz.4.79': attribute type 13 has an invalid length. [ 42.915514][ T3808] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.922860][ T3808] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.931790][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 42.931841][ T29] audit: type=1400 audit(1752176160.506:841): avc: denied { name_bind } for pid=3803 comm="syz.2.78" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 42.959658][ T29] audit: type=1400 audit(1752176160.506:842): avc: denied { node_bind } for pid=3803 comm="syz.2.78" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.015075][ T3814] openvswitch: netlink: Message has 6 unknown bytes. [ 43.096824][ T3808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.135294][ T3808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.182568][ T29] audit: type=1400 audit(1752176160.586:843): avc: denied { create } for pid=3813 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.201927][ T29] audit: type=1400 audit(1752176160.586:844): avc: denied { write } for pid=3813 comm="syz.3.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.221096][ T29] audit: type=1326 audit(1752176160.586:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 43.244320][ T29] audit: type=1326 audit(1752176160.586:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 43.267552][ T29] audit: type=1326 audit(1752176160.586:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 43.290758][ T29] audit: type=1326 audit(1752176160.586:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 43.313976][ T29] audit: type=1326 audit(1752176160.586:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 43.337304][ T29] audit: type=1326 audit(1752176160.586:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3813 comm="syz.3.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 43.375903][ T3808] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.385384][ T3808] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.394378][ T3808] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.403497][ T3808] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.887327][ T3845] 9pnet_fd: Insufficient options for proto=fd [ 44.131370][ T3848] loop3: detected capacity change from 0 to 1024 [ 44.188504][ T3848] EXT4-fs: Ignoring removed orlov option [ 44.281527][ T3848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.330527][ T3853] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3853 comm=syz.4.93 [ 44.713848][ T3865] __nla_validate_parse: 3 callbacks suppressed [ 44.713933][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 45.776651][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.794551][ T3872] loop1: detected capacity change from 0 to 2048 [ 45.821702][ T3872] ext4: Unknown parameter 'subj_role' [ 45.928094][ T3879] loop3: detected capacity change from 0 to 512 [ 45.949777][ T3879] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.969790][ T3879] EXT4-fs (loop3): invalid journal inode [ 45.977537][ T3879] EXT4-fs (loop3): can't get journal size [ 45.995855][ T3879] EXT4-fs (loop3): 1 truncate cleaned up [ 46.012155][ T3879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.044890][ T3885] loop2: detected capacity change from 0 to 1024 [ 46.051687][ T3885] EXT4-fs: Ignoring removed orlov option [ 46.095169][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.118309][ T3885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.194086][ T3890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 46.207746][ T3890] bridge0: port 3(macvlan2) entered blocking state [ 46.214337][ T3890] bridge0: port 3(macvlan2) entered disabled state [ 46.254318][ T3875] loop4: detected capacity change from 0 to 1024 [ 46.259106][ T3890] macvlan2: entered allmulticast mode [ 46.266237][ T3890] bridge0: entered allmulticast mode [ 46.272157][ T3875] EXT4-fs: quotafile must be on filesystem root [ 46.364987][ T3890] macvlan2: left allmulticast mode [ 46.370243][ T3890] bridge0: left allmulticast mode [ 46.500959][ T3899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 46.613274][ T3910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.640907][ T3910] netlink: 'syz.4.110': attribute type 3 has an invalid length. [ 46.648625][ T3910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.110'. [ 46.679394][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.687161][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 46.791964][ T3918] netlink: 'syz.1.113': attribute type 4 has an invalid length. [ 47.368255][ T3928] tipc: Started in network mode [ 47.374123][ T3928] tipc: Node identity ac14140f, cluster identity 4711 [ 47.383495][ T3928] tipc: New replicast peer: 0.0.255.255 [ 47.390474][ T3928] tipc: Enabled bearer , priority 10 [ 47.447912][ T3932] loop4: detected capacity change from 0 to 1024 [ 47.485604][ T3932] EXT4-fs: Ignoring removed nobh option [ 47.491298][ T3932] EXT4-fs: Ignoring removed bh option [ 47.509336][ T3932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.648981][ T3950] loop3: detected capacity change from 0 to 1024 [ 47.656772][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.685013][ T3950] EXT4-fs: Ignoring removed orlov option [ 47.703828][ T3950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.849367][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 47.948750][ T3961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 48.126265][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 48.126282][ T29] audit: type=1400 audit(1752176165.706:1112): avc: denied { setopt } for pid=3971 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 48.180818][ T3974] loop4: detected capacity change from 0 to 512 [ 48.194881][ T3974] ext3: Unknown parameter 'permit_directio' [ 48.322345][ T29] audit: type=1400 audit(1752176165.796:1113): avc: denied { remount } for pid=3973 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.342137][ T29] audit: type=1326 audit(1752176165.866:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.365517][ T29] audit: type=1326 audit(1752176165.866:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.389013][ T29] audit: type=1326 audit(1752176165.866:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.412286][ T29] audit: type=1326 audit(1752176165.866:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.435659][ T29] audit: type=1326 audit(1752176165.866:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.459219][ T29] audit: type=1326 audit(1752176165.866:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.482595][ T29] audit: type=1326 audit(1752176165.866:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.506123][ T29] audit: type=1326 audit(1752176165.866:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 48.529747][ T3399] tipc: Node number set to 2886997007 [ 48.545179][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.601970][ T3980] loop3: detected capacity change from 0 to 512 [ 48.639734][ T3980] journal_path: Lookup failure for './file0/../file0' [ 48.646635][ T3980] EXT4-fs: error: could not find journal device path [ 48.734227][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 48.764954][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 48.806133][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.131'. [ 48.924613][ T3993] loop3: detected capacity change from 0 to 128 [ 48.940155][ T3993] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.003684][ T3993] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.088712][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.218839][ T4005] loop3: detected capacity change from 0 to 1024 [ 49.246769][ T4005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.808984][ T4048] __nla_validate_parse: 6 callbacks suppressed [ 50.808999][ T4048] netlink: 36 bytes leftover after parsing attributes in process `syz.0.147'. [ 50.864905][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.883211][ T4046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 52.592059][ T4091] loop4: detected capacity change from 0 to 512 [ 52.668819][ T4091] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 52.726288][ T4091] EXT4-fs (loop4): invalid journal inode [ 52.747049][ T4091] EXT4-fs (loop4): can't get journal size [ 52.855929][ T4091] EXT4-fs (loop4): 1 truncate cleaned up [ 52.872404][ T4091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.103210][ T4103] loop2: detected capacity change from 0 to 1024 [ 53.170992][ T4103] EXT4-fs: Ignoring removed nobh option [ 53.270332][ T4103] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8856c018, mo2=0002] [ 53.370995][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.382174][ T4103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.429716][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 53.429732][ T29] audit: type=1400 audit(1752176171.006:1364): avc: denied { write } for pid=4106 comm="syz.4.161" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.456566][ T29] audit: type=1326 audit(1752176171.026:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.4.161" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e4e4ee929 code=0x0 [ 53.522021][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.611193][ T4112] loop2: detected capacity change from 0 to 1024 [ 53.625214][ T4112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.648117][ T29] audit: type=1326 audit(1752176171.226:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.671580][ T29] audit: type=1326 audit(1752176171.226:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.695079][ T29] audit: type=1326 audit(1752176171.226:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.719004][ T29] audit: type=1326 audit(1752176171.226:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.728230][ T4112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.742505][ T29] audit: type=1326 audit(1752176171.226:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.777919][ T29] audit: type=1326 audit(1752176171.296:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.801255][ T29] audit: type=1326 audit(1752176171.296:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.824748][ T29] audit: type=1326 audit(1752176171.296:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4113 comm="syz.0.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 53.936398][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.984892][ T4122] loop2: detected capacity change from 0 to 128 [ 54.008491][ T4122] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.028002][ T4122] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 54.063156][ T4124] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 54.121427][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.145306][ T4124] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 54.221233][ T4129] bridge_slave_0: left allmulticast mode [ 54.227164][ T4129] bridge_slave_0: left promiscuous mode [ 54.232839][ T4129] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.262244][ T4129] bridge_slave_1: left allmulticast mode [ 54.268008][ T4129] bridge_slave_1: left promiscuous mode [ 54.273774][ T4129] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.292068][ T4129] bond0: (slave bond_slave_0): Releasing backup interface [ 54.308376][ T4129] bond0: (slave bond_slave_1): Releasing backup interface [ 54.320517][ T4129] team0: Port device team_slave_0 removed [ 54.334001][ T4129] team0: Port device team_slave_1 removed [ 54.340936][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.348416][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.359628][ T4129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.367174][ T4129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.403186][ T4129] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 54.410249][ T4129] batman_adv: batadv0: Removing interface: ipvlan2 [ 54.456464][ T9] syz!: Port: 1 Link DOWN [ 54.472865][ T4127] loop3: detected capacity change from 0 to 512 [ 54.519329][ T4127] EXT4-fs (loop3): orphan cleanup on readonly fs [ 54.562667][ T4127] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.168: bad orphan inode 13 [ 54.580330][ T4140] loop4: detected capacity change from 0 to 1024 [ 54.600168][ T4127] ext4_test_bit(bit=12, block=18) = 1 [ 54.605705][ T4127] is_bad_inode(inode)=0 [ 54.609913][ T4127] NEXT_ORPHAN(inode)=2130706432 [ 54.614875][ T4127] max_ino=32 [ 54.618107][ T4127] i_nlink=1 [ 54.621344][ T4140] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 54.622588][ T4127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 54.643399][ T4127] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.830909][ T4156] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 54.881105][ T4153] loop2: detected capacity change from 0 to 2048 [ 54.927478][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 54.940954][ T3296] loop2: p1 < > p4 [ 54.945452][ T4163] IPVS: Error joining to the multicast group [ 54.954645][ T3296] loop2: p4 size 8388608 extends beyond EOD, truncated [ 54.985144][ T4153] loop2: p1 < > p4 [ 54.989852][ T4153] loop2: p4 size 8388608 extends beyond EOD, truncated [ 55.050377][ T4169] loop4: detected capacity change from 0 to 512 [ 55.064044][ T4159] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 55.072381][ T4159] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 55.096517][ T4169] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 55.178416][ T4174] sch_fq: defrate 0 ignored. [ 55.191836][ T4177] loop4: detected capacity change from 0 to 1024 [ 55.290234][ T4177] EXT4-fs: Ignoring removed orlov option [ 55.318393][ T4177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.356915][ T4182] loop2: detected capacity change from 0 to 512 [ 55.546746][ T4182] EXT4-fs (loop2): orphan cleanup on readonly fs [ 55.602567][ T4182] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.187: bad orphan inode 13 [ 55.753826][ T4182] ext4_test_bit(bit=12, block=18) = 1 [ 55.759580][ T4182] is_bad_inode(inode)=0 [ 55.763777][ T4182] NEXT_ORPHAN(inode)=2130706432 [ 55.768673][ T4182] max_ino=32 [ 55.771907][ T4182] i_nlink=1 [ 55.835242][ T4182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.865969][ T4182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.940736][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 55.957088][ T4196] hsr_slave_0 (unregistering): left promiscuous mode [ 55.998247][ T4198] loop2: detected capacity change from 0 to 1024 [ 56.017974][ T4198] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 56.101076][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 56.133596][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.308944][ T4212] loop4: detected capacity change from 0 to 512 [ 56.319484][ T4212] journal_path: Lookup failure for './file0/../file0' [ 56.326509][ T4212] EXT4-fs: error: could not find journal device path [ 56.616301][ T4219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.196'. [ 56.969849][ T4232] IPVS: Error connecting to the multicast addr [ 57.214562][ T4246] loop3: detected capacity change from 0 to 512 [ 57.224568][ T4246] journal_path: Lookup failure for './file2' [ 57.230722][ T4246] EXT4-fs: error: could not find journal device path [ 57.242801][ T4267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'. [ 57.679709][ T4309] lo speed is unknown, defaulting to 1000 [ 57.686180][ T4309] lo speed is unknown, defaulting to 1000 [ 57.692251][ T4309] lo speed is unknown, defaulting to 1000 [ 57.704410][ T4309] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 57.721011][ T4309] lo speed is unknown, defaulting to 1000 [ 57.835147][ T4309] lo speed is unknown, defaulting to 1000 [ 57.843554][ T4309] lo speed is unknown, defaulting to 1000 [ 57.862135][ T4309] lo speed is unknown, defaulting to 1000 [ 57.880886][ T4309] lo speed is unknown, defaulting to 1000 [ 58.138133][ T4340] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 58.144753][ T4340] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 58.152516][ T4340] vhci_hcd vhci_hcd.0: Device attached [ 58.293731][ T4340] Invalid ELF header magic: != ELF [ 58.464773][ T9] usb 10-1: SetAddress Request (2) to port 0 [ 58.475149][ T9] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 58.558761][ T4351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 58.666268][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 58.666282][ T29] audit: type=1326 audit(1752176176.246:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.714787][ T29] audit: type=1326 audit(1752176176.286:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.738153][ T29] audit: type=1326 audit(1752176176.286:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.762119][ T29] audit: type=1326 audit(1752176176.286:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.804828][ T29] audit: type=1326 audit(1752176176.296:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.828234][ T29] audit: type=1326 audit(1752176176.296:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.851789][ T29] audit: type=1326 audit(1752176176.296:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.875184][ T29] audit: type=1326 audit(1752176176.296:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.898535][ T29] audit: type=1326 audit(1752176176.296:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 58.921986][ T29] audit: type=1326 audit(1752176176.296:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4352 comm="syz.2.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 59.043153][ T4341] vhci_hcd: connection reset by peer [ 59.051398][ T3542] vhci_hcd: stop threads [ 59.055788][ T3542] vhci_hcd: release socket [ 59.060227][ T3542] vhci_hcd: disconnect device [ 59.136144][ T4362] Cannot find add_set index 0 as target [ 59.165853][ T4364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.227'. [ 59.248406][ T4369] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.228'. [ 59.261434][ T4366] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.228'. [ 59.633705][ T4377] netlink: 8 bytes leftover after parsing attributes in process `wg1'. [ 59.714607][ T4377] loop4: detected capacity change from 0 to 1024 [ 59.728880][ T4377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.758159][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.995286][ T4392] loop3: detected capacity change from 0 to 2048 [ 60.026415][ T4392] EXT4-fs (loop3): failed to initialize system zone (-117) [ 60.060790][ T4392] EXT4-fs (loop3): mount failed [ 60.368654][ T4404] random: crng reseeded on system resumption [ 61.081456][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'. [ 61.239841][ T4419] loop3: detected capacity change from 0 to 512 [ 61.260621][ T4419] journal_path: Non-blockdev passed as './bus' [ 61.266955][ T4419] EXT4-fs: error: could not find journal device path [ 61.334407][ T4419] loop3: detected capacity change from 0 to 512 [ 61.373113][ T4419] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.389963][ T4422] loop4: detected capacity change from 0 to 1024 [ 61.405243][ T4419] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 61.419221][ T4422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.457752][ T4426] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 61.474935][ T4422] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 61.487289][ T4422] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.487289][ T4422] [ 61.497005][ T4422] EXT4-fs (loop4): Total free blocks count 0 [ 61.503058][ T4422] EXT4-fs (loop4): Free/Dirty block details [ 61.509011][ T4422] EXT4-fs (loop4): free_blocks=0 [ 61.514039][ T4422] EXT4-fs (loop4): dirty_blocks=0 [ 61.519116][ T4422] EXT4-fs (loop4): Block reservation details [ 61.525144][ T4422] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 61.559753][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.086710][ T4452] syz.2.257: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 62.102453][ T4452] CPU: 0 UID: 0 PID: 4452 Comm: syz.2.257 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 62.102495][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.102510][ T4452] Call Trace: [ 62.102517][ T4452] [ 62.102526][ T4452] __dump_stack+0x1d/0x30 [ 62.102689][ T4452] dump_stack_lvl+0xe8/0x140 [ 62.102712][ T4452] dump_stack+0x15/0x1b [ 62.102734][ T4452] warn_alloc+0x12b/0x1a0 [ 62.102805][ T4452] __vmalloc_node_range_noprof+0x9c/0xe00 [ 62.102840][ T4452] ? __bpf_get_stack+0x5c0/0x630 [ 62.102871][ T4452] ? __rcu_read_unlock+0x4f/0x70 [ 62.102900][ T4452] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.102953][ T4452] ? should_fail_ex+0x30/0x280 [ 62.102990][ T4452] ? xskq_create+0x36/0xe0 [ 62.103018][ T4452] vmalloc_user_noprof+0x7d/0xb0 [ 62.103074][ T4452] ? xskq_create+0x80/0xe0 [ 62.103096][ T4452] xskq_create+0x80/0xe0 [ 62.103137][ T4452] xsk_init_queue+0x95/0xf0 [ 62.103165][ T4452] xsk_setsockopt+0x35c/0x510 [ 62.103191][ T4452] ? __pfx_xsk_setsockopt+0x10/0x10 [ 62.103214][ T4452] __sys_setsockopt+0x184/0x200 [ 62.103254][ T4452] __x64_sys_setsockopt+0x64/0x80 [ 62.103313][ T4452] x64_sys_call+0x2bd5/0x2fb0 [ 62.103340][ T4452] do_syscall_64+0xd2/0x200 [ 62.103362][ T4452] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.103423][ T4452] ? clear_bhb_loop+0x40/0x90 [ 62.103443][ T4452] ? clear_bhb_loop+0x40/0x90 [ 62.103463][ T4452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.103498][ T4452] RIP: 0033:0x7f4b9810e929 [ 62.103528][ T4452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.103595][ T4452] RSP: 002b:00007f4b96777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 62.103620][ T4452] RAX: ffffffffffffffda RBX: 00007f4b98335fa0 RCX: 00007f4b9810e929 [ 62.103637][ T4452] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 62.103723][ T4452] RBP: 00007f4b98190b39 R08: 0000000000000004 R09: 0000000000000000 [ 62.103741][ T4452] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.103757][ T4452] R13: 0000000000000000 R14: 00007f4b98335fa0 R15: 00007ffe3e132bd8 [ 62.103783][ T4452] [ 62.103797][ T4452] Mem-Info: [ 62.329077][ T4452] active_anon:17834 inactive_anon:0 isolated_anon:0 [ 62.329077][ T4452] active_file:5648 inactive_file:12954 isolated_file:0 [ 62.329077][ T4452] unevictable:0 dirty:268 writeback:0 [ 62.329077][ T4452] slab_reclaimable:3062 slab_unreclaimable:48967 [ 62.329077][ T4452] mapped:32101 shmem:10028 pagetables:1305 [ 62.329077][ T4452] sec_pagetables:0 bounce:0 [ 62.329077][ T4452] kernel_misc_reclaimable:0 [ 62.329077][ T4452] free:1824385 free_pcp:11892 free_cma:0 [ 62.334859][ T4448] lo speed is unknown, defaulting to 1000 [ 62.374246][ T4452] Node 0 active_anon:71336kB inactive_anon:0kB active_file:22592kB inactive_file:51816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128404kB dirty:1072kB writeback:0kB shmem:40112kB writeback_tmp:0kB kernel_stack:4384kB pagetables:5220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 62.409131][ T4452] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 62.437786][ T4452] lowmem_reserve[]: 0 2882 7860 7860 [ 62.443272][ T4452] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 62.473958][ T4452] lowmem_reserve[]: 0 0 4978 4978 [ 62.479148][ T4452] Node 0 Normal free:4318540kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:71220kB inactive_anon:0kB active_file:22592kB inactive_file:51816kB unevictable:0kB writepending:1072kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:48368kB local_pcp:37780kB free_cma:0kB [ 62.511457][ T4452] lowmem_reserve[]: 0 0 0 0 [ 62.516080][ T4452] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 62.528931][ T4452] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 62.545190][ T4452] Node 0 Normal: 329*4kB (ME) 89*8kB (ME) 45*16kB (UME) 69*32kB (ME) 45*64kB (ME) 22*128kB (UME) 7*256kB (M) 1*512kB (M) 3*1024kB (UME) 3*2048kB (UME) 1045*4096kB (M) = 4302492kB [ 62.563506][ T4452] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 62.572855][ T4452] 28598 total pagecache pages [ 62.577645][ T4452] 0 pages in swap cache [ 62.581825][ T4452] Free swap = 124996kB [ 62.585061][ T4459] netlink: 'syz.4.260': attribute type 1 has an invalid length. [ 62.586414][ T4452] Total swap = 124996kB [ 62.593681][ T4459] netlink: 80 bytes leftover after parsing attributes in process `syz.4.260'. [ 62.598032][ T4452] 2097051 pages RAM [ 62.598043][ T4452] 0 pages HighMem/MovableOnly [ 62.598051][ T4452] 80810 pages reserved [ 62.873397][ T4477] SELinux: Context system_u:system_r:kernel_t:s0 is not valid (left unmapped). [ 63.553997][ T9] usb 10-1: device descriptor read/8, error -110 [ 63.669403][ T9] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 63.729095][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 63.729113][ T29] audit: type=1326 audit(1752176181.306:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.738560][ T9] usb 10-1: enqueue for inactive port 0 [ 63.788167][ T9] usb 10-1: enqueue for inactive port 0 [ 63.804266][ T9] usb 10-1: enqueue for inactive port 0 [ 63.812739][ T29] audit: type=1326 audit(1752176181.346:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.836097][ T29] audit: type=1326 audit(1752176181.346:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.859584][ T29] audit: type=1326 audit(1752176181.346:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.883077][ T29] audit: type=1326 audit(1752176181.346:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.906429][ T29] audit: type=1326 audit(1752176181.346:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.929848][ T29] audit: type=1326 audit(1752176181.346:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.953193][ T29] audit: type=1326 audit(1752176181.346:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 63.976745][ T29] audit: type=1326 audit(1752176181.346:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 64.000119][ T29] audit: type=1326 audit(1752176181.346:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4493 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 64.483343][ T4521] bond1: entered promiscuous mode [ 64.488489][ T4521] bond1: entered allmulticast mode [ 64.493925][ T4521] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.506670][ T4521] bond1 (unregistering): Released all slaves [ 64.551607][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 64.593621][ C1] sd 0:0:1:0: [sda] tag#5519 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 64.604064][ C1] sd 0:0:1:0: [sda] tag#5519 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 64.659981][ T4533] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.728178][ T4533] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.808397][ T4541] syzkaller0: entered promiscuous mode [ 64.813996][ T4541] syzkaller0: entered allmulticast mode [ 64.823431][ T4533] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.836218][ T9] usb usb10-port1: attempt power cycle [ 64.839657][ T4541] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 64.849484][ T4541] netlink: 152 bytes leftover after parsing attributes in process `syz.4.286'. [ 64.860867][ T4541] : renamed from bond0 [ 64.902144][ T4533] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.928364][ T4498] syz.0.271 (4498) used greatest stack depth: 7000 bytes left [ 64.998716][ T4533] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.013567][ T4533] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.038553][ T4533] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.078335][ T4533] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.091097][ T4546] lo speed is unknown, defaulting to 1000 [ 65.097050][ T4546] lo speed is unknown, defaulting to 1000 [ 65.103303][ T4546] lo speed is unknown, defaulting to 1000 [ 65.112285][ T4546] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 65.124625][ T4546] lo speed is unknown, defaulting to 1000 [ 65.136797][ T4546] lo speed is unknown, defaulting to 1000 [ 65.143197][ T4546] lo speed is unknown, defaulting to 1000 [ 65.154829][ T4546] lo speed is unknown, defaulting to 1000 [ 65.161579][ T4546] lo speed is unknown, defaulting to 1000 [ 65.233667][ T4555] team0 (unregistering): Port device team_slave_1 removed [ 65.337134][ T4554] lo speed is unknown, defaulting to 1000 [ 65.343682][ T4554] lo speed is unknown, defaulting to 1000 [ 65.877321][ T4578] xt_socket: unknown flags 0xd0 [ 65.899432][ T4578] ip6gre1: entered allmulticast mode [ 66.108720][ T3412] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 66.116415][ T3412] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 66.123881][ T3412] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 66.140851][ T3412] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 67.437708][ T4608] loop4: detected capacity change from 0 to 512 [ 67.519524][ T4605] netlink: 'syz.2.305': attribute type 9 has an invalid length. [ 67.569277][ T4608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.584357][ T4608] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.744856][ T4613] lo speed is unknown, defaulting to 1000 [ 67.751383][ T4613] lo speed is unknown, defaulting to 1000 [ 67.789958][ T9] usb usb10-port1: unable to enumerate USB device [ 68.334339][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.346013][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.353277][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.360765][ T4627] bridge0: entered allmulticast mode [ 68.371712][ T4627] bridge_slave_1: left allmulticast mode [ 68.377522][ T4627] bridge_slave_1: left promiscuous mode [ 68.383323][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.391479][ T4627] bridge_slave_0: left allmulticast mode [ 68.397207][ T4627] bridge_slave_0: left promiscuous mode [ 68.403003][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.436265][ T4633] random: crng reseeded on system resumption [ 68.472472][ T4635] bond0: entered promiscuous mode [ 68.477801][ T4635] bond_slave_0: entered promiscuous mode [ 68.483868][ T4635] bond_slave_1: entered promiscuous mode [ 68.492027][ T4635] batadv0: entered promiscuous mode [ 68.498385][ T4635] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 68.507446][ T4635] bond0: left promiscuous mode [ 68.512274][ T4635] bond_slave_0: left promiscuous mode [ 68.517923][ T4635] bond_slave_1: left promiscuous mode [ 68.524022][ T4635] batadv0: left promiscuous mode [ 68.575312][ T4632] lo speed is unknown, defaulting to 1000 [ 68.581789][ T4632] lo speed is unknown, defaulting to 1000 [ 68.672956][ T4645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.316'. [ 68.817708][ T4652] loop4: detected capacity change from 0 to 512 [ 68.826277][ T4652] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 68.839478][ T4652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.851859][ T4652] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 68.865481][ T4652] EXT4-fs (loop4): 1 truncate cleaned up [ 68.871768][ T4652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.888500][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 68.888517][ T29] audit: type=1400 audit(1752176186.466:2886): avc: denied { setattr } for pid=4651 comm="syz.4.319" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.917566][ T29] audit: type=1400 audit(1752176186.486:2887): avc: denied { ioctl } for pid=4651 comm="syz.4.319" path="/64/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.957856][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.029985][ T4660] netlink: 'syz.4.322': attribute type 298 has an invalid length. [ 69.038773][ T4660] rdma_op ffff88811cd80980 conn xmit_rdma 0000000000000000 [ 69.204395][ T29] audit: type=1400 audit(1752176186.776:2888): avc: denied { bind } for pid=4640 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.223744][ T29] audit: type=1400 audit(1752176186.776:2889): avc: denied { name_bind } for pid=4640 comm="syz.0.314" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 69.245561][ T29] audit: type=1400 audit(1752176186.776:2890): avc: denied { node_bind } for pid=4640 comm="syz.0.314" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 69.442035][ T29] audit: type=1400 audit(1752176187.016:2891): avc: denied { bind } for pid=4640 comm="syz.0.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.833718][ T29] audit: type=1400 audit(1752176187.406:2892): avc: denied { create } for pid=4672 comm="syz.0.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.990853][ T4680] lo speed is unknown, defaulting to 1000 [ 69.997140][ T4680] lo speed is unknown, defaulting to 1000 [ 70.060041][ T4684] loop4: detected capacity change from 0 to 8192 [ 70.243110][ T3296] loop4: p1 p3 p4 [ 70.247033][ T3296] loop4: p1 size 8390912 extends beyond EOD, truncated [ 70.258604][ T3296] loop4: p3 size 589824 extends beyond EOD, truncated [ 70.286532][ T4684] loop4: p1 p3 p4 [ 70.290480][ T4684] loop4: p1 size 8390912 extends beyond EOD, truncated [ 70.351076][ T4684] loop4: p3 size 589824 extends beyond EOD, truncated [ 70.503595][ T29] audit: type=1326 audit(1752176188.076:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 70.725895][ T29] audit: type=1326 audit(1752176188.106:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 70.749343][ T29] audit: type=1326 audit(1752176188.106:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4695 comm="syz.0.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 70.780723][ T4700] syzkaller1: entered promiscuous mode [ 70.786341][ T4700] syzkaller1: entered allmulticast mode [ 70.967665][ T4709] netlink: 'syz.0.345': attribute type 4 has an invalid length. [ 70.975450][ T4709] netlink: 152 bytes leftover after parsing attributes in process `syz.0.345'. [ 70.988119][ T4703] syzkaller0: entered promiscuous mode [ 70.993622][ T4703] syzkaller0: entered allmulticast mode [ 71.001379][ T4709] : renamed from bond0 [ 71.138474][ T4716] lo speed is unknown, defaulting to 1000 [ 71.144763][ T4716] lo speed is unknown, defaulting to 1000 [ 71.948793][ T4731] SET target dimension over the limit! [ 72.303194][ T4741] netlink: 32 bytes leftover after parsing attributes in process `syz.0.346'. [ 72.428927][ T4742] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 72.436894][ T4742] netlink: 40 bytes leftover after parsing attributes in process `syz.1.344'. [ 72.534937][ T1035] IPVS: starting estimator thread 0... [ 72.625363][ T4742] dummy0: entered promiscuous mode [ 72.631272][ T4742] bridge0: port 3(dummy0) entered blocking state [ 72.637918][ T4742] bridge0: port 3(dummy0) entered disabled state [ 72.644475][ T4742] dummy0: entered allmulticast mode [ 72.659498][ T4743] IPVS: using max 2304 ests per chain, 115200 per kthread [ 72.685750][ T4742] bridge0: port 3(dummy0) entered blocking state [ 72.692180][ T4742] bridge0: port 3(dummy0) entered forwarding state [ 72.707808][ T4738] lo speed is unknown, defaulting to 1000 [ 72.714200][ T4738] lo speed is unknown, defaulting to 1000 [ 73.262380][ T4763] ip6erspan0: entered promiscuous mode [ 73.598130][ T4770] bridge_slave_0: left allmulticast mode [ 73.603857][ T4770] bridge_slave_0: left promiscuous mode [ 73.609581][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.652787][ T4770] bridge_slave_1: left allmulticast mode [ 73.658631][ T4770] bridge_slave_1: left promiscuous mode [ 73.664413][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.681995][ T4770] : (slave bond_slave_0): Releasing backup interface [ 73.691061][ T4770] : (slave bond_slave_1): Releasing backup interface [ 73.700391][ T4770] team0: Port device team_slave_0 removed [ 73.715382][ T4770] team0: Port device team_slave_1 removed [ 73.722796][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.732724][ T4770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.757151][ T4770] vlan0: entered promiscuous mode [ 73.763666][ T4770] tipc: Started in network mode [ 73.768685][ T4770] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 73.775906][ T4770] tipc: Enabled bearer , priority 0 [ 73.920586][ T4785] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.937038][ T4785] smc: net device bond0 erased user defined pnetid SYZ0 [ 73.951684][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 73.951698][ T29] audit: type=1326 audit(1752176191.526:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 73.983973][ T29] audit: type=1326 audit(1752176191.556:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 74.007532][ T29] audit: type=1326 audit(1752176191.556:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 74.031017][ T29] audit: type=1326 audit(1752176191.556:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 74.054490][ T29] audit: type=1326 audit(1752176191.556:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 74.077894][ T29] audit: type=1326 audit(1752176191.556:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 74.101343][ T29] audit: type=1326 audit(1752176191.556:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 74.124730][ T29] audit: type=1326 audit(1752176191.556:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4782 comm="syz.4.356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 74.200661][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 74.204772][ T29] audit: type=1326 audit(1752176191.776:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 74.228917][ T4795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.359'. [ 74.232945][ T29] audit: type=1326 audit(1752176191.776:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4794 comm="syz.1.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 74.284022][ T4793] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.415161][ T4793] tipc: Started in network mode [ 74.420157][ T4793] tipc: Node identity ac14140f, cluster identity 4711 [ 74.436362][ T4793] tipc: New replicast peer: 0.0.255.255 [ 74.442075][ T4793] tipc: Enabled bearer , priority 10 [ 74.643232][ T4831] ip6tnl1: entered allmulticast mode [ 75.076405][ T3372] tipc: Node number set to 11578026 [ 75.171636][ T4855] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 75.180043][ T4855] tipc: Enabled bearer , priority 10 [ 75.260596][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'. [ 75.276999][ T4872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.377'. [ 75.332799][ T4876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 75.342640][ T4876] veth0_macvtap: left promiscuous mode [ 75.635129][ T4890] bridge_slave_1: left allmulticast mode [ 75.641242][ T4890] bridge_slave_1: left promiscuous mode [ 75.649710][ T4890] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.680229][ T4890] bridge_slave_0: left allmulticast mode [ 75.687309][ T4890] bridge_slave_0: left promiscuous mode [ 75.694280][ T4890] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.201700][ T4905] program syz.2.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.294760][ T36] tipc: Node number set to 2886997007 [ 77.307478][ T4932] SELinux: Context Ü is not valid (left unmapped). [ 77.394481][ T4933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 77.442444][ T4935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 77.688671][ T4942] syz.0.398 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 77.817953][ T4946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=4946 comm=syz.4.402 [ 77.935144][ T4947] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4947 comm=syz.4.402 [ 78.072610][ T4950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4950 comm=syz.4.402 [ 78.343807][ T4944] Set syz1 is full, maxelem 65536 reached [ 78.398605][ T4969] netlink: 52 bytes leftover after parsing attributes in process `'. [ 78.469855][ T4973] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 78.577264][ T4973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.591153][ T4979] bond1: (slave gretap1): making interface the new active one [ 78.607658][ T4979] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 79.199220][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 79.199234][ T29] audit: type=1326 audit(1752176196.776:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.249171][ T29] audit: type=1326 audit(1752176196.806:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.254733][ T4988] hub 9-0:1.0: USB hub found [ 79.272524][ T29] audit: type=1326 audit(1752176196.806:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.300744][ T29] audit: type=1326 audit(1752176196.806:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.324229][ T29] audit: type=1326 audit(1752176196.806:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.338308][ T4988] hub 9-0:1.0: 8 ports detected [ 79.347826][ T29] audit: type=1326 audit(1752176196.806:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.375815][ T29] audit: type=1326 audit(1752176196.806:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.399171][ T29] audit: type=1326 audit(1752176196.806:3866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.422614][ T29] audit: type=1326 audit(1752176196.806:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.446003][ T29] audit: type=1326 audit(1752176196.806:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4990 comm="syz.3.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 79.610115][ T5007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.619661][ T5007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.683946][ T5005] bridge0: port 3(dummy0) entered disabled state [ 79.690584][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.697896][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.707387][ T5005] bridge0: entered allmulticast mode [ 79.718232][ T5005] dummy0: left allmulticast mode [ 79.723375][ T5005] bridge0: port 3(dummy0) entered disabled state [ 79.887713][ T5005] bridge_slave_1: left allmulticast mode [ 79.893475][ T5005] bridge_slave_1: left promiscuous mode [ 79.899338][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.000989][ T5005] bridge_slave_0: left allmulticast mode [ 80.006805][ T5005] bridge_slave_0: left promiscuous mode [ 80.012598][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.169394][ T5016] vlan2: entered allmulticast mode [ 80.174615][ T5016] veth1: entered allmulticast mode [ 80.329953][ T5024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.427'. [ 80.330247][ T5021] lo speed is unknown, defaulting to 1000 [ 80.349274][ T5021] lo speed is unknown, defaulting to 1000 [ 80.365860][ T5027] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 81.767421][ T5061] random: crng reseeded on system resumption [ 82.015002][ T5069] netlink: 14 bytes leftover after parsing attributes in process `syz.3.440'. [ 82.534117][ T5069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.551847][ T5069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.574335][ T5069] bond0 (unregistering): Released all slaves [ 82.581609][ T5077] program syz.0.442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.586064][ T5079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.600949][ T5079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.274676][ T5088] Illegal XDP return value 4294967274 on prog (id 373) dev syz_tun, expect packet loss! [ 83.368127][ T5089] bond_slave_0: entered promiscuous mode [ 83.368208][ T5089] bond_slave_1: entered promiscuous mode [ 83.368263][ T5089] macsec1: entered allmulticast mode [ 83.368280][ T5089] bond0: entered allmulticast mode [ 83.368402][ T5089] bond_slave_0: entered allmulticast mode [ 83.368419][ T5089] bond_slave_1: entered allmulticast mode [ 83.379930][ T5089] bond0: left allmulticast mode [ 83.379949][ T5089] bond_slave_0: left allmulticast mode [ 83.379967][ T5089] bond_slave_1: left allmulticast mode [ 83.379988][ T5089] bond_slave_0: left promiscuous mode [ 83.380003][ T5089] bond_slave_1: left promiscuous mode [ 83.421657][ T5091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 83.505213][ T5096] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.448'. [ 83.573953][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 83.848951][ T5108] vlan1: entered allmulticast mode [ 83.854155][ T5108] veth1: entered allmulticast mode [ 84.584743][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 84.584867][ T29] audit: type=1326 audit(1752176202.156:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.614440][ T29] audit: type=1326 audit(1752176202.156:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.637858][ T29] audit: type=1326 audit(1752176202.156:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.661129][ T29] audit: type=1326 audit(1752176202.156:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.684594][ T29] audit: type=1326 audit(1752176202.156:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.707996][ T29] audit: type=1326 audit(1752176202.156:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.731379][ T29] audit: type=1326 audit(1752176202.156:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.754767][ T29] audit: type=1326 audit(1752176202.156:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.807172][ T29] audit: type=1326 audit(1752176202.356:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 84.830675][ T29] audit: type=1326 audit(1752176202.356:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5120 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 85.055384][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 85.064318][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 85.073417][ T5127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 85.082900][ T5127] netlink: 28 bytes leftover after parsing attributes in process `syz.0.458'. [ 85.091907][ T5127] netlink: 'syz.0.458': attribute type 6 has an invalid length. [ 85.342170][ T5134] tipc: Enabled bearer , priority 0 [ 85.353562][ T5134] tipc: Disabling bearer [ 85.729055][ T5156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 85.779701][ T5161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 85.792706][ T5161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.990725][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'. [ 86.115687][ T5174] netlink: 'syz.0.473': attribute type 1 has an invalid length. [ 86.139134][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.193285][ T5174] bond0: (slave gretap1): making interface the new active one [ 86.202652][ T5174] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 86.588894][ T5181] netlink: 16 bytes leftover after parsing attributes in process `syz.3.476'. [ 86.807200][ T5193] 9pnet_fd: Insufficient options for proto=fd [ 89.422592][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 89.432499][ T5203] netlink: 'syz.4.483': attribute type 30 has an invalid length. [ 89.504797][ T5203] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.513651][ T5203] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.522382][ T5203] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.531123][ T5203] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.545017][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 89.553958][ T5203] netlink: 'syz.4.483': attribute type 30 has an invalid length. [ 89.594484][ T5207] netlink: 'syz.1.484': attribute type 27 has an invalid length. [ 89.602327][ T5207] netlink: 'syz.1.484': attribute type 3 has an invalid length. [ 89.610116][ T5207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.484'. [ 89.631093][ T29] kauditd_printk_skb: 860 callbacks suppressed [ 89.631184][ T29] audit: type=1326 audit(1752176463.208:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b981058e7 code=0x7ffc0000 [ 89.660910][ T29] audit: type=1326 audit(1752176463.208:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b980aab19 code=0x7ffc0000 [ 89.684194][ T29] audit: type=1326 audit(1752176463.208:5165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 89.719490][ T29] audit: type=1326 audit(1752176463.298:5166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4b981058e7 code=0x7ffc0000 [ 89.742880][ T29] audit: type=1326 audit(1752176463.298:5167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4b980aab19 code=0x7ffc0000 [ 89.766179][ T29] audit: type=1326 audit(1752176463.298:5168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.2.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 89.810638][ T29] audit: type=1326 audit(1752176463.378:5169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 89.835043][ T29] audit: type=1326 audit(1752176463.378:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 89.860052][ T29] audit: type=1326 audit(1752176463.378:5171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 89.883496][ T29] audit: type=1326 audit(1752176463.378:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 89.932883][ T5213] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 89.952894][ T5213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.973190][ T5213] bond0: (slave gretap1): making interface the new active one [ 89.981758][ T5213] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 90.383720][ T5241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.491'. [ 90.392688][ T5241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.491'. [ 90.401591][ T5241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.491'. [ 90.716315][ T5248] IPv6: sit1: Disabled Multicast RS [ 90.852653][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.861233][ T5238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.919666][ T5250] xt_hashlimit: max too large, truncated to 1048576 [ 90.929532][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.937501][ T5238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.019044][ T5233] lo speed is unknown, defaulting to 1000 [ 91.026057][ T5235] lo speed is unknown, defaulting to 1000 [ 91.032820][ T5233] lo speed is unknown, defaulting to 1000 [ 91.130555][ T5235] lo speed is unknown, defaulting to 1000 [ 91.790917][ T5262] hub 4-0:1.0: USB hub found [ 91.801244][ T5262] hub 4-0:1.0: 8 ports detected [ 92.027056][ T5264] tipc: Enabled bearer , priority 0 [ 92.052027][ T5264] tipc: Disabling bearer [ 92.135306][ T5275] SELinux: policydb magic number 0x2e does not match expected magic number 0xf97cff8c [ 92.156188][ T5275] SELinux: failed to load policy [ 92.168578][ T5275] syz_tun: entered allmulticast mode [ 92.177680][ T5278] __nla_validate_parse: 1 callbacks suppressed [ 92.177693][ T5278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.505'. [ 92.195256][ T5274] syz_tun: left allmulticast mode [ 92.244296][ T5280] netlink: 'syz.4.506': attribute type 27 has an invalid length. [ 92.274951][ T5280] vlan0: left promiscuous mode [ 92.419626][ T5280] ip6gre1: left allmulticast mode [ 92.433583][ T5280] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.442652][ T5280] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.451596][ T5280] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.460604][ T5280] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.590891][ T5286] 8021q: adding VLAN 0 to HW filter on device  [ 92.659816][ T5286] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.732674][ T5286] tipc: Resetting bearer [ 92.753448][ T5286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.774976][ T5289] batman_adv: batadv0: Adding interface: ipvlan3 [ 92.781350][ T5289] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.806888][ T5289] batman_adv: batadv0: Interface activated: ipvlan3 [ 93.064220][ T5303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5303 comm=syz.4.514 [ 93.112509][ T5308] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 93.292013][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 93.300919][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.517'. [ 94.027219][ T5334] netlink: 'syz.4.524': attribute type 10 has an invalid length. [ 94.035229][ T5334] netlink: 40 bytes leftover after parsing attributes in process `syz.4.524'. [ 94.044342][ T5334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.053329][ T5334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.062126][ T5334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.071016][ T5334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.082467][ T5334] team0: Port device geneve1 added [ 94.367944][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.528'. [ 94.638505][ T29] kauditd_printk_skb: 615 callbacks suppressed [ 94.638556][ T29] audit: type=1326 audit(1752176468.218:5788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c6ee258e7 code=0x7ffc0000 [ 94.640270][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 94.646612][ T29] audit: type=1326 audit(1752176468.228:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c6edcab19 code=0x7ffc0000 [ 94.708961][ T29] audit: type=1326 audit(1752176468.268:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c6ee258e7 code=0x7ffc0000 [ 94.732427][ T29] audit: type=1326 audit(1752176468.268:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c6edcab19 code=0x7ffc0000 [ 94.756409][ T29] audit: type=1326 audit(1752176468.268:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 94.780018][ T29] audit: type=1326 audit(1752176468.268:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c6ee258e7 code=0x7ffc0000 [ 94.803825][ T29] audit: type=1326 audit(1752176468.268:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c6edcab19 code=0x7ffc0000 [ 94.827280][ T29] audit: type=1326 audit(1752176468.268:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 94.851636][ T29] audit: type=1326 audit(1752176468.278:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c6ee258e7 code=0x7ffc0000 [ 94.874964][ T29] audit: type=1326 audit(1752176468.278:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5324 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c6edcab19 code=0x7ffc0000 [ 94.984409][ T5352] netlink: '¬í': attribute type 10 has an invalid length. [ 95.011874][ T5352] team0: Port device dummy0 added [ 95.025984][ T5352] netlink: '¬í': attribute type 10 has an invalid length. [ 95.047989][ T5352] team0: Port device dummy0 removed [ 95.059048][ T5352] : (slave dummy0): Enslaving as an active interface with an up link [ 95.067575][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 95.078336][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 95.160594][ T5378] pimreg: entered allmulticast mode [ 95.264906][ T5381] pimreg: left allmulticast mode [ 95.296445][ T5378] netlink: 'syz.3.537': attribute type 10 has an invalid length. [ 95.415511][ T5388] netlink: 'syz.0.539': attribute type 10 has an invalid length. [ 95.439627][ T5388] : (slave dummy0): Releasing backup interface [ 95.510924][ T5390] netlink: 'syz.0.539': attribute type 10 has an invalid length. [ 95.548650][ T5388] team0: Port device dummy0 added [ 95.601366][ T5390] team0: Port device dummy0 removed [ 95.633131][ T5390] : (slave dummy0): Enslaving as an active interface with an up link [ 95.699592][ T5393] netlink: 'syz.3.540': attribute type 39 has an invalid length. [ 95.800649][ T5395] macvlan1: entered promiscuous mode [ 95.807351][ T5395] ipvlan0: entered promiscuous mode [ 95.813445][ T5395] ipvlan0: left promiscuous mode [ 95.818614][ T5395] macvlan1: left promiscuous mode [ 95.849231][ T5397] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 95.862600][ T5398] program syz.2.542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.504178][ T5413] lo speed is unknown, defaulting to 1000 [ 96.511474][ T5413] lo speed is unknown, defaulting to 1000 [ 97.274131][ T5441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.556'. [ 97.284109][ T5426] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.293125][ T5426] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.302137][ T5426] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.311077][ T5426] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.324764][ T5426] ip6tnl1: left allmulticast mode [ 97.331295][ T5426] bond1: (slave gretap1): Releasing active interface [ 97.339088][ T5426] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 97.346680][ T5426] batman_adv: batadv0: Removing interface: ipvlan3 [ 97.785816][ T5456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 97.798336][ T5456] hsr_slave_0 (unregistering): left promiscuous mode [ 97.819824][ T5458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'. [ 97.857550][ T5458] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 97.870461][ T5458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.562'. [ 97.880364][ T5458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.911508][ T5463] netlink: 'syz.4.564': attribute type 4 has an invalid length. [ 97.957670][ T5467] vhci_hcd: invalid port number 96 [ 97.962867][ T5467] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 98.096282][ T5478] wg2: entered promiscuous mode [ 98.101234][ T5478] wg2: entered allmulticast mode [ 98.211769][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 98.331656][ T5486] hsr_slave_0: left promiscuous mode [ 98.381850][ T5486] hsr_slave_1: left promiscuous mode [ 98.727548][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 98.902206][ T5512] bond1: entered promiscuous mode [ 98.907695][ T5512] bond1: entered allmulticast mode [ 98.954328][ T5512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.997290][ T5512] bond1 (unregistering): Released all slaves [ 99.067522][ T5529] xt_hashlimit: max too large, truncated to 1048576 [ 99.089887][ T5529] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 99.100496][ T5529] netlink: 'syz.1.583': attribute type 1 has an invalid length. [ 99.304056][ T5539] lo speed is unknown, defaulting to 1000 [ 99.310762][ T5539] lo speed is unknown, defaulting to 1000 [ 99.762757][ T29] kauditd_printk_skb: 745 callbacks suppressed [ 99.762774][ T29] audit: type=1326 audit(1752176473.338:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 99.803302][ T5542] netlink: 28 bytes leftover after parsing attributes in process `syz.2.586'. [ 99.814328][ T29] audit: type=1326 audit(1752176473.378:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 99.837803][ T29] audit: type=1326 audit(1752176473.378:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 99.844768][ T5542] netem: change failed [ 99.861843][ T29] audit: type=1400 audit(1752176473.378:6546): avc: denied { wake_alarm } for pid=5541 comm="syz.2.586" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.911142][ T29] audit: type=1326 audit(1752176473.488:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 99.934921][ T29] audit: type=1326 audit(1752176473.488:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5543 comm="syz.4.588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 99.990539][ T29] audit: type=1326 audit(1752176473.568:6549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 100.013946][ T29] audit: type=1326 audit(1752176473.568:6550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 100.094838][ T29] audit: type=1326 audit(1752176473.618:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 100.118625][ T29] audit: type=1326 audit(1752176473.618:6552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5548 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 100.165976][ T5563] bond2: (slave gretap2): Releasing backup interface [ 100.197525][ T5563] team0: Failed to send options change via netlink (err -105) [ 100.205187][ T5563] team0: Mode changed to "loadbalance" [ 100.205584][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.4.592'. [ 100.225247][ T5564] netlink: 'syz.3.590': attribute type 39 has an invalid length. [ 100.292472][ T5570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 100.360488][ T5577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 100.549418][ T5581] vlan0: entered allmulticast mode [ 100.554824][ T5581] bridge_slave_0: entered allmulticast mode [ 101.283988][ T5568] Set syz1 is full, maxelem 65536 reached [ 101.313316][ T5599] kernel read not supported for file /policy (pid: 5599 comm: syz.0.608) [ 101.322972][ T5599] netlink: 'syz.0.608': attribute type 4 has an invalid length. [ 101.330672][ T5599] netlink: 'syz.0.608': attribute type 3 has an invalid length. [ 101.446221][ T5616] pim6reg: entered allmulticast mode [ 101.467702][ T5616] pim6reg: left allmulticast mode [ 101.942097][ T5635] lo speed is unknown, defaulting to 1000 [ 101.948460][ T5635] lo speed is unknown, defaulting to 1000 [ 102.334667][ T5640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=5640 comm=syz.2.621 [ 102.652293][ T5659] 9pnet_fd: Insufficient options for proto=fd [ 103.445849][ T3412] Process accounting resumed [ 103.494171][ T5667] Process accounting resumed [ 103.584820][ T5675] __nla_validate_parse: 5 callbacks suppressed [ 103.584838][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 103.602442][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 103.615751][ T5675] gretap1: entered promiscuous mode [ 103.621082][ T5675] macvlan2: entered promiscuous mode [ 103.625131][ T5683] netlink: 'syz.3.635': attribute type 10 has an invalid length. [ 103.626483][ T5675] bond0: entered promiscuous mode [ 103.642154][ T5675] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.654624][ T5683] team0: Port device dummy0 added [ 103.678619][ T5682] lo speed is unknown, defaulting to 1000 [ 103.685163][ T5682] lo speed is unknown, defaulting to 1000 [ 103.850328][ T5699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.641'. [ 104.186510][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 104.196953][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.648'. [ 104.210351][ T5719] macvlan2: entered promiscuous mode [ 104.215724][ T5719] bond0: entered promiscuous mode [ 104.220893][ T5719] gretap1: entered promiscuous mode [ 104.227751][ T5719] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.334017][ T5721] batman_adv: batadv0: Adding interface: ipvlan2 [ 104.340504][ T5721] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.365872][ T5721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.376394][ T5721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.401112][ T5721] batman_adv: batadv0: Interface activated: ipvlan2 [ 104.412584][ T5731] netlink: 'syz.3.655': attribute type 27 has an invalid length. [ 104.431881][ T5733] 9pnet_fd: Insufficient options for proto=fd [ 104.461141][ T5729] netlink: 'syz.4.654': attribute type 10 has an invalid length. [ 104.480747][ T5731] wg2: left promiscuous mode [ 104.485839][ T5731] wg2: left allmulticast mode [ 104.524347][ T5731] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.532965][ T5731] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.541577][ T5731] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.550201][ T5731] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.571253][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.582032][ T5734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.628872][ T5729] : (slave dummy0): Enslaving as an active interface with an up link [ 104.812020][ T5747] netlink: 'syz.2.660': attribute type 10 has an invalid length. [ 104.821330][ T5747] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 104.901213][ T29] kauditd_printk_skb: 1188 callbacks suppressed [ 104.901231][ T29] audit: type=1326 audit(1752176478.478:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 104.932099][ T29] audit: type=1326 audit(1752176478.478:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 104.950453][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 104.955749][ T29] audit: type=1326 audit(1752176478.478:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 104.987844][ T29] audit: type=1326 audit(1752176478.478:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 105.011313][ T29] audit: type=1326 audit(1752176478.478:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 105.035028][ T29] audit: type=1326 audit(1752176478.478:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 105.058431][ T29] audit: type=1326 audit(1752176478.478:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 105.081826][ T29] audit: type=1326 audit(1752176478.478:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 105.105168][ T29] audit: type=1326 audit(1752176478.478:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 105.128463][ T29] audit: type=1326 audit(1752176478.478:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5750 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 105.282759][ T5761] lo speed is unknown, defaulting to 1000 [ 105.283112][ T5761] lo speed is unknown, defaulting to 1000 [ 105.396888][ T5763] pimreg: entered allmulticast mode [ 105.702835][ T5769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.702906][ T5769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.048632][ T5759] pimreg: left allmulticast mode [ 106.173391][ T5775] netlink: 'syz.0.670': attribute type 27 has an invalid length. [ 106.342948][ T5775] ip6erspan0: left promiscuous mode [ 106.619994][ T5775] bond0: left promiscuous mode [ 106.624896][ T5775] gretap1: left promiscuous mode [ 106.653267][ T5775] macvlan2: left promiscuous mode [ 106.659687][ T5775] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 106.786720][ T5780] 8021q: adding VLAN 0 to HW filter on device  [ 106.842331][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.919815][ T5780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 106.943012][ T1035] lo speed is unknown, defaulting to 1000 [ 106.948964][ T1035] syz2: Port: 1 Link ACTIVE [ 107.294565][ T5807] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.716237][ T5828] netlink: 'syz.1.688': attribute type 27 has an invalid length. [ 107.783820][ T5828] dummy0: left promiscuous mode [ 107.783849][ T5833] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 107.818994][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.828911][ T5828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.847591][ T5828] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.856594][ T5828] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.865836][ T5828] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.875000][ T5828] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.892163][ T9] lo speed is unknown, defaulting to 1000 [ 107.898151][ T9] syz0: Port: 1 Link DOWN [ 107.949805][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.966563][ T5835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.982521][ T36] lo speed is unknown, defaulting to 1000 [ 107.988398][ T36] syz0: Port: 1 Link ACTIVE [ 108.333076][ T5856] random: crng reseeded on system resumption [ 108.345296][ T5856] macvlan1: entered promiscuous mode [ 108.351305][ T5856] ipvlan0: entered promiscuous mode [ 108.357675][ T5856] ipvlan0: left promiscuous mode [ 108.362873][ T5856] macvlan1: left promiscuous mode [ 108.505066][ T5870] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.701'. [ 108.530673][ T5865] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.701'. [ 108.743951][ T5882] batman_adv: batadv0: Adding interface: ipvlan4 [ 108.750609][ T5882] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.637127][ T5882] batman_adv: batadv0: Interface activated: ipvlan4 [ 109.909749][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 109.909766][ T29] audit: type=1326 audit(1752176483.488:8357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.282555][ T29] audit: type=1326 audit(1752176483.618:8358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 110.306156][ T29] audit: type=1326 audit(1752176483.618:8359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.329616][ T29] audit: type=1326 audit(1752176483.618:8360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.352926][ T29] audit: type=1326 audit(1752176483.618:8361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.376749][ T29] audit: type=1326 audit(1752176483.618:8362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.400476][ T29] audit: type=1326 audit(1752176483.618:8363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.424225][ T29] audit: type=1326 audit(1752176483.618:8364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.435636][ T5912] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.447628][ T29] audit: type=1326 audit(1752176483.618:8365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5898 comm="syz.2.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9810e929 code=0x7ffc0000 [ 110.710285][ T5922] : (slave dummy0): Releasing backup interface [ 110.728605][ T5922] : (slave bond_slave_0): Releasing backup interface [ 110.775136][ T5922] : (slave bond_slave_1): Releasing backup interface [ 110.859664][ T5922] team0: Port device team_slave_0 removed [ 110.906759][ T5922] team0: Port device team_slave_1 removed [ 110.912723][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.940125][ T5922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.949297][ T5922] bond0: (slave gretap1): Releasing active interface [ 110.960315][ T5922] batman_adv: batadv0: Removing interface: ipvlan2 [ 110.969322][ T9] lo speed is unknown, defaulting to 1000 [ 110.975205][ T9] syz2: Port: 1 Link DOWN [ 111.107040][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.728'. [ 111.122187][ T5943] vlan0: entered allmulticast mode [ 111.127532][ T5943] bridge_slave_0: entered allmulticast mode [ 111.237935][ T5947] siw: device registration error -23 [ 112.538173][ T5970] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 112.592528][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 112.643249][ T5973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.734'. [ 112.666318][ T5973] macvlan0: entered promiscuous mode [ 112.671668][ T5973] bond0: entered promiscuous mode [ 112.676808][ T5973] bond_slave_0: entered promiscuous mode [ 112.682663][ T5973] bond_slave_1: entered promiscuous mode [ 112.715852][ T5973] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 112.874417][ T5978] netlink: 'syz.3.739': attribute type 3 has an invalid length. [ 112.916924][ T5978] vlan2: entered allmulticast mode [ 112.922194][ T5978] bridge_slave_0: entered allmulticast mode [ 112.987055][ T5983] block device autoloading is deprecated and will be removed. [ 113.063018][ T5981] tmpfs: Bad value for 'defcontext' [ 113.179479][ T5994] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.744'. [ 113.195122][ T5989] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.744'. [ 113.217995][ T5985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 114.086578][ T6022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.753'. [ 114.332938][ T6027] loop2: detected capacity change from 0 to 2048 [ 114.369601][ T6027] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.385988][ T6029] netlink: 'syz.4.756': attribute type 3 has an invalid length. [ 114.421324][ T6027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.552067][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.755'. [ 114.619244][ T6033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.640544][ T6033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.791852][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 114.809107][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.633465][ T29] kauditd_printk_skb: 1035 callbacks suppressed [ 115.633480][ T29] audit: type=1400 audit(1752176489.208:9399): avc: denied { kexec_image_load } for pid=6057 comm="syz.1.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 115.807083][ T29] audit: type=1326 audit(1752176489.238:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 115.830679][ T29] audit: type=1326 audit(1752176489.238:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 115.848427][ T6056] lo speed is unknown, defaulting to 1000 [ 115.854162][ T29] audit: type=1326 audit(1752176489.248:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 115.883264][ T29] audit: type=1326 audit(1752176489.248:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 115.906730][ T29] audit: type=1326 audit(1752176489.248:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 115.930161][ T29] audit: type=1326 audit(1752176489.248:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c6ee2d290 code=0x7ffc0000 [ 115.953586][ T29] audit: type=1326 audit(1752176489.248:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 115.976999][ T29] audit: type=1326 audit(1752176489.248:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 116.000340][ T29] audit: type=1326 audit(1752176489.318:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6055 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f3c6ee2e929 code=0x7ffc0000 [ 116.261720][ T6056] lo speed is unknown, defaulting to 1000 [ 116.698929][ T6084] netlink: 'syz.3.776': attribute type 21 has an invalid length. [ 116.706805][ T6084] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.974455][ T6089] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 117.177169][ T6098] SELinux: failed to load policy [ 117.256056][ T6108] netlink: 48 bytes leftover after parsing attributes in process `syz.2.780'. [ 117.279364][ T6107] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 117.480999][ T6127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.489804][ T6127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.536542][ T6129] lo speed is unknown, defaulting to 1000 [ 117.542989][ T6129] lo speed is unknown, defaulting to 1000 [ 117.656304][ T6138] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.790'. [ 117.665790][ T6138] netlink: zone id is out of range [ 117.670989][ T6138] netlink: zone id is out of range [ 117.676290][ T6138] netlink: zone id is out of range [ 117.681471][ T6138] netlink: zone id is out of range [ 117.686701][ T6138] netlink: zone id is out of range [ 117.691980][ T6138] netlink: zone id is out of range [ 117.697859][ T6138] netlink: zone id is out of range [ 117.703274][ T6138] netlink: del zone limit has 8 unknown bytes [ 118.845031][ T6148] xt_hashlimit: max too large, truncated to 1048576 [ 118.852463][ T6148] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.916424][ T6149] loop2: detected capacity change from 0 to 1024 [ 118.923364][ T6149] EXT4-fs: Ignoring removed bh option [ 119.075153][ T6149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.157179][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.283614][ T6169] IPv6: sit1: Disabled Multicast RS [ 119.623602][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.804'. [ 119.853562][ T6164] batman_adv: batadv0: Adding interface: ipvlan2 [ 119.860023][ T6164] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.155003][ T6164] batman_adv: batadv0: Interface activated: ipvlan2 [ 120.184398][ T6176] lo speed is unknown, defaulting to 1000 [ 120.198427][ T6176] lo speed is unknown, defaulting to 1000 [ 120.656478][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 120.656501][ T29] audit: type=1326 audit(1752176494.238:10163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3e4e4ed3df code=0x7ffc0000 [ 120.800256][ T29] audit: type=1326 audit(1752176494.268:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3e4e4ee9b7 code=0x7ffc0000 [ 120.823712][ T29] audit: type=1326 audit(1752176494.268:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3e4e4ed290 code=0x7ffc0000 [ 120.847410][ T29] audit: type=1326 audit(1752176494.268:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3e4e4ed58a code=0x7ffc0000 [ 120.870728][ T29] audit: type=1326 audit(1752176494.268:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 120.894152][ T29] audit: type=1326 audit(1752176494.318:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 120.917870][ T29] audit: type=1326 audit(1752176494.318:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 120.941285][ T29] audit: type=1326 audit(1752176494.318:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 120.964796][ T29] audit: type=1326 audit(1752176494.318:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 120.988394][ T29] audit: type=1326 audit(1752176494.318:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6188 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 121.200749][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.816'. [ 121.336018][ T6221] SELinux: Context @ is not valid (left unmapped). [ 121.638483][ T6232] netlink: 'syz.4.820': attribute type 3 has an invalid length. [ 121.734471][ T6244] loop2: detected capacity change from 0 to 512 [ 121.870236][ T6249] IPv6: sit1: Disabled Multicast RS [ 121.948754][ T6244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.049637][ T6244] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.332776][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 122.363865][ T6235] batman_adv: batadv0: Adding interface: ipvlan0 [ 122.370308][ T6235] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.395777][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.406252][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.544332][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.775111][ T6235] batman_adv: batadv0: Interface activated: ipvlan0 [ 123.010222][ T6265] lo speed is unknown, defaulting to 1000 [ 123.029232][ T6265] lo speed is unknown, defaulting to 1000 [ 123.237973][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 123.571586][ T6229] syz.0.827 (6229) used greatest stack depth: 6952 bytes left [ 123.911190][ T6293] lo speed is unknown, defaulting to 1000 [ 123.917717][ T6293] lo speed is unknown, defaulting to 1000 [ 123.985966][ T6283] Restarting kernel threads ... [ 124.009145][ T6283] Done restarting kernel threads. [ 124.048512][ T6283] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 125.237861][ T6312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.363058][ T6312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.372511][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 125.415994][ T6314] lo speed is unknown, defaulting to 1000 [ 125.423420][ T6314] lo speed is unknown, defaulting to 1000 [ 125.868587][ T6327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.888035][ T6327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.900681][ T6327] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 125.907633][ T6327] batman_adv: batadv0: Removing interface: ipvlan0 [ 126.016442][ T6328] IPv6: sit1: Disabled Multicast RS [ 126.204802][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 126.204820][ T29] audit: type=1326 audit(1752176499.778:10521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 126.234589][ T29] audit: type=1326 audit(1752176499.778:10522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6313 comm="syz.4.842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 126.471814][ T29] audit: type=1326 audit(1752176500.048:10523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 126.500612][ T29] audit: type=1326 audit(1752176500.078:10524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 126.524293][ T29] audit: type=1326 audit(1752176500.078:10525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 126.547917][ T29] audit: type=1326 audit(1752176500.078:10526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 127.206986][ T29] audit: type=1326 audit(1752176500.078:10527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 127.246275][ T29] audit: type=1326 audit(1752176500.808:10528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 127.269868][ T29] audit: type=1326 audit(1752176500.808:10529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 127.293328][ T29] audit: type=1326 audit(1752176500.808:10530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6332 comm="syz.1.850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc36602e929 code=0x7ffc0000 [ 127.624245][ T6347] loop2: detected capacity change from 0 to 1024 [ 127.638459][ T6347] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 127.649495][ T6347] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 127.666137][ T6347] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 127.689508][ T6347] EXT4-fs (loop2): invalid journal inode [ 127.704214][ T6347] EXT4-fs (loop2): can't get journal size [ 127.711225][ T6347] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.856: blocks 2-2 from inode overlap system zone [ 127.731859][ T6347] EXT4-fs (loop2): failed to initialize system zone (-117) [ 127.739392][ T6347] EXT4-fs (loop2): mount failed [ 129.190337][ T6363] lo speed is unknown, defaulting to 1000 [ 129.196469][ T6363] lo speed is unknown, defaulting to 1000 [ 129.227345][ T6356] uprobe: syz.0.860:6356 failed to unregister, leaking uprobe [ 129.497491][ T6374] lo speed is unknown, defaulting to 1000 [ 129.505873][ T6374] lo speed is unknown, defaulting to 1000 [ 129.580613][ T6372] loop2: detected capacity change from 0 to 1024 [ 129.613707][ T6372] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 129.627326][ T6372] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 129.644578][ T6372] EXT4-fs (loop2): invalid journal inode [ 129.677930][ T6372] syz!: rxe_newlink: already configured on team_slave_0 [ 129.713904][ T6389] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 129.900325][ T6397] loop2: detected capacity change from 0 to 1024 [ 129.907565][ T6397] EXT4-fs: Ignoring removed i_version option [ 131.027605][ T10] IPVS: starting estimator thread 0... [ 131.164791][ T6397] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.676302][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 131.682608][ T29] audit: type=1326 audit(1752176505.258:10661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 131.708989][ T6406] IPVS: using max 2304 ests per chain, 115200 per kthread [ 132.023604][ T29] audit: type=1326 audit(1752176505.288:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 132.047205][ T29] audit: type=1326 audit(1752176505.288:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 132.066516][ T6400] lo speed is unknown, defaulting to 1000 [ 132.070741][ T29] audit: type=1326 audit(1752176505.288:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 132.076982][ T6400] lo speed is unknown, defaulting to 1000 [ 132.099795][ T29] audit: type=1326 audit(1752176505.288:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 132.129510][ T29] audit: type=1326 audit(1752176505.598:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 132.153012][ T29] audit: type=1326 audit(1752176505.598:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6390 comm="syz.0.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51109be929 code=0x7ffc0000 [ 133.473071][ T6397] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 133.473115][ T6397] EXT4-fs: failed to create workqueue [ 133.488048][ T6397] EXT4-fs (loop2): mount failed [ 133.588271][ T29] audit: type=1400 audit(1752176507.138:10668): avc: denied { sqpoll } for pid=6411 comm="syz.1.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 133.705801][ T6416] sd 0:0:1:0: device reset [ 133.748628][ T6420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.786349][ T6420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.847873][ T29] audit: type=1400 audit(1752176507.408:10669): avc: denied { getopt } for pid=6423 comm="syz.4.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.007338][ T29] audit: type=1400 audit(1752176507.578:10670): avc: denied { setopt } for pid=6423 comm="syz.4.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 134.535948][ T6434] loop2: detected capacity change from 0 to 164 [ 134.543678][ T6434] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.750132][ T6440] lo speed is unknown, defaulting to 1000 [ 134.757043][ T6440] lo speed is unknown, defaulting to 1000 [ 136.098010][ T6470] lo speed is unknown, defaulting to 1000 [ 136.104608][ T6470] lo speed is unknown, defaulting to 1000 [ 136.280986][ T6469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 136.551984][ T6477] lo speed is unknown, defaulting to 1000 [ 136.567682][ T6477] lo speed is unknown, defaulting to 1000 [ 136.692244][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 136.692311][ T29] audit: type=1326 audit(1752176510.238:10813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.722105][ T29] audit: type=1326 audit(1752176510.238:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.745583][ T29] audit: type=1326 audit(1752176510.238:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.768986][ T29] audit: type=1326 audit(1752176510.238:10816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.792600][ T29] audit: type=1326 audit(1752176510.238:10817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.816082][ T29] audit: type=1326 audit(1752176510.238:10818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.839659][ T29] audit: type=1326 audit(1752176510.238:10819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.863010][ T29] audit: type=1326 audit(1752176510.238:10820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.886597][ T29] audit: type=1326 audit(1752176510.238:10821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 136.910044][ T29] audit: type=1326 audit(1752176510.238:10822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6483 comm="syz.4.899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4e4ee929 code=0x7ffc0000 [ 138.152679][ T6509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 138.408015][ T6526] netlink: 'syz.1.913': attribute type 3 has an invalid length. [ 138.415817][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.913'. [ 138.429533][ T6527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'. [ 138.443830][ T6522] netlink: 60 bytes leftover after parsing attributes in process `syz.3.911'. [ 138.513930][ T6531] netlink: 'syz.2.912': attribute type 4 has an invalid length. [ 138.521748][ T6531] netlink: 'syz.2.912': attribute type 3 has an invalid length. [ 138.529433][ T6531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.912'. [ 138.668161][ T6533] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 139.030525][ T6534] lo speed is unknown, defaulting to 1000 [ 139.036728][ T6534] lo speed is unknown, defaulting to 1000 [ 139.187908][ T6542] lo speed is unknown, defaulting to 1000 [ 139.195374][ T6542] lo speed is unknown, defaulting to 1000 [ 140.056078][ T6570] ================================================================== [ 140.064246][ T6570] BUG: KCSAN: data-race in __lru_add_drain_all / folios_put_refs [ 140.072032][ T6570] [ 140.074373][ T6570] write to 0xffff888237d25e68 of 1 bytes by task 6551 on cpu 1: [ 140.082022][ T6570] folios_put_refs+0x285/0x2d0 [ 140.086837][ T6570] folio_batch_move_lru+0x1fd/0x230 [ 140.092066][ T6570] folio_add_lru+0x14a/0x1f0 [ 140.096697][ T6570] folio_add_lru_vma+0x49/0x70 [ 140.101506][ T6570] do_wp_page+0x132b/0x2400 [ 140.106029][ T6570] handle_mm_fault+0x77d/0x2be0 [ 140.110909][ T6570] do_user_addr_fault+0x3fe/0x1090 [ 140.116068][ T6570] exc_page_fault+0x62/0xa0 [ 140.120596][ T6570] asm_exc_page_fault+0x26/0x30 [ 140.125474][ T6570] __put_user_nocheck_4+0x3/0x10 [ 140.130448][ T6570] ____sys_recvmsg+0x1a1/0x280 [ 140.135246][ T6570] ___sys_recvmsg+0x11f/0x370 [ 140.139960][ T6570] do_recvmmsg+0x1ef/0x540 [ 140.144405][ T6570] __x64_sys_recvmmsg+0xe5/0x170 [ 140.149373][ T6570] x64_sys_call+0x1c6a/0x2fb0 [ 140.154090][ T6570] do_syscall_64+0xd2/0x200 [ 140.158625][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.164627][ T6570] [ 140.166974][ T6570] read to 0xffff888237d25e68 of 1 bytes by task 6570 on cpu 0: [ 140.174545][ T6570] __lru_add_drain_all+0x12b/0x3f0 [ 140.179704][ T6570] lru_cache_disable+0x1f/0x30 [ 140.184499][ T6570] __se_sys_mbind+0x496/0xac0 [ 140.189208][ T6570] __x64_sys_mbind+0x78/0x90 [ 140.193828][ T6570] x64_sys_call+0x14af/0x2fb0 [ 140.198547][ T6570] do_syscall_64+0xd2/0x200 [ 140.203104][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.209023][ T6570] [ 140.211365][ T6570] value changed: 0x12 -> 0x00 [ 140.216058][ T6570] [ 140.218405][ T6570] Reported by Kernel Concurrency Sanitizer on: [ 140.224573][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.4.924 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 140.236932][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.247095][ T6570] ================================================================== [ 140.287826][ T6576] No such timeout policy "syz0"